$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa File: 57903d73-d89f-3216-a0f3-52cec44646dd.roa (raw, json) Hash identifier: IR+24n72SHCC5FYGgDFZvlKeZB3I2Sfy7tCa+516+UI= Subject key identifier: FD:F1:23:8D:97:16:5A:0E:9A:AE:E8:32:64:85:B3:F7:BC:C2:50:E7 Certificate issuer: /CN=da61168f-5649-4fda-acc2-e65f377d2592 Certificate serial: 010D0C9F432858489E6B6AFA9B88C73F908B8980 Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 155.46.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6a:fa:9b:88:c7:3f:90:8b:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1e220d8c-3872-4df8-aafe-2bb3011b9548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:85:52:5c:86:8b:83:d7:9c:1d:65:83:f7: 45:95:9a:63:84:df:65:0f:5f:1a:4e:9a:9f:61:57: 45:e8:19:e5:39:92:f0:17:a9:4b:be:46:22:cf:b6: 98:cf:02:75:5a:85:cb:2d:92:49:c1:03:3d:d4:11: a2:be:74:81:d3:55:b3:0e:21:31:36:11:75:13:c3: ed:3e:45:4b:b5:19:d9:10:93:72:df:cd:03:f2:96: 1f:d4:e9:e9:38:ba:73:76:4b:97:ac:48:d9:ad:67: b4:38:c0:79:57:c3:a3:bc:43:fd:7f:2d:15:45:e9: 0f:07:31:0f:dd:6a:f2:b3:a6:d9:61:28:67:fc:6e: 14:13:b4:03:36:e5:ba:3e:6a:81:3b:e0:66:6e:ab: a9:1b:2d:7e:70:bb:5d:ae:39:5d:90:88:54:af:b4: 45:83:bc:be:a8:d7:e6:df:3d:3e:48:dd:f5:76:6d: a8:d2:52:40:a8:82:73:93:dc:6a:78:9e:ba:00:1d: 73:7e:dd:f6:8b:dc:b6:e8:77:e0:e7:11:51:28:6c: a1:ee:69:81:ed:5c:ce:0d:b7:20:2e:44:ea:72:8b: c6:45:38:32:c0:83:0d:0e:ec:24:ef:b4:62:bd:b2: 2c:8c:b4:cb:87:c6:94:f4:0f:ed:7e:0c:79:3f:65: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F1:23:8D:97:16:5A:0E:9A:AE:E8:32:64:85:B3:F7:BC:C2:50:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/57903d73-d89f-3216-a0f3-52cec44646dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl X509v3 Authority Key Identifier: keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer sbgp-ipAddrBlock: critical IPv4: 155.46.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:85:4f:a4:c6:a1:5a:43:01:21:2e:d2:88:7e:a0:78:04:67: d7:c4:d5:10:62:b8:6d:26:ed:e6:f0:06:45:90:08:b2:58:04: bb:6a:1f:f4:73:61:56:57:75:3d:86:11:c5:9b:b3:5f:90:04: e3:12:cc:ee:f0:93:c5:ce:8a:89:61:ea:e8:48:f7:ba:3c:40: 0b:31:2e:a2:95:7a:7b:7d:ef:f6:2f:0d:e0:8b:e8:ee:03:ca: e3:0f:eb:c2:24:c4:a0:ca:2e:9c:cd:72:d7:74:13:7e:2a:42: 54:4b:24:96:36:af:16:5f:71:6c:9c:d7:1a:5e:93:c8:70:4f: 02:84:de:f6:71:a1:ba:71:a2:e1:9d:67:7f:d3:a3:be:47:d5: 12:17:0d:a5:b4:4e:92:d1:53:09:c7:61:b5:12:7d:1a:ae:80: f8:73:65:e9:dd:bd:65:a3:6e:45:5e:a7:52:5c:bb:17:a0:c6: a4:33:65:57:a1:b2:72:05:d7:1c:96:ae:f5:da:a7:8b:8f:dd: 55:9f:bf:ae:2b:78:bb:88:ae:27:c1:bb:cb:01:be:ae:d9:c3: e7:dd:32:4c:42:e9:2d:db:9c:b8:1e:00:cb:3b:b6:cb:bb:f7: 29:27:2f:ab:9b:42:44:49:ed:b7:ee:5a:f3:11:0d:ee:40:e9: a9:f1:f0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2r6m4jHP5CLiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MTE2OGYtNTY0OS00ZmRhLWFjYzItZTY1ZjM3N2Qy NTkyMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWUyMjBkOGMtMzg3Mi00ZGY4LWFhZmUtMmJiMzAxMWI5NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFWFUlyGi4PXnB1lg/dFlZpjhN9lD18aTpqf YVdF6BnlOZLwF6lLvkYiz7aYzwJ1WoXLLZJJwQM91BGivnSB01WzDiExNhF1E8Pt PkVLtRnZEJNy380D8pYf1OnpOLpzdkuXrEjZrWe0OMB5V8OjvEP9fy0VRekPBzEP 3Wrys6bZYShn/G4UE7QDNuW6PmqBO+BmbqupGy1+cLtdrjldkIhUr7RFg7y+qNfm 3z0+SN31dm2o0lJAqIJzk9xqeJ66AB1zft32i9y26Hfg5xFRKGyh7mmB7VzODbcg LkTqcovGRTgywIMNDuwk77RivbIsjLTLh8aU9A/tfgx5P2W0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3xI42XFloOmq7oMmSFs/e8wlDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYx MTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3ZDI1OTIvNTc5MDNkNzMtZDg5Zi0z MjE2LWEwZjMtNTJjZWM0NDY0NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGE2MTE2OGYtNTY0OS00ZmRhLWFj YzItZTY1ZjM3N2QyNTkyL2RhNjExNjhmLTU2NDktNGZkYS1hY2MyLWU2NWYzNzdk MjU5Mi5jcmwwHwYDVR0jBBgwFoAU4GOzDFMmOtVqA1p0jJMUFc8ADFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVm Mzc3ZDI1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmy7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiFT6TGoVpDASEu0oh+oHgEZ9fE1RBiuG0m7ebwBkWQCLJYBLtqH/Rz YVZXdT2GEcWbs1+QBOMSzO7wk8XOiolh6uhI97o8QAsxLqKVent97/YvDeCL6O4D yuMP68IkxKDKLpzNctd0E34qQlRLJJY2rxZfcWyc1xpek8hwTwKE3vZxobpxouGd Z3/To75H1RIXDaW0TpLRUwnHYbUSfRqugPhzZendvWWjbkVep1JcuxegxqQzZVeh snIF1xyWrvXap4uP3VWfv64reLuIrifBu8sBvq7Zw+fdMkxC6S3bnLgeAMs7tsu7 9yknL6ubQkRJ7bfuWvMRDe5A6anx8CE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:22 2025 by rpki-client