$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa File: 77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa (raw, json) Hash identifier: AhE8ssq7MCwVJKwYY3p2vhpY9gY5hOiKjxO2fJRtHcw= Subject key identifier: 88:F5:0F:5F:A4:6D:6C:8D:06:59:AD:A9:CE:B3:16:DB:A2:00:23:E7 Certificate issuer: /CN=1c6fc533-f46c-474e-9480-56c3b0fb1938 Certificate serial: 010D0C9F432858485B6B03B65D7E9B3B8CBA2DD6 Authority key identifier: 45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 195.85.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:03:b6:5d:7e:9b:3b:8c:ba:2d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6fc533-f46c-474e-9480-56c3b0fb1938 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=0585ceb2-8e57-4ee7-8143-41efae492ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:a9:28:db:7b:ea:bd:46:75:0d:a9:c4:be: 80:9c:54:49:18:69:4d:39:a1:88:da:f7:bd:7d:90: 87:ef:43:10:27:6f:ba:58:a4:c5:5a:74:20:13:9f: 78:dc:1c:8f:4e:d7:f6:b0:f4:ae:e0:75:b9:9b:f7: 5d:11:00:75:ce:19:9b:3a:00:80:4e:e5:32:6a:7d: f1:34:c6:50:24:a4:52:67:61:de:60:61:ee:92:2d: 22:e5:88:bd:cb:e1:3f:3f:b4:87:56:d0:87:8d:f0: f9:c2:4e:cb:15:0f:c3:e4:e1:00:66:52:71:87:32: 28:27:c7:8d:5e:65:33:4f:c3:3e:b1:c0:7a:05:b6: 87:8f:3c:72:35:63:4b:5e:95:09:a7:99:87:3f:eb: 1f:8a:16:a6:ed:15:e6:07:c6:c1:de:cb:17:13:84: 54:e9:a8:6f:af:f0:0a:82:58:5b:fb:41:31:37:20: d0:81:a4:af:d9:ec:a8:94:ec:d7:3e:16:5c:eb:7e: bb:55:14:17:4e:7d:cf:07:13:41:7c:1e:c2:31:25: 86:bf:7b:db:22:f5:c9:4e:29:8f:54:8b:46:91:08: f2:14:c6:55:d9:47:19:72:cf:90:3c:2d:1b:02:9e: 0c:ac:c9:d2:0a:92:94:8f:5d:0a:d0:64:04:56:99: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F5:0F:5F:A4:6D:6C:8D:06:59:AD:A9:CE:B3:16:DB:A2:00:23:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl X509v3 Authority Key Identifier: keyid:45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer sbgp-ipAddrBlock: critical IPv4: 195.85.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:41:58:71:98:aa:07:43:c4:b0:57:76:15:ea:7b:15:45:c5: a9:95:88:50:b2:74:69:6f:09:ec:7e:a8:22:0b:ac:60:c9:bd: c8:2f:6b:94:5b:aa:5d:97:1f:72:27:b2:a8:ec:12:52:e7:b1: 80:43:ef:82:f8:36:1b:c5:05:bb:fc:8f:92:1d:62:72:2a:fa: ff:1c:4d:95:d1:d0:73:6f:9e:62:29:8d:4a:b5:02:84:81:1f: 40:db:8a:6c:d2:cc:12:0a:27:b9:2b:ab:40:25:3f:d5:78:e6: 30:ae:35:21:b1:8e:6a:b5:a0:fb:4b:a8:e1:de:7c:fd:99:d3: b7:9e:6f:c6:db:be:95:40:4a:e3:10:d1:c4:78:ec:e8:bc:27: 16:ab:cd:d5:64:c3:17:a0:2d:6f:17:92:38:67:03:f2:de:f8: 25:ac:65:3b:89:b5:64:1f:73:ad:14:21:d3:24:c2:16:87:fc: 1b:f4:fb:f2:89:6e:33:4d:0a:a0:df:4a:fc:62:5c:8f:bf:80: 3a:d9:ff:e5:aa:79:ee:6a:2a:14:1b:93:e3:2f:46:86:e2:4a: 4c:22:64:2a:6b:85:41:1a:9c:65:b9:4d:8b:eb:1b:a1:77:9b: a8:24:65:44:85:94:11:a4:88:e9:27:f0:bf:32:b5:7e:77:75: 63:4c:9d:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawO2XX6bO4y6LdYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM2ZmM1MzMtZjQ2Yy00NzRlLTk0ODAtNTZjM2IwZmIx OTM4MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MDU4NWNlYjItOGU1Ny00ZWU3LTgxNDMtNDFlZmFlNDkyYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tapKNt76r1GdQ2pxL6AnFRJGGlNOaGI2ve9 fZCH70MQJ2+6WKTFWnQgE5943ByPTtf2sPSu4HW5m/ddEQB1zhmbOgCATuUyan3x NMZQJKRSZ2HeYGHuki0i5Yi9y+E/P7SHVtCHjfD5wk7LFQ/D5OEAZlJxhzIoJ8eN XmUzT8M+scB6BbaHjzxyNWNLXpUJp5mHP+sfiham7RXmB8bB3ssXE4RU6ahvr/AK glhb+0ExNyDQgaSv2eyolOzXPhZc6367VRQXTn3PBxNBfB7CMSWGv3vbIvXJTimP VItGkQjyFMZV2UcZcs+QPC0bAp4MrMnSCpKUj10K0GQEVpmSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj1D1+kbWyNBlmtqc6zFtuiACPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYzZm YzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMzYjBmYjE5MzgvNzdmZmQ0ZDItZmFhOS0z YzhlLWE1YzAtYzk5Njk5ZjgzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWM2ZmM1MzMtZjQ2Yy00NzRlLTk0 ODAtNTZjM2IwZmIxOTM4LzFjNmZjNTMzLWY0NmMtNDc0ZS05NDgwLTU2YzNiMGZi MTkzOC5jcmwwHwYDVR0jBBgwFoAURUjG6PjtGRVJKl4s5b7+XhEuteUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xYzZmYzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMz YjBmYjE5MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFBWHGYqgdDxLBXdhXqexVFxamViFCydGlvCex+qCILrGDJvcgva5Rb ql2XH3InsqjsElLnsYBD74L4NhvFBbv8j5IdYnIq+v8cTZXR0HNvnmIpjUq1AoSB H0DbimzSzBIKJ7krq0AlP9V45jCuNSGxjmq1oPtLqOHefP2Z07eeb8bbvpVASuMQ 0cR47Oi8JxarzdVkwxegLW8XkjhnA/Le+CWsZTuJtWQfc60UIdMkwhaH/Bv0+/KJ bjNNCqDfSvxiXI+/gDrZ/+Wqee5qKhQbk+MvRobiSkwiZCprhUEanGW5TYvrG6F3 m6gkZUSFlBGkiOkn8L8ytX53dWNMnaw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:04 2025 by rpki-client