$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa File: 1c34de81-a92a-31ca-993f-2c9182338067.roa (raw, json) Hash identifier: BMa+vkoWkblsFlAKnyoxqtJ7hBd/upC1BPa+0HVqqVs= Subject key identifier: 11:C8:72:8A:25:A8:4F:C5:72:A2:AB:F5:1D:E1:E6:6B:9F:33:35:95 Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F43285848C6E638EFB7B761F879E2D9E0 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 8075 IP address blocks: 162.254.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:38:ef:b7:b7:61:f8:79:e2:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=c7441769-d9fa-497a-94bb-87a1ac90c581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:82:f4:94:62:69:c0:9a:d7:df:75:38:6e: eb:d6:11:3d:44:f1:ba:1c:d0:7d:4e:93:24:3e:99: d1:82:28:36:a4:1a:b2:c6:47:54:b8:e4:77:36:98: 71:ca:b8:87:9b:0b:ab:13:9d:db:9c:c6:a2:58:7d: 72:0d:dc:b5:2c:1c:8b:60:3b:0e:fb:8b:01:84:4e: b4:be:a8:d3:2e:56:c3:ae:5b:71:79:09:09:2f:ae: 91:35:f7:01:8a:69:92:14:58:af:7f:5e:ed:4b:5f: 3d:d2:21:89:bf:07:1a:81:98:b9:f8:b9:80:4c:56: 03:2d:41:86:40:92:91:72:15:35:77:2c:4b:d6:50: e4:3c:2b:d5:86:2d:6c:e7:3e:80:c7:22:bb:5f:68: 16:57:ec:9d:7a:30:b3:72:0d:9f:05:69:2e:8d:08: 65:b1:9d:e4:9a:ec:4e:96:95:66:9d:72:6d:c0:0a: 4c:35:0d:9d:68:08:41:b8:fe:85:fb:a1:41:13:63: 86:0b:f6:49:ba:49:26:92:f8:9c:ce:31:dc:c7:0f: 4e:7c:4a:2d:0b:8d:e8:40:39:a3:27:54:2b:3c:20: 25:71:22:71:b8:ae:98:b7:d1:be:90:d5:4b:15:eb: e5:d3:cb:f2:4a:ea:d1:cf:1e:58:b5:e1:6d:f6:f3: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C8:72:8A:25:A8:4F:C5:72:A2:AB:F5:1D:E1:E6:6B:9F:33:35:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: 162.254.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f2:8d:18:2d:28:80:db:d6:09:82:87:8a:10:34:1c:f7:0b: 30:05:80:c8:a5:83:30:6b:fa:33:d3:b0:05:27:ea:40:4a:c1: 5e:4b:86:c5:de:0f:b7:45:34:aa:a2:01:7f:3e:78:fa:11:39: ec:98:99:e4:84:43:98:c9:f5:a6:8c:95:0f:db:57:7d:98:a1: c3:c6:78:d8:81:42:c4:dc:91:4b:50:ed:3e:68:57:27:e2:67: a6:aa:2a:9f:54:43:c2:58:93:9a:44:31:6a:78:67:c8:94:80: 05:10:60:01:e9:52:b1:6e:6e:49:ac:04:04:fe:67:5c:c0:6c: 8f:2a:06:11:ea:21:56:f5:95:e9:d7:3d:22:bf:97:9a:09:16: ba:bb:e1:31:22:ba:19:1b:d9:23:f8:13:fd:a7:0b:16:a0:4b: 87:7e:25:10:67:06:7a:34:7e:cc:29:d5:62:88:56:48:96:ce: a2:63:5e:c5:4b:f4:0b:a5:d2:08:90:04:29:39:38:e2:a7:b8: a0:c7:17:9d:01:a6:7e:65:24:31:69:d2:dc:ca:31:ba:39:73: 3a:73:c8:48:48:8b:c0:26:56:60:08:76:84:9b:9e:c6:28:b8: ad:2a:95:51:58:c6:de:8e:b3:ae:51:7b:de:61:b7:36:d2:c3: 20:f3:67:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jjvt7dh+Hni2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk Yzc0NDE3NjktZDlmYS00OTdhLTk0YmItODdhMWFjOTBjNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvaC9JRiacCa1991OG7r1hE9RPG6HNB9TpMk PpnRgig2pBqyxkdUuOR3NphxyriHmwurE53bnMaiWH1yDdy1LByLYDsO+4sBhE60 vqjTLlbDrltxeQkJL66RNfcBimmSFFivf17tS1890iGJvwcagZi5+LmATFYDLUGG QJKRchU1dyxL1lDkPCvVhi1s5z6AxyK7X2gWV+ydejCzcg2fBWkujQhlsZ3kmuxO lpVmnXJtwApMNQ2daAhBuP6F+6FBE2OGC/ZJukkmkviczjHcxw9OfEotC43oQDmj J1QrPCAlcSJxuK6Yt9G+kNVLFevl08vySurRzx5YteFt9vOZ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHIcoolqE/FcqKr9R3h5mufMzWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvMWMzNGRlODEtYTkyYS0z MWNhLTk5M2YtMmM5MTgyMzM4MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPyjRgtKIDb1gmCh4oQNBz3CzAFgMilgzBr+jPTsAUn6kBKwV5LhsXe D7dFNKqiAX8+ePoROeyYmeSEQ5jJ9aaMlQ/bV32YocPGeNiBQsTckUtQ7T5oVyfi Z6aqKp9UQ8JYk5pEMWp4Z8iUgAUQYAHpUrFubkmsBAT+Z1zAbI8qBhHqIVb1lenX PSK/l5oJFrq74TEiuhkb2SP4E/2nCxagS4d+JRBnBno0fswp1WKIVkiWzqJjXsVL 9Aul0giQBCk5OOKnuKDHF50Bpn5lJDFp0tzKMbo5czpzyEhIi8AmVmAIdoSbnsYo uK0qlVFYxt6Os65Re95htzbSwyDzZ8Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:06 2025 by rpki-client