$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa File: 2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa (raw, json) Hash identifier: 6jVCRZ2F2fZtyCv+fC1n7stXSM9q4HhyV8yTtfHlAkw= Subject key identifier: A1:29:14:9D:05:E2:43:07:3B:16:EB:DD:6A:1D:B5:20:65:36:BF:9C Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858488AE0A7906A868916CDC53400 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 30103 IP address blocks: 161.199.136.0/23 maxlen: 24 198.251.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:a7:90:6a:86:89:16:cd:c5:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=b0d5f176-e7c7-4fe1-b087-3987e14df69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:f9:68:1d:e6:43:8c:62:e3:d5:30:a9:42: fe:fa:13:ee:f3:fc:c5:6f:89:38:be:5b:3d:4f:9e: a7:45:b4:b3:79:4b:4f:5e:de:4b:7d:48:9d:a5:89: ef:87:ab:01:a9:30:7c:f7:e3:c3:42:6c:08:43:a6: f8:5f:61:7e:af:d4:b9:88:16:41:20:97:5d:e6:38: f1:48:75:22:f5:cf:09:f9:30:f2:63:8e:87:52:61: 6a:b4:05:cf:12:5f:78:df:5a:80:d7:05:36:5f:fa: 66:92:6e:66:ac:e7:bc:87:ac:dd:89:ea:73:4c:73: 91:9f:6c:ec:7f:fd:6c:54:84:0c:40:93:29:62:45: 53:bf:5c:a4:eb:d7:2c:89:82:c4:60:34:56:f9:b5: 8a:4f:80:c2:9b:20:00:12:3f:f8:bf:cf:cc:d2:b6: 1e:25:c6:4a:c8:8d:59:bc:a1:8a:81:7a:5e:30:81: ff:a3:af:53:17:c4:5c:ef:05:61:91:b5:2e:2d:e6: 2c:22:53:ec:24:35:09:9d:a4:09:0a:ba:66:44:d8: aa:5f:09:67:90:37:98:e4:cf:f8:a0:a4:4c:f6:be: ad:3c:4b:52:fe:ed:6e:29:30:fc:2f:30:41:7c:76: fd:8e:f9:ac:b8:6a:29:c3:68:c8:9b:42:60:df:c0: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:29:14:9D:05:E2:43:07:3B:16:EB:DD:6A:1D:B5:20:65:36:BF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 161.199.136.0/23 198.251.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6f:3c:7b:ba:96:75:22:53:12:20:91:dc:b0:f9:13:47:99: 37:52:19:53:c0:44:c3:f1:96:00:28:ba:ff:3c:af:4d:3b:c4: 81:7b:0b:10:3d:e8:63:4b:5a:db:57:e2:75:af:f9:4b:fa:6c: 76:43:27:cd:6f:47:2d:30:87:2c:30:c6:d9:f8:dc:cd:aa:e0: d6:30:20:7c:99:14:d4:b8:3c:4c:ad:3d:7f:2f:21:54:e4:bf: 40:70:43:43:fc:ed:95:45:09:c0:88:8d:bc:cb:14:71:82:7d: f0:4a:41:61:88:37:65:5a:76:e6:17:d5:fd:0b:95:4b:d1:65: 44:9a:be:7e:dc:14:3f:ed:c2:7b:83:65:46:5d:43:ea:2b:9e: 03:78:aa:43:3b:78:09:f4:0b:da:db:ea:5e:71:23:cb:fb:0a: 75:6a:52:45:f9:0f:f5:98:f9:75:d8:12:9c:84:c6:57:67:31: 2a:fd:6a:5b:d5:9e:c6:9a:b4:35:51:30:9a:93:7c:cd:09:e5: 2d:64:eb:20:00:e6:a2:13:7a:12:e8:45:ab:d2:74:7c:72:85: 35:06:01:3e:2b:43:8d:27:75:9e:47:97:18:eb:c7:98:fc:ac: 33:4b:fd:12:25:00:78:7c:7b:e2:c3:93:79:54:62:99:00:9c: f6:73:73:fd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiK4KeQaoaJFs3FNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk YjBkNWYxNzYtZTdjNy00ZmUxLWIwODctMzk4N2UxNGRmNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth75aB3mQ4xi49UwqUL++hPu8/zFb4k4vls9 T56nRbSzeUtPXt5LfUidpYnvh6sBqTB89+PDQmwIQ6b4X2F+r9S5iBZBIJdd5jjx SHUi9c8J+TDyY46HUmFqtAXPEl9431qA1wU2X/pmkm5mrOe8h6zdiepzTHORn2zs f/1sVIQMQJMpYkVTv1yk69csiYLEYDRW+bWKT4DCmyAAEj/4v8/M0rYeJcZKyI1Z vKGKgXpeMIH/o69TF8Rc7wVhkbUuLeYsIlPsJDUJnaQJCrpmRNiqXwlnkDeY5M/4 oKRM9r6tPEtS/u1uKTD8LzBBfHb9jvmsuGopw2jIm0Jg38DhIwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKEpFJ0F4kMHOxbr3WodtSBlNr+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMmEwOWRhZWItMmFiMS0z YzYyLTlkOTItOTlkNjc4NGRhNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceIAwQD xvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGRvPHu6lnUiUxIgkdyw+RNHmTdSGVPARMPxlgAouv88r007 xIF7CxA96GNLWttX4nWv+Uv6bHZDJ81vRy0whywwxtn43M2q4NYwIHyZFNS4PEyt PX8vIVTkv0BwQ0P87ZVFCcCIjbzLFHGCffBKQWGIN2VaduYX1f0LlUvRZUSavn7c FD/twnuDZUZdQ+orngN4qkM7eAn0C9rb6l5xI8v7CnVqUkX5D/WY+XXYEpyExldn MSr9alvVnsaatDVRMJqTfM0J5S1k6yAA5qITehLoRavSdHxyhTUGAT4rQ40ndZ5H lxjrx5j8rDNL/RIlAHh8e+LDk3lUYpkAnPZzc/0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:33 2025 by rpki-client