$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa File: d4a09bdc-1a34-32e9-95c1-afcba7627345.roa (raw, json) Hash identifier: Pd6Uup6hBY0ZbY5TdFtzYrre3blV5lWU4EgV+Z/Nj5g= Subject key identifier: 84:2E:51:04:CB:0E:05:04:DA:87:C9:75:6A:62:39:EF:7A:53:CB:40 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F43285848D7A6499EAF179C909A2C81F4 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 701 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:49:9e:af:17:9c:90:9a:2c:81:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=8df6732f-70b6-464a-ab19-3ef6481d6afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:66:03:3e:5f:3f:22:91:c9:10:b9:39:e1: 4b:0e:9b:d1:0a:b1:ad:50:1c:b7:c1:8d:b0:d2:40: 45:61:72:86:05:3a:59:8f:e1:76:3f:1b:6f:fb:0c: c6:18:83:72:45:af:f7:3b:83:cc:2f:2d:aa:5b:40: 63:c4:4a:ed:5d:f9:de:ac:56:d5:7e:3b:c6:3b:18: e3:b6:98:8c:dd:24:f7:87:80:bc:d9:6b:4f:90:a2: 7b:c6:76:91:be:84:06:c2:d6:c4:17:d7:39:80:3f: ba:3b:ba:37:97:20:e0:b5:b3:1c:b7:b0:67:46:64: dd:ba:cc:c7:ad:e0:ac:e3:e2:b4:55:cc:f9:be:1e: d6:ac:fc:3b:88:85:18:ee:39:38:75:b3:55:2c:10: 4f:9c:cb:77:f1:6c:84:9e:a3:fb:a5:9f:60:f1:c0: 96:93:9f:f7:d1:14:e3:44:cd:9c:f7:f2:8d:3d:d2: ba:6d:5c:eb:66:4e:ea:76:4d:db:74:8e:b2:13:07: 5f:be:12:06:19:67:6f:f2:38:30:cc:2d:6a:54:02: 5e:1d:d8:5e:d2:23:db:6d:91:fd:8d:85:e0:14:65: ed:38:bb:77:48:20:2f:5d:fb:f4:ac:03:b3:ad:56: 2b:0f:39:0d:d5:f1:2d:4a:67:08:fa:79:0b:08:ad: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:51:04:CB:0E:05:04:DA:87:C9:75:6A:62:39:EF:7A:53:CB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:db:44:31:ee:3c:89:28:16:00:4e:68:36:f1:15:c2:14:cb: 55:86:d8:3b:d9:17:cf:87:8b:29:31:57:0b:0c:80:ab:b3:76: f5:f0:fa:6c:ec:c2:60:e1:89:11:66:7b:68:ee:47:a6:12:62: 5d:09:7c:53:60:b4:2a:a6:44:26:b5:2a:4a:b7:f5:09:de:f9: 52:ca:95:e7:88:f5:0e:09:3f:02:9c:aa:c0:1a:27:0e:b6:58: ac:ca:83:3a:a3:ea:a0:fa:7e:43:45:c5:47:58:52:87:be:62: 74:00:a7:78:5d:9a:bf:d9:df:de:f1:aa:27:56:8c:f3:d8:0b: de:19:1e:ec:ee:0b:5d:8d:73:f4:22:1b:d6:94:30:a0:2d:75: 82:ab:b6:0d:99:77:24:5b:de:6a:a1:37:55:6a:e5:a8:d3:44: 47:60:85:36:4f:b8:6e:d1:eb:fd:b7:a8:41:b3:bd:03:6f:97: 1f:74:31:47:75:69:81:bc:a7:ae:a0:ca:13:36:8e:51:a0:63: 2a:63:60:f7:3f:cf:2b:68:22:cd:7f:cc:0c:d1:d7:5e:bd:30: 4b:6f:2d:b8:82:a4:a2:9c:3a:3f:be:78:b8:46:d3:43:71:33: b5:12:3e:9a:58:bd:98:8a:67:0e:84:50:03:b9:94:d6:c9:d9: 7e:d7:6f:49 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjXpkmerxeckJosgfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk OGRmNjczMmYtNzBiNi00NjRhLWFiMTktM2VmNjQ4MWQ2YWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwZmAz5fPyKRyRC5OeFLDpvRCrGtUBy3wY2w 0kBFYXKGBTpZj+F2Pxtv+wzGGINyRa/3O4PMLy2qW0BjxErtXfnerFbVfjvGOxjj tpiM3ST3h4C82WtPkKJ7xnaRvoQGwtbEF9c5gD+6O7o3lyDgtbMct7BnRmTduszH reCs4+K0Vcz5vh7WrPw7iIUY7jk4dbNVLBBPnMt38WyEnqP7pZ9g8cCWk5/30RTj RM2c9/KNPdK6bVzrZk7qdk3bdI6yEwdfvhIGGWdv8jgwzC1qVAJeHdhe0iPbbZH9 jYXgFGXtOLt3SCAvXfv0rAOzrVYrDzkN1fEtSmcI+nkLCK351QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIQuUQTLDgUE2ofJdWpiOe96U8tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDRhMDliZGMtMWEzNC0z MmU5LTk1YzEtYWZjYmE3NjI3MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAk20Qx7jyJKBYATmg28RXCFMtVhtg72RfPh4sp MVcLDICrs3b18Pps7MJg4YkRZnto7kemEmJdCXxTYLQqpkQmtSpKt/UJ3vlSypXn iPUOCT8CnKrAGicOtlisyoM6o+qg+n5DRcVHWFKHvmJ0AKd4XZq/2d/e8aonVozz 2AveGR7s7gtdjXP0IhvWlDCgLXWCq7YNmXckW95qoTdVauWo00RHYIU2T7hu0ev9 t6hBs70Db5cfdDFHdWmBvKeuoMoTNo5RoGMqY2D3P88raCLNf8wM0ddevTBLby24 gqSinDo/vni4RtNDcTO1Ej6aWL2YimcOhFADuZTWydl+129J -----END CERTIFICATE-----Generated at Sat Apr 5 12:34:37 2025 by rpki-client