$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/029536f1-474e-3fae-a787-a5efab010948.roa File: 029536f1-474e-3fae-a787-a5efab010948.roa (raw, json) Hash identifier: eDX+gcdazFlGzt//SVThT69O3571Fm7jqWMgIXpKOGk= Subject key identifier: A6:59:7F:0A:B3:ED:CD:80:B1:C1:E9:22:E2:FC:27:58:7F:76:23:55 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584830253A2CAA601BFB60FC0E00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/029536f1-474e-3fae-a787-a5efab010948.roa Signing time: Fri 13 Dec 2024 02:00:39 +0000 ROA not before: Fri 13 Dec 2024 02:00:39 +0000 ROA not after: Thu 13 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:25:3a:2c:aa:60:1b:fb:60:fc:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 13 02:00:39 2024 GMT Not After : Mar 13 01:00:39 2025 GMT Subject: CN=c22adb2c-2538-4dd4-9a43-911ae2b155ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:53:de:48:f7:eb:f8:65:4e:50:0e:ec:11:b9: ce:ec:0d:cd:82:3c:c1:dc:34:93:e0:d2:48:d5:cb: 52:a5:f8:56:fe:90:3c:c5:a0:1f:e7:31:37:26:33: 92:aa:9c:c3:6a:7c:26:4f:29:20:3f:67:cc:7e:0a: c9:29:47:1f:7f:90:1e:e3:37:a3:ba:d8:40:90:61: 89:0f:34:e8:08:86:d8:39:39:3f:0f:58:3c:69:22: da:50:56:01:bf:c8:50:5c:06:8e:96:e9:5f:51:7a: ed:83:51:22:5f:99:4d:76:24:ca:f0:1d:bf:8a:89: 7e:c1:31:e6:32:e2:3f:cd:64:ca:8d:34:e4:0f:31: 20:7a:a7:9e:d5:b1:91:4b:79:03:c4:b1:ce:22:77: aa:01:80:91:ad:cc:34:4e:5f:ff:2b:87:97:2b:45: 94:40:ed:3b:26:2f:d7:cb:94:54:6f:3a:47:a9:72: 42:b1:4b:99:46:bf:d3:b3:32:73:ff:70:ad:75:93: 2e:e5:2f:59:bd:c6:ca:3a:eb:87:7f:ab:9c:d9:87: ee:ad:6f:bf:fd:a8:58:09:21:98:22:24:2b:c0:69: 81:18:5d:2f:b7:eb:23:9d:66:23:14:de:46:07:27: 30:0b:fa:0e:e2:cf:0d:0f:f1:8c:25:a3:95:53:a7: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:7F:0A:B3:ED:CD:80:B1:C1:E9:22:E2:FC:27:58:7F:76:23:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/029536f1-474e-3fae-a787-a5efab010948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:38:27:78:7c:d5:6e:73:37:5a:e9:14:fb:d7:f7:3e:8f:47: 35:42:18:37:20:13:70:39:17:eb:1b:57:64:b2:d6:1e:ef:27: 18:71:0e:c7:5a:0f:5e:e5:a0:62:1d:01:54:3c:95:92:b3:47: 47:62:03:d1:1c:3c:b7:4e:d3:a5:b9:fe:76:e0:2e:d3:8f:b6: b4:32:e4:16:d2:f7:61:0c:91:63:97:a5:79:b0:a3:32:e0:c0: e9:09:7f:ac:7a:b1:88:47:c3:ac:66:56:2b:1b:30:29:c1:a1: af:75:e2:47:b4:02:da:6f:8d:4a:23:42:77:53:6a:53:82:e8: bd:f9:cd:95:ed:c5:f0:12:fe:17:65:e4:7a:69:07:be:79:2f: 7a:79:e8:c4:dd:32:5d:08:ef:98:02:31:0c:fc:97:30:67:a7: 3a:ac:b1:11:82:d6:2c:11:e6:4b:8e:6b:ba:3e:66:5c:0f:07: 62:1e:3a:fb:5a:89:97:8c:95:a2:fb:ec:9e:a9:87:49:e9:07: 43:d3:1c:39:ff:ea:09:32:cf:ec:70:80:aa:fd:95:52:64:6a: ff:5c:dc:ec:e3:f9:97:24:14:47:34:3a:7d:8c:bd:86:c8:05: 1c:d2:33:0a:f4:bd:a5:cf:fd:36:fd:f6:0f:87:5f:fd:35:17: 72:7e:40:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTosqmAb+2D8DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk YzIyYWRiMmMtMjUzOC00ZGQ0LTlhNDMtOTExYWUyYjE1NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFPeSPfr+GVOUA7sEbnO7A3NgjzB3DST4NJI 1ctSpfhW/pA8xaAf5zE3JjOSqpzDanwmTykgP2fMfgrJKUcff5Ae4zejuthAkGGJ DzToCIbYOTk/D1g8aSLaUFYBv8hQXAaOlulfUXrtg1EiX5lNdiTK8B2/iol+wTHm MuI/zWTKjTTkDzEgeqee1bGRS3kDxLHOIneqAYCRrcw0Tl//K4eXK0WUQO07Ji/X y5RUbzpHqXJCsUuZRr/TszJz/3CtdZMu5S9ZvcbKOuuHf6uc2YfurW+//ahYCSGY IiQrwGmBGF0vt+sjnWYjFN5GBycwC/oO4s8ND/GMJaOVU6eW3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZZfwqz7c2AscHpIuL8J1h/diNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDI5NTM2ZjEtNDc0ZS0z ZmFlLWE3ODctYTVlZmFiMDEwOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc4J3h81W5zN1rpFPvX9z6PRzVCGDcgE3A5F+sbV2Sy1h7vJxhxDsda D17loGIdAVQ8lZKzR0diA9EcPLdO06W5/nbgLtOPtrQy5BbS92EMkWOXpXmwozLg wOkJf6x6sYhHw6xmVisbMCnBoa914ke0AtpvjUojQndTalOC6L35zZXtxfAS/hdl 5HppB755L3p56MTdMl0I75gCMQz8lzBnpzqssRGC1iwR5kuOa7o+ZlwPB2IeOvta iZeMlaL77J6ph0npB0PTHDn/6gkyz+xwgKr9lVJkav9c3Ozj+ZckFEc0On2MvYbI BRzSMwr0vaXP/Tb99g+HX/01F3J+QEA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:32 2025 by rpki-client