$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/0171967b-73fa-3071-ae83-adf3407d9a47.roa File: 0171967b-73fa-3071-ae83-adf3407d9a47.roa (raw, json) Hash identifier: 7JILgD6SjADj0T27a1PpEoN34GXa0LpYKr/JoY/+8yM= Subject key identifier: 85:C3:C3:79:A5:B9:B8:39:1F:9E:7C:F8:E3:AC:65:65:04:1A:6D:49 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E517640D254542A80422C80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/0171967b-73fa-3071-ae83-adf3407d9a47.roa Signing time: Tue 21 Jan 2025 13:08:45 +0000 ROA not before: Tue 21 Jan 2025 13:08:45 +0000 ROA not after: Mon 21 Apr 2025 12:08:45 +0000 asID: 40509 IP address blocks: 188.93.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:51:76:40:d2:54:54:2a:80:42:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 13:08:45 2025 GMT Not After : Apr 21 12:08:45 2025 GMT Subject: CN=afdbaa8d-72ba-4fa7-809e-bf6cfc08f491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:87:cd:17:69:ff:ce:01:15:77:d0:05:da: ef:18:b6:9b:05:81:2d:65:a4:74:b8:4a:b2:c6:ed: 20:18:61:95:e0:31:bb:e4:fa:54:11:2c:ff:9a:86: fa:a8:23:8c:96:67:08:8e:54:25:14:5e:8b:51:9a: 31:9f:27:f7:34:f6:ed:d5:8e:97:8c:b8:85:f0:4b: d7:3d:39:5f:e3:a9:1d:31:a4:ae:02:45:40:67:53: 56:83:b9:45:e6:24:1f:bd:17:2c:4a:ae:d3:dd:40: 1d:30:09:95:98:89:c9:91:47:f4:2a:a2:1c:0e:9c: 6b:71:a1:46:16:fc:6d:1e:6b:ac:b9:8e:7e:7e:3b: 9b:7a:7f:08:33:d4:9b:16:cc:b9:cd:6b:1a:40:16: d3:57:2b:4a:8a:fe:91:5e:51:4c:a6:64:90:95:8e: 9d:22:6f:7b:29:c5:c1:9b:bd:85:73:22:1c:8f:5e: 39:38:5c:5a:85:b9:1e:1d:e1:86:8a:26:55:86:65: 23:48:d3:f5:7a:af:89:e4:18:09:40:8e:05:58:33: ca:24:c8:94:06:05:0d:62:ee:a4:df:2f:61:96:e9: 06:12:d5:f2:9d:0b:57:dd:75:7f:79:01:24:7a:3e: 54:d1:bb:4a:38:5f:2d:80:29:86:45:78:17:c9:e9: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:C3:79:A5:B9:B8:39:1F:9E:7C:F8:E3:AC:65:65:04:1A:6D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/0171967b-73fa-3071-ae83-adf3407d9a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 188.93.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8c:ed:b5:e9:01:37:88:49:77:1f:ae:9d:e1:34:6e:7d:7a: 05:a8:f0:ed:59:fe:ff:15:a6:b5:33:77:88:6c:b1:1e:2b:37: 69:83:15:69:4f:e2:15:24:28:33:ac:87:2b:e7:54:c6:fb:b6: 82:18:46:07:45:53:70:f4:e7:69:1f:0d:35:05:f7:47:18:27: 27:67:38:af:75:4d:6c:28:06:ff:d8:78:45:45:d3:f1:87:fa: 5c:ba:b2:2c:7b:f4:ae:f0:70:ec:64:c3:fd:b5:73:85:ab:32: e8:0a:55:91:19:b8:56:10:57:82:c7:ea:35:e5:a5:88:05:6d: f2:06:e4:3e:d3:df:10:94:0c:cf:23:36:e3:db:84:f8:4f:ba: e1:87:70:cf:71:9e:a3:b8:30:be:55:a1:d1:7d:de:4e:2d:6b: 24:12:7c:fe:b6:1f:82:bb:2f:c4:a6:20:f3:f6:47:e9:d2:7a: 38:85:fb:8a:14:62:27:79:bf:91:3e:d9:22:61:5d:1a:61:03: 5a:9a:fe:e7:80:28:2b:a2:d6:9a:30:de:9b:bf:98:f1:f0:53: b9:62:0e:0e:ae:83:f9:76:e8:35:84:42:82:c9:7b:de:1e:4c: 48:d0:e9:1c:cc:94:5d:1f:f5:25:37:50:3b:77:ca:a6:df:18: cd:96:a7:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieUXZA0lRUKoBCLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEzMDg0NVoXDTI1MDQyMTEyMDg0NVowLzEtMCsGA1UEAxMk YWZkYmFhOGQtNzJiYS00ZmE3LTgwOWUtYmY2Y2ZjMDhmNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lmHzRdp/84BFXfQBdrvGLabBYEtZaR0uEqy xu0gGGGV4DG75PpUESz/mob6qCOMlmcIjlQlFF6LUZoxnyf3NPbt1Y6XjLiF8EvX PTlf46kdMaSuAkVAZ1NWg7lF5iQfvRcsSq7T3UAdMAmVmInJkUf0KqIcDpxrcaFG FvxtHmusuY5+fjuben8IM9SbFsy5zWsaQBbTVytKiv6RXlFMpmSQlY6dIm97KcXB m72FcyIcj145OFxahbkeHeGGiiZVhmUjSNP1eq+J5BgJQI4FWDPKJMiUBgUNYu6k 3y9hlukGEtXynQtX3XV/eQEkej5U0btKOF8tgCmGRXgXyekWowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXDw3mlubg5H558+OOsZWUEGm1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMDE3MTk2N2ItNzNmYS0z MDcxLWFlODMtYWRmMzQwN2Q5YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvF2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6M7bXpATeISXcfrp3hNG59egWo8O1Z/v8VprUzd4hssR4rN2mDFWlP 4hUkKDOshyvnVMb7toIYRgdFU3D052kfDTUF90cYJydnOK91TWwoBv/YeEVF0/GH +ly6six79K7wcOxkw/21c4WrMugKVZEZuFYQV4LH6jXlpYgFbfIG5D7T3xCUDM8j NuPbhPhPuuGHcM9xnqO4ML5VodF93k4tayQSfP62H4K7L8SmIPP2R+nSejiF+4oU Yid5v5E+2SJhXRphA1qa/ueAKCui1pow3pu/mPHwU7liDg6ug/l26DWEQoLJe94e TEjQ6RzMlF0f9SU3UDt3yqbfGM2Wp1g= -----END CERTIFICATE-----Generated at Sun Feb 2 16:03:14 2025 by rpki-client