$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa File: 295d7e62-9ba8-30e9-976f-7b86d221816e.roa (raw, json) Hash identifier: h936n1/8EtEsxcJeGGdSICd4IlgGIFTBZwkhErvpNVw= Subject key identifier: 8F:1A:17:84:23:6A:16:54:AD:07:9D:A5:7B:8A:72:63:1D:8B:F6:AA Certificate issuer: /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Certificate serial: 010D0C9F4328584812D5360CADEF043220DC9100 Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 14618 IP address blocks: 162.219.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:36:0c:ad:ef:04:32:20:dc:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=cbabe6fc-de18-440a-9d1e-e8624330109c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:2b:5f:6f:03:6f:a5:81:3f:af:1e:94:00: 64:7c:a1:1a:82:1f:63:27:cb:36:11:16:bd:da:ba: 03:61:22:47:f7:e0:3f:ac:f0:49:af:52:4e:75:3d: f6:13:dc:45:86:a3:17:84:51:b7:03:1d:4a:51:85: 13:90:81:20:a0:2c:06:3e:7e:33:80:6e:ed:dd:2e: be:1a:a3:83:30:34:d3:68:5a:06:3f:fd:f3:56:85: 21:59:20:d8:60:9b:85:af:a5:9f:64:97:44:d7:9e: 8a:32:0e:39:b9:5f:82:60:5f:95:5a:9e:d0:c3:46: fa:68:c7:74:bb:f9:44:1a:45:7c:d8:b5:40:f0:84: 57:da:a3:8f:49:64:a9:5d:13:5f:e1:29:51:be:b9: 4d:40:1e:93:47:a4:dc:62:29:ec:82:35:01:e9:4e: e2:55:30:0e:12:26:34:53:c0:ed:6c:df:90:5c:0c: b0:00:85:a0:e4:70:f1:c2:de:07:71:9e:7c:85:9a: 6f:b5:2c:49:f2:b0:2d:9f:77:21:6d:b5:91:ec:b8: 23:1b:74:0f:07:a4:c4:fd:58:b6:74:4b:a2:62:7f: a9:ac:ae:8f:19:3b:4d:4f:b1:20:1e:83:bc:25:aa: 6f:49:7b:34:53:23:6f:74:5f:5b:bd:18:c1:2f:23: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1A:17:84:23:6A:16:54:AD:07:9D:A5:7B:8A:72:63:1D:8B:F6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl X509v3 Authority Key Identifier: keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:46:f1:9f:05:16:15:33:11:4b:be:a2:fc:fa:f2:cf:a5:c6: 7d:99:e0:34:2a:1e:35:c3:ac:cf:e7:31:66:8b:ba:80:0a:31: fe:9e:1d:e6:2a:22:f9:2a:e5:f2:1b:a3:97:8e:06:a4:32:ea: 55:cc:38:8e:19:8b:94:82:1f:da:47:de:dc:06:80:28:39:bb: 6b:24:ef:ab:06:43:24:c0:28:19:6b:55:2d:83:67:95:4a:48: 07:2c:01:a5:ad:4c:9a:a3:71:c7:fa:49:cb:23:7b:84:3a:c4: 02:ec:fd:2d:d3:12:32:52:db:a8:35:7b:2b:19:59:05:b8:d0: 99:6d:4c:4f:69:08:0e:c3:17:5d:2a:99:a3:0c:c8:b3:49:da: 25:49:29:ea:fe:19:56:ca:c0:67:8f:15:76:dd:37:6a:5f:84: 85:26:c3:7a:f2:25:4b:24:4d:7c:d0:28:b6:79:73:aa:dd:a5: e3:61:c7:27:fe:dd:18:f2:15:76:8d:b6:c4:fb:77:1b:79:5c: 71:5f:d3:10:1d:e9:87:03:ef:90:10:33:bf:57:1d:70:c5:a9: 4b:a6:94:bc:c7:85:a8:f2:9f:f2:49:f0:ae:28:b7:04:59:b4: 95:c3:1c:c9:ee:ec:b3:2e:14:a3:1c:0d:06:6b:83:79:ca:72: d9:14:a3:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TYMre8EMiDckQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0NzgtOTU4NDljYjc3 ZTVlMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk Y2JhYmU2ZmMtZGUxOC00NDBhLTlkMWUtZTg2MjQzMzAxMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArusrX28Db6WBP68elABkfKEagh9jJ8s2ERa9 2roDYSJH9+A/rPBJr1JOdT32E9xFhqMXhFG3Ax1KUYUTkIEgoCwGPn4zgG7t3S6+ GqODMDTTaFoGP/3zVoUhWSDYYJuFr6WfZJdE156KMg45uV+CYF+VWp7Qw0b6aMd0 u/lEGkV82LVA8IRX2qOPSWSpXRNf4SlRvrlNQB6TR6TcYinsgjUB6U7iVTAOEiY0 U8DtbN+QXAywAIWg5HDxwt4HcZ58hZpvtSxJ8rAtn3chbbWR7LgjG3QPB6TE/Vi2 dEuiYn+prK6PGTtNT7EgHoO8JapvSXs0UyNvdF9bvRjBLyM9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8aF4QjahZUrQedpXuKcmMdi/aqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNTdm NTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0OWNiNzdlNWUvMjk1ZDdlNjItOWJhOC0z MGU5LTk3NmYtN2I4NmQyMjE4MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0 NzgtOTU4NDljYjc3ZTVlL2E1N2Y1NDNkLTU0ZjctNGRkNi1hNDc4LTk1ODQ5Y2I3 N2U1ZS5jcmwwHwYDVR0jBBgwFoAUzQLYTm7RMgTKPzjYIZZ9u+A0nZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNTdmNTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0 OWNiNzdlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdG8Z8FFhUzEUu+ovz68s+lxn2Z4DQqHjXDrM/nMWaLuoAKMf6eHeYq Ivkq5fIbo5eOBqQy6lXMOI4Zi5SCH9pH3twGgCg5u2sk76sGQyTAKBlrVS2DZ5VK SAcsAaWtTJqjccf6Scsje4Q6xALs/S3TEjJS26g1eysZWQW40JltTE9pCA7DF10q maMMyLNJ2iVJKer+GVbKwGePFXbdN2pfhIUmw3ryJUskTXzQKLZ5c6rdpeNhxyf+ 3RjyFXaNtsT7dxt5XHFf0xAd6YcD75AQM79XHXDFqUumlLzHhajyn/JJ8K4otwRZ tJXDHMnu7LMuFKMcDQZrg3nKctkUo5I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:03 2025 by rpki-client