$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa File: 8b836509-70a5-3781-a36d-d60531590d29.roa (raw, json) Hash identifier: cueu/b+7DaAC3cxWZU6n+iSxBHJ8Xy/h3IbjRAOVjko= Subject key identifier: E7:A1:37:AC:B4:C8:5D:87:97:1A:DE:6A:E8:8B:59:D6:FC:B6:C4:06 Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Certificate serial: 010D0C9F43285848B35B6B29956CD43B28BBC680 Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 394968 IP address blocks: 204.128.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6b:29:95:6c:d4:3b:28:bb:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=b0e7f992-9389-43f6-86d5-76e66fe38848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:76:5e:30:de:f8:16:f1:fb:8b:46:0d:57: 83:1a:c3:a8:22:f3:92:bc:5b:fa:33:cf:f2:30:49: bf:cd:13:a5:3e:5e:2b:f3:e5:49:79:ac:cb:67:44: bf:78:4a:a8:67:e7:bc:f2:f8:64:00:18:e6:e5:b6: 69:8a:a5:a7:2d:a1:1c:df:28:ef:0f:97:cf:dd:cf: c5:5f:5f:f1:75:00:36:1f:02:58:80:19:81:1c:f1: a7:53:f7:e0:0b:8c:bc:93:33:04:01:3d:d2:23:29: 63:2f:98:a3:c0:3b:e9:70:b9:0a:1b:8e:fd:a4:f2: 41:bd:5b:76:db:27:f2:8d:58:a1:b7:3a:12:9d:89: c7:e7:6d:23:68:7b:af:70:28:16:1f:a8:2c:cc:81: ec:a4:63:c5:05:c5:2b:71:31:39:0f:76:d5:4c:a2: 32:9a:3c:01:7c:c3:6f:37:0c:bd:89:f7:ac:b5:69: 2e:73:14:d4:ee:77:87:4c:2d:f3:c0:39:b8:71:86: c1:24:2f:db:6d:a1:1d:10:10:bc:f7:3c:f9:a9:8a: b5:d7:65:a9:32:a5:d9:f9:be:2f:d0:80:49:4b:ba: 10:52:75:a1:4c:5c:58:6b:60:a6:d8:ba:89:71:33: 49:3f:a7:2d:26:b3:7a:c9:58:a0:05:c1:07:57:80: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:37:AC:B4:C8:5D:87:97:1A:DE:6A:E8:8B:59:D6:FC:B6:C4:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl X509v3 Authority Key Identifier: keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer sbgp-ipAddrBlock: critical IPv4: 204.128.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d2:a5:8c:a4:26:17:34:74:50:17:09:2e:ac:06:70:4c:09: 31:23:9c:79:5b:84:4f:30:76:cb:1a:d5:80:98:3f:71:26:03: d1:3d:81:78:a7:3a:6a:18:38:73:7a:0c:81:68:ce:9a:44:6d: 6f:2e:d7:38:74:0f:55:09:84:12:a2:0d:bb:bf:46:ad:e6:9d: c5:eb:04:50:ce:bc:28:d4:17:53:3c:6f:3e:86:eb:59:e7:45: 3e:21:d6:1f:7f:9c:a0:ca:1f:b6:5d:a8:7c:9f:1b:ec:33:69: 6b:37:3c:38:2e:7a:c2:ad:18:c4:25:f6:68:45:65:e2:01:af: cd:a1:1b:99:d5:6c:4e:49:c1:28:ce:b5:aa:dd:67:11:53:a0: 35:f1:49:55:1f:15:2e:66:51:61:2c:b6:fa:39:4d:d1:b5:b9: 70:4d:5e:bb:5f:b9:94:0f:0c:71:65:66:fd:02:96:1a:c3:cd: cb:4d:63:1e:a1:8e:eb:f1:18:3a:e4:1b:23:1a:f7:ad:3a:52: a8:ca:b2:cb:ab:01:dd:ca:30:9a:86:56:aa:e7:93:70:47:22: f2:d6:98:c8:cb:f6:d2:2d:22:9d:68:3d:b8:84:c8:7c:2f:70: 2f:49:f1:eb:fc:a1:08:40:2b:c5:20:f8:23:54:0f:e1:02:7d: d2:68:00:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2splWzUOyi7xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RkNTYwZDQtNzdjOS00YWI2LWIyMmItOTc3MWFhM2I2 N2MyMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YjBlN2Y5OTItOTM4OS00M2Y2LTg2ZDUtNzZlNjZmZTM4ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXx2XjDe+Bbx+4tGDVeDGsOoIvOSvFv6M8/y MEm/zROlPl4r8+VJeazLZ0S/eEqoZ+e88vhkABjm5bZpiqWnLaEc3yjvD5fP3c/F X1/xdQA2HwJYgBmBHPGnU/fgC4y8kzMEAT3SIyljL5ijwDvpcLkKG479pPJBvVt2 2yfyjVihtzoSnYnH520jaHuvcCgWH6gszIHspGPFBcUrcTE5D3bVTKIymjwBfMNv Nwy9ifestWkucxTU7neHTC3zwDm4cYbBJC/bbaEdEBC89zz5qYq112WpMqXZ+b4v 0IBJS7oQUnWhTFxYa2Cm2LqJcTNJP6ctJrN6yVigBcEHV4DIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOehN6y0yF2HlxreauiLWdb8tsQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1 NjBkNC03N2M5LTRhYjYtYjIyYi05NzcxYWEzYjY3YzIvOGI4MzY1MDktNzBhNS0z NzgxLWEzNmQtZDYwNTMxNTkwZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2RkNTYwZDQtNzdjOS00YWI2LWIy MmItOTc3MWFhM2I2N2MyLzdkZDU2MGQ0LTc3YzktNGFiNi1iMjJiLTk3NzFhYTNi NjdjMi5jcmwwHwYDVR0jBBgwFoAUaH23I0rV6sAiz6qA1UzejvWxHL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1NjBkNC03N2M5LTRhYjYtYjIyYi05Nzcx YWEzYjY3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzICvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvSpYykJhc0dFAXCS6sBnBMCTEjnHlbhE8wdssa1YCYP3EmA9E9gXin OmoYOHN6DIFozppEbW8u1zh0D1UJhBKiDbu/Rq3mncXrBFDOvCjUF1M8bz6G61nn RT4h1h9/nKDKH7ZdqHyfG+wzaWs3PDguesKtGMQl9mhFZeIBr82hG5nVbE5JwSjO tardZxFToDXxSVUfFS5mUWEstvo5TdG1uXBNXrtfuZQPDHFlZv0ClhrDzctNYx6h juvxGDrkGyMa9606UqjKssurAd3KMJqGVqrnk3BHIvLWmMjL9tItIp1oPbiEyHwv cC9J8ev8oQhAK8Ug+CNUD+ECfdJoAJQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:30 2025 by rpki-client