$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa File: 8d665762-0465-323b-b950-c65d3069d14c.roa (raw, json) Hash identifier: GvWnFcOKmbLYF4BQyuGhBBXGt7HdLs0+cgU2D/P2sto= Subject key identifier: 22:8E:A4:5B:7F:8F:55:83:2C:03:63:FB:C8:BA:89:92:0D:AB:B5:84 Certificate issuer: /CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Certificate serial: 010D0C9F43285847FE9DD982AE8E861C32466880 Authority key identifier: 6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa Signing time: Mon 25 Nov 2024 08:13:19 +0000 ROA not before: Mon 25 Nov 2024 08:13:19 +0000 ROA not after: Sun 23 Feb 2025 08:13:19 +0000 asID: 28959 IP address blocks: 158.51.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fe:9d:d9:82:ae:8e:86:1c:32:46:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Validity Not Before: Nov 25 08:13:19 2024 GMT Not After : Feb 23 08:13:19 2025 GMT Subject: CN=4f685bcb-4df4-4b16-b28e-c9a276fc1c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:82:61:cb:f9:c4:03:c1:45:77:f2:08:5d: 45:03:42:ae:dd:f6:e8:da:e4:ab:da:f8:9f:63:6e: 91:58:1a:ad:5d:d3:3f:ea:21:f5:be:a2:0b:5b:73: 6d:44:e5:30:73:1f:f7:39:2f:70:f0:0a:60:5c:b9: 19:54:ae:50:19:28:18:8d:af:77:ea:d5:a9:46:bc: de:7a:9f:41:cf:9b:ba:16:da:85:75:82:53:e1:d8: 47:e2:1c:e0:1c:d2:41:6c:49:0d:f1:a7:98:17:e5: 66:9b:4d:0a:80:34:a7:1f:fd:c6:dc:92:1e:b7:1a: ea:1c:21:0b:af:8c:a2:e8:b7:ba:51:30:50:a9:75: d3:85:d5:64:55:e8:12:f8:5e:30:fe:28:02:bb:29: e9:66:1d:b6:58:05:4d:9f:28:0e:70:6d:2d:3e:0b: a9:3a:cc:21:98:f2:1e:23:fa:9e:f5:c2:74:b9:db: 83:9f:31:7f:31:09:e9:2c:6a:93:43:d1:54:0e:68: d0:1f:d6:93:b5:b4:91:cf:36:79:3f:cf:6f:30:2a: d8:af:18:b1:1f:f9:0b:a6:7d:8a:fe:db:29:7e:b8: a6:c1:cf:59:37:2d:98:5a:5c:35:a0:98:78:9c:0d: 91:45:d5:e4:da:a8:bc:18:17:b0:e8:8e:7f:59:c7: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8E:A4:5B:7F:8F:55:83:2C:03:63:FB:C8:BA:89:92:0D:AB:B5:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl X509v3 Authority Key Identifier: keyid:6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer sbgp-ipAddrBlock: critical IPv4: 158.51.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:de:c2:c9:70:f7:41:02:70:82:e0:3d:8c:ec:38:9e:8c:98: 50:77:f4:52:09:14:90:45:5a:1a:bf:b2:76:92:86:97:fc:06: 30:d9:16:27:de:eb:d4:7a:8c:65:4e:e6:5d:c9:d9:a8:27:38: 67:52:49:41:2d:0e:da:e9:ac:ed:e1:89:35:05:f1:b9:46:17: 05:46:70:09:41:d8:65:b0:98:91:ed:a9:d8:de:46:ed:f8:db: 38:25:f4:08:df:5f:6e:bb:96:f3:7f:26:4e:ee:0f:eb:b8:7b: 1f:e7:09:31:df:19:c1:60:fd:67:b3:71:b7:c9:04:a5:07:8b: b7:4a:21:f1:35:84:0e:3d:3f:82:b2:91:04:0d:31:92:3d:5b: 54:f9:6f:c8:81:04:93:9a:52:89:a0:46:d8:bc:2e:d5:30:9d: 5c:33:99:27:83:e0:5f:28:07:4b:38:9a:22:4c:d0:46:1c:3d: b4:e5:e5:fd:1c:b7:d9:7a:0f:3d:35:a3:b3:2e:02:65:a2:91: c8:4f:f7:b4:ae:be:26:6d:00:5e:9f:a2:22:4b:db:00:fc:9b: 46:01:85:a6:53:81:38:d8:69:fe:36:b8:27:40:6a:03:9e:db: a4:83:2a:40:50:a7:df:a9:ec:20:21:50:c7:c8:16:0d:5d:32: 20:ee:8b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf+ndmCro6GHDJGaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRmM2RmNDItMDQwZS00ODU2LWIzZDYtN2MyZWJlMWUx ZDk0MB4XDTI0MTEyNTA4MTMxOVoXDTI1MDIyMzA4MTMxOVowLzEtMCsGA1UEAxMk NGY2ODViY2ItNGRmNC00YjE2LWIyOGUtYzlhMjc2ZmMxYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ2CYcv5xAPBRXfyCF1FA0Ku3fbo2uSr2vif Y26RWBqtXdM/6iH1vqILW3NtROUwcx/3OS9w8ApgXLkZVK5QGSgYja936tWpRrze ep9Bz5u6FtqFdYJT4dhH4hzgHNJBbEkN8aeYF+Vmm00KgDSnH/3G3JIetxrqHCEL r4yi6Le6UTBQqXXThdVkVegS+F4w/igCuynpZh22WAVNnygOcG0tPgupOswhmPIe I/qe9cJ0uduDnzF/MQnpLGqTQ9FUDmjQH9aTtbSRzzZ5P89vMCrYrxixH/kLpn2K /tspfrimwc9ZNy2YWlw1oJh4nA2RRdXk2qi8GBew6I5/WcevFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKOpFt/j1WDLANj+8i6iZINq7WEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYz ZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJlYmUxZTFkOTQvOGQ2NjU3NjItMDQ2NS0z MjNiLWI5NTAtYzY1ZDMwNjlkMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmRmM2RmNDItMDQwZS00ODU2LWIz ZDYtN2MyZWJlMWUxZDk0L2ZkZjNkZjQyLTA0MGUtNDg1Ni1iM2Q2LTdjMmViZTFl MWQ5NC5jcmwwHwYDVR0jBBgwFoAUbAobALw/CS8tFQXCB+UrueYwYTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYzZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJl YmUxZTFkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHewslw90ECcILgPYzsOJ6MmFB39FIJFJBFWhq/snaShpf8BjDZFife 69R6jGVO5l3J2agnOGdSSUEtDtrprO3hiTUF8blGFwVGcAlB2GWwmJHtqdjeRu34 2zgl9AjfX267lvN/Jk7uD+u4ex/nCTHfGcFg/WezcbfJBKUHi7dKIfE1hA49P4Ky kQQNMZI9W1T5b8iBBJOaUomgRti8LtUwnVwzmSeD4F8oB0s4miJM0EYcPbTl5f0c t9l6Dz01o7MuAmWikchP97SuviZtAF6foiJL2wD8m0YBhaZTgTjYaf42uCdAagOe 26SDKkBQp9+p7CAhUMfIFg1dMiDui7Y= -----END CERTIFICATE-----Generated at Wed Feb 5 14:54:53 2025 by rpki-client