$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa File: 2fef3d37-e795-39f5-b53a-c7e420227567.roa (raw, json) Hash identifier: t8th3WymAfiAljfX+w6SZ4afr2xiP2fD3GSW+V1DbRE= Subject key identifier: 2A:8B:A0:DE:39:74:F4:A4:BA:5C:10:D5:07:20:CC:30:72:F6:23:0F Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F432858484C1036DF60F478A4183E9000 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 7018 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:36:df:60:f4:78:a4:18:3e:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=bf634498-df4c-4aa3-b6a9-2f28fa7d5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:95:fb:43:86:c0:c4:3d:62:99:f2:66:b6: e4:27:66:fc:0c:fa:de:c3:64:bc:c0:d7:60:10:fd: 22:01:86:ed:8c:f1:ff:80:6d:d5:79:ba:5b:f8:99: bd:79:6b:fc:ff:16:eb:44:cd:c1:62:c6:ae:d4:80: 89:75:e7:7b:5d:66:43:f7:c3:88:8f:80:10:48:aa: 24:6b:5b:63:81:c0:c9:d4:dc:dd:66:27:3e:39:04: 1e:c4:2b:f2:10:71:54:65:f3:9f:cf:02:a2:f3:4f: 89:45:19:e9:83:0d:71:0b:87:8d:ba:b3:e0:e7:d4: b0:3e:2d:8a:21:d0:f4:9f:2f:55:ab:74:8a:5b:4c: 88:a2:86:5e:88:df:5e:02:be:15:92:ff:54:11:5d: f8:db:fc:33:0d:20:48:cb:1d:23:ba:7f:30:73:0d: ba:06:4d:fc:82:de:38:d0:4d:39:8f:4e:42:a2:98: 87:bb:2f:c4:0e:b0:47:48:2e:99:68:6e:89:2c:15: 7a:11:e3:88:7f:a5:14:d9:cf:99:b0:7d:81:eb:5b: 2f:69:6e:fb:65:98:1d:21:ba:18:8f:e5:a2:a6:b8: ca:7f:0d:f4:24:ae:c9:33:67:12:b0:05:2e:73:37: e5:04:c5:17:6e:58:26:52:40:d6:d7:c0:86:c5:cf: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:A0:DE:39:74:F4:A4:BA:5C:10:D5:07:20:CC:30:72:F6:23:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bc:31:8d:be:4f:ec:af:62:a8:4d:c0:96:e6:58:32:f2:80: ee:74:ff:aa:8f:7b:55:8f:3d:82:8f:87:4b:92:c9:7e:59:82: 07:5e:a6:4e:c0:df:61:2f:e7:3c:6c:e9:db:79:2a:18:14:53: 9b:0e:e7:0a:d3:53:5b:5e:3d:2a:92:3f:35:ab:bc:4e:b2:61: 45:80:c4:7c:72:3e:b8:ce:14:ad:df:bf:b9:8f:0e:7d:20:06: 23:f4:32:b8:c5:52:a1:d1:f8:4b:dc:b7:30:47:98:01:e6:c9: 9a:33:0c:52:b1:d5:12:ef:c3:0f:56:67:31:5a:50:c1:b0:66: 22:e5:fe:30:4b:f9:72:5c:48:58:a8:4b:38:cf:52:d5:65:c4: b1:87:06:ce:5a:66:b8:27:9e:a8:11:8b:c3:5b:a8:ad:2c:e4: 5f:bb:b7:f5:a5:c4:d3:46:2a:99:56:69:bb:d5:d9:57:90:01: 0f:0b:7d:31:a2:a1:c6:66:34:d0:76:f6:eb:0d:20:fb:57:96: b5:96:2b:79:4d:11:22:d4:0c:0b:23:54:60:64:ef:17:69:a7: 8d:73:84:77:32:99:cc:2b:4a:59:06:51:8f:8f:c0:89:9d:6d: f6:71:ee:11:4e:ed:58:cd:27:39:4c:c8:93:a6:80:02:97:f9: 04:2e:28:b4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhMEDbfYPR4pBg+kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk YmY2MzQ0OTgtZGY0Yy00YWEzLWI2YTktMmYyOGZhN2Q1OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0OV+0OGwMQ9YpnyZrbkJ2b8DPrew2S8wNdg EP0iAYbtjPH/gG3Vebpb+Jm9eWv8/xbrRM3BYsau1ICJded7XWZD98OIj4AQSKok a1tjgcDJ1NzdZic+OQQexCvyEHFUZfOfzwKi80+JRRnpgw1xC4eNurPg59SwPi2K IdD0ny9Vq3SKW0yIooZeiN9eAr4Vkv9UEV342/wzDSBIyx0jun8wcw26Bk38gt44 0E05j05CopiHuy/EDrBHSC6ZaG6JLBV6EeOIf6UU2c+ZsH2B61svaW77ZZgdIboY j+WiprjKfw30JK7JM2cSsAUuczflBMUXblgmUkDW18CGxc8HwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCqLoN45dPSkulwQ1QcgzDBy9iMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMmZlZjNkMzctZTc5NS0z OWY1LWI1M2EtYzdlNDIwMjI3NTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8vDGNvk/sr2KoTcCW5lgy8oDudP+qj3tVjz2C j4dLksl+WYIHXqZOwN9hL+c8bOnbeSoYFFObDucK01NbXj0qkj81q7xOsmFFgMR8 cj64zhSt37+5jw59IAYj9DK4xVKh0fhL3LcwR5gB5smaMwxSsdUS78MPVmcxWlDB sGYi5f4wS/lyXEhYqEs4z1LVZcSxhwbOWma4J56oEYvDW6itLORfu7f1pcTTRiqZ Vmm71dlXkAEPC30xoqHGZjTQdvbrDSD7V5a1lit5TREi1AwLI1RgZO8XaaeNc4R3 MpnMK0pZBlGPj8CJnW32ce4RTu1YzSc5TMiTpoACl/kELii0 -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:32 2025 by rpki-client