$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa File: f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa (raw, json) Hash identifier: 2YEeFUUaXXFw4tTQltxwSXP4Mp23mMFgXquYt50xlEk= Subject key identifier: 23:7E:40:37:97:DB:95:1B:58:EF:5F:89:F4:1C:FA:1A:49:4E:68:10 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F43285848B35B6DD753A461C1056BAFE8 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 19886 IP address blocks: 171.162.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6d:d7:53:a4:61:c1:05:6b:af:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=87e60801-7530-4253-adc5-e76bb44a9053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:47:27:f3:43:94:f3:2a:29:54:1a:b0:b5: 87:3c:1c:52:07:85:73:91:4d:b7:22:24:c8:c0:d9: 91:2c:6f:a4:77:0e:94:64:9c:67:46:4c:15:55:d0: e0:53:f2:fd:d7:36:e2:57:47:12:c8:5e:25:50:5f: 14:e2:1f:1c:46:b8:24:0b:3d:aa:16:2e:12:6d:11: 10:d1:ab:11:75:04:7d:6a:00:f7:5b:dd:f2:e5:76: 36:e6:e5:fd:6e:73:1a:58:2d:50:8f:97:96:57:3a: 1e:04:fd:1e:c1:df:3b:41:12:1f:2a:30:13:ba:52: 71:43:6f:95:9d:e4:b0:5b:e9:ad:03:30:a8:b8:4d: ed:72:cb:9f:c2:9f:62:73:0f:d9:ca:45:f9:74:af: 35:c2:e1:42:10:8d:e9:4c:c9:45:1f:ea:f9:da:31: 51:e9:71:6b:7f:29:2d:b6:7d:e0:2e:5a:8b:8a:64: 51:69:ea:2e:25:f9:79:f8:92:3d:90:24:15:25:63: 95:09:c4:aa:a6:e9:e4:d8:bb:ab:cd:74:99:05:3c: ea:de:7e:be:d8:df:b1:3b:81:5f:a9:29:10:76:ed: f2:23:f4:86:b3:ce:13:e7:af:e0:3d:01:8a:2e:ac: 01:71:06:3f:67:01:ec:2b:11:ee:8e:79:08:d6:6a: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:40:37:97:DB:95:1B:58:EF:5F:89:F4:1C:FA:1A:49:4E:68:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a2:fd:09:a1:da:ed:b1:f6:b8:f9:db:38:0a:be:5a:4c:e9: 6a:93:c3:df:15:77:39:f7:e5:92:2a:b6:ec:45:44:d8:68:c1: 1f:c8:ab:13:6a:2b:2e:12:b9:b2:43:35:c5:30:9a:9c:55:d0: 9f:01:6e:96:fe:1c:3d:ad:16:df:e5:27:d2:90:88:8e:54:43: 61:0e:69:d0:d9:66:92:d3:4e:05:df:b2:18:0b:67:a5:ec:72: 7b:b2:dd:b9:cf:6f:ba:ec:62:1d:5d:43:ac:cb:ba:d7:88:fe: e6:8c:35:e7:78:d5:ee:2a:19:32:cd:a9:a0:49:2e:51:57:56: 09:9a:5d:46:5a:2c:71:63:1b:0e:79:66:8d:d7:92:dd:03:da: ec:90:d5:0d:86:b5:19:3e:d6:02:f7:67:8e:62:ec:56:97:56: 82:59:06:23:2c:ba:c7:ee:7f:c1:bc:5c:36:d2:f3:99:ac:0c: bb:c2:9f:49:f0:ae:4a:b1:9a:36:ce:5a:3f:d9:eb:89:93:da: b7:66:a4:98:2e:4d:08:5b:53:bf:24:66:76:27:89:18:59:f9: 2e:3d:df:22:b9:6c:5f:03:25:3f:fa:fe:2c:c8:f4:50:49:71: 85:d7:20:e6:49:29:6f:5c:28:83:b8:ec:18:82:9d:c9:34:5e: 4c:39:b8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW23XU6RhwQVrr+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ODdlNjA4MDEtNzUzMC00MjUzLWFkYzUtZTc2YmI0NGE5MDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6xHJ/NDlPMqKVQasLWHPBxSB4VzkU23IiTI wNmRLG+kdw6UZJxnRkwVVdDgU/L91zbiV0cSyF4lUF8U4h8cRrgkCz2qFi4SbREQ 0asRdQR9agD3W93y5XY25uX9bnMaWC1Qj5eWVzoeBP0ewd87QRIfKjATulJxQ2+V neSwW+mtAzCouE3tcsufwp9icw/ZykX5dK81wuFCEI3pTMlFH+r52jFR6XFrfykt tn3gLlqLimRRaeouJfl5+JI9kCQVJWOVCcSqpunk2LurzXSZBTzq3n6+2N+xO4Ff qSkQdu3yI/SGs84T56/gPQGKLqwBcQY/ZwHsKxHujnkI1mqYTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN+QDeX25UbWO9fifQc+hpJTmgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZjhjZTBmMGUtMGU4OS0z ZTUzLWFiMTAtZmFjNTkxM2QyNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6J2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEai/Qmh2u2x9rj52zgKvlpM6WqTw98Vdzn35ZIqtuxFRNhowR/IqxNq Ky4SubJDNcUwmpxV0J8Bbpb+HD2tFt/lJ9KQiI5UQ2EOadDZZpLTTgXfshgLZ6Xs cnuy3bnPb7rsYh1dQ6zLuteI/uaMNed41e4qGTLNqaBJLlFXVgmaXUZaLHFjGw55 Zo3Xkt0D2uyQ1Q2GtRk+1gL3Z45i7FaXVoJZBiMsusfuf8G8XDbS85msDLvCn0nw rkqxmjbOWj/Z64mT2rdmpJguTQhbU78kZnYniRhZ+S493yK5bF8DJT/6/izI9FBJ cYXXIOZJKW9cKIO47BiCnck0Xkw5uKk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:35 2025 by rpki-client