$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa File: b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa (raw, json) Hash identifier: TxAYE82uh98ERnuyzrerRL+41Y+eBYdQjEX16AkM9+0= Subject key identifier: 4F:F5:51:90:F1:F9:68:51:D5:B0:C9:0A:96:39:FB:0D:8A:13:87:C0 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F432858483F80156B0EA77A190179E900 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 397865 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:15:6b:0e:a7:7a:19:01:79:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=a2a9d45f-0eaf-4832-b5aa-ce02a1c620b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:9a:f5:ce:66:99:b1:85:93:d4:19:44:cc: 69:50:c8:9f:e4:36:69:cd:49:b7:6c:44:f7:98:ef: fc:0b:85:8c:34:8f:c2:bf:b6:a4:9e:d4:c7:23:8e: 10:27:b0:b1:d5:3f:af:92:b6:9d:f5:23:db:3b:dd: a8:81:0f:b1:2d:2f:10:ad:63:8b:2e:e7:40:b7:50: 78:32:70:28:15:e5:bb:19:ed:7c:68:cb:4d:a2:20: cb:df:a4:7a:e9:b0:83:ba:13:4d:f8:e1:5f:03:ef: 57:e6:8a:e7:25:6f:c4:21:4d:c5:13:fd:43:0c:3d: 9a:33:ee:99:ec:10:f8:e5:20:f2:71:51:4b:bc:d5: 02:e9:e4:59:f5:9b:34:17:86:a7:03:ee:84:5a:d5: ea:e7:fb:59:40:f6:07:f9:66:fb:c3:ea:0f:ed:81: 79:4d:f7:b0:c9:41:5d:19:40:a1:0f:51:bd:cc:ba: 45:cc:f1:7f:45:c1:64:68:db:3c:67:64:ff:a2:a7: 2d:88:16:6f:cd:3a:11:df:e2:74:01:07:a7:9e:e1: af:d1:9d:29:29:9a:8a:13:21:9a:e0:e7:60:06:3d: 34:f5:37:4b:c3:d9:c0:46:df:90:5e:76:d0:56:1f: 91:03:2b:65:24:06:61:4f:4f:50:d1:cc:44:44:90: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F5:51:90:F1:F9:68:51:D5:B0:C9:0A:96:39:FB:0D:8A:13:87:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:72:f3:92:05:69:7f:e0:3f:1f:c8:38:6e:8a:8c:4e:35:6c: 36:1d:9e:a5:67:a4:90:9e:27:1e:33:ee:6b:be:8b:12:40:c1: b5:b9:db:eb:3a:fa:1d:15:4c:f8:d4:b2:bb:da:51:77:68:58: ef:fc:c5:79:08:91:68:dc:7e:bc:f9:b6:4c:0e:db:5f:09:e9: 3e:7d:d2:a4:e1:d4:50:c8:74:d5:d7:c1:08:08:8a:ad:44:fb: cc:e4:ed:7f:6c:b3:54:fe:c5:a0:e8:90:4d:63:59:09:ff:3f: f5:48:7b:36:60:6b:b8:07:ee:01:a3:f4:42:1d:8a:6b:46:f6: aa:d1:ec:7d:7d:45:6d:72:3b:ac:28:e3:0d:56:18:f2:ac:c8: f6:4a:86:f9:cf:0a:d3:09:1e:9f:03:1b:91:1d:77:75:90:e7: 06:18:ca:42:6f:38:d5:2f:e4:35:13:4c:4a:76:81:2d:93:c7: 41:b3:73:34:0e:0e:38:83:26:70:2e:3c:64:cc:85:28:56:a0: dd:cd:89:fc:f5:db:a7:3c:e6:4f:0c:bb:48:f6:3d:34:2a:38: 61:88:80:44:6a:d6:48:be:bd:8d:93:17:84:13:68:0e:a8:47: c9:5d:5f:2e:7b:bd:b3:ac:83:eb:2d:6e:d2:e7:8a:35:f7:ae: 35:fa:64:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gBVrDqd6GQF56QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk YTJhOWQ0NWYtMGVhZi00ODMyLWI1YWEtY2UwMmExYzYyMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMCa9c5mmbGFk9QZRMxpUMif5DZpzUm3bET3 mO/8C4WMNI/Cv7akntTHI44QJ7Cx1T+vkrad9SPbO92ogQ+xLS8QrWOLLudAt1B4 MnAoFeW7Ge18aMtNoiDL36R66bCDuhNN+OFfA+9X5ornJW/EIU3FE/1DDD2aM+6Z 7BD45SDycVFLvNUC6eRZ9Zs0F4anA+6EWtXq5/tZQPYH+Wb7w+oP7YF5TfewyUFd GUChD1G9zLpFzPF/RcFkaNs8Z2T/oqctiBZvzToR3+J0AQennuGv0Z0pKZqKEyGa 4OdgBj009TdLw9nARt+QXnbQVh+RAytlJAZhT09Q0cxERJAHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/1UZDx+WhR1bDJCpY5+w2KE4fAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvYjI1NWY0ZWUtMGQyMS0z YWE1LWI4YjItMjcwZDYyOTkyNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIty85IFaX/gPx/IOG6KjE41bDYdnqVnpJCeJx4z7mu+ixJAwbW52+s6 +h0VTPjUsrvaUXdoWO/8xXkIkWjcfrz5tkwO218J6T590qTh1FDIdNXXwQgIiq1E +8zk7X9ss1T+xaDokE1jWQn/P/VIezZga7gH7gGj9EIdimtG9qrR7H19RW1yO6wo 4w1WGPKsyPZKhvnPCtMJHp8DG5Edd3WQ5wYYykJvONUv5DUTTEp2gS2Tx0GzczQO DjiDJnAuPGTMhShWoN3Nifz126c85k8Mu0j2PTQqOGGIgERq1ki+vY2TF4QTaA6o R8ldXy57vbOsg+stbtLnijX3rjX6ZH4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:00 2025 by rpki-client