$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa File: cfa1457e-6b66-3dc3-b8d4-52718701d476.roa (raw, json) Hash identifier: k4s0q0arM5hxYsprwjbg8ZJ2Z/X86cAEdaPU73ouWqM= Subject key identifier: 7C:68:4F:42:0E:F2:E6:E6:68:11:AF:29:7E:7F:09:93:31:9A:20:66 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584830253AC61916C00D4F4A2480 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa Signing time: Fri 13 Dec 2024 02:00:39 +0000 ROA not before: Fri 13 Dec 2024 02:00:39 +0000 ROA not after: Thu 13 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:25:3a:c6:19:16:c0:0d:4f:4a:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 13 02:00:39 2024 GMT Not After : Mar 13 01:00:39 2025 GMT Subject: CN=87b51cca-3632-4f83-bf47-032e7d1355b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:39:15:c6:63:f6:68:2b:19:5d:0d:c3:97: 35:70:12:64:6e:be:6f:cf:45:c3:16:d7:1c:0b:75: 04:47:0d:66:ba:f0:f0:b0:c0:be:29:62:3a:66:13: e1:d9:6f:72:4c:54:6f:65:1e:98:bd:db:0b:1f:53: 87:1e:cf:74:f7:0d:ac:6d:7c:69:42:73:c4:6d:7f: 01:c3:80:a7:b2:e1:61:19:78:55:f8:c0:c6:ef:22: 0e:76:87:ab:bf:98:9b:80:fe:7d:90:b8:a7:f6:0d: dd:b2:1c:18:b4:61:56:19:e2:c9:a4:78:d6:06:db: 26:d0:c7:fc:92:7b:5e:35:52:f0:ea:c4:08:2b:36: 35:58:26:76:2f:48:61:91:83:5f:5e:02:4e:5f:6e: 54:6f:bf:42:cf:f0:2e:34:ab:0b:5e:bd:03:c4:63: 4a:45:85:6e:1d:64:7a:d3:3c:58:69:6e:d3:f0:d9: 62:da:62:24:03:de:6b:35:d8:96:b3:91:32:6b:a3: f7:3c:ac:7a:f7:1b:e2:e5:b9:d8:6f:64:52:ec:60: 7a:d7:5a:e9:9c:0d:0c:6b:33:66:98:85:fc:cd:15: e5:fd:33:91:90:87:3b:61:66:40:12:c0:5d:45:20: 54:cd:9f:e2:7f:6e:c5:89:32:0c:bd:fa:15:03:42: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:4F:42:0E:F2:E6:E6:68:11:AF:29:7E:7F:09:93:31:9A:20:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:23:c7:2a:29:22:7e:44:94:6c:84:d4:d5:19:01:16:d3:ba: b7:9a:0e:ef:18:78:28:56:83:5e:f2:ce:ab:f4:52:93:00:0a: a5:13:6f:9a:4a:48:ea:c7:74:89:e3:8d:25:46:2d:f4:d0:2a: de:5b:e3:cc:eb:30:f0:c0:fe:a8:ed:a2:d1:68:6f:b9:5f:b1: 8e:6b:71:41:74:53:d1:96:fb:78:c0:3e:bf:92:d5:75:47:d4: f6:8d:ff:6e:7f:c3:cc:88:4e:8c:00:71:15:4b:c1:f1:d4:10: 93:59:08:0a:8d:5a:28:1d:c6:8e:67:f1:f9:93:36:9b:6f:f7: 94:ac:74:01:57:12:d6:f4:78:e4:3e:85:20:fb:8e:06:f0:78: ad:0c:a3:ea:4b:19:49:43:08:5c:46:75:f9:ee:c8:36:8d:4e: 62:5a:c9:96:b2:f7:93:6e:2e:47:dd:79:86:32:dd:c3:08:35: 7c:53:37:62:c4:68:be:25:e6:ed:c9:b0:db:67:bc:72:9e:49: 29:1b:af:13:41:90:37:02:a2:70:76:ad:92:c1:dc:99:b6:8f: 24:fe:f9:e0:3c:4e:29:91:40:15:6a:6d:6f:4b:00:86:7e:a1: 13:b3:0c:c3:83:a5:60:86:20:90:6d:cf:e3:31:98:38:5d:bf: 5b:05:63:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTrGGRbADU9KJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk ODdiNTFjY2EtMzYzMi00ZjgzLWJmNDctMDMyZTdkMTM1NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kE5FcZj9mgrGV0Nw5c1cBJkbr5vz0XDFtcc C3UERw1muvDwsMC+KWI6ZhPh2W9yTFRvZR6YvdsLH1OHHs909w2sbXxpQnPEbX8B w4CnsuFhGXhV+MDG7yIOdoerv5ibgP59kLin9g3dshwYtGFWGeLJpHjWBtsm0Mf8 knteNVLw6sQIKzY1WCZ2L0hhkYNfXgJOX25Ub79Cz/AuNKsLXr0DxGNKRYVuHWR6 0zxYaW7T8Nli2mIkA95rNdiWs5Eya6P3PKx69xvi5bnYb2RS7GB611rpnA0MazNm mIX8zRXl/TORkIc7YWZAEsBdRSBUzZ/if27FiTIMvfoVA0LGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxoT0IO8ubmaBGvKX5/CZMxmiBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2ZhMTQ1N2UtNmI2Ni0z ZGMzLWI4ZDQtNTI3MTg3MDFkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg318MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0jxyopIn5ElGyE1NUZARbTureaDu8YeChWg17yzqv0UpMACqUTb5pK SOrHdInjjSVGLfTQKt5b48zrMPDA/qjtotFob7lfsY5rcUF0U9GW+3jAPr+S1XVH 1PaN/25/w8yITowAcRVLwfHUEJNZCAqNWigdxo5n8fmTNptv95SsdAFXEtb0eOQ+ hSD7jgbweK0Mo+pLGUlDCFxGdfnuyDaNTmJayZay95NuLkfdeYYy3cMINXxTN2LE aL4l5u3JsNtnvHKeSSkbrxNBkDcConB2rZLB3Jm2jyT++eA8TimRQBVqbW9LAIZ+ oROzDMODpWCGIJBtz+MxmDhdv1sFYy0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:12 2025 by rpki-client