$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/9ef4612d-7b7a-351b-8aef-e70168dc2292.roa File: 9ef4612d-7b7a-351b-8aef-e70168dc2292.roa (raw, json) Hash identifier: GIL9WpmhuKutqF+Va8NzCFPScEX0CJ7Te0hzrEoPqE4= Subject key identifier: 49:96:29:4D:48:EE:52:F7:DB:BB:A3:3E:71:2A:AA:14:F4:51:8E:EB Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F432858486C2B083B01F06CBD5BDEA080 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/9ef4612d-7b7a-351b-8aef-e70168dc2292.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 133145 IP address blocks: 155.63.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:08:3b:01:f0:6c:bd:5b:de:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=c788c225-4b80-4371-b796-146c61c31332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:44:f8:00:25:a8:5b:78:5e:6e:d6:1d:b8: 87:3c:09:80:5a:e9:77:df:f5:17:b5:9b:76:c4:43: 2a:fa:a4:df:43:e3:bb:d5:1e:d1:90:b0:aa:19:4e: 29:f3:68:99:c6:9f:82:1b:fe:d3:a2:96:77:00:3f: 10:11:a1:61:8e:57:ce:ad:d0:36:ac:79:f3:06:88: 08:b4:c3:b2:01:13:2d:f1:ed:c5:28:07:1d:0b:c1: 84:c9:59:de:68:8f:ea:25:4f:ff:aa:72:ca:ac:b3: 25:f3:4d:0a:48:8c:e3:0b:d1:c0:46:9e:90:53:2e: a8:1d:15:5c:2b:94:0b:71:37:c6:3a:4a:ed:43:66: b7:1c:d2:d3:6e:69:13:e1:af:13:b1:86:7f:6c:31: 58:af:df:d0:bf:d6:79:a8:23:aa:8a:87:8b:0e:d7: d2:63:76:bc:f3:fe:10:41:90:f3:40:9e:eb:90:06: 10:e5:f5:81:24:62:1c:5c:21:50:0e:12:b4:d3:df: 53:3c:1b:83:5a:e5:01:04:d0:80:b9:49:98:92:0d: 2e:cb:07:2d:29:4b:bc:f0:65:8c:df:03:36:c3:b8: 26:78:6c:1d:90:db:57:b2:8e:c7:5c:d0:ee:2f:e7: 9f:e3:24:c5:d2:ed:6e:70:87:a4:39:96:c0:64:41: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:96:29:4D:48:EE:52:F7:DB:BB:A3:3E:71:2A:AA:14:F4:51:8E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/9ef4612d-7b7a-351b-8aef-e70168dc2292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f0:bc:15:ae:9e:36:3d:49:c6:34:a1:9a:96:70:b8:b0:45: 6e:2a:e4:aa:11:9d:9c:db:fc:3c:fe:65:0c:64:ae:f7:99:9c: 78:50:a1:78:c7:fb:8f:cb:c6:54:91:30:1c:9a:12:8b:c2:fd: 26:5b:99:f0:14:fd:a8:5f:f8:53:65:1e:dd:ee:c1:e2:b2:62: 10:f0:51:a8:51:55:db:61:2f:23:77:7f:83:50:11:18:1f:b0: d5:a1:8f:7b:1e:3a:e5:d7:ea:cf:c4:3b:dc:28:be:21:fc:ac: dd:a6:aa:d9:f6:ff:5b:70:19:e5:7a:83:dc:cb:bd:e9:d3:aa: bd:da:22:6e:67:de:ad:c0:4e:62:57:70:a5:60:df:d6:d2:15: 03:dd:89:c0:fa:4d:82:05:f2:46:ed:99:f3:e0:27:04:8f:6f: bf:57:b1:c0:74:b9:14:30:20:51:b3:a9:23:3b:c3:8d:14:55: 04:39:c5:23:99:a2:56:d8:79:b6:39:3f:d3:e7:4b:67:06:f5: 8f:d3:7d:13:16:91:e1:10:b6:9d:f0:69:f4:8b:06:25:55:a3: 3b:91:63:db:dd:c3:24:1c:6d:59:13:db:3f:82:6a:13:d6:2f: ac:5e:02:e1:e4:12:b9:e2:08:bb:7a:e2:87:ac:82:00:f5:01: 7f:66:88:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKwg7AfBsvVveoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk Yzc4OGMyMjUtNGI4MC00MzcxLWI3OTYtMTQ2YzYxYzMxMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreVE+AAlqFt4Xm7WHbiHPAmAWul33/UXtZt2 xEMq+qTfQ+O71R7RkLCqGU4p82iZxp+CG/7TopZ3AD8QEaFhjlfOrdA2rHnzBogI tMOyARMt8e3FKAcdC8GEyVneaI/qJU//qnLKrLMl800KSIzjC9HARp6QUy6oHRVc K5QLcTfGOkrtQ2a3HNLTbmkT4a8TsYZ/bDFYr9/Qv9Z5qCOqioeLDtfSY3a88/4Q QZDzQJ7rkAYQ5fWBJGIcXCFQDhK0099TPBuDWuUBBNCAuUmYkg0uywctKUu88GWM 3wM2w7gmeGwdkNtXso7HXNDuL+ef4yTF0u1ucIekOZbAZEHDUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmWKU1I7lL327ujPnEqqhT0UY7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvOWVmNDYxMmQtN2I3YS0z NTFiLThhZWYtZTcwMTY4ZGMyMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvwvBWunjY9ScY0oZqWcLiwRW4q5KoRnZzb/Dz+ZQxkrveZnHhQoXjH +4/LxlSRMByaEovC/SZbmfAU/ahf+FNlHt3uweKyYhDwUahRVdthLyN3f4NQERgf sNWhj3seOuXX6s/EO9woviH8rN2mqtn2/1twGeV6g9zLvenTqr3aIm5n3q3ATmJX cKVg39bSFQPdicD6TYIF8kbtmfPgJwSPb79XscB0uRQwIFGzqSM7w40UVQQ5xSOZ olbYebY5P9PnS2cG9Y/TfRMWkeEQtp3wafSLBiVVozuRY9vdwyQcbVkT2z+CahPW L6xeAuHkErniCLt64oesggD1AX9miDU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:48 2025 by rpki-client