$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/f9bd6879-de96-3de5-8c67-3a3a898dfc9e.roa File: f9bd6879-de96-3de5-8c67-3a3a898dfc9e.roa (raw, json) Hash identifier: 4H4gJxlrB0JZX78Q/Pk8ZW8yPICzUvMukBizst+eqyw= Subject key identifier: 50:82:CD:A8:71:7C:E3:A1:B2:45:6A:50:28:17:54:ED:CA:61:3D:D3 Certificate issuer: /CN=da61168f-5649-4fda-acc2-e65f377d2592 Certificate serial: 010D0C9F432858487FB5D41FB9A52B735F5ABD32 Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/f9bd6879-de96-3de5-8c67-3a3a898dfc9e.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 155.46.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d4:1f:b9:a5:2b:73:5f:5a:bd:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=d6cb02ac-3471-4c95-a11d-32f88727729f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:72:04:51:31:f9:ae:cf:8b:74:93:f6:65: 32:ce:42:ee:35:40:2a:b8:d4:59:83:d5:fb:f9:64: 6b:d8:81:84:c1:ac:a6:60:05:10:fd:e4:00:b5:1f: ae:19:ac:c4:46:32:a6:48:fc:d2:75:48:44:c8:72: 50:2e:d1:36:17:c8:3c:c0:49:20:d2:b3:be:bb:f5: 33:48:fc:48:4f:57:75:27:be:53:7b:81:5d:66:f5: 37:ab:c1:85:dc:f6:5c:c6:d0:ae:a0:e3:6c:1c:b1: 7b:dd:91:07:80:bc:bf:a5:64:79:bc:2f:65:a4:b8: a0:76:00:84:5d:39:5a:13:49:2b:a8:03:2c:bb:29: 62:60:f0:6c:54:40:a1:2e:60:93:28:4e:e2:14:c0: dd:21:26:a8:e2:bb:ec:6b:05:a5:cc:1d:ac:07:9e: d5:5b:7a:74:d4:ed:e1:8f:4c:46:2d:7e:42:92:db: 5c:b4:d8:a8:81:08:d3:65:db:64:a1:d3:64:7c:d4: ba:e0:b8:ac:c5:61:76:5e:a8:28:c4:12:16:5d:bb: b3:e4:b1:d0:80:a3:28:e6:38:98:67:5e:32:58:0d: 5d:f2:ba:4d:05:41:1a:1d:1e:22:40:7e:cf:c7:bb: d3:68:7e:c2:1f:89:0f:7a:3a:27:f6:63:94:1e:50: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:82:CD:A8:71:7C:E3:A1:B2:45:6A:50:28:17:54:ED:CA:61:3D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/f9bd6879-de96-3de5-8c67-3a3a898dfc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl X509v3 Authority Key Identifier: keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer sbgp-ipAddrBlock: critical IPv4: 155.46.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:46:36:b2:7c:e5:5e:24:a0:ff:7d:e3:c7:0a:99:85:90:6d: 91:ea:7a:19:77:32:52:66:9d:8d:01:b7:17:d1:f2:7f:df:a6: c8:06:13:e6:bc:6a:7b:2e:32:2f:d4:9d:42:69:d9:02:74:36: bb:45:96:1c:2d:dc:33:c7:c4:75:3a:5c:23:44:b6:6e:40:22: 0b:02:c2:83:b9:06:1b:bb:3e:74:c6:30:11:a2:55:b1:97:e3: 46:b9:96:87:57:83:58:b8:78:b6:8f:4c:8f:b2:c6:e9:cf:2e: e6:d2:8a:69:28:8d:28:c7:89:99:65:8f:a0:42:d3:30:44:50: 93:a0:5f:9e:d3:98:ce:fa:1b:c7:76:d8:19:b4:16:45:31:99: c0:87:17:d7:2a:18:c0:c2:39:4d:cf:4c:1d:74:a9:fb:43:72: de:a4:52:00:90:82:c1:9b:f6:2c:79:61:4d:9f:83:f7:0f:d4: 63:7b:6b:de:01:35:ec:47:b7:c6:4c:22:16:9d:50:6f:57:cb: 4f:35:a9:b5:5b:2e:07:bf:ea:cd:d0:ae:ff:52:44:92:ae:90: df:cd:03:2f:47:2e:f0:18:20:0c:d3:ac:9f:01:60:4c:18:84: c4:a9:80:83:2a:1c:f1:ce:b7:82:4c:4c:76:dc:0e:94:24:e9: 99:6b:87:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdQfuaUrc19avTIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MTE2OGYtNTY0OS00ZmRhLWFjYzItZTY1ZjM3N2Qy NTkyMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk ZDZjYjAyYWMtMzQ3MS00Yzk1LWExMWQtMzJmODg3Mjc3MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1dyBFEx+a7Pi3ST9mUyzkLuNUAquNRZg9X7 +WRr2IGEwaymYAUQ/eQAtR+uGazERjKmSPzSdUhEyHJQLtE2F8g8wEkg0rO+u/Uz SPxIT1d1J75Te4FdZvU3q8GF3PZcxtCuoONsHLF73ZEHgLy/pWR5vC9lpLigdgCE XTlaE0krqAMsuyliYPBsVEChLmCTKE7iFMDdISao4rvsawWlzB2sB57VW3p01O3h j0xGLX5CkttctNiogQjTZdtkodNkfNS64LisxWF2XqgoxBIWXbuz5LHQgKMo5jiY Z14yWA1d8rpNBUEaHR4iQH7Px7vTaH7CH4kPejon9mOUHlDnkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCCzahxfOOhskVqUCgXVO3KYT3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYx MTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3ZDI1OTIvZjliZDY4NzktZGU5Ni0z ZGU1LThjNjctM2EzYTg5OGRmYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGE2MTE2OGYtNTY0OS00ZmRhLWFj YzItZTY1ZjM3N2QyNTkyL2RhNjExNjhmLTU2NDktNGZkYS1hY2MyLWU2NWYzNzdk MjU5Mi5jcmwwHwYDVR0jBBgwFoAU4GOzDFMmOtVqA1p0jJMUFc8ADFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVm Mzc3ZDI1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmy7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhGNrJ85V4koP9948cKmYWQbZHqehl3MlJmnY0BtxfR8n/fpsgGE+a8 ansuMi/UnUJp2QJ0NrtFlhwt3DPHxHU6XCNEtm5AIgsCwoO5Bhu7PnTGMBGiVbGX 40a5lodXg1i4eLaPTI+yxunPLubSimkojSjHiZllj6BC0zBEUJOgX57TmM76G8d2 2Bm0FkUxmcCHF9cqGMDCOU3PTB10qftDct6kUgCQgsGb9ix5YU2fg/cP1GN7a94B NexHt8ZMIhadUG9Xy081qbVbLge/6s3Qrv9SRJKukN/NAy9HLvAYIAzTrJ8BYEwY hMSpgIMqHPHOt4JMTHbcDpQk6Zlrh30= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:19 2025 by rpki-client