$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa File: 541b454a-f70e-3454-bcae-4a7dff7be3ef.roa (raw, json) Hash identifier: fvFfNZnN51YRV2cgGVmPQ+w04ZpYYBeh/FCetlSdvHQ= Subject key identifier: 01:AF:A3:E5:8F:49:2C:42:37:DA:F4:1F:F1:EE:12:89:65:72:12:3E Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F432858487FB5D177F0E9C0DC2A9B9C40 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 162.212.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d1:77:f0:e9:c0:dc:2a:9b:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=0a63d43c-e1e3-437f-b8e4-631edfb4b061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:4c:4a:be:da:89:50:9e:25:76:46:a1:78: 8c:db:18:79:04:ec:79:2f:f5:36:3e:24:81:44:7e: b8:67:1e:ef:d3:ce:7e:42:59:e5:a8:ee:4b:52:15: a8:a3:d2:3f:82:4b:2f:4e:bc:c1:ae:89:44:94:f0: 6b:e0:49:21:ca:ec:28:16:af:96:16:8b:1d:c2:06: 03:59:7b:4b:d6:59:a8:dc:23:1a:78:7f:70:11:16: 3d:76:50:93:bb:17:32:0a:dc:2c:a9:85:6d:4f:a3: 7d:66:76:d3:46:37:0a:76:78:b7:46:a6:44:27:8b: 84:6f:05:33:b0:59:1c:03:51:63:62:b9:7b:08:a7: 68:ea:be:e0:81:f3:30:05:ad:ae:22:0f:f1:1e:52: 45:be:a9:23:0c:e1:6b:cc:85:d5:f9:fa:f3:84:89: cf:aa:0f:3c:22:14:0b:f8:73:24:ca:39:6c:e0:df: c1:20:07:f0:5a:99:51:3b:19:13:df:50:a2:a8:4b: 47:8e:4a:2f:6f:01:84:06:ef:22:6f:5b:8e:a1:f0: 88:20:be:c9:51:0a:4f:0d:eb:fa:b8:68:82:ee:14: dd:8f:1a:16:a7:57:4f:6a:3b:2c:88:f6:75:9f:31: a3:95:d2:1e:b1:a3:c9:85:ac:de:45:9c:db:68:24: 82:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AF:A3:E5:8F:49:2C:42:37:DA:F4:1F:F1:EE:12:89:65:72:12:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 162.212.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:62:05:33:f6:10:06:57:ce:74:5d:bf:52:19:72:26:5c:b0: 2d:31:ee:9d:46:a5:37:74:8c:31:d7:05:7f:a4:88:86:8c:ca: 1d:10:92:65:cf:16:dd:4a:17:5b:58:7d:29:8a:93:47:f2:6a: ad:25:60:d7:75:b5:30:07:d9:d9:53:1d:ef:18:ef:4b:85:0c: e2:bc:0b:01:34:f4:a2:18:b7:c7:32:38:f5:d1:e4:c1:38:d8: d5:a4:65:97:17:75:85:b1:2b:c6:fe:72:c5:6b:79:91:ed:13: db:9e:45:c6:29:c1:2c:26:7b:88:f2:e6:ad:03:2e:99:1d:49: a9:20:d8:25:56:28:7c:43:4f:c8:29:08:82:31:80:47:fb:46: 1f:fd:50:e3:1d:65:2d:c9:3f:dc:71:a4:66:06:b3:80:5c:4e: 03:2e:f5:ca:d6:25:8c:3b:69:2f:f7:74:f9:6c:64:23:90:e7: 8a:e2:dd:7b:03:4d:80:99:de:13:b8:0d:cd:1a:3b:c0:fd:d4: 5e:7e:11:cb:22:29:01:fd:43:30:fe:b5:95:25:5e:e9:9e:7a: 62:52:85:ce:fe:73:b8:bf:68:13:18:a1:f6:0e:56:f8:70:99: 05:d0:88:61:c4:f8:ab:0b:85:71:26:6c:50:b7:39:52:c9:66: 0c:27:bb:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdF38OnA3CqbnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk MGE2M2Q0M2MtZTFlMy00MzdmLWI4ZTQtNjMxZWRmYjRiMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdZMSr7aiVCeJXZGoXiM2xh5BOx5L/U2PiSB RH64Zx7v085+QlnlqO5LUhWoo9I/gksvTrzBrolElPBr4EkhyuwoFq+WFosdwgYD WXtL1lmo3CMaeH9wERY9dlCTuxcyCtwsqYVtT6N9ZnbTRjcKdni3RqZEJ4uEbwUz sFkcA1FjYrl7CKdo6r7ggfMwBa2uIg/xHlJFvqkjDOFrzIXV+frzhInPqg88IhQL +HMkyjls4N/BIAfwWplROxkT31CiqEtHjkovbwGEBu8ib1uOofCIIL7JUQpPDev6 uGiC7hTdjxoWp1dPajssiPZ1nzGjldIesaPJhazeRZzbaCSCUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGvo+WPSSxCN9r0H/HuEollchI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvNTQxYjQ1NGEtZjcwZS0z NDU0LWJjYWUtNGE3ZGZmN2JlM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFiBTP2EAZXznRdv1IZciZcsC0x7p1GpTd0jDHXBX+kiIaMyh0QkmXP Ft1KF1tYfSmKk0fyaq0lYNd1tTAH2dlTHe8Y70uFDOK8CwE09KIYt8cyOPXR5ME4 2NWkZZcXdYWxK8b+csVreZHtE9ueRcYpwSwme4jy5q0DLpkdSakg2CVWKHxDT8gp CIIxgEf7Rh/9UOMdZS3JP9xxpGYGs4BcTgMu9crWJYw7aS/3dPlsZCOQ54ri3XsD TYCZ3hO4Dc0aO8D91F5+EcsiKQH9QzD+tZUlXumeemJShc7+c7i/aBMYofYOVvhw mQXQiGHE+KsLhXEmbFC3OVLJZgwnu2U= -----END CERTIFICATE-----Generated at Fri Mar 14 09:50:09 2025 by rpki-client