$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa File: d398e187-3fa7-3919-8a37-a9993ff3c633.roa (raw, json) Hash identifier: /mz8sa+n9nOHaQgGdqkEuxsCJab1WjtKNbG/lCJzZhM= Subject key identifier: 81:CE:E5:33:64:E5:DC:22:FF:9D:31:7D:36:6C:A3:BE:00:22:DE:14 Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Certificate serial: 010D0C9F432858480BDA70639024D7DFAF921A80 Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 16580 IP address blocks: 131.232.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:70:63:90:24:d7:df:af:92:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=f617aab7-cf7b-4d46-aa4c-7e8a258cdf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3b:e9:d1:92:45:bc:81:a8:f8:c3:c7:73:c1: ae:73:16:3a:6c:ce:21:0b:b7:aa:5c:89:ef:8b:03: 63:d8:79:bb:dd:e3:b3:6f:05:3d:c3:fa:76:3b:63: 79:7b:aa:08:4e:f9:4a:dd:ed:03:64:b1:21:6f:a7: 44:ad:d0:87:62:39:0f:ec:b7:82:4d:8a:de:6f:79: 06:a5:a9:11:99:bc:50:6c:56:30:96:41:0f:15:64: c3:c3:a8:2a:eb:5e:bd:91:0c:d4:39:8e:c2:73:43: 07:b6:cb:e2:c5:1b:9e:54:d4:50:1a:01:8d:ff:df: ff:e4:aa:65:85:1d:61:15:6d:a6:5c:01:83:52:a5: ea:02:ed:9c:03:2c:88:02:f0:7a:e7:b6:c2:52:17: 27:b3:41:01:1e:2b:d0:14:1d:e7:a3:9b:15:24:7a: 45:8c:f8:15:78:1f:e0:30:c3:36:a6:35:4d:d3:d5: 4b:1b:48:08:63:fa:6a:54:fc:fb:60:22:a7:c9:02: 62:bf:18:34:c5:0c:4a:7e:c5:61:c5:fb:b6:73:1f: b3:6d:22:6c:46:3b:59:bb:0a:30:e7:83:28:8f:8b: 10:67:6e:fd:ad:d5:4c:54:c4:c6:05:d3:b7:48:f1: df:9c:db:16:f6:25:f5:b7:f6:eb:2f:30:f9:19:59: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CE:E5:33:64:E5:DC:22:FF:9D:31:7D:36:6C:A3:BE:00:22:DE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl X509v3 Authority Key Identifier: keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer sbgp-ipAddrBlock: critical IPv4: 131.232.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:90:c7:d4:45:b7:bb:8d:b8:4f:f7:7c:bb:4f:88:9f:2a:13: 75:50:f2:7f:e4:d6:b8:c8:36:33:09:aa:cf:d0:50:68:a3:52: 47:e0:ba:60:2f:a3:bf:35:2a:da:f0:9f:34:c1:62:84:21:a8: 11:50:33:72:00:3e:f9:da:66:3e:9f:ce:1f:9f:d1:8f:56:92: 6c:19:c7:9c:da:fa:a3:fd:30:5d:15:87:16:d2:f1:4a:1f:e8: ba:61:17:96:04:30:39:e1:8a:89:5a:b9:b9:58:b6:5f:d0:20: bc:d1:79:59:58:c9:a3:c0:e5:95:ae:9b:d4:71:94:f1:20:be: f5:ed:74:e0:d8:18:81:82:28:80:d4:89:d2:43:6f:2a:58:33: bc:45:a9:93:20:7d:cf:fd:c5:02:e5:0a:ea:50:85:67:92:74: 7d:4a:0e:e5:2f:80:39:af:7b:c0:be:ca:d3:e4:94:26:f5:01: 93:81:0e:2a:d0:22:db:e0:55:d9:76:00:85:8b:ff:e2:ce:be: 35:a0:95:6d:51:64:a4:66:71:f3:4a:84:5e:41:e8:e6:47:ed: 73:0d:5b:4d:e8:ef:4c:e6:ab:d8:12:ef:ad:5e:0b:0f:83:0e: 8b:6d:4f:59:4b:99:50:c4:d5:d8:88:33:7e:30:99:da:70:a1: 6d:68:96:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2nBjkCTX36+SGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz NjVlMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk ZjYxN2FhYjctY2Y3Yi00ZDQ2LWFhNGMtN2U4YTI1OGNkZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzvp0ZJFvIGo+MPHc8GucxY6bM4hC7eqXInv iwNj2Hm73eOzbwU9w/p2O2N5e6oITvlK3e0DZLEhb6dErdCHYjkP7LeCTYreb3kG pakRmbxQbFYwlkEPFWTDw6gq6169kQzUOY7Cc0MHtsvixRueVNRQGgGN/9//5Kpl hR1hFW2mXAGDUqXqAu2cAyyIAvB657bCUhcns0EBHivQFB3no5sVJHpFjPgVeB/g MMM2pjVN09VLG0gIY/pqVPz7YCKnyQJivxg0xQxKfsVhxfu2cx+zbSJsRjtZuwow 54Moj4sQZ279rdVMVMTGBdO3SPHfnNsW9iX1t/brLzD5GVkorQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHO5TNk5dwi/50xfTZso74AIt4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2 NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvZDM5OGUxODctM2ZhNy0z OTE5LThhMzctYTk5OTNmZjNjNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0 ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+glMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyQx9RFt7uNuE/3fLtPiJ8qE3VQ8n/k1rjINjMJqs/QUGijUkfgumAv o781KtrwnzTBYoQhqBFQM3IAPvnaZj6fzh+f0Y9WkmwZx5za+qP9MF0VhxbS8Uof 6LphF5YEMDnhiolaublYtl/QILzReVlYyaPA5ZWum9RxlPEgvvXtdODYGIGCKIDU idJDbypYM7xFqZMgfc/9xQLlCupQhWeSdH1KDuUvgDmve8C+ytPklCb1AZOBDirQ ItvgVdl2AIWL/+LOvjWglW1RZKRmcfNKhF5B6OZH7XMNW03o70zmq9gS761eCw+D DottT1lLmVDE1diIM34wmdpwoW1olh4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:45 2025 by rpki-client