$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/44a8cd31-e584-3882-8103-ac73cff30d52.roa File: 44a8cd31-e584-3882-8103-ac73cff30d52.roa (raw, json) Hash identifier: ywi10jncka941kmlVywZz1/H6s95XXFuTw4+JrXgKDY= Subject key identifier: 62:FF:82:5F:ED:4D:06:5A:00:EE:C3:A5:92:66:D2:F2:32:90:98:19 Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F432858487A26D78E0A47036E7D765680 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/44a8cd31-e584-3882-8103-ac73cff30d52.roa Signing time: Wed 08 Jan 2025 14:13:46 +0000 ROA not before: Wed 08 Jan 2025 14:13:46 +0000 ROA not after: Tue 08 Apr 2025 13:13:46 +0000 asID: 40788 IP address blocks: 162.255.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:26:d7:8e:0a:47:03:6e:7d:76:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Jan 8 14:13:46 2025 GMT Not After : Apr 8 13:13:46 2025 GMT Subject: CN=00556dee-4833-4356-9a11-e2252539e72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:0b:b9:21:21:5d:62:81:ab:48:10:b4:31: 92:55:6c:63:9a:0f:a9:65:78:e1:6a:de:e6:9b:07: 3e:63:74:89:d3:6d:e6:64:e0:ee:89:cc:d6:32:02: a9:b1:02:12:af:5f:46:9e:ba:36:a2:89:0d:5b:09: f5:43:15:24:b2:ba:78:37:3c:dd:c8:c0:1f:9f:49: 2f:ce:d8:dc:74:f7:c3:51:4d:dd:fc:42:58:a6:60: 4b:48:c7:6b:60:9b:c4:3e:4d:2a:77:14:fa:96:bc: f6:21:fd:02:d5:5f:d4:89:f8:2f:16:40:c8:22:37: 5e:e2:56:1a:da:52:ad:57:44:4c:46:3d:51:b6:f9: c2:05:ed:65:6a:e8:59:9c:6a:90:7d:86:74:e6:f4: 71:f8:e7:f0:9a:2c:52:48:96:0c:c3:37:8a:82:a6: 4c:77:f9:57:a7:d4:e6:00:ee:da:23:25:6b:6e:4d: cf:37:11:ed:d4:ee:1d:c8:d3:66:68:57:d7:f2:c6: ef:0a:30:a7:ff:d7:9b:ac:ed:43:ed:7f:0b:89:9d: 87:02:39:8d:9e:89:77:f0:c8:e8:40:c2:0f:65:33: 0c:c1:88:86:44:d1:10:31:73:79:19:70:9e:0f:dc: e2:62:e4:ad:be:55:86:2c:76:d3:8a:e0:14:09:67: 27:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FF:82:5F:ED:4D:06:5A:00:EE:C3:A5:92:66:D2:F2:32:90:98:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/44a8cd31-e584-3882-8103-ac73cff30d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 162.255.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:1b:9d:11:0c:3b:cc:ab:3a:42:bd:27:41:3f:f1:9f:71:61: 92:2a:d9:14:c3:bb:f4:10:49:cc:6a:5f:95:7b:3d:39:81:76: 78:3d:72:88:8d:e9:c2:0b:5d:42:8a:c4:28:17:41:63:4f:85: c0:da:38:01:17:a1:68:f7:70:8e:4a:6a:0f:2b:11:43:fa:5b: b9:ef:44:ee:7f:b3:70:4b:99:1b:ad:db:34:18:5e:72:fc:79: f9:9a:fa:f4:74:aa:2c:90:2e:bc:b8:81:f7:4e:b8:12:fc:e6: cf:70:0f:55:51:14:2b:25:0b:4f:a9:eb:3d:e6:5b:62:8e:89: e7:4a:37:81:6e:f5:28:33:c5:68:f1:98:2c:7a:01:54:b2:26: 54:4a:d6:74:18:3e:e5:c4:71:a2:c3:e3:3f:c5:68:ad:05:ad: de:19:79:d4:ed:9c:f0:2d:6a:f6:a8:b5:f7:0e:75:a3:8d:1b: 19:52:ed:82:a8:90:8f:10:7f:9c:25:27:50:7e:69:6e:a4:9b: 3e:21:17:4b:f2:1b:57:d4:c2:17:7c:73:c5:51:6b:45:1f:ad: 26:c1:87:af:85:ae:8a:43:89:d7:36:3a:91:49:7a:3d:b7:54: d5:4b:56:48:b2:49:49:9c:fd:29:ad:a7:0d:62:12:ce:68:ac: 23:ae:09:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6JteOCkcDbn12VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI1MDEwODE0MTM0NloXDTI1MDQwODEzMTM0NlowLzEtMCsGA1UEAxMk MDA1NTZkZWUtNDgzMy00MzU2LTlhMTEtZTIyNTI1MzllNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgILuSEhXWKBq0gQtDGSVWxjmg+pZXjhat7m mwc+Y3SJ023mZODuiczWMgKpsQISr19Gnro2ookNWwn1QxUksrp4NzzdyMAfn0kv ztjcdPfDUU3d/EJYpmBLSMdrYJvEPk0qdxT6lrz2If0C1V/UifgvFkDIIjde4lYa 2lKtV0RMRj1RtvnCBe1lauhZnGqQfYZ05vRx+OfwmixSSJYMwzeKgqZMd/lXp9Tm AO7aIyVrbk3PNxHt1O4dyNNmaFfX8sbvCjCn/9ebrO1D7X8LiZ2HAjmNnol38Mjo QMIPZTMMwYiGRNEQMXN5GXCeD9ziYuStvlWGLHbTiuAUCWcnWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL/gl/tTQZaAO7DpZJm0vIykJgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvNDRhOGNkMzEtZTU4NC0z ODgyLTgxMDMtYWM3M2NmZjMwZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMbnREMO8yrOkK9J0E/8Z9xYZIq2RTDu/QQScxqX5V7PTmBdng9coiN 6cILXUKKxCgXQWNPhcDaOAEXoWj3cI5Kag8rEUP6W7nvRO5/s3BLmRut2zQYXnL8 efma+vR0qiyQLry4gfdOuBL85s9wD1VRFCslC0+p6z3mW2KOiedKN4Fu9SgzxWjx mCx6AVSyJlRK1nQYPuXEcaLD4z/FaK0Frd4ZedTtnPAtavaotfcOdaONGxlS7YKo kI8Qf5wlJ1B+aW6kmz4hF0vyG1fUwhd8c8VRa0UfrSbBh6+FropDidc2OpFJej23 VNVLVkiySUmc/Smtpw1iEs5orCOuCbM= -----END CERTIFICATE-----Generated at Wed Feb 5 19:05:49 2025 by rpki-client