$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/31a20f43-8edb-37d4-8e9c-d59753369e23.roa File: 31a20f43-8edb-37d4-8e9c-d59753369e23.roa (raw, json) Hash identifier: bS5gW3n0453kuEItgdJXkSUySrhl2uA2uNxwVS/U+5Q= Subject key identifier: F4:72:8B:52:96:3C:F2:C0:EB:EB:C9:88:5D:9E:75:85:15:F1:91:83 Certificate issuer: /CN=3df29669-3733-4127-bbde-a71cc4b5a661 Certificate serial: 010D0C9F43285848E16BD640760D9CC1DCA52F00 Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/31a20f43-8edb-37d4-8e9c-d59753369e23.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 55247 IP address blocks: 162.211.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d6:40:76:0d:9c:c1:dc:a5:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=3d6c8364-5799-462a-ba73-91b764f42c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:da:8f:14:4d:86:c2:25:05:74:ca:c0:71: a5:4f:b5:d8:8c:71:ec:b8:d6:95:03:14:1b:de:d2: b4:b0:5c:49:85:3a:a6:a2:d4:bf:19:be:a2:16:1f: d7:bb:f9:d3:df:2d:e6:8d:a6:91:e5:4c:a6:d6:d4: a3:9d:28:a7:d0:38:d3:68:77:a8:e8:55:1b:6c:52: 9e:07:47:7b:5b:05:e4:51:bd:a9:1f:9a:a0:f0:46: f7:c7:24:82:fa:97:53:1c:f0:d2:dc:08:37:ae:6a: 55:1b:83:0f:e8:86:11:af:ec:bd:78:58:e1:93:6d: 5b:29:01:86:1a:07:2e:00:1a:32:20:f6:be:68:57: bc:f1:bf:41:89:db:6e:e4:06:7e:1a:dc:7b:8a:2d: a6:d1:b4:ef:42:48:bc:06:1e:61:1c:7e:21:42:7b: 95:3f:3e:67:66:30:58:16:cd:87:3d:c9:1d:ef:ee: 81:67:d7:97:8a:fb:eb:d7:3f:d8:98:a4:59:94:a0: 96:74:0b:ac:2e:91:8f:88:8e:68:ff:74:b8:cb:04: 08:90:5d:7a:61:ca:ed:15:02:69:23:9b:9a:b0:0a: 24:4d:73:83:81:0a:71:09:07:4b:1f:86:71:38:3b: 46:3f:35:c0:59:f0:92:9e:f1:4d:18:6b:d6:97:8c: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:8B:52:96:3C:F2:C0:EB:EB:C9:88:5D:9E:75:85:15:F1:91:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/31a20f43-8edb-37d4-8e9c-d59753369e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl X509v3 Authority Key Identifier: keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer sbgp-ipAddrBlock: critical IPv4: 162.211.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:94:ba:f4:44:9a:ea:d0:a3:84:f5:c3:9b:3a:c6:cb:73:2d: 1f:59:ec:09:ad:0f:d1:c2:79:6a:b9:d6:ce:e5:fb:e4:cd:4d: e6:5e:d1:39:28:7c:89:84:aa:44:54:3d:3b:cf:85:57:7a:87: 33:05:88:16:5c:ff:3d:ab:a2:c2:62:5d:78:92:b1:28:d8:71: aa:5f:9d:64:1d:e9:e4:e4:8e:14:99:38:a1:a6:3b:e5:e2:b6: 5b:c2:c6:5f:29:01:67:c6:dc:f5:08:6f:4f:f8:a5:46:e4:4d: c3:15:94:06:bf:9f:67:bf:ac:b9:9a:dc:1c:6a:a3:a4:52:d0: 61:58:ed:14:88:09:d4:f0:d4:26:75:1a:7c:00:1f:8d:69:ed: ca:d8:4d:fe:10:08:03:31:35:5d:83:dd:ca:61:ab:fe:21:84: 08:c4:1c:6d:37:a6:6d:80:ab:07:ee:af:21:10:83:e6:ad:79: 1e:8e:74:30:23:36:42:ac:a3:c3:a8:dd:85:56:f7:f6:31:bc: 94:e8:13:be:96:43:1c:0f:79:5e:4e:6b:a3:bb:2f:5d:83:d1: d8:46:6c:8d:ae:9c:e5:f2:4e:03:ce:a9:2e:47:b3:1f:ed:9b: e6:07:ef:f9:bb:f4:2f:dd:38:32:f5:a1:4a:b5:43:a0:9e:6f: 8c:e4:38:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9ZAdg2cwdylLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RmMjk2NjktMzczMy00MTI3LWJiZGUtYTcxY2M0YjVh NjYxMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk M2Q2YzgzNjQtNTc5OS00NjJhLWJhNzMtOTFiNzY0ZjQyYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPnajxRNhsIlBXTKwHGlT7XYjHHsuNaVAxQb 3tK0sFxJhTqmotS/Gb6iFh/Xu/nT3y3mjaaR5Uym1tSjnSin0DjTaHeo6FUbbFKe B0d7WwXkUb2pH5qg8Eb3xySC+pdTHPDS3Ag3rmpVG4MP6IYRr+y9eFjhk21bKQGG GgcuABoyIPa+aFe88b9Bidtu5AZ+Gtx7ii2m0bTvQki8Bh5hHH4hQnuVPz5nZjBY Fs2HPckd7+6BZ9eXivvr1z/YmKRZlKCWdAusLpGPiI5o/3S4ywQIkF16YcrtFQJp I5uasAokTXODgQpxCQdLH4ZxODtGPzXAWfCSnvFNGGvWl4zsOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRyi1KWPPLA6+vJiF2edYUV8ZGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYy OTY2OS0zNzMzLTQxMjctYmJkZS1hNzFjYzRiNWE2NjEvMzFhMjBmNDMtOGVkYi0z N2Q0LThlOWMtZDU5NzUzMzY5ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RmMjk2NjktMzczMy00MTI3LWJi ZGUtYTcxY2M0YjVhNjYxLzNkZjI5NjY5LTM3MzMtNDEyNy1iYmRlLWE3MWNjNGI1 YTY2MS5jcmwwHwYDVR0jBBgwFoAUla0kVNAfCbW05KXSZq5z8tSbVdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYyOTY2OS0zNzMzLTQxMjctYmJkZS1hNzFj YzRiNWE2NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotOOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuUuvREmurQo4T1w5s6xstzLR9Z7AmtD9HCeWq51s7l++TNTeZe0Tko fImEqkRUPTvPhVd6hzMFiBZc/z2rosJiXXiSsSjYcapfnWQd6eTkjhSZOKGmO+Xi tlvCxl8pAWfG3PUIb0/4pUbkTcMVlAa/n2e/rLma3Bxqo6RS0GFY7RSICdTw1CZ1 GnwAH41p7crYTf4QCAMxNV2D3cphq/4hhAjEHG03pm2AqwfuryEQg+ateR6OdDAj NkKso8Oo3YVW9/YxvJToE76WQxwPeV5Oa6O7L12D0dhGbI2unOXyTgPOqS5Hsx/t m+YH7/m79C/dODL1oUq1Q6Ceb4zkONA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:53 2025 by rpki-client