$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa File: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (raw, json) Hash identifier: GQU/9mtoXVNjl7waA5V4YRSxntbnGlm2nKNzazv7kdw= Subject key identifier: 79:6A:FF:D0:B8:30:52:4B:80:78:E8:2F:D3:99:D4:9F:CE:2E:76:E7 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F43285848CC7B896B0865898C0B1609C0 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 62592 IP address blocks: 162.219.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:89:6b:08:65:89:8c:0b:16:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=0ace98f1-8bcc-4740-8851-dcacc999cb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:7c:6c:57:da:e1:4d:4d:fa:ba:d0:bc:73: 0e:c8:0b:b9:6f:59:73:31:83:83:69:32:88:72:d5: 3e:46:df:c9:99:97:2b:b8:bb:d4:59:66:da:a7:30: f4:2b:c9:68:b2:36:57:96:ba:92:f6:f5:fe:c8:af: a1:b9:c3:72:a6:a7:b4:1b:56:23:52:1f:91:1e:b7: 0f:aa:39:26:aa:9d:fb:9e:6f:86:0e:0e:4d:1c:f5: c8:7e:1a:f9:ba:22:e4:82:42:f5:b1:c8:cb:d2:0d: a9:8e:d3:7c:a8:f3:b9:87:e1:cd:03:ae:c3:2e:11: f2:c8:d1:4e:6f:1c:8c:96:fe:5a:14:10:88:2d:05: f6:7c:b8:49:7c:55:5e:24:69:c3:27:de:51:0d:ba: 6f:f9:79:f3:6b:cb:05:69:74:f8:c1:6c:bf:fe:03: b4:ed:16:7e:2a:ea:37:ad:9a:50:a3:3f:8d:40:e8: 5f:f2:02:f8:5c:e2:99:bc:7a:d3:06:e6:f0:ab:a7: d4:50:33:30:2c:a0:6e:17:92:88:af:76:0a:54:ec: 43:01:0c:63:4a:5a:35:5f:20:93:69:07:08:9c:5c: 51:52:5e:aa:46:bb:ae:38:fb:e1:49:70:52:aa:1d: ad:f9:ff:4a:46:0d:5f:0f:c1:f3:4c:0a:12:8f:c8: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:FF:D0:B8:30:52:4B:80:78:E8:2F:D3:99:D4:9F:CE:2E:76:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b4:ef:1b:4a:7a:41:d8:58:ee:0f:81:de:1c:fc:ae:11:f6: c9:5b:2e:d4:d1:35:1c:93:77:70:1f:6e:c5:d3:95:45:e9:76: ce:ed:c6:0e:d1:7f:97:86:bd:5b:bb:70:72:8d:ec:b0:3d:3f: d6:d7:c5:19:0b:43:c1:f8:2d:36:9f:79:a0:c4:39:d4:16:9c: ff:82:18:3f:bc:c2:b6:e5:7c:8e:32:40:0a:e9:bd:c1:a8:a4: 30:a4:0a:d0:a2:99:a6:18:31:74:74:e9:5a:1b:19:c7:e5:a4: 4f:dc:1b:7e:22:86:0e:52:41:46:3a:03:4e:eb:72:76:86:54: cf:5c:22:27:6e:ce:33:28:2e:47:25:80:6c:05:29:5d:1b:a9: 41:88:75:21:50:90:8f:69:b5:07:9d:5a:67:fb:bb:71:8e:4b: 49:46:1e:d1:bd:48:42:60:38:2d:22:00:03:a2:48:ba:e7:7e: e7:ba:f3:78:51:08:e1:ce:21:1d:29:bc:e4:79:a5:68:5e:4a: dd:40:46:f9:d5:7e:1f:58:30:76:ce:9b:f6:b3:0f:3b:8c:19: 9e:b3:22:ca:39:4c:18:34:99:d8:e4:af:77:cd:35:4d:b2:cd: 56:3f:45:26:87:d7:2f:0d:85:61:35:31:48:d4:08:07:e7:f5: c1:26:22:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe4lrCGWJjAsWCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk MGFjZTk4ZjEtOGJjYy00NzQwLTg4NTEtZGNhY2M5OTljYjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmx8bFfa4U1N+rrQvHMOyAu5b1lzMYODaTKI ctU+Rt/JmZcruLvUWWbapzD0K8losjZXlrqS9vX+yK+hucNypqe0G1YjUh+RHrcP qjkmqp37nm+GDg5NHPXIfhr5uiLkgkL1scjL0g2pjtN8qPO5h+HNA67DLhHyyNFO bxyMlv5aFBCILQX2fLhJfFVeJGnDJ95RDbpv+Xnza8sFaXT4wWy//gO07RZ+Kuo3 rZpQoz+NQOhf8gL4XOKZvHrTBubwq6fUUDMwLKBuF5KIr3YKVOxDAQxjSlo1XyCT aQcInFxRUl6qRruuOPvhSXBSqh2t+f9KRg1fD8HzTAoSj8gLHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlq/9C4MFJLgHjoL9OZ1J/OLnbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvODBkNzkyMjUtZDQ3YS0z M2I1LWIxN2QtMGUwNTEzNDVjN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC07xtKekHYWO4Pgd4c/K4R9slbLtTRNRyTd3AfbsXTlUXpds7txg7R f5eGvVu7cHKN7LA9P9bXxRkLQ8H4LTafeaDEOdQWnP+CGD+8wrblfI4yQArpvcGo pDCkCtCimaYYMXR06VobGcflpE/cG34ihg5SQUY6A07rcnaGVM9cIiduzjMoLkcl gGwFKV0bqUGIdSFQkI9ptQedWmf7u3GOS0lGHtG9SEJgOC0iAAOiSLrnfue683hR COHOIR0pvOR5pWheSt1ARvnVfh9YMHbOm/azDzuMGZ6zIso5TBg0mdjkr3fNNU2y zVY/RSaH1y8NhWE1MUjUCAfn9cEmInU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:05:21 2025 by rpki-client