$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa File: d56026a1-cfac-3474-a6ad-48aea0c9a396.roa (raw, json) Hash identifier: 2REuDzeWRr8s6krym5v84ELBy8tL41lWSucqg8H6ans= Subject key identifier: 61:62:E3:99:74:24:3E:F9:6F:FC:66:5E:4C:E9:BE:0F:D6:51:10:8E Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F432858489FD09C7C812D59C9741F8480 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 396261 IP address blocks: 128.163.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:9c:7c:81:2d:59:c9:74:1f:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=c90ec5d0-2a14-4c9b-99fd-67636c76a8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:23:2d:f4:ca:1d:ce:bd:23:f5:d9:54:48:c1: 9c:bb:23:2f:b6:e1:15:c3:0b:92:b4:65:1c:0d:f3: c8:49:aa:3e:e9:9c:70:9a:c0:6e:d7:03:25:a8:45: 22:46:28:d2:18:23:1b:3f:7f:c5:d7:2a:08:47:3b: 86:0f:a9:11:b2:05:a3:d5:ac:65:89:ed:52:86:cc: 77:d4:67:4c:b9:47:60:da:09:c6:74:07:48:73:ae: 53:c4:e5:43:cd:66:18:03:5c:c5:a6:84:54:3d:d4: 04:fb:4c:2f:6e:02:b9:98:40:2c:f1:50:43:43:c1: ab:3d:f8:58:7e:d3:fa:aa:54:e4:a0:34:ec:f8:89: 61:64:ec:90:35:d5:45:f6:9c:ba:bc:54:74:49:02: 41:8a:13:02:60:f0:13:4c:63:2d:79:a0:6d:68:70: ab:a7:66:83:9a:a2:f9:8a:2f:0f:e7:af:76:03:99: a9:71:0f:21:c5:c2:42:8d:ce:78:ef:ee:c6:0d:b3: 98:15:8b:7e:50:b9:24:27:0e:9c:88:b1:ac:98:b1: 66:1c:15:2d:55:75:b3:90:3e:89:01:8e:7e:54:51: 9e:d8:02:0a:88:a8:ce:6f:a2:ce:07:78:1b:d5:e4: 30:b6:32:15:75:5b:ae:cf:83:dd:5b:ed:77:53:3f: d4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:E3:99:74:24:3E:F9:6F:FC:66:5E:4C:E9:BE:0F:D6:51:10:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b9:da:93:15:6b:e8:2c:be:77:ab:04:da:e8:55:9f:54:69: 1e:7f:e7:a5:bb:3c:e5:8c:61:91:78:90:18:dc:f3:a8:6d:16: 9f:f3:80:a2:82:9e:6e:b1:6c:d6:59:5b:06:df:43:3e:e6:2f: 6e:c8:d9:5e:ae:79:20:56:77:6b:cb:8c:02:08:8b:f3:82:44: a3:fb:b9:74:f9:ec:40:26:3d:2f:77:73:1a:84:40:60:29:d7: 86:2a:dc:73:1d:78:99:c7:9f:b3:0e:df:e5:89:94:54:d8:f9: 37:20:ea:a9:3a:6a:96:34:2c:ab:91:6c:5f:da:5d:e4:54:95: 5d:5d:bc:16:88:05:d6:45:ec:77:e8:20:16:43:08:5d:2c:05: 00:37:90:77:15:d8:e4:84:70:89:fb:0d:b2:c8:54:6c:97:ff: 07:3c:b3:6b:bc:ee:ad:5b:f1:5e:8e:0c:d8:df:49:fe:33:3e: 5c:a6:4d:f6:0a:27:dc:35:ed:d3:db:bf:f7:1f:c7:f9:3f:03: 96:c0:6b:06:30:c5:44:73:64:74:b0:93:f0:cc:de:60:49:e1: ee:f9:6b:60:e9:f3:e3:44:5f:1e:8a:63:21:f9:c7:40:24:ea: dd:8b:19:30:6d:e9:70:c7:ca:19:dd:da:d5:aa:97:ee:37:45: 7c:a9:a8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0Jx8gS1ZyXQfhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk YzkwZWM1ZDAtMmExNC00YzliLTk5ZmQtNjc2MzZjNzZhOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiMt9Modzr0j9dlUSMGcuyMvtuEVwwuStGUc DfPISao+6ZxwmsBu1wMlqEUiRijSGCMbP3/F1yoIRzuGD6kRsgWj1axlie1Shsx3 1GdMuUdg2gnGdAdIc65TxOVDzWYYA1zFpoRUPdQE+0wvbgK5mEAs8VBDQ8GrPfhY ftP6qlTkoDTs+IlhZOyQNdVF9py6vFR0SQJBihMCYPATTGMteaBtaHCrp2aDmqL5 ii8P5692A5mpcQ8hxcJCjc547+7GDbOYFYt+ULkkJw6ciLGsmLFmHBUtVXWzkD6J AY5+VFGe2AIKiKjOb6LOB3gb1eQwtjIVdVuuz4PdW+13Uz/UqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFi45l0JD75b/xmXkzpvg/WURCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDU2MDI2YTEtY2ZhYy0z NDc0LWE2YWQtNDhhZWEwYzlhMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgKPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC52pMVa+gsvnerBNroVZ9UaR5/56W7POWMYZF4kBjc86htFp/zgKKC nm6xbNZZWwbfQz7mL27I2V6ueSBWd2vLjAIIi/OCRKP7uXT57EAmPS93cxqEQGAp 14Yq3HMdeJnHn7MO3+WJlFTY+Tcg6qk6apY0LKuRbF/aXeRUlV1dvBaIBdZF7Hfo IBZDCF0sBQA3kHcV2OSEcIn7DbLIVGyX/wc8s2u87q1b8V6ODNjfSf4zPlymTfYK J9w17dPbv/cfx/k/A5bAawYwxURzZHSwk/DM3mBJ4e75a2Dp8+NEXx6KYyH5x0Ak 6t2LGTBt6XDHyhnd2tWql+43RXypqKk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:06 2025 by rpki-client