$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa File: 9c704b07-187e-39ac-b560-db3659b3dc4d.roa (raw, json) Hash identifier: VQ/7sDshLAAa1W5Ke0/VWZFAtHWD3giOCEKzz4NOmIY= Subject key identifier: 6F:81:FB:86:8F:03:96:3A:28:AF:9D:69:C0:AE:00:40:6D:EB:86:51 Certificate issuer: /CN=1d394508-6160-4e82-89e3-165fa2784b30 Certificate serial: 010D0C9F432858484C101B29FF462DC2C07ABAC0 Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 399214 IP address blocks: 158.51.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:1b:29:ff:46:2d:c2:c0:7a:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=02199620-75b4-4567-8242-923fdeff76d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:0e:d0:2b:b0:d9:ee:30:41:17:7f:f2:64: 41:9b:bb:44:f0:5d:63:81:7c:fb:16:1f:95:9b:ab: 58:1f:75:13:0c:a0:50:46:66:b1:d5:c7:ef:1d:7a: c6:fb:07:d3:b0:8a:d1:85:34:c0:94:f0:92:82:bb: 72:45:1f:46:e7:e1:63:57:84:d1:85:9a:6e:51:0d: 16:68:34:25:8c:73:a7:db:3c:7c:9d:2f:87:29:c1: 88:fe:1a:1f:04:8e:e0:d5:dc:4f:0b:cd:e7:d2:79: 68:5c:b3:5b:87:da:2b:b3:8c:94:ff:62:83:1e:25: 95:63:34:e9:11:fe:24:95:d0:e2:2f:83:0f:74:5f: 08:b7:b2:02:98:e5:a4:b2:56:52:36:c8:d6:30:c4: 9f:18:5c:62:8b:1c:67:b7:e8:7d:99:8d:d9:91:07: 0b:5b:98:43:88:ff:af:87:75:50:5b:13:13:bf:ef: f1:1d:6e:fa:1c:c4:f7:55:f1:22:b4:75:ad:70:c8: 3b:0e:23:65:21:52:bb:5c:bb:8f:3a:68:ad:15:3f: a4:ab:54:b9:f9:89:36:ff:00:60:e6:ca:76:2d:d7: f4:09:34:00:60:3c:1a:a5:9d:39:36:46:b7:73:71: 1c:cd:e7:ce:1c:6c:6b:29:13:56:63:c1:94:ff:5a: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:81:FB:86:8F:03:96:3A:28:AF:9D:69:C0:AE:00:40:6D:EB:86:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl X509v3 Authority Key Identifier: keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer sbgp-ipAddrBlock: critical IPv4: 158.51.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9b:4a:d5:45:09:cf:f9:7a:a1:6f:3c:7f:bb:fb:a9:db:f9: b0:78:08:8a:2d:c4:c5:c0:e7:a7:58:f0:94:eb:3b:0a:5d:9e: e0:6e:91:51:82:b0:8f:dc:05:57:34:fb:e9:b8:cd:45:87:05: 97:56:49:66:b8:34:f7:e7:4b:9d:2f:7a:c0:49:14:6a:e4:bf: 59:93:6e:60:0d:9b:be:a9:7b:bb:c5:a9:c0:c7:d2:a7:a1:eb: c3:12:96:98:c8:df:67:25:cb:80:d9:be:d1:87:13:3b:2e:10: bb:56:c9:ed:1a:ba:2d:74:12:e0:eb:86:ca:0f:4a:cf:00:ad: ea:d4:0e:28:0b:79:8e:05:1c:a2:69:50:e5:7e:7b:e1:4c:d3: 4f:5c:04:7f:6e:51:0a:79:f9:52:4f:46:30:20:0a:2d:2a:0d: 66:fd:1b:01:40:d0:ba:fc:49:7a:d4:df:27:83:29:70:28:df: 55:1b:2b:13:cb:ef:cb:ca:12:36:a8:4b:f1:d4:3d:c4:51:d1: 5c:26:b0:b8:6a:68:b1:08:9c:ba:9b:a6:0e:e4:06:d7:6f:84: bc:2c:6b:7b:cf:8d:0d:60:a2:1d:ac:ba:71:7b:99:53:7c:2c: 49:c5:ff:15:02:ed:2b:29:c0:19:07:e7:a2:28:16:62:48:7e: 46:6b:c9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBsp/0YtwsB6usAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0 YjMwMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk MDIxOTk2MjAtNzViNC00NTY3LTgyNDItOTIzZmRlZmY3NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiEO0Cuw2e4wQRd/8mRBm7tE8F1jgXz7Fh+V m6tYH3UTDKBQRmax1cfvHXrG+wfTsIrRhTTAlPCSgrtyRR9G5+FjV4TRhZpuUQ0W aDQljHOn2zx8nS+HKcGI/hofBI7g1dxPC83n0nloXLNbh9ors4yU/2KDHiWVYzTp Ef4kldDiL4MPdF8It7ICmOWkslZSNsjWMMSfGFxiixxnt+h9mY3ZkQcLW5hDiP+v h3VQWxMTv+/xHW76HMT3VfEitHWtcMg7DiNlIVK7XLuPOmitFT+kq1S5+Yk2/wBg 5sp2Ldf0CTQAYDwapZ05Nka3c3EczefOHGxrKRNWY8GU/1osKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+B+4aPA5Y6KK+dacCuAEBt64ZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5 NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvOWM3MDRiMDctMTg3ZS0z OWFjLWI1NjAtZGIzNjU5YjNkYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5 ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4 NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm YTI3ODRiMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHebStVFCc/5eqFvPH+7+6nb+bB4CIotxMXA56dY8JTrOwpdnuBukVGC sI/cBVc0++m4zUWHBZdWSWa4NPfnS50vesBJFGrkv1mTbmANm76pe7vFqcDH0qeh 68MSlpjI32cly4DZvtGHEzsuELtWye0aui10EuDrhsoPSs8ArerUDigLeY4FHKJp UOV+e+FM009cBH9uUQp5+VJPRjAgCi0qDWb9GwFA0Lr8SXrU3yeDKXAo31UbKxPL 78vKEjaoS/HUPcRR0VwmsLhqaLEInLqbpg7kBtdvhLwsa3vPjQ1goh2sunF7mVN8 LEnF/xUC7SspwBkH56IoFmJIfkZryVg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:28 2025 by rpki-client