$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa File: dcaafa36-cbc9-3741-b66e-6b1039749e40.roa (raw, json) Hash identifier: rOuPp9dPfr6nkNIKXduINjvW7ZZn7sdEdIHHGgv35fM= Subject key identifier: 69:9C:D8:76:3C:21:85:7C:F8:9E:AC:2D:BE:92:46:0D:5A:22:BE:44 Certificate issuer: /CN=34f935ff-170a-4b14-b64c-790e52fa9534 Certificate serial: 010D0C9F4328584827C544453EF7B30C10F7B6A0 Authority key identifier: FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 8111 IP address blocks: 131.162.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:44:45:3e:f7:b3:0c:10:f7:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f935ff-170a-4b14-b64c-790e52fa9534 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=9b86afac-87ad-4f58-85c7-41a0c25515a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:9d:a1:5c:ab:f3:6d:84:17:72:42:93:bb: 3a:21:f4:1b:c4:60:37:51:76:c3:ee:20:4e:2a:e9: 67:6b:ff:5e:a8:41:e7:77:32:8c:65:7a:c6:c0:db: 4a:26:84:c5:cf:d3:bd:7c:93:82:d5:d5:33:b3:15: 40:2a:58:ef:b5:d9:78:48:ba:69:e3:09:61:b8:ce: 28:7c:b0:ba:3b:39:17:e2:ec:ce:a5:84:f5:7d:64: fc:bd:ed:0b:5f:09:d9:a9:84:84:a3:9b:43:75:56: 98:08:37:33:7c:85:c9:92:86:79:0e:b8:dc:be:8b: f9:cd:51:2a:08:42:1a:cf:e4:d3:18:5a:ed:92:a8: 7e:13:a5:b9:a2:31:f6:c3:85:58:fc:86:35:84:5d: 3f:db:33:45:0b:01:d1:d8:72:3c:25:77:b9:98:48: 49:2a:70:51:23:65:c4:8b:66:6c:43:f9:79:c1:a0: da:a4:82:cf:4a:bc:03:79:42:d3:28:e3:9a:e8:5d: 05:3d:78:b4:2b:8f:d6:ef:bc:3a:de:c5:fd:8a:b2: a4:7c:1c:3a:c8:b7:8e:e7:b4:79:cf:f4:c4:e9:43: 49:95:59:e0:7d:43:2c:c3:89:0e:21:04:c4:ae:f7: dc:8e:9a:5a:b1:fd:2f:1e:19:f7:d9:4c:9f:69:b5: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9C:D8:76:3C:21:85:7C:F8:9E:AC:2D:BE:92:46:0D:5A:22:BE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl X509v3 Authority Key Identifier: keyid:FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer sbgp-ipAddrBlock: critical IPv4: 131.162.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:50:fd:ac:02:ea:ef:a5:02:4b:97:07:05:8a:c1:87:e5:d5: 15:2c:6d:12:5c:2c:d3:8b:d1:62:a1:3c:b6:fd:5a:ab:17:14: c8:93:f8:04:ec:d3:73:aa:8f:07:6d:9b:3c:8b:06:13:65:dc: 5f:d6:9d:c2:a0:eb:6b:0a:42:88:32:58:88:43:5a:9c:b2:6c: 2f:8b:ea:d6:20:3b:41:7b:b8:07:7e:c2:f4:f0:16:a9:6c:61: 9f:1b:84:8b:44:cc:89:37:59:b3:9c:14:02:8a:13:a3:36:75: fd:99:08:8a:10:51:d4:9f:b6:7d:b3:b5:38:78:96:b9:8a:13: 2c:bb:a6:5d:74:1b:61:5a:eb:65:e5:0c:ec:32:89:c5:5a:27: eb:e4:d3:ef:c2:d0:ba:28:da:5b:ae:f8:84:00:36:12:fb:1d: ca:96:97:cb:de:f6:b5:5f:3c:72:ab:25:7c:91:f0:77:56:50: 58:24:c9:af:f0:30:dd:f3:b1:e0:13:61:c5:97:c8:74:3d:bb: e5:92:b2:b2:c8:8e:3c:73:5d:fe:bf:4c:4f:f6:5f:26:83:59: e4:f4:f2:00:1f:5a:69:77:60:36:c2:0c:f2:3f:7a:1a:b0:c8: e0:5d:35:65:fd:fa:03:28:3c:6c:e1:55:82:6a:4c:fd:06:8b: 5b:df:4d:95 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgnxURFPvezDBD3tqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRmOTM1ZmYtMTcwYS00YjE0LWI2NGMtNzkwZTUyZmE5 NTM0MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk OWI4NmFmYWMtODdhZC00ZjU4LTg1YzctNDFhMGMyNTUxNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2CdoVyr822EF3JCk7s6IfQbxGA3UXbD7iBO Kulna/9eqEHndzKMZXrGwNtKJoTFz9O9fJOC1dUzsxVAKljvtdl4SLpp4wlhuM4o fLC6OzkX4uzOpYT1fWT8ve0LXwnZqYSEo5tDdVaYCDczfIXJkoZ5Drjcvov5zVEq CEIaz+TTGFrtkqh+E6W5ojH2w4VY/IY1hF0/2zNFCwHR2HI8JXe5mEhJKnBRI2XE i2ZsQ/l5waDapILPSrwDeULTKOOa6F0FPXi0K4/W77w63sX9irKkfBw6yLeO57R5 z/TE6UNJlVngfUMsw4kOIQTErvfcjppasf0vHhn32UyfabVorwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGmc2HY8IYV8+J6sLb6SRg1aIr5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5 MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBlNTJmYTk1MzQvZGNhYWZhMzYtY2JjOS0z NzQxLWI2NmUtNmIxMDM5NzQ5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzRmOTM1ZmYtMTcwYS00YjE0LWI2 NGMtNzkwZTUyZmE5NTM0LzM0ZjkzNWZmLTE3MGEtNGIxNC1iNjRjLTc5MGU1MmZh OTUzNC5jcmwwHwYDVR0jBBgwFoAU+9h6fXM7VpxZRdmviLxqIdayXY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBl NTJmYTk1MzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg6IwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAR1D9rALq76UCS5cHBYrBh+XVFSxtElws04vRYqE8tv1aqxcUyJP4BOzT c6qPB22bPIsGE2XcX9adwqDrawpCiDJYiENanLJsL4vq1iA7QXu4B37C9PAWqWxh nxuEi0TMiTdZs5wUAooTozZ1/ZkIihBR1J+2fbO1OHiWuYoTLLumXXQbYVrrZeUM 7DKJxVon6+TT78LQuijaW674hAA2EvsdypaXy972tV88cqslfJHwd1ZQWCTJr/Aw 3fOx4BNhxZfIdD275ZKyssiOPHNd/r9MT/ZfJoNZ5PTyAB9aaXdgNsIM8j96GrDI 4F01Zf36Ayg8bOFVgmpM/QaLW99NlQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:49 2025 by rpki-client