$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa File: e287f98a-b890-3428-ba99-f795e90bb559.roa (raw, json) Hash identifier: nR4XE9KIVy2drBh12JGk14WqOxxDxFbsoy9mnrq6idI= Subject key identifier: 70:68:87:2D:2C:04:FA:51:9F:C6:D2:A5:B9:03:6A:07:3E:77:FF:20 Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Certificate serial: 010D0C9F432858489FD09A6943E6447F55D75200 Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 18540 IP address blocks: 170.62.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:9a:69:43:e6:44:7f:55:d7:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=eb72bbe0-29d1-42c4-9ad4-73eb18a6929d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:7f:bf:30:f8:cf:42:aa:96:ce:4b:24:04: 85:c2:bd:e5:03:8e:17:30:d4:ae:9f:27:c7:ce:f7: c7:67:36:55:22:42:d3:4c:c8:32:d3:19:de:c3:88: b5:bf:1a:46:a0:6d:eb:63:25:32:c5:fb:ba:49:ac: 73:30:4d:56:3d:c4:c8:33:7d:da:43:d4:a5:cf:9d: 8c:cc:6a:49:bf:cd:30:95:dd:fc:bd:1d:62:b8:01: 2c:31:98:33:a1:f8:f3:a8:62:2e:a6:69:52:43:54: 3a:0d:a1:7a:23:42:c0:d0:ae:73:29:4e:28:cb:5f: c5:c4:ba:56:34:cc:2a:31:41:47:7b:7f:50:1a:41: a4:91:8d:68:14:40:0e:86:39:e7:84:1c:94:8b:3b: c4:07:65:48:61:15:72:6a:77:ec:2f:6b:bb:fd:26: 20:5d:22:a3:3e:f7:8f:7d:f2:27:be:46:1f:43:8c: 8c:21:0b:bd:87:ac:74:74:ff:f1:00:8f:e6:dc:b4: c0:72:39:5e:b1:2e:11:1f:bf:9e:3e:0d:99:2a:30: b3:24:dd:87:98:da:5b:06:84:34:5a:22:f6:41:9a: 6c:45:71:86:93:f2:dd:b3:d8:92:7a:ef:1a:16:2e: f5:b7:90:71:d8:e2:c1:76:ef:b0:7c:47:5b:7e:94: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:68:87:2D:2C:04:FA:51:9F:C6:D2:A5:B9:03:6A:07:3E:77:FF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl X509v3 Authority Key Identifier: keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer sbgp-ipAddrBlock: critical IPv4: 170.62.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:87:44:6f:72:a2:f5:3c:7d:d4:dc:6c:0a:00:1a:0a:4f:c7: 00:df:b9:e2:ac:6c:21:e9:d5:87:10:c8:4e:0a:19:32:84:88: 19:e3:40:c5:39:e1:a0:ce:b5:d1:b2:97:7c:d3:12:49:6f:c2: 31:4a:bc:9b:2a:a2:eb:86:6c:95:3f:dd:96:80:f3:d3:b1:e7: 98:fc:64:a2:b6:1a:07:40:60:dd:00:eb:09:b8:29:cc:18:dd: 38:71:50:54:f3:f0:ec:88:e2:0c:37:09:5a:cb:d3:a4:4a:12: 59:45:01:da:c2:38:2e:22:25:40:d1:99:85:48:51:d4:12:fb: 30:4b:a2:e0:ba:82:6a:43:c2:2a:d6:82:6f:9b:7c:0a:c2:34: 06:0a:bd:0a:9c:bd:78:83:f3:2d:14:c6:b4:d6:cf:e7:22:4b: c2:f4:75:47:e8:d8:ff:30:0d:c1:f6:2a:8e:35:0a:1b:f7:fe: 25:dc:ef:c9:6b:e1:73:4d:2b:e7:94:88:e5:c7:5e:fa:d2:ed: dd:fa:ef:29:d1:5c:d9:c2:23:c0:16:96:ee:7b:d0:03:18:6c: 56:50:57:ad:a9:2a:6a:16:fc:51:ca:e8:ef:f8:d0:2b:5a:32: ea:0e:f3:4c:30:88:02:e3:8c:96:99:c8:a4:e7:eb:87:0f:90: 0d:45:2a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0JppQ+ZEf1XXUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4 OGVlMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk ZWI3MmJiZTAtMjlkMS00MmM0LTlhZDQtNzNlYjE4YTY5MjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijJ/vzD4z0Kqls5LJASFwr3lA44XMNSunyfH zvfHZzZVIkLTTMgy0xnew4i1vxpGoG3rYyUyxfu6SaxzME1WPcTIM33aQ9Slz52M zGpJv80wld38vR1iuAEsMZgzofjzqGIupmlSQ1Q6DaF6I0LA0K5zKU4oy1/FxLpW NMwqMUFHe39QGkGkkY1oFEAOhjnnhByUizvEB2VIYRVyanfsL2u7/SYgXSKjPveP ffInvkYfQ4yMIQu9h6x0dP/xAI/m3LTAcjlesS4RH7+ePg2ZKjCzJN2HmNpbBoQ0 WiL2QZpsRXGGk/Lds9iSeu8aFi71t5Bx2OLBdu+wfEdbfpSdZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBohy0sBPpRn8bSpbkDagc+d/8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvZTI4N2Y5OGEtYjg5MC0z NDI4LWJhOTktZjc5NWU5MGJiNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiHRG9yovU8fdTcbAoAGgpPxwDfueKsbCHp1YcQyE4KGTKEiBnjQMU5 4aDOtdGyl3zTEklvwjFKvJsqouuGbJU/3ZaA89Ox55j8ZKK2GgdAYN0A6wm4KcwY 3ThxUFTz8OyI4gw3CVrL06RKEllFAdrCOC4iJUDRmYVIUdQS+zBLouC6gmpDwirW gm+bfArCNAYKvQqcvXiD8y0UxrTWz+ciS8L0dUfo2P8wDcH2Ko41Chv3/iXc78lr 4XNNK+eUiOXHXvrS7d367ynRXNnCI8AWlu570AMYbFZQV62pKmoW/FHK6O/40Cta MuoO80wwiALjjJaZyKTn64cPkA1FKtw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:21 2025 by rpki-client