$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa File: 322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa (raw, json) Hash identifier: //vbsq5eVgAF9hK/XTT8Rz0k7FhwfA/wHBziJn0lJII= Subject key identifier: 64:13:3E:6B:02:B0:A9:6C:53:03:53:0B:C8:08:1F:05:F6:4C:48:5C Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F43285848D7A6496B32AF9B4352A34CE0 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 161.199.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:49:6b:32:af:9b:43:52:a3:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=670ed7b2-e671-4c0d-8c53-84ef65f4011a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:a3:06:b1:73:42:6a:c2:6b:0f:6f:aa:4e: 90:ac:25:48:79:37:7e:5e:c6:5f:ee:22:68:59:fa: 7c:67:9f:ea:85:bf:f4:f9:71:74:83:09:e1:dc:f4: fe:9d:38:c9:2b:63:07:2a:22:15:a5:56:82:02:e8: 60:21:38:65:8f:94:57:5f:33:79:be:72:d9:f7:e0: 67:4b:65:bc:5f:79:82:94:0d:df:b6:dd:da:23:c3: d0:b7:8a:16:43:f5:b8:c5:3a:55:60:e3:1d:4c:d1: ec:71:15:30:14:f3:f7:3d:f8:f2:6c:60:ba:af:5b: 2b:5d:a3:01:88:e9:1d:b0:d1:fb:58:66:66:d0:31: 0a:9b:ad:df:88:2b:25:a5:78:42:e4:0d:91:1a:98: 5c:7a:9d:32:67:bf:05:9f:51:e4:b0:26:d0:e2:7d: ed:f6:74:49:65:ed:cd:a3:d1:f9:34:e4:23:ef:84: 91:85:a9:4e:3c:29:31:58:a5:87:d7:3f:82:f1:aa: 01:06:85:63:9d:c4:73:78:5e:0c:4f:f4:83:ca:d6: 3e:25:33:33:a3:f2:4c:1b:56:5d:29:e1:bd:98:29: 5b:06:82:ca:c8:57:d9:26:4d:a7:20:d5:a1:b9:54: 6d:9d:9d:dc:5f:72:d0:b0:ad:74:bb:fa:d5:d7:9f: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:13:3E:6B:02:B0:A9:6C:53:03:53:0B:C8:08:1F:05:F6:4C:48:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 161.199.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7f:38:b9:1c:4d:92:5a:f8:ae:08:2c:02:3e:90:5a:d0:9b: 17:7b:58:a4:27:7b:6b:fa:96:b2:c4:cd:c4:a7:d9:42:55:69: dd:06:22:b2:f8:34:9a:f9:e0:91:b4:20:f7:0b:86:98:c4:74: a1:a9:fa:d7:27:26:ee:39:ce:c2:0e:54:90:ce:99:f6:a5:12: b9:6a:74:05:ef:aa:c9:06:9e:02:25:16:2c:21:70:73:ce:b1: 81:52:f9:28:c2:d6:f6:22:22:8c:4c:84:45:0d:a4:b1:d9:23: 5f:85:26:44:cb:30:e4:4a:f3:aa:78:ab:2e:6f:0d:00:b1:58: dc:39:f1:0e:fb:71:87:6f:70:c3:35:8b:6c:76:6f:0f:e3:98: 1a:f9:1c:e7:bb:cc:90:d7:b2:a8:80:26:a3:cc:42:9d:1b:e2: d3:5a:44:ec:ab:be:d9:16:64:b2:50:86:5f:20:21:f8:ea:15: d2:3d:51:42:fc:f4:75:85:de:1b:58:e6:c8:08:b2:a5:b5:e5: cf:a7:4e:2f:b4:08:04:14:66:2c:bb:74:c5:28:12:38:f9:1d: 79:1b:c6:d2:db:11:e3:bc:07:c5:4d:6c:19:0a:78:55:cc:83: 20:2d:14:d2:8b:fe:27:9c:23:27:d2:c9:a4:d7:16:e2:c6:8c: d5:31:a2:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpklrMq+bQ1KjTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk NjcwZWQ3YjItZTY3MS00YzBkLThjNTMtODRlZjY1ZjQwMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul+jBrFzQmrCaw9vqk6QrCVIeTd+XsZf7iJo Wfp8Z5/qhb/0+XF0gwnh3PT+nTjJK2MHKiIVpVaCAuhgIThlj5RXXzN5vnLZ9+Bn S2W8X3mClA3ftt3aI8PQt4oWQ/W4xTpVYOMdTNHscRUwFPP3PfjybGC6r1srXaMB iOkdsNH7WGZm0DEKm63fiCslpXhC5A2RGphcep0yZ78Fn1HksCbQ4n3t9nRJZe3N o9H5NOQj74SRhalOPCkxWKWH1z+C8aoBBoVjncRzeF4MT/SDytY+JTMzo/JMG1Zd KeG9mClbBoLKyFfZJk2nINWhuVRtnZ3cX3LQsK10u/rV15+RswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQTPmsCsKlsUwNTC8gIHwX2TEhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvMzIyZDZkOTYtZTdmYS0z NDNiLWIzYmEtZjIxZTY5MDM3YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB/OLkcTZJa+K4ILAI+kFrQmxd7WKQne2v6lrLEzcSn2UJVad0GIrL4 NJr54JG0IPcLhpjEdKGp+tcnJu45zsIOVJDOmfalErlqdAXvqskGngIlFiwhcHPO sYFS+SjC1vYiIoxMhEUNpLHZI1+FJkTLMORK86p4qy5vDQCxWNw58Q77cYdvcMM1 i2x2bw/jmBr5HOe7zJDXsqiAJqPMQp0b4tNaROyrvtkWZLJQhl8gIfjqFdI9UUL8 9HWF3htY5sgIsqW15c+nTi+0CAQUZiy7dMUoEjj5HXkbxtLbEeO8B8VNbBkKeFXM gyAtFNKL/iecIyfSyaTXFuLGjNUxoqE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:24 2025 by rpki-client