$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa File: 7388a857-6a24-35a6-b537-daa459258a2e.roa (raw, json) Hash identifier: YuoAFncfdOxifxDv579DY+lIgP2GhgFD88SeLXvvJVY= Subject key identifier: 16:42:DB:AE:CB:02:64:7C:D6:A6:34:53:4E:9E:76:21:06:64:EA:94 Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F432858482EBFFF8A50D09051C6DEF400 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa Signing time: Thu 12 Dec 2024 14:00:51 +0000 ROA not before: Thu 12 Dec 2024 14:00:51 +0000 ROA not after: Wed 12 Mar 2025 13:00:51 +0000 asID: 16509 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:bf:ff:8a:50:d0:90:51:c6:de:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: Dec 12 14:00:51 2024 GMT Not After : Mar 12 13:00:51 2025 GMT Subject: CN=2ba7f310-ae59-4a1f-9010-d5c113e70692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:43:cf:ab:1f:59:81:9d:ee:6a:9c:f8:b1: c8:c9:21:4b:63:3e:f8:57:7d:3a:5b:b5:96:6f:91: cd:a8:f6:dd:8f:ac:38:4f:ab:90:77:35:f7:d6:a4: 7c:65:a6:43:39:87:7b:34:6d:41:d9:63:7e:be:3f: 63:b7:01:c2:18:38:20:6f:c3:23:23:18:b4:3e:ce: 69:20:c9:e9:51:ff:b8:30:d2:5b:d5:86:f3:80:62: 7f:fc:fc:78:a4:42:20:01:a6:79:29:08:c7:b8:52: 63:b3:36:36:09:ff:8c:9b:e8:6e:3b:57:28:3a:d0: 6e:9f:fe:06:b3:b0:f0:2f:22:23:49:d6:b3:57:7d: 2c:c4:15:03:1a:b2:41:d5:3f:ee:f0:7f:e3:55:32: 16:23:1f:0c:63:99:b2:43:55:31:f0:bf:9f:88:76: d7:39:15:ec:29:b2:e6:6e:b0:19:05:bd:29:0e:8b: 4b:10:12:37:89:69:46:99:04:8f:a2:fc:5c:3f:e2: da:27:5a:10:d6:78:6c:8d:86:17:e9:30:e5:54:68: 7d:b6:e2:7a:db:f0:7f:10:e9:4f:16:b0:bd:63:6b: 9e:8e:a3:b3:56:81:d8:a8:2d:69:90:e0:3f:42:15: ee:1c:33:8e:51:83:12:34:13:5c:25:31:8c:a4:d2: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:42:DB:AE:CB:02:64:7C:D6:A6:34:53:4E:9E:76:21:06:64:EA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ac:ac:fd:84:77:82:ba:b2:fb:be:11:01:6d:10:28:ab:35: dc:e7:7d:1a:0a:dd:69:ab:a5:49:7a:fb:f8:1c:93:bb:c2:12: 05:56:4b:34:14:be:ed:27:96:5a:da:5d:23:6a:39:47:cb:81: 19:83:e0:8e:1d:2c:28:00:19:55:4c:a6:b6:02:70:9f:f4:52: 20:5e:8a:35:55:db:63:ec:c4:29:65:85:6d:fc:d7:73:da:a4: c9:9f:a7:a9:d0:fb:2c:7b:c3:1c:bf:01:c5:e8:d7:83:f9:8b: c9:93:33:1d:45:96:2b:57:50:37:3e:d9:46:8d:bb:02:78:45: d6:53:36:00:b8:37:0e:37:a0:28:fe:b6:5a:1b:4d:84:63:81: 43:08:8c:ea:45:2f:86:1e:89:63:d2:42:9d:f9:f0:40:71:83: 71:1d:0b:50:f1:6a:b4:5c:6e:bb:c2:d6:0d:22:41:d7:e9:71: e0:14:5c:b8:2e:c8:4a:30:22:e8:f6:27:aa:15:ae:3f:88:e1: 6f:9f:8b:42:b6:c2:29:62:64:97:c7:64:9b:16:e0:fd:bd:7d: a5:8f:50:e3:02:8e:be:c4:8f:ad:6f:5b:79:52:20:64:b3:0a: 6c:1d:f5:0f:4f:ed:8e:6b:e7:65:c2:01:86:dc:46:2e:86:0d: 8e:c9:c0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguv/+KUNCQUcbe9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk MmJhN2YzMTAtYWU1OS00YTFmLTkwMTAtZDVjMTEzZTcwNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCZDz6sfWYGd7mqc+LHIySFLYz74V306W7WW b5HNqPbdj6w4T6uQdzX31qR8ZaZDOYd7NG1B2WN+vj9jtwHCGDggb8MjIxi0Ps5p IMnpUf+4MNJb1YbzgGJ//Px4pEIgAaZ5KQjHuFJjszY2Cf+Mm+huO1coOtBun/4G s7DwLyIjSdazV30sxBUDGrJB1T/u8H/jVTIWIx8MY5myQ1Ux8L+fiHbXORXsKbLm brAZBb0pDotLEBI3iWlGmQSPovxcP+LaJ1oQ1nhsjYYX6TDlVGh9tuJ62/B/EOlP FrC9Y2uejqOzVoHYqC1pkOA/QhXuHDOOUYMSNBNcJTGMpNJSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZC267LAmR81qY0U06ediEGZOqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvNzM4OGE4NTctNmEyNC0z NWE2LWI1MzctZGFhNDU5MjU4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFasrP2Ed4K6svu+EQFtECirNdznfRoK3WmrpUl6+/gck7vCEgVWSzQU vu0nllraXSNqOUfLgRmD4I4dLCgAGVVMprYCcJ/0UiBeijVV22PsxCllhW3813Pa pMmfp6nQ+yx7wxy/AcXo14P5i8mTMx1FlitXUDc+2UaNuwJ4RdZTNgC4Nw43oCj+ tlobTYRjgUMIjOpFL4YeiWPSQp358EBxg3EdC1DxarRcbrvC1g0iQdfpceAUXLgu yEowIuj2J6oVrj+I4W+fi0K2wiliZJfHZJsW4P29faWPUOMCjr7Ej61vW3lSIGSz Cmwd9Q9P7Y5r52XCAYbcRi6GDY7JwI8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:54 2025 by rpki-client