$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa File: 9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa (raw, json) Hash identifier: jWfjEH2ZR1P5HQddInMQobu2BrysZFv95DabKigbUT0= Subject key identifier: F7:B5:A5:E0:D3:E6:4A:96:81:C8:E0:7B:0A:25:5B:85:B6:DC:E6:A7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584830253E81CF15793F2EB75840 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa Signing time: Fri 13 Dec 2024 02:00:39 +0000 ROA not before: Fri 13 Dec 2024 02:00:39 +0000 ROA not after: Thu 13 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:25:3e:81:cf:15:79:3f:2e:b7:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 13 02:00:39 2024 GMT Not After : Mar 13 01:00:39 2025 GMT Subject: CN=ea9ea959-a800-4ed8-ae9e-c194b931c93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:61:2f:6d:55:2b:4b:0b:68:86:67:e7:74: bd:30:da:ad:ab:60:60:5a:f9:05:a0:65:f8:6a:78: ae:32:45:71:88:1f:d4:b2:1a:2c:11:be:98:fb:c5: de:ef:39:82:96:3b:2a:91:ce:0a:16:5b:ac:f4:29: 76:29:13:fe:ae:ef:f3:5c:d6:d1:43:eb:49:a5:e3: fa:27:e4:c2:bb:94:5a:b9:b4:c4:c0:47:42:2c:ee: d6:e1:b7:7c:50:7c:10:e1:09:39:e1:c8:ea:a3:ba: 16:65:48:98:c9:5a:e5:37:4a:e3:6f:ea:58:9c:0c: 62:ce:ae:70:fb:bb:25:9f:b4:52:6f:9a:6a:93:3c: 9e:69:fe:c7:0c:6b:dd:60:82:48:93:17:e2:0f:4e: 26:62:26:a9:d1:c1:76:fc:8b:4d:5d:c5:95:ac:2b: 77:29:c3:4b:f8:f8:db:75:b5:c0:cc:c0:91:5f:33: 4a:c0:c0:61:1c:ae:1a:18:55:f8:a5:29:c6:c4:8b: a4:65:5f:15:5b:b8:4e:d0:f8:64:47:da:e8:28:ba: cc:3b:ba:a0:74:f1:a0:41:4e:d4:01:65:a9:f3:74: 71:09:40:9a:ac:d6:96:f0:c9:82:40:f7:01:fc:fa: 1c:2a:2e:b4:c0:49:6c:b5:d0:27:e8:a0:cc:2a:9e: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B5:A5:E0:D3:E6:4A:96:81:C8:E0:7B:0A:25:5B:85:B6:DC:E6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:22:be:2f:1a:f6:24:7e:ef:06:48:c9:38:e9:b4:1d:43:e9: 61:49:c0:ef:e6:9c:c0:81:c1:5a:20:34:af:27:db:ad:3b:cf: d7:d3:f7:a3:7d:85:6a:64:ab:4e:16:c4:a8:47:a7:cb:7a:b9: d8:b8:90:c0:34:17:81:3e:c8:4e:43:bd:d0:97:69:74:25:9a: 62:07:ef:12:53:14:9e:cd:ea:d2:01:2d:f0:6b:da:b6:46:d7: 9d:d5:6f:4a:f2:5d:49:ea:9f:1a:0d:ee:63:09:88:20:67:90: 36:3f:ed:e1:20:32:90:02:75:0e:06:07:70:b6:72:eb:6e:06: 43:ed:04:05:6b:93:bf:36:76:d1:60:dc:21:17:54:c5:5c:9c: 29:b0:1a:31:a1:1c:6d:8f:e0:9e:40:77:68:a5:51:de:3e:33: a3:cf:bd:eb:1d:d4:64:1c:a0:01:91:8e:76:5f:2e:07:48:62: 23:99:4b:30:14:7f:32:01:cf:6e:ff:ce:f5:63:70:60:a7:54: e2:56:80:88:80:79:df:96:00:95:b2:83:de:88:69:8f:75:f9: ce:e6:ce:6a:5c:3b:fe:fb:11:e9:75:86:7e:55:9c:e5:1e:5e: a0:ff:a8:c0:9d:ca:27:34:85:ec:ce:61:26:1a:3b:f3:51:1d: ee:f1:e7:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJT6BzxV5Py63WEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZWE5ZWE5NTktYTgwMC00ZWQ4LWFlOWUtYzE5NGI5MzFjOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc5hL21VK0sLaIZn53S9MNqtq2BgWvkFoGX4 aniuMkVxiB/UshosEb6Y+8Xe7zmCljsqkc4KFlus9Cl2KRP+ru/zXNbRQ+tJpeP6 J+TCu5RaubTEwEdCLO7W4bd8UHwQ4Qk54cjqo7oWZUiYyVrlN0rjb+pYnAxizq5w +7sln7RSb5pqkzyeaf7HDGvdYIJIkxfiD04mYiap0cF2/ItNXcWVrCt3KcNL+Pjb dbXAzMCRXzNKwMBhHK4aGFX4pSnGxIukZV8VW7hO0PhkR9roKLrMO7qgdPGgQU7U AWWp83RxCUCarNaW8MmCQPcB/PocKi60wElstdAn6KDMKp5MVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe1peDT5kqWgcjgewolW4W23OanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWY3YmFlNmItMGI1Zi0z MTY5LWJjYmUtZmNmZWRmN2E4ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcivi8a9iR+7wZIyTjptB1D6WFJwO/mnMCBwVogNK8n2607z9fT96N9 hWpkq04WxKhHp8t6udi4kMA0F4E+yE5DvdCXaXQlmmIH7xJTFJ7N6tIBLfBr2rZG 153Vb0ryXUnqnxoN7mMJiCBnkDY/7eEgMpACdQ4GB3C2cutuBkPtBAVrk782dtFg 3CEXVMVcnCmwGjGhHG2P4J5Ad2ilUd4+M6PPvesd1GQcoAGRjnZfLgdIYiOZSzAU fzIBz27/zvVjcGCnVOJWgIiAed+WAJWyg96IaY91+c7mzmpcO/77Eel1hn5VnOUe XqD/qMCdyic0hezOYSYaO/NRHe7x5zs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:49 2025 by rpki-client