$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa File: 30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa (raw, json) Hash identifier: kDcX7wskdLsqMvUfNrvYBZolHKjLjPzTyyZzO8A+Q9M= Subject key identifier: 16:21:7A:AE:9A:49:17:69:45:E4:23:0A:3B:9D:43:43:EB:EB:E5:B2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584830253C4B4EC4D618902C4440 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa Signing time: Fri 13 Dec 2024 02:00:39 +0000 ROA not before: Fri 13 Dec 2024 02:00:39 +0000 ROA not after: Thu 13 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:25:3c:4b:4e:c4:d6:18:90:2c:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 13 02:00:39 2024 GMT Not After : Mar 13 01:00:39 2025 GMT Subject: CN=f232b0ea-6284-40f9-9069-087351344faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:a0:33:86:c4:b8:2e:97:2e:36:ed:2b:c9: 39:5a:ca:52:6f:5b:1a:d8:ed:72:f2:d7:43:e5:da: cb:c1:9c:0e:97:df:00:11:4a:8d:4a:c6:63:06:d9: 95:64:eb:68:76:9b:eb:67:5f:0a:10:6a:25:13:6e: f7:0e:dc:f1:1d:8a:52:2d:1e:69:e1:05:fe:f8:fa: e5:19:32:ce:f9:af:59:ac:fc:5c:2d:38:01:42:d3: 0f:22:50:10:cb:e4:d1:b5:56:85:55:ca:1c:e5:08: c0:ae:fe:54:64:b2:38:52:9e:b6:6e:ca:ef:02:b3: 32:fb:95:69:1f:08:15:73:72:ad:f1:7a:3c:dc:30: 8f:e1:01:76:86:96:d8:8b:2e:a2:bc:df:36:81:51: 73:70:b6:ad:da:cc:af:17:30:1c:07:3e:de:ae:e7: e4:16:ff:e0:7d:d1:bf:75:4e:04:e7:64:8e:4c:4c: 4c:99:77:fe:ba:98:01:46:d7:08:8f:1c:b0:f5:f3: bd:81:8e:03:93:34:bd:57:70:83:08:e6:ad:fc:a5: 46:1f:96:4d:f0:e4:ee:24:a0:15:c7:f6:2f:ea:69: e5:cc:17:df:c3:bb:a4:48:0d:48:bc:68:ad:eb:8e: 66:3b:89:40:13:f8:50:36:b3:04:4e:ca:5b:26:fc: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:21:7A:AE:9A:49:17:69:45:E4:23:0A:3B:9D:43:43:EB:EB:E5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ac:55:4e:1c:10:5d:16:7f:41:c2:c8:b1:97:9b:af:ff:4e: 60:f8:1f:86:11:ed:c3:4e:0d:8d:6b:f4:a1:73:96:4a:16:25: de:95:8a:a9:f0:82:8a:41:f7:69:d8:55:4e:55:d6:21:a7:04: 1c:e8:61:36:07:19:b5:ba:50:3e:63:44:a7:97:1b:90:36:9e: dc:d0:07:d7:26:e2:cf:81:9a:41:84:0c:d1:cc:86:6b:c3:9e: 28:41:5d:34:df:1d:45:e0:17:83:51:7e:31:41:05:2d:ac:5e: 8d:5b:bd:5d:27:86:26:99:3d:26:1b:c1:e9:fe:4d:bd:06:25: 33:90:86:dc:b5:c5:9a:6f:7e:5a:65:9f:7f:37:57:4b:e4:08: 9d:66:99:63:66:bd:8f:c5:fd:b4:6c:0c:b2:c4:7c:e0:0c:08: 20:45:c1:1c:db:48:ee:e8:ea:06:a8:de:f8:99:91:70:bb:f2: 06:3f:2e:52:9b:66:9e:9d:69:cc:06:6f:f6:b8:c3:3b:b1:7f: 05:f2:92:f4:f3:2b:f0:a3:eb:b3:98:64:a9:3a:03:26:c8:42: 9b:b5:2b:65:14:51:23:f7:68:97:99:cc:9e:97:7e:45:d7:6a: 69:91:a1:a7:77:0d:be:e9:cb:18:0c:7c:9b:f7:91:f6:4d:20: 09:fc:45:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTxLTsTWGJAsREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZjIzMmIwZWEtNjI4NC00MGY5LTkwNjktMDg3MzUxMzQ0ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJigM4bEuC6XLjbtK8k5WspSb1sa2O1y8tdD 5drLwZwOl98AEUqNSsZjBtmVZOtodpvrZ18KEGolE273DtzxHYpSLR5p4QX++Prl GTLO+a9ZrPxcLTgBQtMPIlAQy+TRtVaFVcoc5QjArv5UZLI4Up62bsrvArMy+5Vp HwgVc3Kt8Xo83DCP4QF2hpbYiy6ivN82gVFzcLat2syvFzAcBz7erufkFv/gfdG/ dU4E52SOTExMmXf+upgBRtcIjxyw9fO9gY4DkzS9V3CDCOat/KVGH5ZN8OTuJKAV x/Yv6mnlzBffw7ukSA1IvGit645mO4lAE/hQNrMETspbJvwuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYheq6aSRdpReQjCjudQ0Pr6+WyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzBlM2I2YjItOGI5Yy0z YjEzLWJkYTQtZTEzYTE4NDZiY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg316MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACsVU4cEF0Wf0HCyLGXm6//TmD4H4YR7cNODY1r9KFzlkoWJd6Viqnw gopB92nYVU5V1iGnBBzoYTYHGbW6UD5jRKeXG5A2ntzQB9cm4s+BmkGEDNHMhmvD nihBXTTfHUXgF4NRfjFBBS2sXo1bvV0nhiaZPSYbwen+Tb0GJTOQhty1xZpvflpl n383V0vkCJ1mmWNmvY/F/bRsDLLEfOAMCCBFwRzbSO7o6gao3viZkXC78gY/LlKb Zp6dacwGb/a4wzuxfwXykvTzK/Cj67OYZKk6AybIQpu1K2UUUSP3aJeZzJ6XfkXX ammRoad3Db7pyxgMfJv3kfZNIAn8RQ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:11 2025 by rpki-client