$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e44dd1d8-a2c2-31f6-a676-d838cadb3a58.roa File: e44dd1d8-a2c2-31f6-a676-d838cadb3a58.roa (raw, json) Hash identifier: raU0i4GTdV8ufWVBdQQMZ9WokfMOLx4HjFTLHQY1gko= Subject key identifier: FA:D0:3B:85:12:21:55:51:7D:CD:1C:C3:F2:6B:36:E1:DF:B3:F7:F2 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F43285848B35B6E6ACD13369429BE3E00 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e44dd1d8-a2c2-31f6-a676-d838cadb3a58.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 19886 IP address blocks: 171.162.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6e:6a:cd:13:36:94:29:be:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=be2590b9-fe2a-4e3c-a0d7-a2dcb919d498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:62:b1:99:20:f3:7b:4c:23:e8:93:3b:78: e0:6f:0b:ea:d1:e4:1c:47:78:26:85:66:48:30:aa: 2a:af:9b:cd:8e:28:3c:c2:90:4c:f1:2f:e3:18:c4: c8:2e:0b:af:bb:cf:25:6b:52:b7:9a:30:6d:23:50: 1a:29:70:79:58:2d:ab:e4:17:68:05:f5:24:c9:0c: bb:39:34:10:ac:18:4d:06:11:71:a8:68:d2:d1:3f: 1e:b1:98:36:eb:d5:cd:c8:19:80:25:2a:03:2d:90: 59:14:80:26:9b:db:17:76:98:62:a6:ed:9a:66:fc: ca:ff:bd:26:c9:af:c8:1f:58:f3:ee:fa:71:b2:c4: 53:4f:28:2b:96:9c:93:cd:27:00:d8:85:7c:c1:2d: 79:d6:42:a5:a9:74:db:a2:79:87:20:c1:c8:83:38: 60:77:19:9c:b0:9f:23:f9:99:c1:95:a4:cc:db:9f: ff:5d:77:20:5d:c9:69:61:be:c6:c0:71:65:30:d0: 79:a0:7e:4d:6b:e2:9f:fd:5d:a1:2a:8e:41:36:1d: 4e:0e:72:37:12:3d:b5:49:c4:ae:a6:3b:0d:f5:22: ac:60:8f:a0:3b:48:58:32:e7:80:9a:aa:59:26:74: a4:82:b9:67:52:cb:f6:67:51:2b:67:d6:c9:4f:c8: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D0:3B:85:12:21:55:51:7D:CD:1C:C3:F2:6B:36:E1:DF:B3:F7:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e44dd1d8-a2c2-31f6-a676-d838cadb3a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:42:4c:dc:b1:ee:c2:a0:0f:1b:d9:f6:3b:c4:36:4c:af:0b: 00:0b:91:bf:da:93:d9:68:94:e9:67:2f:48:fe:c6:d4:1f:c1: 6a:85:13:f9:48:c8:5b:ca:68:ec:ce:4a:f3:02:f2:40:3c:1d: 9c:f3:45:4b:e2:f4:b7:93:29:93:48:74:ae:42:a9:11:1f:8c: 3d:6d:10:52:00:b0:ad:96:3c:c6:ed:12:5e:e4:b1:ef:3a:7f: 96:04:47:ed:67:fa:04:4b:39:29:b5:9a:9b:f1:c5:85:b6:e7: ec:2e:d3:bb:41:94:1b:82:86:a5:65:70:3e:0e:d3:08:62:15: 26:2e:99:7a:87:a0:1a:8c:5c:e4:90:a7:88:a6:98:82:7d:53: b8:44:d8:20:5a:c7:50:a0:72:7a:8e:ba:f6:bb:4b:8a:d4:62: fe:5b:f0:2a:dd:65:32:d8:31:93:8b:e7:5b:e2:b8:70:85:22: 60:b3:40:9e:58:2f:2b:17:71:7a:d4:97:9c:23:98:90:57:33: bf:10:31:ff:4c:df:d7:25:45:c5:87:b0:c6:25:8d:f9:06:1f: 9d:4e:b0:3e:e3:5e:bb:c0:91:e8:0e:80:05:92:68:7d:be:06: 66:f6:5d:50:6a:9b:e1:36:63:f5:b7:0d:6d:f7:0b:4a:4a:d6: 41:5a:52:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW25qzRM2lCm+PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YmUyNTkwYjktZmUyYS00ZTNjLWEwZDctYTJkY2I5MTlkNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgtisZkg83tMI+iTO3jgbwvq0eQcR3gmhWZI MKoqr5vNjig8wpBM8S/jGMTILguvu88la1K3mjBtI1AaKXB5WC2r5BdoBfUkyQy7 OTQQrBhNBhFxqGjS0T8esZg269XNyBmAJSoDLZBZFIAmm9sXdphipu2aZvzK/70m ya/IH1jz7vpxssRTTygrlpyTzScA2IV8wS151kKlqXTbonmHIMHIgzhgdxmcsJ8j +ZnBlaTM25//XXcgXclpYb7GwHFlMNB5oH5Na+Kf/V2hKo5BNh1ODnI3Ej21ScSu pjsN9SKsYI+gO0hYMueAmqpZJnSkgrlnUsv2Z1ErZ9bJT8iQuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrQO4USIVVRfc0cw/JrNuHfs/fyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZTQ0ZGQxZDgtYTJjMi0z MWY2LWE2NzYtZDgzOGNhZGIzYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZCTNyx7sKgDxvZ9jvENkyvCwALkb/ak9lolOlnL0j+xtQfwWqFE/lI yFvKaOzOSvMC8kA8HZzzRUvi9LeTKZNIdK5CqREfjD1tEFIAsK2WPMbtEl7kse86 f5YER+1n+gRLOSm1mpvxxYW25+wu07tBlBuChqVlcD4O0whiFSYumXqHoBqMXOSQ p4immIJ9U7hE2CBax1CgcnqOuva7S4rUYv5b8CrdZTLYMZOL51viuHCFImCzQJ5Y LysXcXrUl5wjmJBXM78QMf9M39clRcWHsMYljfkGH51OsD7jXrvAkegOgAWSaH2+ Bmb2XVBqm+E2Y/W3DW33C0pK1kFaUv0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:17 2025 by rpki-client