$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa File: 43620bc0-0a8d-3868-a9e5-6957181b005a.roa (raw, json) Hash identifier: ad0NV6tvGafs/JrQNrQsk+phY6ExA8Bisp8V2DG6ysU= Subject key identifier: 49:98:88:5C:EB:B3:8C:D3:88:14:D1:7B:64:56:A1:5A:AC:B9:39:B7 Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Certificate serial: 010D0C9F432858489E6B60CDCBF87E844E3BC0C0 Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 46606 IP address blocks: 162.241.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:60:cd:cb:f8:7e:84:4e:3b:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ea551a96-a8b3-463b-a235-87fab5a84e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:7a:0a:0b:ec:0c:c1:9b:fe:75:6d:27:f2: 2c:cd:30:d1:db:8e:fa:20:a6:00:72:d9:2c:d2:10: c6:88:f7:d0:6f:7f:8d:02:43:9f:a5:7f:41:92:50: 83:b0:3a:38:c5:a1:ce:35:fc:03:e9:fd:81:39:41: c4:86:42:69:02:9c:a3:3d:71:76:f8:a2:a7:d4:5a: 75:fb:8b:55:6f:04:e5:23:64:08:0f:84:98:bf:76: 88:a5:42:8e:37:99:97:54:fa:e4:cc:d0:2d:87:52: 40:d3:f7:37:f4:4e:71:ed:30:5e:46:e5:96:c6:0b: 1c:ee:a5:89:3b:00:e7:35:d5:ef:3d:07:86:26:cf: 53:30:a8:56:b1:d3:70:74:34:39:22:a9:6f:76:bc: b3:22:e1:96:39:41:cb:d6:09:5f:d6:c9:04:ea:fb: d8:df:7e:22:c4:04:d2:d3:ac:bc:ac:cc:ff:a7:2d: dd:c2:12:0e:80:74:5d:51:3b:af:80:78:25:17:69: 1a:61:39:b1:1e:ad:d2:30:78:6a:48:37:46:e3:51: eb:41:b6:4e:08:be:92:47:4a:5e:cd:1f:48:79:b2: 2c:97:27:34:d2:4f:b1:f9:68:4d:1d:15:a8:d7:51: 69:44:8b:21:92:f9:63:3d:8e:dd:7a:4c:34:cd:dd: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:98:88:5C:EB:B3:8C:D3:88:14:D1:7B:64:56:A1:5A:AC:B9:39:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl X509v3 Authority Key Identifier: keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer sbgp-ipAddrBlock: critical IPv4: 162.241.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:24:ad:c3:05:54:26:fe:0c:9c:e0:90:de:f4:46:89:cb:d2: 63:32:98:24:f9:88:20:6e:19:97:d6:d1:0d:79:29:bb:d8:23: 3b:83:44:ef:01:37:c2:4e:26:81:95:80:61:25:2d:4b:e2:e7: 57:64:1f:b7:b0:c1:05:e0:7f:1a:5e:ad:b8:42:f0:7f:a1:20: 61:38:fe:dc:85:57:46:b8:13:43:e5:f9:9a:25:a1:65:7e:8e: 51:93:01:e6:83:a7:a8:19:c2:f8:0a:e3:67:5e:52:99:2d:72: bb:49:20:72:10:d4:88:72:ce:cb:01:2d:83:d4:24:75:73:48: 8a:7f:58:39:19:ac:40:38:93:49:ac:f9:d3:c2:d1:f5:1d:50: e8:df:9a:16:38:55:33:5c:2a:57:77:f2:eb:43:b2:30:3c:c1: 59:ac:43:13:2d:69:1a:a4:2b:d9:72:9c:e2:48:df:ba:9e:0f: 30:dd:bf:15:06:d7:08:31:26:bf:8c:eb:b5:20:f0:8b:f4:b9: 08:04:2c:2b:36:d4:c0:9c:76:4b:93:e8:41:62:7f:ae:57:58: dc:cf:d4:98:16:6b:c3:79:5c:46:c1:87:50:d1:43:2c:9f:27: 6f:9b:c0:a2:b8:4f:26:f0:26:5e:9e:4c:ef:0c:99:f0:f8:05: 65:15:83:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2DNy/h+hE47wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi OTFiMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWE1NTFhOTYtYThiMy00NjNiLWEyMzUtODdmYWI1YTg0ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZN6CgvsDMGb/nVtJ/IszTDR2476IKYActks 0hDGiPfQb3+NAkOfpX9BklCDsDo4xaHONfwD6f2BOUHEhkJpApyjPXF2+KKn1Fp1 +4tVbwTlI2QID4SYv3aIpUKON5mXVPrkzNAth1JA0/c39E5x7TBeRuWWxgsc7qWJ OwDnNdXvPQeGJs9TMKhWsdNwdDQ5IqlvdryzIuGWOUHL1glf1skE6vvY334ixATS 06y8rMz/py3dwhIOgHRdUTuvgHglF2kaYTmxHq3SMHhqSDdG41HrQbZOCL6SR0pe zR9IebIslyc00k+x+WhNHRWo11FpRIshkvljPY7dekw0zd1M7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmYiFzrs4zTiBTRe2RWoVqsuTm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvNDM2MjBiYzAtMGE4ZC0z ODY4LWE5ZTUtNjk1NzE4MWIwMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0 MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYkrcMFVCb+DJzgkN70RonL0mMymCT5iCBuGZfW0Q15KbvYIzuDRO8B N8JOJoGVgGElLUvi51dkH7ewwQXgfxperbhC8H+hIGE4/tyFV0a4E0Pl+ZoloWV+ jlGTAeaDp6gZwvgK42deUpktcrtJIHIQ1IhyzssBLYPUJHVzSIp/WDkZrEA4k0ms +dPC0fUdUOjfmhY4VTNcKld38utDsjA8wVmsQxMtaRqkK9lynOJI37qeDzDdvxUG 1wgxJr+M67Ug8Iv0uQgELCs21MCcdkuT6EFif65XWNzP1JgWa8N5XEbBh1DRQyyf J2+bwKK4TybwJl6eTO8MmfD4BWUVg1w= -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:03 2025 by rpki-client