$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa File: f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa (raw, json) Hash identifier: Uakx8UhV0dkSaXYvAIfv0E9qnXGmWVfrVpezF5pFN84= Subject key identifier: E1:CD:23:CF:33:09:EC:44:61:2A:64:A7:4F:2F:9F:83:2A:52:A7:25 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F432858480BDA7A10EC877C9FD8ACCBB8 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 54041 IP address blocks: 167.253.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:7a:10:ec:87:7c:9f:d8:ac:cb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=742211e5-c898-47c3-a7bb-dd1349bd3254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:8d:ed:7a:88:48:f4:8c:cc:ae:66:36:ab: 72:9e:ac:7e:a6:60:af:76:aa:b0:3e:20:67:9b:5e: f9:c7:d9:e8:7d:a6:5a:5c:8a:03:29:3b:e0:42:53: db:56:87:7a:1d:fd:f6:9e:c7:9e:94:3e:e8:bc:46: fc:ae:99:e3:bd:d3:2d:44:83:0d:ce:17:02:4d:85: c3:f3:64:a3:09:58:f2:3b:04:64:f7:a3:41:75:00: 67:63:61:95:b3:8b:1f:0e:e8:2c:94:b5:f7:d9:2b: 57:dd:d8:58:dc:63:30:92:3b:e5:d5:73:93:08:6a: 76:cc:31:f0:63:e7:88:ad:09:89:c7:e6:ba:f7:cb: df:d6:6f:7a:77:e3:3a:7b:3c:b5:3d:6b:a3:7b:47: b4:78:f8:3c:a0:54:7b:72:44:fb:a5:ea:30:df:6a: a8:9c:3a:4d:ac:94:6a:34:f7:1d:e3:f3:51:c1:24: 16:f9:57:9c:36:8a:d7:08:db:f8:e9:e8:71:3a:03: 37:59:3b:e0:91:f5:4e:d3:4c:bf:02:3b:06:18:0b: aa:e0:51:db:4e:f1:e2:7e:b7:fa:55:e1:bf:da:03: 21:7a:23:aa:2d:4c:f5:e7:33:d0:7e:04:c1:fa:6a: 38:1a:8d:a2:f1:45:c4:7e:c7:ad:b5:d1:77:e7:0f: 64:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CD:23:CF:33:09:EC:44:61:2A:64:A7:4F:2F:9F:83:2A:52:A7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: 167.253.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e0:d5:ca:10:09:e7:5c:b2:e6:cf:bc:b5:5e:26:c7:aa:fe: 13:ef:fc:14:32:02:6d:19:b3:b5:c9:05:8c:9f:d5:ef:36:c4: a0:3a:0a:91:ab:f2:50:99:39:24:fe:e2:56:67:bb:12:47:bc: 43:b3:5e:d9:c2:ae:ce:04:f4:f5:19:56:9d:c8:b7:bb:c0:dc: 05:48:3d:7c:84:dd:37:fc:7c:7b:40:ef:9d:4d:a9:5e:51:dc: 0e:d9:47:eb:76:c4:11:e8:97:20:a3:3d:54:d4:c4:56:eb:dc: 93:31:33:85:64:96:46:8b:ff:93:bb:67:7a:30:cf:11:06:17: 5e:b8:2a:9b:16:bc:1c:88:ef:23:1d:5d:04:42:17:ad:ab:97: b4:c0:0c:a0:9e:c8:b2:f6:6d:9c:a5:99:fe:2b:39:d6:0c:21: f3:de:51:4a:48:54:e4:51:b4:0f:96:ce:b7:2e:80:22:c4:30: a5:fc:78:01:f5:ae:fd:dc:80:32:4c:17:12:8b:a0:f3:84:73: 34:2f:d5:77:b2:ee:bc:df:fa:50:f0:9b:61:fb:c5:b0:1e:d1: 86:f0:ea:50:eb:26:a0:d8:f3:3c:eb:15:04:63:53:18:8a:5b: 80:60:22:91:e3:a9:bd:9c:47:9d:ae:e2:c7:34:df:54:d9:c3: eb:ef:a7:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2noQ7Id8n9isy7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk NzQyMjExZTUtYzg5OC00N2MzLWE3YmItZGQxMzQ5YmQzMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz6N7XqISPSMzK5mNqtynqx+pmCvdqqwPiBn m175x9nofaZaXIoDKTvgQlPbVod6Hf32nseelD7ovEb8rpnjvdMtRIMNzhcCTYXD 82SjCVjyOwRk96NBdQBnY2GVs4sfDugslLX32StX3dhY3GMwkjvl1XOTCGp2zDHw Y+eIrQmJx+a698vf1m96d+M6ezy1PWuje0e0ePg8oFR7ckT7peow32qonDpNrJRq NPcd4/NRwSQW+VecNorXCNv46ehxOgM3WTvgkfVO00y/AjsGGAuq4FHbTvHifrf6 VeG/2gMheiOqLUz15zPQfgTB+mo4Go2i8UXEfsettdF35w9kGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHNI88zCexEYSpkp08vn4MqUqclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvZjkxZDMwZjAtYThjNC0z Mzk4LWE4MGYtMjE4YjEyNTVjZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXg1coQCedcsubPvLVeJseq/hPv/BQyAm0Zs7XJBYyf1e82xKA6CpGr 8lCZOST+4lZnuxJHvEOzXtnCrs4E9PUZVp3It7vA3AVIPXyE3Tf8fHtA751NqV5R 3A7ZR+t2xBHolyCjPVTUxFbr3JMxM4VklkaL/5O7Z3owzxEGF164KpsWvByI7yMd XQRCF62rl7TADKCeyLL2bZylmf4rOdYMIfPeUUpIVORRtA+WzrcugCLEMKX8eAH1 rv3cgDJMFxKLoPOEczQv1Xey7rzf+lDwm2H7xbAe0Ybw6lDrJqDY8zzrFQRjUxiK W4BgIpHjqb2cR52u4sc031TZw+vvp1s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:57 2025 by rpki-client