$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa File: d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa (raw, json) Hash identifier: 2TlRz6HA3vKixW8AHkCVkBRREjp2ZZghBgyUzBY4RvA= Subject key identifier: 88:53:47:1E:95:37:3C:9F:F6:34:3B:4E:B7:B2:82:B7:8A:D1:5E:39 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F43285848748B1E78D09073AC8D5954E0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:1e:78:d0:90:73:ac:8d:59:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=ff2ff43d-42e6-457f-a938-1c44e7c82a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:61:e9:ba:4f:00:99:ce:cb:4a:77:27:54: aa:cd:3d:bc:05:73:c2:84:1b:10:74:5a:85:24:30: 3f:39:de:8f:53:3f:2b:59:d8:86:ab:68:82:a3:08: 55:01:50:b2:f9:76:05:74:bd:a9:10:eb:71:fa:1b: bc:c9:2e:8b:af:e5:07:d8:ec:00:29:49:f6:2a:85: ea:57:67:db:38:a3:d9:3f:da:76:56:0f:8a:c4:92: c6:31:64:45:66:0d:e4:80:71:66:57:9a:dd:da:49: e8:5b:29:a2:e0:33:3e:0f:dd:44:b3:ef:21:b4:a8: 32:28:d4:bb:3e:e3:38:35:7c:73:1c:18:92:6f:b4: 06:4b:de:6f:12:36:26:cd:fa:3f:86:cd:c4:04:44: b1:d8:52:55:38:73:79:c1:14:81:01:8b:11:f9:eb: c8:90:d3:ee:f0:af:cc:34:e4:ba:ac:0b:99:42:91: 88:78:88:d2:d7:db:7e:02:f6:a2:86:a9:c9:23:6b: 79:45:41:bd:ee:51:c4:ac:6c:33:f8:7d:76:c5:81: b3:56:5b:3e:0c:81:55:93:55:42:46:b6:5b:b2:c2: 4f:48:29:61:aa:c8:5d:fe:17:1e:1c:1a:c2:01:46: 6a:8b:be:69:77:5e:d4:b9:af:a2:e1:02:03:1b:a5: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:47:1E:95:37:3C:9F:F6:34:3B:4E:B7:B2:82:B7:8A:D1:5E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:52:9e:ac:06:04:f3:63:ff:93:5e:68:cd:90:27:f8:25:5c: 98:6f:23:d1:92:73:40:e1:b0:e8:c2:9e:68:f3:63:4e:38:2b: c7:af:26:98:15:30:49:63:1e:8a:10:02:4b:41:5c:8e:90:4c: d6:86:82:0f:3a:e4:5f:da:e9:71:c3:8b:17:64:d6:05:f7:72: fb:0a:12:89:c0:41:ab:e9:2d:98:07:b1:b5:ad:9a:e0:37:2e: 66:31:89:0a:c2:0f:59:3f:6d:2e:d0:07:3c:18:99:3f:52:81: b3:4c:94:1d:0e:08:0b:b8:1e:af:6b:bb:ed:03:16:88:45:24: 72:d0:c7:ae:96:a0:c5:a2:b5:90:90:53:00:1e:cc:0a:2d:2e: d5:5f:ef:e3:9a:22:4f:a5:5c:29:54:37:5b:3e:ba:17:b7:98: 6b:02:70:9a:29:dc:8d:08:3d:a3:43:2f:b9:12:53:3a:a8:9c: fb:61:65:62:9e:43:2c:48:6f:e9:0d:d8:32:5a:f9:b3:bb:33: 7b:28:b6:e0:7a:f4:20:24:16:9e:57:5f:18:d9:bb:74:04:ed: a4:03:e2:36:1c:1b:44:63:25:27:0e:3f:77:e4:9f:ac:a3:36: d6:64:1d:d0:2b:e7:c6:a2:e6:b4:83:8d:fe:ce:3b:10:8c:95: 0c:db:90:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ix540JBzrI1ZVOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZmYyZmY0M2QtNDJlNi00NTdmLWE5MzgtMWM0NGU3YzgyYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguJh6bpPAJnOy0p3J1SqzT28BXPChBsQdFqF JDA/Od6PUz8rWdiGq2iCowhVAVCy+XYFdL2pEOtx+hu8yS6Lr+UH2OwAKUn2KoXq V2fbOKPZP9p2Vg+KxJLGMWRFZg3kgHFmV5rd2knoWymi4DM+D91Es+8htKgyKNS7 PuM4NXxzHBiSb7QGS95vEjYmzfo/hs3EBESx2FJVOHN5wRSBAYsR+evIkNPu8K/M NOS6rAuZQpGIeIjS19t+AvaihqnJI2t5RUG97lHErGwz+H12xYGzVls+DIFVk1VC RrZbssJPSClhqshd/hceHBrCAUZqi75pd17Uua+i4QIDG6UWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhTRx6VNzyf9jQ7TreygreK0V45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZDM1ZmE4MDAtNjkzMS0z MmI3LThmYjEtMjJmNmY4Y2I4NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5SnqwGBPNj/5NeaM2QJ/glXJhvI9GSc0DhsOjCnmjzY044K8evJpgV MEljHooQAktBXI6QTNaGgg865F/a6XHDixdk1gX3cvsKEonAQavpLZgHsbWtmuA3 LmYxiQrCD1k/bS7QBzwYmT9SgbNMlB0OCAu4Hq9ru+0DFohFJHLQx66WoMWitZCQ UwAezAotLtVf7+OaIk+lXClUN1s+uhe3mGsCcJop3I0IPaNDL7kSUzqonPthZWKe QyxIb+kN2DJa+bO7M3sotuB69CAkFp5XXxjZu3QE7aQD4jYcG0RjJScOP3fkn6yj NtZkHdAr58ai5rSDjf7OOxCMlQzbkGM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:31 2025 by rpki-client