$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b42615e6-2296-366d-b420-a15e27351617.roa File: b42615e6-2296-366d-b420-a15e27351617.roa (raw, json) Hash identifier: JevaHq85VUWirFw3zeBgqaBXy/2jZCgLMLA8e25+9Hg= Subject key identifier: BE:83:C9:CF:E1:91:53:36:DA:9E:15:A7:C5:A3:68:4C:CA:C9:B3:34 Certificate issuer: /CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Certificate serial: 010D0C9F43285848A1361AD51941892AD3D41540 Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b42615e6-2296-366d-b420-a15e27351617.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 29967 IP address blocks: 161.195.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1a:d5:19:41:89:2a:d3:d4:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=d69b18ef-b444-45d5-9256-d1a1931c43b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:d9:09:35:bf:47:ca:7e:d8:82:e5:8f:44: 16:3e:5b:10:26:a5:6f:cd:e2:0b:74:e5:09:26:0b: 0b:06:38:ed:f4:e2:ce:fd:54:34:b7:e5:53:25:6e: ab:21:97:a2:e2:9d:c0:4b:0a:09:3d:ef:57:dc:d5: dc:98:50:5e:2f:5c:b2:29:48:95:9d:80:dc:f2:b9: f9:61:53:28:41:7e:50:99:39:65:a1:ab:6c:26:75: ab:5b:1c:b9:2b:bf:94:d2:c1:9d:ca:7f:cf:4b:b1: 4c:c9:18:cf:54:72:ea:37:29:86:3a:da:60:dc:7a: 13:eb:6a:41:56:0b:bc:7d:51:de:04:33:3b:fe:07: e7:e1:e8:1c:4f:a6:5e:2b:92:79:fa:c6:81:78:34: 69:cd:89:9c:4d:a0:60:ba:66:5d:d1:de:fc:4a:92: 9e:56:4f:9c:7a:09:f7:7c:78:e6:50:38:1f:83:74: e6:42:07:cf:43:13:f7:0f:f7:d5:3b:90:4f:b0:98: a2:dd:7d:34:3c:bc:5d:5a:4e:2d:c0:8a:3e:20:47: ac:2f:a0:87:1e:6d:63:78:6b:cf:1b:03:ee:0a:36: 0f:1a:0d:65:a4:d3:50:e4:66:ca:74:c9:3c:f5:c5: ac:68:14:53:fe:e8:2d:30:7f:ac:b6:49:37:f6:df: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:83:C9:CF:E1:91:53:36:DA:9E:15:A7:C5:A3:68:4C:CA:C9:B3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b42615e6-2296-366d-b420-a15e27351617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl X509v3 Authority Key Identifier: keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer sbgp-ipAddrBlock: critical IPv4: 161.195.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:19:83:a9:52:cc:fc:7d:a1:64:91:bb:5f:a8:a8:60:d5:1d: 10:e3:c0:59:22:80:1c:e2:83:03:a2:a0:d1:ae:39:c0:ee:d5: fe:ba:a4:d6:ad:39:e4:97:86:42:68:2b:c8:a4:a2:80:35:ba: dd:1d:e3:60:8e:73:fb:2c:e7:b8:f3:53:9d:b5:3c:3a:bf:ab: f7:db:0b:77:a1:31:73:ea:e4:97:98:90:1e:e8:f8:cb:11:02: c9:12:d2:35:7f:34:9c:8a:d8:93:9e:3c:8d:1a:be:e7:ae:93: 12:5b:08:80:2c:47:dc:dd:eb:2e:11:da:82:cb:57:fe:5a:24: 01:47:31:47:63:2c:0d:c9:36:03:87:cf:dd:83:e2:78:34:ac: 10:60:b7:4b:30:d0:b7:1d:76:df:ad:ec:f1:d3:54:43:a1:d8: 1f:95:8c:74:0f:b5:85:53:9d:b4:3e:36:a1:ae:f4:fa:0c:42: 04:fc:04:bf:19:82:b9:6d:eb:50:83:7e:9f:43:40:53:c1:9a: ac:1a:12:70:4b:66:a5:da:1b:fe:24:96:47:9b:0f:14:b0:00: a1:f9:86:90:8a:51:1d:da:f4:cc:e0:82:88:4d:06:8a:9d:59: 9e:29:5c:7f:dc:42:4d:14:16:fd:75:8d:cf:b5:f2:82:73:d4: d2:ab:be:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhrVGUGJKtPUFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez Mzg4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDY5YjE4ZWYtYjQ0NC00NWQ1LTkyNTYtZDFhMTkzMWM0M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnnZCTW/R8p+2ILlj0QWPlsQJqVvzeILdOUJ JgsLBjjt9OLO/VQ0t+VTJW6rIZei4p3ASwoJPe9X3NXcmFBeL1yyKUiVnYDc8rn5 YVMoQX5QmTlloatsJnWrWxy5K7+U0sGdyn/PS7FMyRjPVHLqNymGOtpg3HoT62pB Vgu8fVHeBDM7/gfn4egcT6ZeK5J5+saBeDRpzYmcTaBgumZd0d78SpKeVk+cegn3 fHjmUDgfg3TmQgfPQxP3D/fVO5BPsJii3X00PLxdWk4twIo+IEesL6CHHm1jeGvP GwPuCjYPGg1lpNNQ5GbKdMk89cWsaBRT/ugtMH+stkk39t+35QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6Dyc/hkVM22p4Vp8WjaEzKybM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvYjQyNjE1ZTYtMjI5Ni0z NjZkLWI0MjAtYTE1ZTI3MzUxNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1 Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2 YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocNCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUZg6lSzPx9oWSRu1+oqGDVHRDjwFkigBzigwOioNGuOcDu1f66pNat OeSXhkJoK8ikooA1ut0d42COc/ss57jzU521PDq/q/fbC3ehMXPq5JeYkB7o+MsR AskS0jV/NJyK2JOePI0avueukxJbCIAsR9zd6y4R2oLLV/5aJAFHMUdjLA3JNgOH z92D4ng0rBBgt0sw0Lcddt+t7PHTVEOh2B+VjHQPtYVTnbQ+NqGu9PoMQgT8BL8Z grlt61CDfp9DQFPBmqwaEnBLZqXaG/4klkebDxSwAKH5hpCKUR3a9MzggohNBoqd WZ4pXH/cQk0UFv11jc+18oJz1NKrvqU= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:32 2025 by rpki-client