$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa File: 087ec3e5-7f63-331f-a693-d6a3371d30fb.roa (raw, json) Hash identifier: xuR3wpCZE9oWzVQeVqTgsnQEApTiNjTcz6ehFIT1QmI= Subject key identifier: B0:E6:98:C7:93:E3:B6:90:ED:38:22:82:73:E5:83:4D:A8:BA:7C:E6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584830253C35A80C7865022D8780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa Signing time: Fri 13 Dec 2024 02:00:39 +0000 ROA not before: Fri 13 Dec 2024 02:00:39 +0000 ROA not after: Thu 13 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:25:3c:35:a8:0c:78:65:02:2d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 13 02:00:39 2024 GMT Not After : Mar 13 01:00:39 2025 GMT Subject: CN=490b4bb3-d679-425f-a332-506ef39fee48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:70:1b:ed:98:52:71:72:82:cb:9e:1b:3d: 00:e1:29:b0:bf:ee:ba:c2:af:f0:65:31:55:b2:97: af:e8:e9:08:ab:a1:fe:35:58:76:4d:0e:f4:e0:0e: dd:0f:7f:bf:c4:f1:6c:70:9a:27:e9:61:92:c3:25: 12:00:43:a3:7d:30:92:25:13:f0:a9:d3:cf:da:aa: c1:bf:42:cd:dd:0d:3d:e8:e2:bd:d9:b4:63:31:1d: 3b:44:3b:04:83:f0:bc:aa:d5:ff:4f:f8:76:23:ee: 78:8d:70:b7:c4:2f:98:a1:bc:50:30:9d:73:6a:b4: ba:17:6b:7a:a5:a9:27:2e:9b:86:05:97:b1:7d:8c: 1b:00:41:b8:66:f3:cc:ea:6d:41:9c:de:78:11:72: 0b:74:76:35:bb:45:91:38:a6:fc:9d:33:31:bb:72: 88:62:3d:55:19:60:a3:6b:29:ae:62:42:14:0f:93: 8f:33:b5:2c:f1:ed:3a:92:27:37:29:f5:20:f4:d0: 71:b4:92:03:84:aa:94:8b:02:a3:0b:ae:44:30:a1: fc:f9:bb:fe:94:46:40:9b:8d:89:ed:33:10:94:49: 85:9d:6d:c9:63:68:b0:bc:79:db:57:8e:82:10:c1: d6:83:b9:9c:95:14:8a:f2:ba:01:96:81:dc:da:41: 6d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E6:98:C7:93:E3:B6:90:ED:38:22:82:73:E5:83:4D:A8:BA:7C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ef:a1:bb:d2:63:84:72:2a:73:51:ad:7b:10:14:aa:07:29: 2c:61:4d:2a:51:75:46:55:02:b9:65:b5:57:85:88:e8:28:93: 79:94:b3:d5:55:3f:8e:dc:49:1a:82:c0:2d:45:6a:1c:dd:13: 33:a7:6c:65:ac:49:38:2d:0b:6d:ce:04:eb:d4:a0:17:9c:d7: fd:e0:c0:c4:72:35:38:4a:95:13:14:ce:bf:57:e3:7f:12:e2: f7:98:38:5a:d1:8d:ea:61:24:92:46:b5:0f:27:87:18:53:02: 94:35:ae:42:c1:83:21:71:62:95:a5:a4:12:55:f9:1d:8a:da: f4:2f:2b:35:56:ea:14:54:76:57:18:89:95:c1:90:30:37:b6: d0:63:3b:08:27:bf:f0:a4:a5:81:17:58:46:10:13:10:36:2a: dd:c5:6a:89:2e:7c:5a:9c:10:ec:78:c7:cf:9d:45:56:61:39: 3c:5c:ad:fd:48:88:77:a8:44:f8:29:34:99:b5:b7:a1:0e:42: 5f:fc:3b:3f:2f:96:7b:94:ee:0a:92:3c:b2:f6:6b:ff:8d:7f: f0:84:80:bc:bc:9b:96:91:a3:46:fe:f9:05:ef:f1:8a:ec:1c: a0:0d:e3:8b:3d:27:e9:a3:71:be:47:1b:84:9c:e1:fc:10:9b: 5c:b4:a4:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTw1qAx4ZQIth4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk NDkwYjRiYjMtZDY3OS00MjVmLWEzMzItNTA2ZWYzOWZlZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOtwG+2YUnFygsueGz0A4Smwv+66wq/wZTFV spev6OkIq6H+NVh2TQ704A7dD3+/xPFscJon6WGSwyUSAEOjfTCSJRPwqdPP2qrB v0LN3Q096OK92bRjMR07RDsEg/C8qtX/T/h2I+54jXC3xC+YobxQMJ1zarS6F2t6 paknLpuGBZexfYwbAEG4ZvPM6m1BnN54EXILdHY1u0WROKb8nTMxu3KIYj1VGWCj aymuYkIUD5OPM7Us8e06kic3KfUg9NBxtJIDhKqUiwKjC65EMKH8+bv+lEZAm42J 7TMQlEmFnW3JY2iwvHnbV46CEMHWg7mclRSK8roBloHc2kFtwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDmmMeT47aQ7TgignPlg02ounzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDg3ZWMzZTUtN2Y2My0z MzFmLWE2OTMtZDZhMzM3MWQzMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHvobvSY4RyKnNRrXsQFKoHKSxhTSpRdUZVArlltVeFiOgok3mUs9VV P47cSRqCwC1FahzdEzOnbGWsSTgtC23OBOvUoBec1/3gwMRyNThKlRMUzr9X438S 4veYOFrRjephJJJGtQ8nhxhTApQ1rkLBgyFxYpWlpBJV+R2K2vQvKzVW6hRUdlcY iZXBkDA3ttBjOwgnv/CkpYEXWEYQExA2Kt3FaokufFqcEOx4x8+dRVZhOTxcrf1I iHeoRPgpNJm1t6EOQl/8Oz8vlnuU7gqSPLL2a/+Nf/CEgLy8m5aRo0b++QXv8Yrs HKAN44s9J+mjcb5HG4Sc4fwQm1y0pBQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:35 2025 by rpki-client