$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa File: 9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa (raw, json) Hash identifier: zedq7ryADHXKHkH7g96gBKPNyMcamx8hRyrgJ3Yp0mo= Subject key identifier: DC:AC:8C:76:5F:9E:0D:43:65:67:95:B8:CE:3C:4D:71:B1:0D:0F:FF Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F432858487FB5CF26E66872418A05DCC0 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 401416 IP address blocks: 162.212.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:cf:26:e6:68:72:41:8a:05:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=50bb901c-5208-44b6-bf9c-b5b4704e1f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:f8:1b:55:62:de:cd:fc:2c:75:b7:1b:c9: b7:77:fd:ea:ce:08:9b:f7:91:ec:9e:92:47:a2:ba: 25:24:7d:fd:32:63:f8:09:4a:9e:ac:9d:43:d7:1f: a1:7c:6d:5b:ba:d8:71:17:dd:a4:32:d4:3c:6d:fc: d6:40:ff:08:a0:db:8b:42:cc:85:08:59:0a:dc:a9: 44:ef:8e:d4:2d:43:96:d9:68:df:e4:e1:19:8b:86: 9e:df:76:06:c4:ed:c9:ec:8e:9b:18:65:99:89:79: b3:77:9b:f5:48:80:42:83:f1:d4:a3:49:e8:01:1c: d5:3d:64:6f:e5:cf:e7:c4:e8:c8:52:81:b8:e7:8e: d1:d7:55:18:6c:48:1b:97:5e:1d:7e:6c:02:f5:71: a2:98:78:1d:8c:eb:85:83:38:b5:46:09:1b:7c:2f: 41:8d:20:3b:d7:36:18:bd:6c:40:f3:23:56:5d:71: 18:07:69:af:b9:9b:1f:8a:94:38:ec:8e:f3:ab:63: 81:a2:5b:d9:01:77:49:91:ef:cd:d1:5f:c7:73:a5: d0:6e:83:e5:a1:c4:2c:b7:d8:ee:09:2f:15:7e:2b: da:70:b3:47:ea:26:13:97:4b:09:3b:26:10:a0:a7: 4f:0c:e7:f7:42:72:0f:03:36:90:f9:25:28:75:dd: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AC:8C:76:5F:9E:0D:43:65:67:95:B8:CE:3C:4D:71:B1:0D:0F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 162.212.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:52:1e:98:6e:fe:dc:7e:74:6f:36:69:51:0c:2b:8e:a1:3e: ba:34:09:b3:8c:d2:1b:09:3c:d2:eb:c6:0b:eb:ce:40:de:e7: d5:46:5c:c1:a2:ed:f9:72:76:08:9f:84:61:14:56:3d:c7:88: d9:39:ff:00:52:ff:a3:52:61:4d:a3:8f:ab:de:9b:c2:c1:d9: 06:0e:55:f4:6f:0e:df:17:d6:3c:ed:1b:16:61:75:49:6d:ac: 67:62:e1:14:fc:26:69:31:3d:18:a4:75:52:ea:20:6f:ed:fc: e2:1b:ca:e6:0b:4b:e4:c5:b2:c4:13:05:e0:2d:21:01:95:ca: 13:08:18:79:9d:8f:b4:c4:e0:53:7c:0c:18:e5:90:1d:6a:f2: 1f:cc:34:30:dc:c5:78:1d:77:36:e5:0b:f4:db:95:d7:ad:0b: 2a:84:88:ba:53:32:09:8d:75:b8:b1:15:70:2e:48:19:59:c1: af:15:45:a1:2c:71:f4:0e:30:32:55:cc:5d:3c:d2:43:09:7e: a7:bd:b1:59:50:35:90:62:ed:2f:97:79:0b:a4:c2:92:ed:43: ad:3e:41:b3:b4:08:2a:26:e6:55:26:04:46:3e:de:c0:c1:51: b0:2d:3b:5b:94:67:12:7f:11:3b:1b:55:6f:73:3e:06:51:02: 93:85:68:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tc8m5mhyQYoF3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk NTBiYjkwMWMtNTIwOC00NGI2LWJmOWMtYjViNDcwNGUxZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIr4G1Vi3s38LHW3G8m3d/3qzgib95HsnpJH orolJH39MmP4CUqerJ1D1x+hfG1buthxF92kMtQ8bfzWQP8IoNuLQsyFCFkK3KlE 747ULUOW2Wjf5OEZi4ae33YGxO3J7I6bGGWZiXmzd5v1SIBCg/HUo0noARzVPWRv 5c/nxOjIUoG4547R11UYbEgbl14dfmwC9XGimHgdjOuFgzi1RgkbfC9BjSA71zYY vWxA8yNWXXEYB2mvuZsfipQ47I7zq2OBolvZAXdJke/N0V/Hc6XQboPlocQst9ju CS8VfivacLNH6iYTl0sJOyYQoKdPDOf3QnIPAzaQ+SUodd2MrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNysjHZfng1DZWeVuM48TXGxDQ//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvOTkzNGNmZTYtZmMzNS0z NGZjLTg4YTktZTg4OWE0ZjUyZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBSHphu/tx+dG82aVEMK46hPro0CbOM0hsJPNLrxgvrzkDe59VGXMGi 7flydgifhGEUVj3HiNk5/wBS/6NSYU2jj6vem8LB2QYOVfRvDt8X1jztGxZhdUlt rGdi4RT8JmkxPRikdVLqIG/t/OIbyuYLS+TFssQTBeAtIQGVyhMIGHmdj7TE4FN8 DBjlkB1q8h/MNDDcxXgddzblC/TbldetCyqEiLpTMgmNdbixFXAuSBlZwa8VRaEs cfQOMDJVzF080kMJfqe9sVlQNZBi7S+XeQukwpLtQ60+QbO0CCom5lUmBEY+3sDB UbAtO1uUZxJ/ETsbVW9zPgZRApOFaOs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:25 2025 by rpki-client