$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa File: ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa (raw, json) Hash identifier: bswlMYqpMhbFMJlL0ejTNWyfkWQatXMVf6LK6+m7xrI= Subject key identifier: 5D:FE:7F:AE:F0:E2:E9:CF:B1:BD:B6:6A:14:3D:5A:B2:93:FC:82:BA Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285848748B203F16A4B21BCD33C130 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 162.223.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:20:3f:16:a4:b2:1b:cd:33:c1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=cbd09fa7-2508-4381-b362-a468cd0a69a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:62:f8:66:fe:31:be:7b:5d:1f:2c:d7:f3:0c: 52:5a:73:2b:98:32:74:3d:90:8f:88:72:f1:f7:b7: f4:7e:db:48:85:6f:05:08:5a:6f:34:15:da:eb:80: 85:39:32:23:e8:f0:19:76:01:ca:06:33:3a:cd:ef: da:54:73:b8:c4:d2:04:3c:ce:80:a6:28:15:e0:eb: dd:ac:9e:09:2e:f6:e2:46:9a:73:25:9d:be:3b:76: bb:d2:84:84:37:ac:a5:16:0d:3a:68:ee:4e:35:6b: 51:f4:a8:b0:79:1e:7d:18:90:4b:dc:cb:8e:fd:e6: 42:ed:0d:28:aa:25:4e:7b:f4:9c:5e:54:53:13:ef: 9f:6a:81:5a:7a:61:1d:6e:27:49:9b:37:02:93:bd: 5b:73:30:22:aa:0b:eb:5b:d0:27:61:12:51:df:a0: 3e:da:e5:0d:00:6f:12:9f:dd:1f:7a:cf:b5:94:bc: 8a:f4:41:df:c2:6a:75:1a:c7:dc:24:39:f4:20:21: 19:3e:cd:6b:37:cb:31:e3:4a:47:bb:50:06:28:20: 69:4f:54:e4:2d:32:ff:06:57:01:17:b3:c7:89:4b: 3b:0f:7c:de:7f:0c:8f:10:6f:a6:f7:6e:09:1d:bc: 72:7c:3f:f7:24:b2:ac:9a:72:f5:a0:c2:eb:7d:a7: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:7F:AE:F0:E2:E9:CF:B1:BD:B6:6A:14:3D:5A:B2:93:FC:82:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.223.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:90:ad:a0:83:ce:fd:55:dd:a5:f7:a6:23:7e:25:77:8a:05: 32:45:2e:20:de:e1:e2:79:3a:44:bb:f9:11:07:93:26:9a:12: ca:ae:f3:ba:94:a1:4b:ed:b3:b1:a3:78:ee:9d:6e:22:be:2b: 65:a0:0b:41:88:cd:9c:35:09:b9:e7:d4:12:34:44:2d:16:39: 52:88:29:fb:a1:73:38:a9:3f:8b:2e:b7:53:ce:ba:1d:94:14: 1c:69:cc:83:d8:e8:5c:39:1c:5a:24:5d:16:38:38:62:09:1b: 9d:f0:6b:4b:ff:76:2e:22:b3:d6:cf:24:23:6f:91:87:17:91: ff:ed:0c:1a:f8:64:1c:af:51:1e:6b:38:0c:32:0f:fd:27:71: 3c:a2:ec:53:89:8e:04:11:95:43:f8:88:e2:56:90:a7:b2:e8: 2f:38:fc:3c:34:d7:34:31:ba:fd:78:0d:15:51:56:35:4c:5b: 27:f0:9c:c1:6c:f3:57:f2:22:c9:a0:b1:a3:62:67:3c:08:ba: 2a:aa:5d:d7:c5:8f:ef:51:3b:4d:b9:cf:47:2f:27:9c:ee:4a: d7:bf:d4:d1:d8:7b:76:be:f8:4f:35:98:90:7c:92:a5:2f:1b: c9:a6:42:05:4a:44:55:e9:0e:63:c1:98:eb:23:de:1f:ba:a2: aa:db:8e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0iyA/FqSyG80zwTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk Y2JkMDlmYTctMjUwOC00MzgxLWIzNjItYTQ2OGNkMGE2OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2L4Zv4xvntdHyzX8wxSWnMrmDJ0PZCPiHLx 97f0fttIhW8FCFpvNBXa64CFOTIj6PAZdgHKBjM6ze/aVHO4xNIEPM6ApigV4Ovd rJ4JLvbiRppzJZ2+O3a70oSEN6ylFg06aO5ONWtR9KiweR59GJBL3MuO/eZC7Q0o qiVOe/ScXlRTE++faoFaemEdbidJmzcCk71bczAiqgvrW9AnYRJR36A+2uUNAG8S n90fes+1lLyK9EHfwmp1GsfcJDn0ICEZPs1rN8sx40pHu1AGKCBpT1TkLTL/BlcB F7PHiUs7D3zefwyPEG+m924JHbxyfD/3JLKsmnL1oMLrfadOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3+f67w4unPsb22ahQ9WrKT/IK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZWEyZTRjMGMtNDkzMy0z OTVlLWFhOTctNGE2ZWJhYzg0ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCQraCDzv1V3aX3piN+JXeKBTJFLiDe4eJ5OkS7+REHkyaaEsqu87qU oUvts7GjeO6dbiK+K2WgC0GIzZw1Cbnn1BI0RC0WOVKIKfuhczipP4sut1POuh2U FBxpzIPY6Fw5HFokXRY4OGIJG53wa0v/di4is9bPJCNvkYcXkf/tDBr4ZByvUR5r OAwyD/0ncTyi7FOJjgQRlUP4iOJWkKey6C84/Dw01zQxuv14DRVRVjVMWyfwnMFs 81fyIsmgsaNiZzwIuiqqXdfFj+9RO025z0cvJ5zuSte/1NHYe3a++E81mJB8kqUv G8mmQgVKRFXpDmPBmOsj3h+6oqrbjvA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:04 2025 by rpki-client