$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/c517f4fa-832b-35ff-891e-04a31b039b27.roa File: c517f4fa-832b-35ff-891e-04a31b039b27.roa (raw, json) Hash identifier: B13Zpf5qdRaCvVUmslHoM/IWt3wL8CkHNrl1qD+Mzbk= Subject key identifier: C5:DE:C8:FD:B7:20:B1:7D:CB:81:63:10:6D:DF:3A:0D:DA:03:63:AB Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584863CAFC0E5472EC8271A47680 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/c517f4fa-832b-35ff-891e-04a31b039b27.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 9084 IP address blocks: 154.1.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:ca:fc:0e:54:72:ec:82:71:a4:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=2b459854-4347-4fcc-b834-34dfaf1a83f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:8f:5b:d5:93:9d:f4:e8:b9:88:b8:8a:4a: 1e:d6:3a:f2:2c:d8:90:d8:9e:49:05:e3:e6:ec:56: 68:79:2d:76:4f:49:cf:ec:e2:c8:07:cd:69:be:a7: 49:21:1e:a9:f4:2f:58:b7:b3:84:67:17:a4:b9:a7: e7:51:26:d7:59:47:d5:39:7a:13:94:37:b7:6d:75: 1b:0f:f4:fe:c5:bd:0e:03:10:08:63:79:47:d0:a6: 76:4a:3d:65:61:55:ae:13:18:e7:3f:15:0c:2f:d0: 44:dc:23:e1:f8:eb:9a:6e:9c:6d:b9:8d:27:88:7f: 7e:c6:fb:29:44:8c:51:71:8b:95:ef:1c:1d:9a:13: 52:07:4f:b2:1d:fe:84:e3:b4:00:15:e6:60:d2:15: 42:d1:dd:a8:ab:20:39:48:92:c9:90:a8:df:af:22: 59:f3:93:9f:21:1d:76:15:2c:90:85:b3:4e:55:48: 2b:53:68:3c:04:69:31:24:c7:3b:73:28:f6:f8:55: 78:d0:9a:c5:8e:28:97:44:32:d5:cf:c0:b6:26:82: 00:c6:0f:59:02:2a:89:bf:c4:66:18:3b:3d:44:f0: 62:d0:05:1b:08:a7:74:fe:77:23:8c:1b:7c:64:8c: 1c:ab:b2:a7:fe:f1:81:53:30:f0:2c:f3:b2:37:77: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DE:C8:FD:B7:20:B1:7D:CB:81:63:10:6D:DF:3A:0D:DA:03:63:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/c517f4fa-832b-35ff-891e-04a31b039b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 154.1.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:18:6b:74:e7:95:5b:f9:c3:cd:b1:19:ad:93:8e:8d:cb:b9: 46:c9:c4:c7:92:06:9e:75:d1:8d:2a:2c:87:f1:76:ed:0e:74: 71:49:91:07:b3:bc:79:f7:1f:8a:dd:14:fa:6a:dd:b4:b2:1e: 5b:d6:01:f7:26:86:16:76:be:e4:1a:3d:4a:4c:d1:3c:1f:55: c2:12:23:dd:bb:1e:d9:1d:8b:d2:b1:47:04:ac:6c:f9:17:fa: e9:4f:ad:c3:2b:d3:24:78:c0:3c:3a:02:aa:df:41:3d:70:41: 35:ca:50:33:65:58:bd:9f:86:d2:0e:77:09:c1:5a:00:6c:ba: 1a:0c:f2:5e:15:10:fc:96:e3:51:a5:86:57:ce:67:46:b3:29: d8:e7:e3:d1:15:41:b1:44:e7:92:45:28:9f:60:72:55:c7:57: d8:9b:bd:bd:32:fd:50:b0:9c:59:5f:f6:88:70:5c:72:9f:67: 69:e2:d9:2e:5e:31:2b:8f:e0:70:d2:26:b9:91:d8:d9:d1:fc: a8:5d:78:23:a3:8a:c4:25:6c:cb:7c:6f:3c:ef:98:73:58:11: 74:ec:47:bc:87:5b:b5:74:a6:b6:9c:db:b2:ad:0d:f1:93:ca: 45:d3:7d:11:b0:23:28:81:0a:07:a7:ee:6f:b9:2d:f2:a9:0f: 98:f4:26:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyvwOVHLsgnGkdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk MmI0NTk4NTQtNDM0Ny00ZmNjLWI4MzQtMzRkZmFmMWE4M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEuPW9WTnfTouYi4ikoe1jryLNiQ2J5JBePm 7FZoeS12T0nP7OLIB81pvqdJIR6p9C9Yt7OEZxekuafnUSbXWUfVOXoTlDe3bXUb D/T+xb0OAxAIY3lH0KZ2Sj1lYVWuExjnPxUML9BE3CPh+OuabpxtuY0niH9+xvsp RIxRcYuV7xwdmhNSB0+yHf6E47QAFeZg0hVC0d2oqyA5SJLJkKjfryJZ85OfIR12 FSyQhbNOVUgrU2g8BGkxJMc7cyj2+FV40JrFjiiXRDLVz8C2JoIAxg9ZAiqJv8Rm GDs9RPBi0AUbCKd0/ncjjBt8ZIwcq7Kn/vGBUzDwLPOyN3cC2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXeyP23ILF9y4FjEG3fOg3aA2OrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvYzUxN2Y0ZmEtODMyYi0z NWZmLTg5MWUtMDRhMzFiMDM5YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgGnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEYa3TnlVv5w82xGa2Tjo3LuUbJxMeSBp510Y0qLIfxdu0OdHFJkQez vHn3H4rdFPpq3bSyHlvWAfcmhhZ2vuQaPUpM0TwfVcISI927Htkdi9KxRwSsbPkX +ulPrcMr0yR4wDw6AqrfQT1wQTXKUDNlWL2fhtIOdwnBWgBsuhoM8l4VEPyW41Gl hlfOZ0azKdjn49EVQbFE55JFKJ9gclXHV9ibvb0y/VCwnFlf9ohwXHKfZ2ni2S5e MSuP4HDSJrmR2NnR/KhdeCOjisQlbMt8bzzvmHNYEXTsR7yHW7V0prac27KtDfGT ykXTfRGwIyiBCgen7m+5LfKpD5j0JpM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:30 2025 by rpki-client