$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa File: 2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json) Hash identifier: fNA50uGdZ4z8Ie4bEYCOYXZf577i/hDNDfJQ0pgMjTE= Subject key identifier: E3:4E:12:00:58:EC:6F:89:90:1B:CF:BB:EA:93:68:0E:57:24:B3:7D Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584827C52F7D19289FF859E7E380 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 53991 IP address blocks: 164.152.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:2f:7d:19:28:9f:f8:59:e7:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=1737a79d-0f34-4430-9b78-88ae186640a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:60:9c:e3:7a:5f:24:46:27:10:f2:12:50: 9e:7b:70:b4:4f:a6:da:e8:6c:d5:33:78:71:25:bb: be:c3:a1:4d:1a:02:d5:75:ba:d7:e0:1a:01:08:9d: 19:38:ab:97:37:4f:1d:38:0d:4f:94:9a:a1:72:36: 3f:c2:e1:41:12:39:56:95:4f:3e:90:6a:79:86:fb: 6e:7b:37:75:9d:14:8d:50:c8:8f:48:b3:f3:b2:19: 05:c2:e3:e2:b7:a6:2f:64:2a:99:d9:d0:44:7e:c8: ce:4d:24:82:c3:eb:1d:fa:0b:a0:6d:05:a9:3b:92: 33:4f:2b:d4:b2:2f:b4:b2:6d:b4:90:9a:b7:75:78: e8:c8:b5:aa:88:8b:83:7c:bd:16:76:5d:46:d9:91: 57:bc:ff:f8:c9:29:10:87:90:3b:20:86:62:9a:54: 6b:29:f9:9b:ce:3e:1f:ac:0b:d4:94:09:c6:12:e2: 76:d2:d4:8a:bc:c4:7c:e8:a2:f7:c7:aa:c1:13:7a: 66:3c:43:37:c0:af:27:d3:f8:b9:e2:73:98:df:ec: e5:7f:52:8f:83:a5:45:df:de:62:46:43:23:7d:d6: a5:fe:f9:0e:58:83:73:19:ae:3c:a2:8a:35:6f:f2: 31:fb:af:8c:18:be:2a:ab:95:17:c0:64:7d:94:7f: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4E:12:00:58:EC:6F:89:90:1B:CF:BB:EA:93:68:0E:57:24:B3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:79:8c:e4:bb:c6:79:1e:a2:ef:34:17:c1:b7:c2:c0:c9:e8: 23:2b:b7:42:22:10:86:74:d5:f0:90:f2:40:47:72:bc:46:6c: 39:98:3e:31:5e:9d:77:63:6d:73:35:c5:b6:69:f0:22:22:3e: 76:72:a6:cb:2d:41:18:0f:c3:bd:03:2c:b0:a5:08:2f:2e:72: 02:37:f7:33:9a:e4:e8:d3:93:83:30:1c:18:9e:7e:df:ad:27: e9:a0:76:37:b4:a1:6d:a9:8c:c4:ad:e3:71:e3:3d:48:e3:b2: d5:e2:9b:a4:8a:01:3f:91:06:b1:6d:51:01:58:95:b8:0b:07: 6d:4f:c2:2a:dd:99:d6:20:95:c5:c2:7c:fd:38:2b:3e:cd:07: 7d:ed:2c:45:a4:f8:8b:60:62:b4:f3:47:a4:d4:22:ec:54:02: b9:54:de:8a:2e:19:69:01:a5:70:e0:24:ad:97:11:4d:bf:7e: ac:64:e5:e3:8d:d0:08:57:f5:7d:71:e2:c8:9b:f6:3a:aa:97: 1b:a7:ec:2f:2c:68:4d:6d:d8:7b:d7:47:df:cd:5a:4d:9d:b2: e6:95:38:48:77:d9:1b:42:13:1f:04:cf:78:e9:50:67:07:eb: 8f:2a:61:4c:7a:ff:5a:f5:9d:16:d3:22:59:44:b4:6e:eb:b2: b9:93:52:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxS99GSif+Fnn44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk MTczN2E3OWQtMGYzNC00NDMwLTliNzgtODhhZTE4NjY0MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XpgnON6XyRGJxDyElCee3C0T6ba6GzVM3hx Jbu+w6FNGgLVdbrX4BoBCJ0ZOKuXN08dOA1PlJqhcjY/wuFBEjlWlU8+kGp5hvtu ezd1nRSNUMiPSLPzshkFwuPit6YvZCqZ2dBEfsjOTSSCw+sd+gugbQWpO5IzTyvU si+0sm20kJq3dXjoyLWqiIuDfL0Wdl1G2ZFXvP/4ySkQh5A7IIZimlRrKfmbzj4f rAvUlAnGEuJ20tSKvMR86KL3x6rBE3pmPEM3wK8n0/i54nOY3+zlf1KPg6VF395i RkMjfdal/vkOWINzGa48ooo1b/Ix+6+MGL4qq5UXwGR9lH93wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONOEgBY7G+JkBvPu+qTaA5XJLN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvMjk0M2JmYzQtYTg0OS0z MTIzLTg0ZjYtOTlkNmNlYjc5ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF5jOS7xnkeou80F8G3wsDJ6CMrt0IiEIZ01fCQ8kBHcrxGbDmYPjFe nXdjbXM1xbZp8CIiPnZypsstQRgPw70DLLClCC8ucgI39zOa5OjTk4MwHBieft+t J+mgdje0oW2pjMSt43HjPUjjstXim6SKAT+RBrFtUQFYlbgLB21PwirdmdYglcXC fP04Kz7NB33tLEWk+ItgYrTzR6TUIuxUArlU3oouGWkBpXDgJK2XEU2/fqxk5eON 0AhX9X1x4sib9jqqlxun7C8saE1t2HvXR9/NWk2dsuaVOEh32RtCEx8Ez3jpUGcH 648qYUx6/1r1nRbTIllEtG7rsrmTUqs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:40 2025 by rpki-client