$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/be8131de-e209-3d15-973a-2033c6243c71.roa File: be8131de-e209-3d15-973a-2033c6243c71.roa (raw, json) Hash identifier: skW+UlaX5jjLd3Uvhs5Cuoa94WA6yoTwJ8ipvIg/cmM= Subject key identifier: 48:AE:A9:BA:92:7B:BD:92:60:37:E5:B2:96:11:BA:3E:CB:80:00:81 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F432858489A3B48342A533E91419D5100 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/be8131de-e209-3d15-973a-2033c6243c71.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 62802 IP address blocks: 63.170.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:48:34:2a:53:3e:91:41:9d:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=73e91164-8560-482b-8de7-8a73d4955c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:61:f0:01:71:d6:bb:20:db:be:81:ae:df: 05:9b:0f:52:74:5d:9a:d5:33:2b:d0:c7:5b:26:8e: 0c:8f:c9:f7:ff:3d:9e:ba:03:c2:99:db:99:c8:51: e9:bd:bd:8b:2e:97:c6:af:6f:d1:61:bb:59:4e:2b: da:72:ae:c9:cc:30:c9:d4:7e:f1:be:f9:53:83:f5: da:3b:66:6e:f9:14:07:96:4d:38:d9:90:31:7e:6e: 82:54:fc:39:ce:71:bd:4d:d9:ad:07:23:19:82:5d: 2b:23:04:ac:ae:e6:b0:ab:57:63:9e:82:42:01:e4: e5:d4:98:e7:fb:36:69:65:ba:37:6f:b3:a2:60:18: 68:9d:ab:6e:36:7d:e0:b0:e2:b3:07:d7:63:ac:0d: 43:26:04:1c:56:cc:b3:e7:24:32:d9:a7:39:68:74: b0:68:1b:b8:70:83:4d:f7:da:5b:b9:7d:a3:ff:2d: a2:cc:e8:19:63:69:86:a0:dc:21:2e:6d:a1:cd:ed: fa:12:02:0f:67:2a:74:01:19:11:25:38:93:0e:85: e7:46:f6:25:57:68:d8:11:55:d4:54:ae:69:b2:65: 44:46:ed:5a:d7:d2:35:a4:b2:e0:da:23:f5:7a:91: 01:ca:b2:77:eb:7d:76:9d:5e:9c:3b:70:99:37:65: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:A9:BA:92:7B:BD:92:60:37:E5:B2:96:11:BA:3E:CB:80:00:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/be8131de-e209-3d15-973a-2033c6243c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.170.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d6:05:ef:0d:1a:02:75:be:54:ab:c0:4a:8c:0e:e4:7b:bc: 37:3f:83:a9:98:af:cb:d4:fc:e1:5c:5c:0c:dd:00:ee:3f:dc: 6c:d1:37:96:6d:80:9d:79:d6:0b:53:0a:91:55:4c:63:69:b0: ff:6f:0b:ae:d4:85:a2:ec:d8:52:22:01:ac:d9:41:92:7a:7b: ff:66:b1:e7:ac:b0:57:8c:02:56:86:b2:ed:e6:90:35:39:6d: d7:c5:e3:b8:1f:3a:b0:2a:52:d3:95:22:b9:fe:ed:43:ad:51: a8:a2:d0:ba:91:42:b6:71:b3:2a:3b:63:82:38:e1:f0:ad:48: d4:3a:47:ed:5e:9c:2c:72:46:f6:36:66:42:54:81:97:c2:f9: 13:19:9f:3e:9e:b4:4b:36:0b:5b:4d:ef:63:5d:79:fd:57:28: 87:c1:83:f4:b7:a4:26:5b:77:1e:2b:5f:a2:e7:d8:5f:a6:e0: 0d:9c:f8:8f:09:84:d1:a9:ee:b3:3e:80:50:c5:1f:2e:64:a7: 51:4b:b5:d3:fc:1d:14:a2:0f:9c:b0:03:7e:cd:50:48:0d:58: ba:21:29:c4:34:a9:6a:21:e5:46:0f:16:2d:09:78:22:6f:87: c8:ae:79:43:fd:88:dc:b1:56:40:01:ca:45:96:36:75:19:f9: 03:4e:cc:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0g0KlM+kUGdUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk NzNlOTExNjQtODU2MC00ODJiLThkZTctOGE3M2Q0OTU1YzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspBh8AFx1rsg276Brt8Fmw9SdF2a1TMr0Mdb Jo4Mj8n3/z2eugPCmduZyFHpvb2LLpfGr2/RYbtZTivacq7JzDDJ1H7xvvlTg/Xa O2Zu+RQHlk042ZAxfm6CVPw5znG9TdmtByMZgl0rIwSsruawq1djnoJCAeTl1Jjn +zZpZbo3b7OiYBhonatuNn3gsOKzB9djrA1DJgQcVsyz5yQy2ac5aHSwaBu4cINN 99pbuX2j/y2izOgZY2mGoNwhLm2hze36EgIPZyp0ARkRJTiTDoXnRvYlV2jYEVXU VK5psmVERu1a19I1pLLg2iP1epEByrJ36312nV6cO3CZN2UAHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiuqbqSe72SYDflspYRuj7LgACBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYmU4MTMxZGUtZTIwOS0z ZDE1LTk3M2EtMjAzM2M2MjQzYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/WBe8NGgJ1vlSrwEqMDuR7vDc/g6mYr8vU/OFcXAzdAO4/3GzRN5Zt gJ151gtTCpFVTGNpsP9vC67UhaLs2FIiAazZQZJ6e/9mseessFeMAlaGsu3mkDU5 bdfF47gfOrAqUtOVIrn+7UOtUaii0LqRQrZxsyo7Y4I44fCtSNQ6R+1enCxyRvY2 ZkJUgZfC+RMZnz6etEs2C1tN72Ndef1XKIfBg/S3pCZbdx4rX6Ln2F+m4A2c+I8J hNGp7rM+gFDFHy5kp1FLtdP8HRSiD5ywA37NUEgNWLohKcQ0qWoh5UYPFi0JeCJv h8iueUP9iNyxVkABykWWNnUZ+QNOzF4= -----END CERTIFICATE-----Generated at Sun Apr 6 05:14:05 2025 by rpki-client