$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa File: fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa (raw, json) Hash identifier: YCAlAzmYk5ijSE0sK1LUSqWJlqihGIew28TSGCsWIhg= Subject key identifier: 8D:FB:E0:21:36:D6:86:41:7D:B1:5C:D8:C2:8B:EF:12:B8:02:76:75 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285848B1F62DBE61B760491634A200 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 834 IP address blocks: 162.255.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2d:be:61:b7:60:49:16:34:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=816d21dd-e190-490c-af0d-189e904fdd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:36:c6:08:15:ab:a5:26:7f:5f:b6:0d:ea: 75:dd:c6:5f:93:b8:af:d7:93:1b:97:ba:89:90:da: 43:53:6c:23:ac:66:5e:5d:63:3f:70:dc:0f:1b:30: c7:c0:e7:a9:e0:a4:58:bd:ec:37:fc:4b:fc:ac:06: 65:3c:5c:56:8a:fd:22:52:14:e7:05:82:69:bd:20: 34:86:11:cf:4e:d3:49:41:69:23:fa:8d:67:75:22: 1f:5b:f3:82:79:95:d0:50:af:8a:72:23:d8:46:5b: c9:d1:17:c8:82:4b:dd:65:a1:e0:f6:c4:97:6f:9c: 1e:14:95:6f:7c:65:3d:da:4f:cc:ba:c8:f5:d6:1d: 2b:34:a1:a1:e0:ef:ff:3f:9c:77:7c:43:81:56:7b: 78:9d:36:b2:ad:fc:1d:06:20:ae:c4:c5:3a:f1:a8: 35:35:fa:4a:94:19:0f:2b:c9:f2:b8:f6:44:49:44: c8:0a:af:a0:2c:43:96:22:da:3a:49:62:46:26:01: a6:b3:b3:40:a9:73:dc:99:f2:33:87:d2:e6:61:ae: 2d:9a:a2:d1:5c:c5:4b:80:32:22:a4:15:69:f5:25: b2:f7:4e:2a:c3:38:51:67:ac:9c:1a:f9:68:22:85: 83:f3:b2:17:a0:65:ec:9b:a6:f1:22:d6:6b:b0:e9: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FB:E0:21:36:D6:86:41:7D:B1:5C:D8:C2:8B:EF:12:B8:02:76:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.255.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:89:e1:c6:9d:d1:22:c3:7e:47:2a:24:4f:17:68:5f:b5:70: 1c:51:6f:bb:66:92:6d:14:76:fb:ff:5c:83:48:fb:da:c9:75: bb:56:bf:28:86:1d:af:f5:90:a7:5a:ca:55:ad:58:0b:46:fe: 18:14:5f:f4:23:98:59:f7:b7:02:e2:90:53:9b:c4:90:f7:5b: bd:16:b4:b7:72:72:fd:f7:b3:2e:8e:2e:6c:38:94:14:3c:d7: 6b:ea:60:8e:46:9a:fd:8e:a9:0b:27:36:1c:51:d3:68:4d:16: e8:da:2d:26:cd:32:ee:e5:6d:88:99:fa:67:c5:b6:ca:10:69: d0:7f:16:c0:ea:f9:3c:1e:d6:7c:e2:dc:63:0e:af:23:04:ee: 1b:33:42:a4:fe:68:36:b9:39:cc:ea:93:37:a1:51:8a:bc:62: e7:0e:3a:ae:f8:59:9b:06:f3:c9:a3:b1:da:d1:e2:fa:df:7f: 0a:ae:bf:bd:84:c8:78:77:84:ee:4c:13:77:95:2e:d1:ae:ed: cb:ce:7d:26:c3:5c:94:6c:30:d3:79:b4:97:1b:53:11:e5:2b: 7a:69:b9:6b:6e:4e:02:f2:83:89:56:12:69:c7:e1:7f:44:cb: ba:70:da:6b:26:51:e2:be:8c:43:20:a1:33:71:8e:a5:a7:cd: b5:e2:d5:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9i2+YbdgSRY0ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ODE2ZDIxZGQtZTE5MC00OTBjLWFmMGQtMTg5ZTkwNGZkZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxw2xggVq6Umf1+2Dep13cZfk7iv15Mbl7qJ kNpDU2wjrGZeXWM/cNwPGzDHwOep4KRYvew3/Ev8rAZlPFxWiv0iUhTnBYJpvSA0 hhHPTtNJQWkj+o1ndSIfW/OCeZXQUK+KciPYRlvJ0RfIgkvdZaHg9sSXb5weFJVv fGU92k/Musj11h0rNKGh4O//P5x3fEOBVnt4nTayrfwdBiCuxMU68ag1NfpKlBkP K8nyuPZESUTICq+gLEOWIto6SWJGJgGms7NAqXPcmfIzh9LmYa4tmqLRXMVLgDIi pBVp9SWy904qwzhRZ6ycGvloIoWD87IXoGXsm6bxItZrsOkQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI374CE21oZBfbFc2MKL7xK4AnZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZmJmZjZhNjEtNTU0Yy0z M2Y2LWI3YjktYmEzOWMzOWUwYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiJ4cad0SLDfkcqJE8XaF+1cBxRb7tmkm0Udvv/XINI+9rJdbtWvyiG Ha/1kKdaylWtWAtG/hgUX/QjmFn3twLikFObxJD3W70WtLdycv33sy6OLmw4lBQ8 12vqYI5Gmv2OqQsnNhxR02hNFujaLSbNMu7lbYiZ+mfFtsoQadB/FsDq+Twe1nzi 3GMOryME7hszQqT+aDa5OczqkzehUYq8YucOOq74WZsG88mjsdrR4vrffwquv72E yHh3hO5ME3eVLtGu7cvOfSbDXJRsMNN5tJcbUxHlK3ppuWtuTgLyg4lWEmnH4X9E y7pw2msmUeK+jEMgoTNxjqWnzbXi1eY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:10 2025 by rpki-client