$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa File: 428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa (raw, json) Hash identifier: KkHbvMCgRQXJi+jNBSUg+mG6+VdU17RNr9zgx2BN6sk= Subject key identifier: 83:EE:29:D6:44:9C:77:E9:3D:FC:F5:C3:41:D4:18:CE:B6:11:7E:0C Certificate issuer: /CN=5410af3b-1667-4dd4-9260-1835889ae3a3 Certificate serial: 010D0C9F43285848090FAFFD150E26F2324C0300 Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 16509 IP address blocks: 162.247.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:af:fd:15:0e:26:f2:32:4c:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=c1a524cd-2d6c-4456-8a82-d5e899607e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4b:ae:4b:de:14:a5:5f:a2:6a:bc:94:cc:7f: b0:1f:25:f1:51:61:77:c3:82:2a:3f:01:27:00:90: 25:bf:93:12:d3:61:d8:42:a5:75:93:d3:5e:7c:05: 94:70:2e:74:e7:e3:2e:01:aa:b7:d9:83:90:9f:e7: f5:75:ec:3d:ec:09:7c:7d:35:2f:bc:04:c8:39:b1: 6c:ac:9e:71:26:0a:28:7d:3e:8d:f6:34:67:a4:9d: 61:8a:de:0d:22:4d:36:09:97:8a:3c:4c:e1:de:d4: b4:07:5f:56:07:68:56:6a:81:c5:ae:5d:7c:d2:86: 9b:d1:6b:7d:b5:0e:2f:33:b9:36:83:0a:44:ab:d2: 5f:cf:d6:1c:17:5d:ae:5c:cb:ab:e2:2f:9b:90:c2: 45:6c:1b:5c:fc:e7:ed:b1:aa:6d:a3:ef:2f:22:e2: 0c:f1:9c:8c:fe:08:67:1a:5a:da:7a:93:ea:f9:d9: 1f:cb:05:20:74:cd:b9:b9:f7:81:eb:ee:4c:14:5c: 3e:2e:34:25:64:11:4a:37:97:49:5c:97:0b:b6:b7: 19:50:c8:bd:14:6e:4a:ad:ac:7b:1f:f0:c9:bf:80: f2:33:01:03:6f:e4:19:6f:58:83:b4:07:82:c4:16: be:45:29:a7:7f:eb:8e:58:5c:d9:73:d4:a8:32:2d: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EE:29:D6:44:9C:77:E9:3D:FC:F5:C3:41:D4:18:CE:B6:11:7E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl X509v3 Authority Key Identifier: keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer sbgp-ipAddrBlock: critical IPv4: 162.247.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:18:f8:00:af:71:87:d1:8c:ee:bf:b9:c1:58:0a:ab:5e:49: 81:4b:89:f0:c8:d3:7a:a3:90:9f:ce:29:09:fa:cd:f0:f7:fc: 63:98:7f:d5:22:b4:7a:9b:56:86:ac:fa:48:a5:f7:32:9d:5d: 26:68:86:5e:87:0c:59:91:3a:ba:17:c8:ec:46:ec:d1:9f:21: ba:33:c2:c4:44:97:8c:3b:46:73:85:e6:91:9a:bb:5d:37:cc: 46:66:69:2f:b7:79:1b:e0:9a:01:5b:44:8d:47:76:2d:06:6f: ad:4e:e1:d7:54:b5:e1:60:4f:29:68:0b:39:2b:00:c0:09:a0: d1:de:47:23:52:e5:de:b8:c3:ab:cc:9c:dc:27:c7:9b:1c:9c: 5b:e1:a4:8d:8d:0c:df:6d:8a:36:e5:fb:df:14:63:f0:81:2a: 35:b6:54:02:dc:bb:fe:c0:1f:64:af:be:78:44:84:a6:9c:3f: 83:bd:16:df:86:de:97:dc:ba:61:0f:a4:45:e5:86:40:35:9f: 0c:1c:e4:27:37:e9:4d:08:27:8c:15:73:ff:15:68:b5:44:cd: 65:73:ef:c3:49:2b:5e:80:a4:56:7c:4e:d0:b6:6c:f3:af:79: 31:9b:48:3f:d7:f8:df:d5:a5:1b:0b:78:c5:9a:a9:f8:f7:c1: 9c:a9:32:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD6/9FQ4m8jJMAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQxMGFmM2ItMTY2Ny00ZGQ0LTkyNjAtMTgzNTg4OWFl M2EzMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk YzFhNTI0Y2QtMmQ2Yy00NDU2LThhODItZDVlODk5NjA3ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEuuS94UpV+iaryUzH+wHyXxUWF3w4IqPwEn AJAlv5MS02HYQqV1k9NefAWUcC505+MuAaq32YOQn+f1dew97Al8fTUvvATIObFs rJ5xJgoofT6N9jRnpJ1hit4NIk02CZeKPEzh3tS0B19WB2hWaoHFrl180oab0Wt9 tQ4vM7k2gwpEq9Jfz9YcF12uXMur4i+bkMJFbBtc/Oftsapto+8vIuIM8ZyM/ghn GlraepPq+dkfywUgdM25ufeB6+5MFFw+LjQlZBFKN5dJXJcLtrcZUMi9FG5Krax7 H/DJv4DyMwEDb+QZb1iDtAeCxBa+RSmnf+uOWFzZc9SoMi0n1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPuKdZEnHfpPfz1w0HUGM62EX4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEw YWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1ODg5YWUzYTMvNDI4ZDdmYmEtMGE3NS0z OWNjLTlkZDMtNWIyNmE0MjMyZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTQxMGFmM2ItMTY2Ny00ZGQ0LTky NjAtMTgzNTg4OWFlM2EzLzU0MTBhZjNiLTE2NjctNGRkNC05MjYwLTE4MzU4ODlh ZTNhMy5jcmwwHwYDVR0jBBgwFoAUuH92s/HalR9pb+ww8Pv6JRZIwWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEwYWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1 ODg5YWUzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovelMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMY+ACvcYfRjO6/ucFYCqteSYFLifDI03qjkJ/OKQn6zfD3/GOYf9Ui tHqbVoas+kil9zKdXSZohl6HDFmROroXyOxG7NGfIbozwsREl4w7RnOF5pGau103 zEZmaS+3eRvgmgFbRI1Hdi0Gb61O4ddUteFgTyloCzkrAMAJoNHeRyNS5d64w6vM nNwnx5scnFvhpI2NDN9tijbl+98UY/CBKjW2VALcu/7AH2SvvnhEhKacP4O9Ft+G 3pfcumEPpEXlhkA1nwwc5Cc36U0IJ4wVc/8VaLVEzWVz78NJK16ApFZ8TtC2bPOv eTGbSD/X+N/VpRsLeMWaqfj3wZypMkw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:53 2025 by rpki-client