$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/95f9b86b-9416-3389-ac87-c3210bde5d0a.roa File: 95f9b86b-9416-3389-ac87-c3210bde5d0a.roa (raw, json) Hash identifier: DzfJcU+p5pjHv/UFRYKWkjWxQsh6qCJs9h56uAd2DPs= Subject key identifier: 30:DE:95:6F:25:27:B2:8B:D1:96:5E:C9:1D:94:22:5C:A9:64:F7:44 Certificate issuer: /CN=7770be2f-95a3-43e4-a139-53984564db4a Certificate serial: 010D0C9F43285848854B45F6353A217743A09700 Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/95f9b86b-9416-3389-ac87-c3210bde5d0a.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 162.213.204.0/24 maxlen: 24 162.213.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:45:f6:35:3a:21:77:43:a0:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=f1dfbffa-9f33-447c-9cb7-5dbcdf747142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:1d:27:18:06:31:e5:71:89:95:bd:00:70: 45:fa:6c:19:ae:1d:37:19:67:a4:8f:4f:bb:86:e6: 54:8d:b4:d8:22:7c:7a:eb:ba:af:f7:4f:4e:29:85: af:86:4a:c8:25:19:b0:ed:48:24:5a:fc:79:68:27: 27:a1:26:a8:a1:9d:c9:04:e9:53:96:65:7e:31:a8: 13:1a:2c:77:43:86:aa:a4:65:03:61:49:3c:d7:8e: 9c:7d:0c:4d:c0:1e:ac:80:90:55:1a:ef:c0:bc:49: bf:1d:ce:d5:c2:bc:bc:b5:02:c1:c7:f1:8d:9b:52: 01:3e:cd:11:f3:ee:49:e6:0f:10:cf:3b:29:57:9f: 7e:15:34:f0:4e:c7:c5:80:2c:f5:b4:45:d4:94:fa: e3:bf:3f:0d:cd:42:6b:b5:26:f5:0f:ae:ca:0f:9c: d8:49:ac:90:5a:40:e2:bf:6e:c1:95:38:ac:b6:61: 5d:e9:ad:59:c5:65:76:f5:ad:13:a2:f9:cd:07:dc: 73:91:91:9f:53:6a:76:f6:6b:fd:51:74:b4:cd:a8: cf:e0:02:4a:5d:00:ac:36:d2:7c:1c:c2:b7:b2:f8: 40:bc:e5:29:19:df:85:5e:e8:42:28:22:ab:27:3d: 83:ea:5e:bf:7d:eb:42:99:05:ee:78:7a:3d:23:18: 98:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DE:95:6F:25:27:B2:8B:D1:96:5E:C9:1D:94:22:5C:A9:64:F7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/95f9b86b-9416-3389-ac87-c3210bde5d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl X509v3 Authority Key Identifier: keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer sbgp-ipAddrBlock: critical IPv4: 162.213.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:18:0f:8f:00:aa:b4:0a:a7:40:44:e3:90:26:7d:61:fb:a9: 95:82:0a:16:94:cc:c0:bf:15:1b:63:aa:0c:0e:98:9c:3e:06: 31:7b:34:37:14:0b:78:72:fc:5c:90:02:38:5b:df:2b:28:2d: 36:d1:eb:bf:70:59:eb:8d:d4:a5:a3:d9:ba:db:3f:cc:65:7e: 8b:53:4f:c1:15:48:27:37:6e:0a:38:f8:8f:ed:1a:31:ff:8b: 0f:37:9c:f2:6c:ee:22:a8:d7:8c:ae:eb:8b:57:e8:e6:47:c8: 44:c7:52:81:d0:1d:5e:93:14:71:07:22:47:4c:fb:62:00:a5: 90:10:56:9b:20:d1:d5:c2:b0:01:08:7e:82:6e:da:63:18:d3: c5:b9:7f:4d:5d:13:54:9c:07:99:7b:90:5c:42:4d:33:6a:85: 34:14:58:01:8c:19:87:7d:ca:e8:fa:f7:16:ff:2a:03:a0:3a: 08:18:e0:cc:17:33:eb:ed:fd:bf:3a:56:c3:6e:57:7e:da:10: e1:df:04:4a:e9:78:10:76:64:7f:09:6b:5d:fe:6c:0d:c4:9b: dd:c2:38:6a:de:a2:25:ba:41:b5:64:e6:96:49:24:86:34:e8: bb:38:89:f6:c3:27:7d:a5:6c:90:73:9a:5d:81:f8:dd:8a:9f: de:a0:da:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0X2NTohd0OglwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc3MGJlMmYtOTVhMy00M2U0LWExMzktNTM5ODQ1NjRk YjRhMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZjFkZmJmZmEtOWYzMy00NDdjLTljYjctNWRiY2RmNzQ3MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo94dJxgGMeVxiZW9AHBF+mwZrh03GWekj0+7 huZUjbTYInx667qv909OKYWvhkrIJRmw7UgkWvx5aCcnoSaooZ3JBOlTlmV+MagT Gix3Q4aqpGUDYUk8146cfQxNwB6sgJBVGu/AvEm/Hc7Vwry8tQLBx/GNm1IBPs0R 8+5J5g8QzzspV59+FTTwTsfFgCz1tEXUlPrjvz8NzUJrtSb1D67KD5zYSayQWkDi v27BlTistmFd6a1ZxWV29a0TovnNB9xzkZGfU2p29mv9UXS0zajP4AJKXQCsNtJ8 HMK3svhAvOUpGd+FXuhCKCKrJz2D6l6/fetCmQXueHo9IxiYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDelW8lJ7KL0ZZeyR2UIlypZPdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83Nzcw YmUyZi05NWEzLTQzZTQtYTEzOS01Mzk4NDU2NGRiNGEvOTVmOWI4NmItOTQxNi0z Mzg5LWFjODctYzMyMTBiZGU1ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzc3MGJlMmYtOTVhMy00M2U0LWEx MzktNTM5ODQ1NjRkYjRhLzc3NzBiZTJmLTk1YTMtNDNlNC1hMTM5LTUzOTg0NTY0 ZGI0YS5jcmwwHwYDVR0jBBgwFoAUjvyxd9ZYG8LOEg1dKulnejPHbtcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NzcwYmUyZi05NWEzLTQzZTQtYTEzOS01Mzk4 NDU2NGRiNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEYD48AqrQKp0BE45AmfWH7qZWCChaUzMC/FRtjqgwOmJw+BjF7NDcU C3hy/FyQAjhb3ysoLTbR679wWeuN1KWj2brbP8xlfotTT8EVSCc3bgo4+I/tGjH/ iw83nPJs7iKo14yu64tX6OZHyETHUoHQHV6TFHEHIkdM+2IApZAQVpsg0dXCsAEI foJu2mMY08W5f01dE1ScB5l7kFxCTTNqhTQUWAGMGYd9yuj69xb/KgOgOggY4MwX M+vt/b86VsNuV37aEOHfBErpeBB2ZH8Ja13+bA3Em93COGreoiW6QbVk5pZJJIY0 6Ls4ifbDJ32lbJBzml2B+N2Kn96g2hs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:36 2025 by rpki-client