$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa File: 77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa (raw, json) Hash identifier: j9RMRXHpnIzm4/P6tgt8PTb8S5er1ztS8s3pkkq4wVQ= Subject key identifier: 61:4F:3B:41:C8:B5:0E:D8:D0:08:7D:EC:88:A3:9C:9A:49:74:07:D0 Certificate issuer: /CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8 Certificate serial: 010D0C9F43285848BE8625AFE3C3F540A4343480 Authority key identifier: B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 3128 IP address blocks: 137.104.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:25:af:e3:c3:f5:40:a4:34:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=78697351-405e-4b45-a0bf-7f9d9c8d9192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:54:a7:23:2e:52:01:81:d9:0c:f9:0f:d7: 4c:6f:b6:58:c7:48:63:1c:21:aa:20:33:e1:59:0c: ec:a1:20:81:06:7d:06:b0:49:26:14:81:31:4e:c9: e0:88:45:a4:d9:ed:0f:ef:87:f9:c5:98:7e:90:5a: d7:df:3a:17:33:0b:49:80:ff:61:80:0f:62:26:68: da:5e:79:d4:54:0d:6e:4a:10:09:16:63:fb:97:09: 94:cc:c2:7c:2e:88:26:ef:e1:ac:65:47:30:00:7e: 2f:a8:90:b0:d7:8c:37:10:a1:f6:4b:11:89:46:75: 3b:f7:b7:60:b8:bf:e4:50:38:f1:39:91:22:99:50: 5e:5e:33:19:a7:f3:d1:91:09:b9:78:e5:dc:2c:24: 2e:e4:dc:ea:da:40:25:c3:4c:b3:46:ab:d0:8a:03: 01:ab:1c:d8:76:19:b2:ac:dd:2d:9c:1d:cc:65:b0: dd:fe:49:bc:d5:8d:bb:f1:66:11:8d:98:77:0d:b0: 65:0e:eb:42:d0:ed:f7:32:b1:67:3c:a0:a0:af:86: 4f:e6:88:f6:f8:8a:44:55:04:aa:5d:55:94:05:e3: 93:52:ef:54:d8:5d:19:aa:65:96:31:53:16:41:35: f5:46:b1:97:14:67:e3:2e:be:c3:b5:44:31:91:10: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:3B:41:C8:B5:0E:D8:D0:08:7D:EC:88:A3:9C:9A:49:74:07:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.crl X509v3 Authority Key Identifier: keyid:B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer sbgp-ipAddrBlock: critical IPv4: 137.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b9:b1:d9:db:bc:02:2f:dd:a9:15:89:94:df:d5:c5:63:d9: f8:27:9e:74:99:dd:ae:08:8b:20:e2:00:f7:b9:dc:5c:fd:80: 0e:1c:ae:7e:5d:37:ef:e2:27:7b:c8:97:44:1a:2c:c8:d1:d6: 78:99:d7:f9:a9:41:9b:39:b5:4f:3e:ee:33:50:4e:52:4c:2c: d2:1a:b6:6c:b6:22:33:f8:bb:94:01:fd:c9:56:d4:c5:1a:30: ae:11:c0:39:d6:1f:30:1a:dc:9a:6c:55:51:ed:b0:9d:f4:29: 3e:24:50:fc:f4:44:38:c9:cd:40:cd:48:15:be:4c:d6:65:db: 8e:5b:35:51:84:21:af:c2:f4:fc:1b:f5:96:a1:cf:47:33:48: 00:fc:76:e1:24:d5:90:30:62:9f:1b:2e:38:19:54:ef:df:1c: 07:85:08:d8:07:fb:2d:d8:f9:62:78:41:7a:f1:c3:b0:49:b9: f1:95:dc:88:69:d9:61:2d:ab:95:2e:ca:fd:81:c6:cf:37:c1: 6d:b8:c7:b1:10:68:0b:99:f1:f0:4e:6c:6a:c0:d4:67:57:f9: 6f:e9:c8:ac:72:a5:4b:40:07:f0:0e:27:94:e3:a1:9b:b5:bc: 4e:0b:61:ac:c1:cd:ad:be:97:62:25:fd:ea:fc:0b:30:ff:97: d3:f5:12:24 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi+hiWv48P1QKQ0NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ3YWNiNjktMjFlYS00ZmQyLWEyNWQtZmZjYmVkMmFm OGQ4MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk Nzg2OTczNTEtNDA1ZS00YjQ1LWEwYmYtN2Y5ZDljOGQ5MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/9UpyMuUgGB2Qz5D9dMb7ZYx0hjHCGqIDPh WQzsoSCBBn0GsEkmFIExTsngiEWk2e0P74f5xZh+kFrX3zoXMwtJgP9hgA9iJmja XnnUVA1uShAJFmP7lwmUzMJ8Logm7+GsZUcwAH4vqJCw14w3EKH2SxGJRnU797dg uL/kUDjxOZEimVBeXjMZp/PRkQm5eOXcLCQu5Nzq2kAlw0yzRqvQigMBqxzYdhmy rN0tnB3MZbDd/km81Y278WYRjZh3DbBlDutC0O33MrFnPKCgr4ZP5oj2+IpEVQSq XVWUBeOTUu9U2F0ZqmWWMVMWQTX1RrGXFGfjLr7DtUQxkRCHyQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGFPO0HItQ7Y0Ah97IijnJpJdAfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZDdh Y2I2OS0yMWVhLTRmZDItYTI1ZC1mZmNiZWQyYWY4ZDgvNzdmYTcwZmUtMjljOC0z ZWI4LWJiYTItOGRmYTg5MGQ5MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmQ3YWNiNjktMjFlYS00ZmQyLWEy NWQtZmZjYmVkMmFmOGQ4LzJkN2FjYjY5LTIxZWEtNGZkMi1hMjVkLWZmY2JlZDJh ZjhkOC5jcmwwHwYDVR0jBBgwFoAUs4G1dZQ1drj1JChM98XBvBht9b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZDdhY2I2OS0yMWVhLTRmZDItYTI1ZC1mZmNi ZWQyYWY4ZDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiWgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJrmx2du8Ai/dqRWJlN/VxWPZ+CeedJndrgiLIOIA97ncXP2ADhyufl03 7+Ine8iXRBosyNHWeJnX+alBmzm1Tz7uM1BOUkws0hq2bLYiM/i7lAH9yVbUxRow rhHAOdYfMBrcmmxVUe2wnfQpPiRQ/PREOMnNQM1IFb5M1mXbjls1UYQhr8L0/Bv1 lqHPRzNIAPx24STVkDBinxsuOBlU798cB4UI2Af7Ldj5YnhBevHDsEm58ZXciGnZ YS2rlS7K/YHGzzfBbbjHsRBoC5nx8E5sasDUZ1f5b+nIrHKlS0AH8A4nlOOhm7W8 TgthrMHNrb6XYiX96vwLMP+X0/USJA== -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:40 2025 by rpki-client