$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa File: 8f09f090-b8d4-3923-a80d-9ac4054485a2.roa (raw, json) Hash identifier: wtVFWTQbSgajowlVZxJl+YsJf7wPu6mw5aM+pAe64is= Subject key identifier: 24:2C:C5:B4:17:4D:E4:D4:26:7C:BB:B9:9A:D0:35:73:EC:FD:8C:79 Certificate issuer: /CN=fc97c6c8-f2ac-45fa-98f5-9b826f811056 Certificate serial: 010D0C9F432858489340A4917B551F5F4ED40880 Authority key identifier: AC:0F:16:D1:14:55:88:95:2D:D3:D3:C9:19:AD:8E:5B:EB:6B:7B:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 6621 IP address blocks: 162.223.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/fc97c6c8-f2ac-45fa-98f5-9b826f811056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/fc97c6c8-f2ac-45fa-98f5-9b826f811056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:a4:91:7b:55:1f:5f:4e:d4:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc97c6c8-f2ac-45fa-98f5-9b826f811056 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=5296aeff-8081-4686-9e4e-36823aa59552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:5e:83:ff:a0:ce:22:b2:56:7a:43:b7:80: 60:1d:c9:96:15:7c:dd:16:fc:83:83:4d:a5:70:26: d4:ab:4a:5d:d2:94:21:8c:26:88:b8:a2:a4:a2:60: 9e:4b:d4:df:97:88:b7:92:a0:85:55:b0:d3:e9:da: 2e:96:4a:40:45:a3:54:36:f6:40:5a:c5:89:a7:8c: 62:74:bc:7c:9d:fc:b2:f0:99:e1:c4:e1:d2:78:d1: a3:69:2e:4b:b6:19:4a:f0:fb:99:93:6c:aa:66:e0: 35:81:77:d7:6e:f1:7f:c1:2a:73:ec:50:f0:eb:07: 08:1b:cc:a8:f2:8a:41:09:63:fd:eb:fa:53:1e:d5: fb:ad:56:91:69:89:be:e0:71:5a:44:9c:ec:86:b4: 2a:db:b8:34:89:c1:ad:e8:fc:62:e3:7c:63:f8:53: 6d:03:1d:86:2b:d0:e0:55:11:56:ef:34:2a:49:86: d1:6a:05:55:99:5a:0b:25:26:21:0f:ba:ee:d3:ed: 7d:2c:65:e8:46:28:6d:b3:e3:fc:73:9a:82:f6:c2: 37:2f:2b:a0:37:73:74:e9:db:81:2c:ea:db:19:5e: 83:f8:53:54:4e:a8:86:5e:1b:a9:89:69:87:3d:bc: b9:4f:34:e6:b2:a1:8b:11:b1:9f:65:b1:34:10:ac: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2C:C5:B4:17:4D:E4:D4:26:7C:BB:B9:9A:D0:35:73:EC:FD:8C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/fc97c6c8-f2ac-45fa-98f5-9b826f811056.crl X509v3 Authority Key Identifier: keyid:AC:0F:16:D1:14:55:88:95:2D:D3:D3:C9:19:AD:8E:5B:EB:6B:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer sbgp-ipAddrBlock: critical IPv4: 162.223.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:dc:37:d3:11:49:8d:02:f1:18:2a:16:b9:e7:29:c2:2e:3c: c4:b7:f6:03:f6:8c:ed:6a:50:67:ed:d0:c1:5a:f9:33:0b:f2: aa:37:28:c3:e9:e2:a0:fd:fd:a0:67:b6:35:40:76:c4:80:83: b3:36:1c:40:c2:a2:d3:af:d5:80:2d:66:f2:e6:e8:f3:03:7d: 1f:a8:e8:a4:eb:2a:83:66:7a:e8:a9:17:6a:ed:40:58:1e:39: ec:32:ad:b2:ea:23:71:ea:d0:07:ec:62:6d:56:c6:de:3e:92: 91:bb:1e:ce:c2:d6:0e:4a:96:c5:c6:d5:82:46:45:9b:78:9f: 6e:5e:d4:44:e6:5d:06:1d:62:04:c3:6e:c1:2c:96:68:88:66: ec:21:84:62:f7:cd:27:8a:a8:30:e3:99:91:db:10:fe:2b:15: 3f:07:be:da:6f:fe:07:f8:8c:63:28:ff:06:7d:5f:7a:9c:76: 21:fa:d4:26:52:4e:3f:0f:12:5e:04:96:06:02:a1:52:3f:53: 01:e3:8b:13:f6:14:ac:40:9d:29:60:94:1e:93:cd:57:ad:54: b2:03:cb:ba:c8:7e:a6:3f:25:10:4e:a1:c3:bc:a5:c9:2d:f7: 5b:2e:6e:cb:a7:b8:f4:96:7a:67:53:8d:08:c3:03:e2:c6:ac: f4:d2:97:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKSRe1UfX07UCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5N2M2YzgtZjJhYy00NWZhLTk4ZjUtOWI4MjZmODEx MDU2MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk NTI5NmFlZmYtODA4MS00Njg2LTllNGUtMzY4MjNhYTU5NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix1eg/+gziKyVnpDt4BgHcmWFXzdFvyDg02l cCbUq0pd0pQhjCaIuKKkomCeS9Tfl4i3kqCFVbDT6doulkpARaNUNvZAWsWJp4xi dLx8nfyy8JnhxOHSeNGjaS5LthlK8PuZk2yqZuA1gXfXbvF/wSpz7FDw6wcIG8yo 8opBCWP96/pTHtX7rVaRaYm+4HFaRJzshrQq27g0icGt6Pxi43xj+FNtAx2GK9Dg VRFW7zQqSYbRagVVmVoLJSYhD7ru0+19LGXoRihts+P8c5qC9sI3LyugN3N06duB LOrbGV6D+FNUTqiGXhupiWmHPby5TzTmsqGLEbGfZbE0EKytcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQsxbQXTeTUJny7uZrQNXPs/Yx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzk3 YzZjOC1mMmFjLTQ1ZmEtOThmNS05YjgyNmY4MTEwNTYvOGYwOWYwOTAtYjhkNC0z OTIzLWE4MGQtOWFjNDA1NDQ4NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmM5N2M2YzgtZjJhYy00NWZhLTk4 ZjUtOWI4MjZmODExMDU2L2ZjOTdjNmM4LWYyYWMtNDVmYS05OGY1LTliODI2Zjgx MTA1Ni5jcmwwHwYDVR0jBBgwFoAUrA8W0RRViJUt09PJGa2OW+treyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzk3YzZjOC1mMmFjLTQ1ZmEtOThmNS05Yjgy NmY4MTEwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfcN9MRSY0C8RgqFrnnKcIuPMS39gP2jO1qUGft0MFa+TML8qo3KMPp 4qD9/aBntjVAdsSAg7M2HEDCotOv1YAtZvLm6PMDfR+o6KTrKoNmeuipF2rtQFge OewyrbLqI3Hq0AfsYm1Wxt4+kpG7Hs7C1g5KlsXG1YJGRZt4n25e1ETmXQYdYgTD bsEslmiIZuwhhGL3zSeKqDDjmZHbEP4rFT8Hvtpv/gf4jGMo/wZ9X3qcdiH61CZS Tj8PEl4ElgYCoVI/UwHjixP2FKxAnSlglB6TzVetVLIDy7rIfqY/JRBOocO8pckt 91subsunuPSWemdTjQjDA+LGrPTSlys= -----END CERTIFICATE-----Generated at Sat Apr 5 20:45:19 2025 by rpki-client