$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/50f0813d-b9a1-3791-ae1a-76762b263f6f.roa File: 50f0813d-b9a1-3791-ae1a-76762b263f6f.roa (raw, json) Hash identifier: 6g8FIOtMGJidyLIAvv1Jle4nv7Z3oxgOuKr4Wvw3VOI= Subject key identifier: 99:81:CD:50:27:E0:26:8F:C2:4D:7F:9A:83:5A:CB:9A:EF:79:2F:0C Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584817F98DB8D95FA5F428469C00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/50f0813d-b9a1-3791-ae1a-76762b263f6f.roa Signing time: Wed 04 Dec 2024 10:13:18 +0000 ROA not before: Wed 04 Dec 2024 10:13:18 +0000 ROA not after: Tue 04 Mar 2025 10:13:18 +0000 asID: 14618 IP address blocks: 170.225.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:f9:8d:b8:d9:5f:a5:f4:28:46:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Dec 4 10:13:18 2024 GMT Not After : Mar 4 10:13:18 2025 GMT Subject: CN=3fb608da-24b7-4f3f-b72e-cc57d0aa716d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:af:19:cf:7d:85:9d:01:a9:7b:2a:63:6e: 2f:36:dd:3e:de:2a:64:cf:1c:b9:93:76:c7:93:ae: e5:9e:9b:24:b8:76:8b:c2:ca:19:c2:6d:8a:7e:d7: a8:d8:ed:be:90:d8:5c:c6:78:da:fc:e1:78:c3:8e: a6:8c:7d:3a:17:46:ae:05:da:37:19:ff:09:9d:d1: a9:39:b4:60:a3:9f:d1:92:97:4e:b0:6d:c6:9e:de: af:8b:3b:57:50:81:bd:a4:8a:3c:31:fb:4d:90:d3: 88:68:81:0e:af:eb:29:eb:b3:ee:6e:25:0f:fc:80: 4c:2e:9a:1b:ba:f4:10:3f:62:5f:c9:9e:c6:91:2c: dc:41:3b:1e:98:83:5a:ba:55:1b:1f:1b:ba:c5:9f: 30:30:bc:49:23:ec:0c:34:8c:62:f5:12:1f:4e:b3: 6e:8c:90:30:ca:40:4d:00:9a:e1:f8:f1:c2:f2:31: 2a:ac:fd:34:3d:f6:17:e2:74:e7:b7:c2:ae:e3:38: 2a:60:f8:61:64:fd:8a:ec:43:d9:20:fc:62:11:f3: 15:d8:a6:9f:e1:96:78:8e:73:ec:19:ce:cd:f0:59: 51:b1:a8:67:64:bc:6a:28:22:d7:fb:c1:f9:6e:0a: 0f:15:62:5e:e8:7b:75:7c:d9:64:b4:b3:d6:cd:e4: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:81:CD:50:27:E0:26:8F:C2:4D:7F:9A:83:5A:CB:9A:EF:79:2F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/50f0813d-b9a1-3791-ae1a-76762b263f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0d:e6:36:45:25:e7:18:94:40:38:e7:46:f1:f7:4f:85:c9: 65:42:b1:57:c3:39:8e:39:e2:3f:c8:d5:f0:a9:25:ad:c9:c3: d7:e7:08:ca:ee:1f:07:b7:e4:2f:2c:0e:e6:9d:b8:03:b1:67: cf:fa:e6:64:5f:f9:4b:81:0e:48:70:6c:1d:09:84:1b:3d:22: ae:43:13:0b:b2:8f:d4:38:da:86:7f:ce:ec:9e:fd:c5:5f:a3: 0e:eb:54:2d:9c:7a:5c:66:48:cc:24:cf:b9:79:00:01:dc:38: 5f:97:ec:48:00:e2:1e:2c:0c:08:d1:67:95:83:20:68:39:f5: 0b:10:83:f5:31:7f:27:f5:04:d9:7e:03:25:c9:d5:5d:02:44: 51:d5:04:c6:d2:7d:b5:93:2b:47:1e:2a:43:e1:2c:5d:d5:0d: a1:f2:ac:ae:2e:71:86:26:2a:e2:01:64:bd:ff:f8:9b:8f:5c: c5:90:db:39:8a:02:14:f2:94:09:94:ba:e6:45:2f:87:df:43: 26:a5:18:77:41:fb:08:5e:42:2b:45:bf:12:d4:a4:74:8d:e2: ce:57:18:29:4c:b1:ae:c3:2b:97:b9:66:79:57:d2:d6:90:2b: 34:2d:c3:9d:35:9c:88:fb:60:f8:fa:05:7c:69:0c:6c:7b:33: f1:02:3c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgX+Y242V+l9ChGnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MTIwNDEwMTMxOFoXDTI1MDMwNDEwMTMxOFowLzEtMCsGA1UEAxMk M2ZiNjA4ZGEtMjRiNy00ZjNmLWI3MmUtY2M1N2QwYWE3MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi+vGc99hZ0BqXsqY24vNt0+3ipkzxy5k3bH k67lnpskuHaLwsoZwm2Kfteo2O2+kNhcxnja/OF4w46mjH06F0auBdo3Gf8JndGp ObRgo5/RkpdOsG3Gnt6viztXUIG9pIo8MftNkNOIaIEOr+sp67PubiUP/IBMLpob uvQQP2JfyZ7GkSzcQTsemINaulUbHxu6xZ8wMLxJI+wMNIxi9RIfTrNujJAwykBN AJrh+PHC8jEqrP00PfYX4nTnt8Ku4zgqYPhhZP2K7EPZIPxiEfMV2Kaf4ZZ4jnPs Gc7N8FlRsahnZLxqKCLX+8H5bgoPFWJe6Ht1fNlktLPWzeTbsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmBzVAn4CaPwk1/moNay5rveS8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTBmMDgxM2QtYjlhMS0z NzkxLWFlMWEtNzY3NjJiMjYzZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquFzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMN5jZFJecYlEA450bx90+FyWVCsVfDOY454j/I1fCpJa3Jw9fnCMru Hwe35C8sDuaduAOxZ8/65mRf+UuBDkhwbB0JhBs9Iq5DEwuyj9Q42oZ/zuye/cVf ow7rVC2celxmSMwkz7l5AAHcOF+X7EgA4h4sDAjRZ5WDIGg59QsQg/Uxfyf1BNl+ AyXJ1V0CRFHVBMbSfbWTK0ceKkPhLF3VDaHyrK4ucYYmKuIBZL3/+JuPXMWQ2zmK AhTylAmUuuZFL4ffQyalGHdB+wheQitFvxLUpHSN4s5XGClMsa7DK5e5ZnlX0taQ KzQtw501nIj7YPj6BXxpDGx7M/ECPEk= -----END CERTIFICATE-----Generated at Wed Feb 5 09:55:10 2025 by rpki-client