$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: SeFbAeKX4aSgnQGKSG4aCvUptn5sesv/h7udc/S46Mg= Subject key identifier: 92:15:44:AD:8F:58:BA:90:AA:43:78:8C:0D:E7:D2:FE:01:E4:08:01 Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F43285848100A7E4F643818DFB4A9D900 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:7e:4f:64:38:18:df:b4:a9:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=0d1870cd-c0b5-40b1-a249-15bd06c52d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:bb:bc:18:bf:e9:40:7b:1d:25:9d:34:94: 52:56:55:93:39:5b:25:55:dd:ab:09:d5:cc:5f:2f: e3:e3:15:8f:a0:b4:e7:43:f1:a9:e9:fb:e6:3e:93: 71:c8:a0:ba:4e:45:58:a7:9f:ca:85:36:ca:05:aa: bc:3f:f4:a9:d5:f0:c4:46:00:43:7c:40:55:84:a8: 46:d8:58:e6:b4:45:de:7b:6e:71:6f:50:91:83:d1: 7f:36:7f:0c:3e:0f:98:d0:1a:94:38:27:86:39:9c: 1b:1f:55:c0:f7:d4:c4:e9:c9:a0:ca:0d:ab:5b:18: 40:95:02:fa:bf:d1:07:fd:f8:73:41:0e:72:ad:1f: 37:cf:a7:4b:14:9f:29:31:c9:c0:0d:81:4e:41:f4: 21:5b:4e:69:7f:4d:d0:09:ce:a7:7c:cf:c8:bd:04: 31:77:d0:e0:6a:6c:30:17:c6:3b:69:82:81:8a:14: 23:95:ac:04:44:e8:a6:75:4a:5d:05:a2:ef:3b:9e: b8:e0:d4:e1:0e:4a:2a:c8:8f:50:41:e1:e8:ca:18: 8f:4d:95:14:48:07:d0:07:3d:98:b9:a5:b6:2d:9c: e0:72:00:5c:45:0b:d6:fb:30:cb:5f:f2:79:67:da: 6e:f5:b5:9f:00:c6:47:3a:9c:58:35:e8:27:5a:14: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:15:44:AD:8F:58:BA:90:AA:43:78:8C:0D:E7:D2:FE:01:E4:08:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:26:16:41:36:ff:39:5a:df:ab:5c:c8:fa:32:13:62:4d:ff: 98:5a:ce:a5:15:3e:73:ab:08:64:51:6d:5d:a3:ca:3d:4d:e6: e2:40:7f:ea:0e:0c:0f:84:d8:3e:be:1a:fd:e7:6b:ca:dc:8f: d5:ce:31:6b:7b:08:66:61:3e:6b:31:5a:9e:30:d0:fd:2c:d4: 36:5c:bb:67:3e:c9:9e:a1:f5:f4:8d:fa:ac:c0:cf:d1:b7:f7: 5a:7b:a0:97:89:58:94:d4:75:96:2c:3c:0e:62:70:ea:cd:06: 95:52:95:6c:0c:b4:3a:f5:36:50:d3:af:08:0b:3a:85:1e:93: 07:96:00:84:47:30:28:37:ba:7b:fc:15:5f:95:e9:3b:ff:15: 76:cd:c8:e4:9d:ab:7f:d0:ec:02:7b:8f:18:62:11:80:ab:99: 1a:1f:8b:92:f0:37:b5:00:a9:53:03:6d:4d:7d:06:19:f8:45: 6c:0a:34:64:d2:6c:5a:e4:08:0b:6a:d5:31:42:48:86:cc:3a: e1:cb:70:0a:d4:7c:19:45:34:d1:4f:77:63:8d:4b:36:0e:87: 0f:2f:29:0c:80:3a:19:b0:f9:db:98:ef:be:17:8d:6f:d2:29: bd:7d:40:74:2b:61:d4:6a:3b:7a:9f:41:61:ea:3d:a3:37:14: f8:ad:2a:a3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgQCn5PZDgY37Sp2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk MGQxODcwY2QtYzBiNS00MGIxLWEyNDktMTViZDA2YzUyZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7e7vBi/6UB7HSWdNJRSVlWTOVslVd2rCdXM Xy/j4xWPoLTnQ/Gp6fvmPpNxyKC6TkVYp5/KhTbKBaq8P/Sp1fDERgBDfEBVhKhG 2FjmtEXee25xb1CRg9F/Nn8MPg+Y0BqUOCeGOZwbH1XA99TE6cmgyg2rWxhAlQL6 v9EH/fhzQQ5yrR83z6dLFJ8pMcnADYFOQfQhW05pf03QCc6nfM/IvQQxd9Dgamww F8Y7aYKBihQjlawEROimdUpdBaLvO5644NThDkoqyI9QQeHoyhiPTZUUSAfQBz2Y uaW2LZzgcgBcRQvW+zDLX/J5Z9pu9bWfAMZHOpxYNegnWhQdcwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJIVRK2PWLqQqkN4jA3n0v4B5AgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvCYWQTb/OVrfq1zI+jITYk3/mFrOpRU+ c6sIZFFtXaPKPU3m4kB/6g4MD4TYPr4a/edrytyP1c4xa3sIZmE+azFanjDQ/SzU Nly7Zz7JnqH19I36rMDP0bf3Wnugl4lYlNR1liw8DmJw6s0GlVKVbAy0OvU2UNOv CAs6hR6TB5YAhEcwKDe6e/wVX5XpO/8Vds3I5J2rf9DsAnuPGGIRgKuZGh+LkvA3 tQCpUwNtTX0GGfhFbAo0ZNJsWuQIC2rVMUJIhsw64ctwCtR8GUU00U93Y41LNg6H Dy8pDIA6GbD525jvvheNb9IpvX1AdCth1Go7ep9BYeo9ozcU+K0qow== -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:35 2025 by rpki-client