$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa File: fd05dd98-3073-3868-a202-0a6c4f041811.roa (raw, json) Hash identifier: 2zJq/n/HDo7oPGgejxlEQs/YkLSz79UoWWr4mO8o55k= Subject key identifier: 2D:36:46:AE:0F:79:01:86:FF:7F:BD:75:2E:CE:CE:42:3E:31:0D:17 Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F43285848E59BD2140BCF9D0C5C961080 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 203 IP address blocks: 161.151.162.0/23 maxlen: 24 161.151.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d2:14:0b:cf:9d:0c:5c:96:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=7747c604-4c5b-4d42-b795-60529d7f2e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:a0:8a:7c:6e:c1:92:39:b6:0d:7e:1e:57: 22:8c:f8:03:ed:90:51:35:a0:b2:a7:03:d1:7c:1c: 49:3c:ee:a2:a2:41:46:de:ad:af:7a:c6:86:b7:a7: cf:cb:67:77:22:4d:c3:12:16:b2:09:10:34:bb:10: ce:26:89:55:d7:d5:25:45:ae:72:15:23:f5:cb:1c: 79:da:da:b0:02:63:5b:30:0f:ca:20:82:39:6d:13: cd:62:70:0e:d0:e1:34:78:5e:4d:94:b5:73:83:95: e1:c0:b2:65:f0:ef:5d:23:ed:18:45:26:bd:24:06: 55:5e:1b:38:f1:fe:17:8a:72:90:e9:63:3f:dd:a3: 85:67:5d:01:57:eb:9e:73:13:b0:ed:95:2c:8f:95: d5:de:22:59:a1:6f:ab:51:2b:7a:47:e6:f0:3b:fb: a6:32:08:00:19:e2:77:c0:55:12:f0:a8:f3:62:6e: d8:9e:7c:b3:40:db:87:40:17:24:42:60:ad:6d:f7: b6:85:3c:2f:54:b3:40:b6:bb:06:7c:57:41:e3:5c: ea:1a:d3:91:5d:e9:7d:17:0e:c1:4c:00:a1:79:3d: 2a:7c:3c:bf:8e:68:ba:91:fa:42:1e:50:d3:a1:55: 70:ec:5e:0f:c0:e6:a5:d1:b1:c4:70:79:83:2d:f9: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:36:46:AE:0F:79:01:86:FF:7F:BD:75:2E:CE:CE:42:3E:31:0D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.162.0/23 161.151.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:65:a6:c7:df:91:1d:e7:fe:c2:71:a5:0d:9f:37:e3:a3:f5: 67:56:b7:50:ec:8e:2f:a9:97:61:41:d5:db:db:b8:0e:4f:9a: 43:3a:7c:b6:67:ce:c3:b3:33:f3:d9:d4:5b:b1:00:bc:8c:4a: 26:93:d4:24:85:f0:de:40:0e:1d:bf:7d:1b:da:74:2b:92:72: e5:5d:1e:9c:b4:19:17:72:5b:88:f4:7e:2b:ba:ca:79:f9:39: 81:1b:2f:22:2e:95:cf:6a:13:8a:89:f6:53:ef:fa:bf:51:ea: cc:ba:97:aa:8d:dc:b3:38:75:5f:f8:49:9f:59:d5:c8:0e:f7: 6a:9c:50:d9:6c:cc:f3:c4:3d:e2:cc:67:55:f2:6e:b3:2c:bc: d3:7e:cd:2b:df:53:2f:ac:11:f6:02:0d:35:96:42:57:73:9b: 27:da:39:66:42:c4:79:d7:df:9a:35:83:4b:d0:01:20:d6:3c: b3:5d:5c:c7:7c:98:81:c5:47:44:a6:f1:2a:a0:cc:ce:75:5f: f4:ac:c5:a4:41:89:c2:06:cb:c3:49:a9:bd:67:f7:ea:81:d4: 5c:f8:98:71:48:a3:9e:99:e6:28:e7:9d:36:f0:4e:34:7e:5c: 2e:a9:81:43:8b:87:cd:ac:c2:dd:be:c7:05:4b:8f:28:ba:af: b7:51:25:9b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjlm9IUC8+dDFyWEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk Nzc0N2M2MDQtNGM1Yi00ZDQyLWI3OTUtNjA1MjlkN2YyZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05CginxuwZI5tg1+HlcijPgD7ZBRNaCypwPR fBxJPO6iokFG3q2vesaGt6fPy2d3Ik3DEhayCRA0uxDOJolV19UlRa5yFSP1yxx5 2tqwAmNbMA/KIII5bRPNYnAO0OE0eF5NlLVzg5XhwLJl8O9dI+0YRSa9JAZVXhs4 8f4XinKQ6WM/3aOFZ10BV+uecxOw7ZUsj5XV3iJZoW+rUSt6R+bwO/umMggAGeJ3 wFUS8KjzYm7YnnyzQNuHQBckQmCtbfe2hTwvVLNAtrsGfFdB41zqGtORXel9Fw7B TACheT0qfDy/jmi6kfpCHlDToVVw7F4PwOal0bHEcHmDLflkowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC02Rq4PeQGG/3+9dS7OzkI+MQ0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvZmQwNWRkOTgtMzA3My0z ODY4LWEyMDItMGE2YzRmMDQxODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoZeiAwQB oZf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFdlpsffkR3n/sJxpQ2fN+Oj9WdWt1Dsji+pl2FB1dvbuA5P mkM6fLZnzsOzM/PZ1FuxALyMSiaT1CSF8N5ADh2/fRvadCuScuVdHpy0GRdyW4j0 fiu6ynn5OYEbLyIulc9qE4qJ9lPv+r9R6sy6l6qN3LM4dV/4SZ9Z1cgO92qcUNls zPPEPeLMZ1XybrMsvNN+zSvfUy+sEfYCDTWWQldzmyfaOWZCxHnX35o1g0vQASDW PLNdXMd8mIHFR0Sm8SqgzM51X/SsxaRBicIGy8NJqb1n9+qB1Fz4mHFIo56Z5ijn nTbwTjR+XC6pgUOLh82swt2+xwVLjyi6r7dRJZs= -----END CERTIFICATE-----Generated at Tue Apr 8 12:24:43 2025 by rpki-client