$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa File: 2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa (raw, json) Hash identifier: anQqce191/a6msyzNayieVDTrIoR+C1Evd4r4TCd4Eg= Subject key identifier: 08:5E:14:51:63:9A:B8:D2:1B:CF:A5:A0:BA:4B:31:B0:80:47:24:F9 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858489A3B41DAEAA672DE48769EC0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 29802 IP address blocks: 139.177.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:41:da:ea:a6:72:de:48:76:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=d42fe718-1a45-42b9-857b-d46e96599147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:31:5a:0e:c4:4f:a9:e1:3a:d7:79:9b:5d:9a: 77:01:71:75:d6:c6:90:64:10:b6:fe:54:6a:1c:42: 04:ee:01:1e:82:1b:fd:c1:ca:20:95:58:ba:64:f4: 1a:e0:0f:f3:19:0e:df:a3:76:e3:4b:4f:69:97:96: b6:1e:04:e3:51:aa:34:c5:43:90:c9:b6:25:34:7a: 94:00:a7:9f:2f:ee:ac:e0:4a:41:ae:4e:d4:50:59: 35:39:05:26:c6:37:64:9c:94:45:29:b7:7d:af:6e: 7a:3a:c5:61:bf:a6:68:1a:67:26:e0:6f:3e:57:6d: 72:6e:50:55:ee:17:2a:7f:ad:92:8d:be:da:d9:73: 61:18:48:13:f2:f6:7e:2e:4a:a1:1a:2a:53:c5:d2: e3:66:9c:34:c1:2b:12:56:88:e3:72:92:e1:33:ba: 95:7e:a2:8b:c2:41:4f:3e:9c:06:95:64:4f:2a:b2: 7b:f5:87:f6:b2:2f:27:bc:d0:95:7e:a7:88:16:43: 6b:24:5d:67:b0:7b:72:b7:61:36:aa:86:3a:f2:ab: 4e:78:0e:6a:1d:ab:e1:cb:c4:82:00:36:cc:2e:15: f1:34:dd:6f:3c:97:b3:1a:7c:e0:49:cf:c1:b2:cf: 58:87:37:3e:02:af:91:e5:7f:9f:67:09:ba:73:58: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:14:51:63:9A:B8:D2:1B:CF:A5:A0:BA:4B:31:B0:80:47:24:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 139.177.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:41:54:cb:63:a1:9f:fb:a6:69:87:1c:3d:d0:ee:a7:48:5b: 62:8e:47:67:ba:3e:9a:7c:73:42:6f:43:e3:b2:bb:33:43:cb: 35:00:7b:8b:1e:79:f7:84:5f:f1:14:6f:81:57:09:81:b7:b2: 10:ec:b3:e2:b9:2e:ce:f3:38:f3:3e:34:4e:33:94:34:05:60: 39:db:88:7c:9e:63:52:6a:56:ac:57:cb:84:16:42:fb:9d:8f: 96:ff:45:6c:ef:2a:6a:b3:29:54:5c:3e:49:fb:d2:00:43:d8: 12:e9:69:58:3a:b2:08:0c:f0:02:01:78:4d:f9:87:1e:4a:bc: 44:62:3d:aa:e5:3f:ea:fa:fa:d0:8f:fe:66:f2:8a:e9:58:c4: d0:b8:0c:e1:82:2d:18:59:ae:2e:f3:71:6e:23:b2:9f:ef:3a: 00:2a:f1:ac:ba:34:b5:cb:24:51:b1:12:e0:e4:30:2e:69:ab: d6:d7:5a:36:56:c0:4b:c8:36:aa:7e:fd:35:64:91:e1:aa:e4: 5e:8e:90:e1:bd:18:a0:89:96:23:24:78:a7:1d:a9:de:ed:0c: ce:af:35:4b:f7:17:c5:9f:08:01:6e:30:7d:e1:32:1c:5f:e8: 70:94:20:15:4c:7b:15:75:da:7f:3e:5d:ed:27:74:d9:83:2c: d7:78:33:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0Ha6qZy3kh2nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZDQyZmU3MTgtMWE0NS00MmI5LTg1N2ItZDQ2ZTk2NTk5MTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTFaDsRPqeE613mbXZp3AXF11saQZBC2/lRq HEIE7gEeghv9wcoglVi6ZPQa4A/zGQ7fo3bjS09pl5a2HgTjUao0xUOQybYlNHqU AKefL+6s4EpBrk7UUFk1OQUmxjdknJRFKbd9r256OsVhv6ZoGmcm4G8+V21yblBV 7hcqf62Sjb7a2XNhGEgT8vZ+LkqhGipTxdLjZpw0wSsSVojjcpLhM7qVfqKLwkFP PpwGlWRPKrJ79Yf2si8nvNCVfqeIFkNrJF1nsHtyt2E2qoY68qtOeA5qHavhy8SC ADbMLhXxNN1vPJezGnzgSc/Bss9Yhzc+Aq+R5X+fZwm6c1iuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAheFFFjmrjSG8+loLpLMbCARyT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMmFhNzE1MzQtYjFkZS0z ODRkLWFkNDUtNWIzNWIzYmRiYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1BVMtjoZ/7pmmHHD3Q7qdIW2KOR2e6Ppp8c0JvQ+OyuzNDyzUAe4se efeEX/EUb4FXCYG3shDss+K5Ls7zOPM+NE4zlDQFYDnbiHyeY1JqVqxXy4QWQvud j5b/RWzvKmqzKVRcPkn70gBD2BLpaVg6sggM8AIBeE35hx5KvERiParlP+r6+tCP /mbyiulYxNC4DOGCLRhZri7zcW4jsp/vOgAq8ay6NLXLJFGxEuDkMC5pq9bXWjZW wEvINqp+/TVkkeGq5F6OkOG9GKCJliMkeKcdqd7tDM6vNUv3F8WfCAFuMH3hMhxf 6HCUIBVMexV12n8+Xe0ndNmDLNd4M3I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:03 2025 by rpki-client