$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa File: a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa (raw, json) Hash identifier: 4Xd5u+Q9hgVjJes8jqoXirJc0ULqyfJFC3cQoDh6wh0= Subject key identifier: AB:06:00:D1:31:25:36:BA:E7:EF:B1:BF:83:25:E7:7B:F8:77:86:02 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F43285848B35B6ECBD11410A17A7E8D90 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 19886 IP address blocks: 171.162.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6e:cb:d1:14:10:a1:7a:7e:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=23c69f00-2695-4bd2-8777-1a9dae46fd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:52:90:4d:7b:b2:0e:24:0d:39:84:9b:59: f0:c0:a3:78:51:41:db:5c:e5:1f:5c:54:b4:c1:51: d4:59:5b:1b:26:81:79:29:74:b9:18:f7:29:05:42: 8a:4f:1e:86:dc:c9:ab:25:5a:d6:42:3e:38:f3:5e: 82:d7:40:33:16:87:85:d7:a0:66:2c:9c:35:aa:e5: 9a:61:ef:fd:d1:64:22:e5:5d:0f:cf:21:81:31:47: 30:d2:47:37:3e:9e:41:60:94:ee:8f:a3:c0:49:1e: 9d:93:18:d5:3b:d8:55:8c:f2:fb:91:b9:b5:b8:ee: 0d:35:f7:ce:39:51:8d:61:29:26:9d:81:db:54:47: 72:fc:da:b2:f5:ce:2d:fb:c2:00:ac:fd:59:3f:5a: b2:ca:28:63:d7:66:51:b6:0a:eb:f3:4a:09:da:25: 69:3b:49:2b:6e:5d:4f:47:23:80:78:d1:90:da:85: 17:aa:e1:28:65:1b:24:42:bf:ba:91:ee:3f:86:ad: de:d4:39:eb:94:3b:db:a7:e7:cf:44:4a:c4:05:26: b4:d8:7d:17:b8:56:3e:6c:d8:44:fb:45:77:aa:2b: 16:3c:12:5c:31:06:27:9e:8d:58:48:69:dd:55:5a: 23:04:62:b5:ff:aa:e3:57:c4:18:e7:b8:4b:e6:c8: 6e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:06:00:D1:31:25:36:BA:E7:EF:B1:BF:83:25:E7:7B:F8:77:86:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:66:a0:f7:9b:9e:64:3a:6d:48:63:7a:a8:82:84:85:c4:57: 41:5c:e8:d2:a5:a0:21:14:41:05:21:35:ad:d7:30:91:ad:24: 57:bd:de:bb:dc:99:52:27:03:a6:08:bd:e1:14:87:ca:30:34: df:46:4d:ca:6e:8f:19:fd:8b:42:6d:22:a5:f4:e9:79:42:db: ef:a3:a9:12:46:89:3c:b1:50:ef:fa:7e:fc:a7:86:74:7a:0d: b2:d3:cc:30:3e:4d:24:6a:5c:f5:44:a5:6a:55:7d:80:27:d9: 02:f3:35:16:d1:b6:8c:7a:2f:20:88:62:19:7f:23:f2:c2:77: a5:bf:99:7a:57:70:ab:0f:92:e1:0b:67:c2:fd:46:f0:00:db: 70:2e:71:0b:9e:79:29:90:03:85:f5:8f:15:f3:d7:d8:05:5d: a5:6d:19:a3:0a:a0:c1:00:8e:dc:5e:39:9f:eb:0c:de:55:b8: 81:16:64:78:0e:c9:40:25:77:a1:c2:9c:ed:c3:6f:13:0c:ff: b4:53:69:79:0a:74:d8:c8:5c:28:11:98:98:97:8c:d6:8a:d9: 42:4c:ef:e3:27:83:2c:b2:2e:85:44:6a:92:d1:48:11:43:9d: 94:ce:b7:0a:5b:2d:70:1d:54:85:8f:62:d2:2a:58:e5:b4:ad: ed:3f:98:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW27L0RQQoXp+jZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MjNjNjlmMDAtMjY5NS00YmQyLTg3NzctMWE5ZGFlNDZmZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMZSkE17sg4kDTmEm1nwwKN4UUHbXOUfXFS0 wVHUWVsbJoF5KXS5GPcpBUKKTx6G3MmrJVrWQj44816C10AzFoeF16BmLJw1quWa Ye/90WQi5V0PzyGBMUcw0kc3Pp5BYJTuj6PASR6dkxjVO9hVjPL7kbm1uO4NNffO OVGNYSkmnYHbVEdy/Nqy9c4t+8IArP1ZP1qyyihj12ZRtgrr80oJ2iVpO0krbl1P RyOAeNGQ2oUXquEoZRskQr+6ke4/hq3e1DnrlDvbp+fPRErEBSa02H0XuFY+bNhE +0V3qisWPBJcMQYnno1YSGndVVojBGK1/6rjV8QY57hL5shuJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsGANExJTa65++xv4Ml53v4d4YCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYTY4MDNkYmQtNmU1MC0z YjhjLWJlNDQtMGNmZWM2ZDgyMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBmoPebnmQ6bUhjeqiChIXEV0Fc6NKloCEUQQUhNa3XMJGtJFe93rvc mVInA6YIveEUh8owNN9GTcpujxn9i0JtIqX06XlC2++jqRJGiTyxUO/6fvynhnR6 DbLTzDA+TSRqXPVEpWpVfYAn2QLzNRbRtox6LyCIYhl/I/LCd6W/mXpXcKsPkuEL Z8L9RvAA23AucQueeSmQA4X1jxXz19gFXaVtGaMKoMEAjtxeOZ/rDN5VuIEWZHgO yUAld6HCnO3DbxMM/7RTaXkKdNjIXCgRmJiXjNaK2UJM7+MngyyyLoVEapLRSBFD nZTOtwpbLXAdVIWPYtIqWOW0re0/mPI= -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:53 2025 by rpki-client