$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/81649cff-5105-32e3-b15e-430f64cd9fd3.roa File: 81649cff-5105-32e3-b15e-430f64cd9fd3.roa (raw, json) Hash identifier: 0nVBjEqOi36dhhZnIynUbFzEjyCqaugTEjfsmWsJrPU= Subject key identifier: B3:F1:7F:FC:61:E3:B0:D0:CF:B7:99:16:30:00:EB:82:AA:D9:C2:83 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584867FAE91DD8095BA151BB2B80 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/81649cff-5105-32e3-b15e-430f64cd9fd3.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 14618 IP address blocks: 204.155.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:e9:1d:d8:09:5b:a1:51:bb:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=45ac34fd-7b3a-4673-994c-ac1c3d236cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:98:7f:15:8b:cc:81:73:72:9d:8e:3b:3f: a5:e5:d5:37:e5:45:20:6c:1c:07:3a:ce:53:fa:e5: 72:7d:04:4c:f9:b6:59:14:96:ef:93:4b:37:a8:55: 38:85:9a:67:a0:d3:a7:26:b4:10:3b:7e:b2:0f:9c: 87:44:78:e2:c3:cb:75:04:e8:47:a4:95:a7:e8:28: 2a:b2:0d:5f:3a:ff:f2:d6:5d:6e:bf:5c:8a:aa:61: 90:d2:d7:c7:5a:b3:6d:24:ee:2d:1f:8e:f8:82:9b: 1f:36:d0:bb:42:9f:e0:04:e4:f4:95:ab:80:3e:b7: d3:da:ed:26:9a:cf:5c:04:8f:07:fe:f0:ab:5d:05: 0b:d5:98:bd:91:e8:91:28:eb:35:f6:de:5f:94:94: 5a:e7:03:e8:b4:5a:4e:10:17:1f:e2:14:a0:b4:70: 35:f4:f9:18:3b:d8:74:a2:81:d5:fb:cc:1f:6b:32: 4f:a4:92:35:6b:32:80:62:b3:ae:04:f9:dc:e4:2e: b6:ae:26:94:f4:fc:f0:61:dc:a9:3c:91:50:20:7a: 15:d2:6b:0d:b9:e0:36:2a:e3:29:7c:1b:6d:04:6b: 2f:db:33:ef:59:a1:ac:31:0f:d6:8b:20:aa:38:45: a5:fe:93:a5:83:44:e0:99:63:b6:5a:f9:2b:3b:7e: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F1:7F:FC:61:E3:B0:D0:CF:B7:99:16:30:00:EB:82:AA:D9:C2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/81649cff-5105-32e3-b15e-430f64cd9fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cc:a7:0f:99:c5:b6:53:5c:c2:05:8c:52:75:21:1f:8c:ab: 39:7a:55:35:99:a0:1b:d3:9c:0c:8b:df:eb:db:f5:4e:ae:36: 8a:44:00:60:86:3c:ee:61:28:09:6a:3f:02:49:e4:e4:40:3e: 2a:cf:21:be:eb:75:c4:9e:21:71:58:4f:b1:3d:59:55:34:7a: 65:fe:f4:13:7b:c4:1b:a9:77:58:2c:63:97:75:41:eb:b0:af: fc:cf:dc:4b:32:c1:5d:6c:54:4c:50:41:99:96:17:5b:7a:aa: fe:0d:3b:3e:2e:88:b4:c2:ee:87:e5:c7:fb:27:58:ad:72:2b: c7:23:10:25:12:11:d5:7e:8a:28:70:fd:3a:d6:a2:51:df:00: f5:08:5c:ae:31:cc:8e:66:d3:50:b6:4a:45:b0:95:35:2c:c0: a2:3d:66:82:f4:b5:24:37:25:e8:24:ab:f2:a9:b3:49:73:1f: 7e:28:86:73:6c:dd:c7:39:c6:cf:46:ba:8f:c7:40:00:44:28: 16:f0:f2:44:9b:d5:12:9e:3a:7a:6a:da:82:10:29:56:08:86: 65:67:c4:c2:34:da:75:e5:ae:91:d2:b4:76:e1:2f:e9:59:f2: e2:e0:a9:3d:1b:35:e0:03:4f:fb:24:c7:5d:0a:c8:be:45:a9: 73:48:c4:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+ukd2AlboVG7K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk NDVhYzM0ZmQtN2IzYS00NjczLTk5NGMtYWMxYzNkMjM2Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBuYfxWLzIFzcp2OOz+l5dU35UUgbBwHOs5T +uVyfQRM+bZZFJbvk0s3qFU4hZpnoNOnJrQQO36yD5yHRHjiw8t1BOhHpJWn6Cgq sg1fOv/y1l1uv1yKqmGQ0tfHWrNtJO4tH474gpsfNtC7Qp/gBOT0lauAPrfT2u0m ms9cBI8H/vCrXQUL1Zi9keiRKOs19t5flJRa5wPotFpOEBcf4hSgtHA19PkYO9h0 ooHV+8wfazJPpJI1azKAYrOuBPnc5C62riaU9PzwYdypPJFQIHoV0msNueA2KuMp fBttBGsv2zPvWaGsMQ/WiyCqOEWl/pOlg0TgmWO2WvkrO37wIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPxf/xh47DQz7eZFjAA64Kq2cKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvODE2NDljZmYtNTEwNS0z MmUzLWIxNWUtNDMwZjY0Y2Q5ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzMpw+ZxbZTXMIFjFJ1IR+Mqzl6VTWZoBvTnAyL3+vb9U6uNopEAGCG PO5hKAlqPwJJ5ORAPirPIb7rdcSeIXFYT7E9WVU0emX+9BN7xBupd1gsY5d1Qeuw r/zP3EsywV1sVExQQZmWF1t6qv4NOz4uiLTC7oflx/snWK1yK8cjECUSEdV+iihw /TrWolHfAPUIXK4xzI5m01C2SkWwlTUswKI9ZoL0tSQ3Jegkq/Kps0lzH34ohnNs 3cc5xs9Guo/HQABEKBbw8kSb1RKeOnpq2oIQKVYIhmVnxMI02nXlrpHStHbhL+lZ 8uLgqT0bNeADT/skx10KyL5FqXNIxHE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:31 2025 by rpki-client