$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/cc56bba9-2a7f-3c56-b41b-c2a87d81c666.roa File: cc56bba9-2a7f-3c56-b41b-c2a87d81c666.roa (raw, json) Hash identifier: 6s8hEicjo1wNRYiJTNTSncoCqQQq7A9FVTf3HoFgWXM= Subject key identifier: D7:F6:9F:7C:32:AA:8A:59:33:A0:45:42:22:B2:30:4C:5B:9A:7E:D7 Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F43285848779CFBAEF50E4DC8630AD240 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/cc56bba9-2a7f-3c56-b41b-c2a87d81c666.roa Signing time: Tue 07 Jan 2025 16:24:23 +0000 ROA not before: Tue 07 Jan 2025 16:24:23 +0000 ROA not after: Mon 07 Apr 2025 15:24:23 +0000 asID: 40788 IP address blocks: 162.250.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:9c:fb:ae:f5:0e:4d:c8:63:0a:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Jan 7 16:24:23 2025 GMT Not After : Apr 7 15:24:23 2025 GMT Subject: CN=cb8515c6-96c0-4453-8a69-5aee92e5830d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:39:c4:3f:e8:2d:9d:f4:f7:06:94:f6:73: 33:62:90:bf:b9:9c:ed:f6:01:cc:9c:b4:7e:11:5b: 70:05:4f:49:73:52:04:7d:bf:cf:be:9b:10:8c:47: c7:00:5b:98:54:95:40:01:81:f2:f2:98:b3:c5:5f: 95:2b:33:01:8e:64:32:e1:ae:74:44:f5:2c:d4:5b: c9:67:f9:36:08:fb:65:fe:de:e6:7a:0d:7a:af:94: 2c:c6:a6:e4:7a:0e:5f:1d:a5:3c:04:28:74:6f:33: c9:e8:2e:53:48:01:c7:3f:56:e4:1b:b6:9b:23:05: 9c:77:3e:c3:ac:04:6f:70:5c:2d:4a:bf:b1:95:19: 7b:5f:c5:61:42:2f:b3:5f:5b:98:7c:3d:3a:9d:fb: d9:51:42:4f:4d:c9:e4:b1:a9:2a:e3:91:3a:00:f2: e4:71:36:7c:df:47:70:2a:4c:86:77:8c:72:e6:74: af:3c:e3:0f:f5:be:f5:ca:00:5d:fa:80:2b:47:b5: 52:61:e0:c4:8f:fa:5a:78:33:40:24:0a:41:dd:b1: 90:a1:ce:56:39:a6:95:61:a5:33:63:ec:38:d9:50: 2f:35:de:00:3a:58:8d:4d:36:ce:7a:eb:fe:81:31: 4b:52:11:6f:75:f3:f7:d0:cd:a4:6f:9a:2c:da:04: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:9F:7C:32:AA:8A:59:33:A0:45:42:22:B2:30:4C:5B:9A:7E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/cc56bba9-2a7f-3c56-b41b-c2a87d81c666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 162.250.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c4:e3:fc:9f:62:f3:20:c4:ec:f8:d6:dd:58:4f:85:c7:a0: 81:c7:3f:bb:bf:c3:11:6d:4f:a3:2e:e0:05:9d:4d:c3:7e:7c: 70:77:88:bb:e5:63:34:4a:97:a2:e5:11:07:52:5e:6e:0e:53: bb:dd:e2:45:83:69:26:32:a0:7e:0d:58:3c:dd:09:ac:dd:d0: 0d:f7:87:a7:82:8b:2e:38:97:4a:4d:5d:e1:77:56:7b:9c:b1: 42:0e:08:d1:ee:17:a3:b6:23:fa:e3:c3:22:39:3e:7d:09:5f: b2:bd:8e:b5:46:aa:95:18:94:3e:af:d2:85:ed:35:d7:65:e1: cd:89:e0:04:94:26:f3:97:cf:e2:1f:d7:25:55:dd:cd:b8:f9: ed:a4:d6:ac:92:30:9b:d7:ac:23:1b:1a:69:28:f7:be:9d:8d: 79:12:a2:00:ba:5d:91:0c:23:ff:0e:0f:ab:1d:d6:d2:ce:73: 0a:07:b0:0c:de:e7:f8:5d:b5:cd:58:62:18:a1:5e:da:f1:3e: dc:06:aa:ad:5b:71:f2:bf:5e:38:df:28:9a:9e:c3:05:05:dc: 73:20:94:7d:75:20:32:ca:b5:6b:03:d3:7f:49:f8:64:c6:9a: 78:61:fa:af:76:c7:10:c0:1e:8d:b4:31:63:47:f6:83:69:cc: 11:6a:29:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3nPuu9Q5NyGMK0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI1MDEwNzE2MjQyM1oXDTI1MDQwNzE1MjQyM1owLzEtMCsGA1UEAxMk Y2I4NTE1YzYtOTZjMC00NDUzLThhNjktNWFlZTkyZTU4MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodo5xD/oLZ309waU9nMzYpC/uZzt9gHMnLR+ EVtwBU9Jc1IEfb/PvpsQjEfHAFuYVJVAAYHy8pizxV+VKzMBjmQy4a50RPUs1FvJ Z/k2CPtl/t7meg16r5Qsxqbkeg5fHaU8BCh0bzPJ6C5TSAHHP1bkG7abIwWcdz7D rARvcFwtSr+xlRl7X8VhQi+zX1uYfD06nfvZUUJPTcnksakq45E6APLkcTZ830dw KkyGd4xy5nSvPOMP9b71ygBd+oArR7VSYeDEj/paeDNAJApB3bGQoc5WOaaVYaUz Y+w42VAvNd4AOliNTTbOeuv+gTFLUhFvdfP30M2kb5os2gRh1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf2n3wyqopZM6BFQiKyMExbmn7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvY2M1NmJiYTktMmE3Zi0z YzU2LWI0MWItYzJhODdkODFjNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnE4/yfYvMgxOz41t1YT4XHoIHHP7u/wxFtT6Mu4AWdTcN+fHB3iLvl YzRKl6LlEQdSXm4OU7vd4kWDaSYyoH4NWDzdCazd0A33h6eCiy44l0pNXeF3Vnuc sUIOCNHuF6O2I/rjwyI5Pn0JX7K9jrVGqpUYlD6v0oXtNddl4c2J4ASUJvOXz+If 1yVV3c24+e2k1qySMJvXrCMbGmko976djXkSogC6XZEMI/8OD6sd1tLOcwoHsAze 5/hdtc1YYhihXtrxPtwGqq1bcfK/XjjfKJqewwUF3HMglH11IDLKtWsD039J+GTG mnhh+q92xxDAHo20MWNH9oNpzBFqKfk= -----END CERTIFICATE-----Generated at Wed Feb 5 19:11:45 2025 by rpki-client