$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa File: 32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa (raw, json) Hash identifier: 6uiL9rP/ZK4lGUrufgePvtZWXsf8/KgV/d6p/g6jycs= Subject key identifier: B7:84:1C:97:FE:B8:AF:F9:B1:34:88:2E:D1:BF:02:69:00:8D:49:6E Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F432858487E506216EE57CEFC16C3FA00 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa Signing time: Fri 10 Jan 2025 02:00:40 +0000 ROA not before: Fri 10 Jan 2025 02:00:40 +0000 ROA not after: Thu 10 Apr 2025 01:00:40 +0000 asID: 396026 IP address blocks: 162.211.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:50:62:16:ee:57:ce:fc:16:c3:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Jan 10 02:00:40 2025 GMT Not After : Apr 10 01:00:40 2025 GMT Subject: CN=e16aefe8-59da-483d-b71a-7ca8490d45e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:61:6d:e2:73:21:f6:aa:f8:83:e5:13:36:48: 63:b8:0e:1f:d6:65:b8:57:cf:36:d9:37:0a:86:b5: c4:7f:66:2f:93:e2:d6:c6:49:38:70:b7:09:10:63: 21:85:c1:a2:53:40:75:7c:56:04:ce:7e:41:56:35: 4e:b8:fc:c0:34:a1:48:6a:8e:5c:12:8c:a6:f1:46: 33:dd:31:48:a2:9c:68:64:d0:80:4b:ec:dc:e0:ba: 15:04:d7:36:80:04:12:e7:96:11:90:0e:e9:50:95: 6b:41:14:12:74:1e:b8:50:9d:1f:fd:e0:1e:cc:0b: dd:6a:ef:8a:90:e8:8c:d6:8d:41:46:07:ca:10:60: 26:2d:74:af:b0:44:0e:12:41:4f:b1:71:16:5f:5a: 03:14:af:73:47:11:3e:ea:1b:b8:50:d5:77:e4:6b: c2:53:60:d6:3f:d8:e3:68:b3:b6:b1:cc:2e:23:e2: 70:c9:ca:21:49:0e:03:56:74:4f:13:aa:20:cf:0f: 17:cb:75:04:0a:21:6d:14:32:fd:69:09:fb:60:9e: bd:d2:c9:d1:db:f7:7d:8e:74:10:7f:6d:4e:ba:24: 84:95:27:d6:27:14:24:34:f1:6c:fc:db:ca:dc:1d: 1d:31:cf:02:4c:c4:66:82:33:31:31:3a:6f:40:79: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:84:1C:97:FE:B8:AF:F9:B1:34:88:2E:D1:BF:02:69:00:8D:49:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 162.211.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0a:2c:87:36:cd:08:ba:ad:2d:55:f0:e1:30:3f:34:b5:80: ae:c8:22:16:28:0d:ce:25:2d:00:8a:2b:00:0e:89:ec:6b:cd: 6c:9c:88:55:95:4c:b9:4b:41:c4:9a:54:48:94:e6:d0:ae:16: 81:f8:6a:8a:3e:7e:48:ed:12:c6:a0:fa:f8:d1:5e:94:39:37: 1b:8d:44:7e:5e:bd:76:70:aa:32:62:90:a4:a5:0c:7a:20:3d: 09:b9:14:86:d3:ce:9e:8b:1c:75:09:30:4f:fd:79:aa:82:19: 6e:d5:e8:88:4d:fe:47:18:0f:97:84:fd:b5:24:24:79:3f:43: 72:9e:4f:eb:1b:87:ad:9c:e6:e9:99:61:93:75:0d:c0:62:5f: ac:53:a8:4f:9f:6c:9f:c9:eb:c2:2b:a1:a3:12:0f:42:5c:7b: 68:75:d8:ef:cd:5c:d6:64:d0:80:6f:f2:62:bd:79:f8:1b:e4: 56:6a:e1:aa:55:ce:b0:20:94:d8:10:3a:24:fc:cb:9d:7c:08: d7:e3:fd:4a:92:ee:fb:65:7a:9e:bd:e3:cf:15:59:e1:fd:e6: 37:36:b4:13:9d:af:7f:98:60:17:29:90:d0:c8:17:0c:54:37: 9d:d2:94:cc:1e:06:b2:f4:2a:f8:2e:5f:c9:a4:1e:5c:56:3a: a9:7e:5b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGIW7lfO/BbD+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk ZTE2YWVmZTgtNTlkYS00ODNkLWI3MWEtN2NhODQ5MGQ0NWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Ft4nMh9qr4g+UTNkhjuA4f1mW4V8822TcK hrXEf2Yvk+LWxkk4cLcJEGMhhcGiU0B1fFYEzn5BVjVOuPzANKFIao5cEoym8UYz 3TFIopxoZNCAS+zc4LoVBNc2gAQS55YRkA7pUJVrQRQSdB64UJ0f/eAezAvdau+K kOiM1o1BRgfKEGAmLXSvsEQOEkFPsXEWX1oDFK9zRxE+6hu4UNV35GvCU2DWP9jj aLO2scwuI+JwycohSQ4DVnRPE6ogzw8Xy3UECiFtFDL9aQn7YJ690snR2/d9jnQQ f21OuiSElSfWJxQkNPFs/NvK3B0dMc8CTMRmgjMxMTpvQHkaPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeEHJf+uK/5sTSILtG/AmkAjUluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMzJhYzRlYTYtYzIwOC0z MDkxLThhZGEtM2I4YTdkNTllYzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEKLIc2zQi6rS1V8OEwPzS1gK7IIhYoDc4lLQCKKwAOiexrzWyciFWV TLlLQcSaVEiU5tCuFoH4aoo+fkjtEsag+vjRXpQ5NxuNRH5evXZwqjJikKSlDHog PQm5FIbTzp6LHHUJME/9eaqCGW7V6IhN/kcYD5eE/bUkJHk/Q3KeT+sbh62c5umZ YZN1DcBiX6xTqE+fbJ/J68IroaMSD0Jce2h12O/NXNZk0IBv8mK9efgb5FZq4apV zrAglNgQOiT8y518CNfj/UqS7vtlep69488VWeH95jc2tBOdr3+YYBcpkNDIFwxU N53SlMweBrL0KvguX8mkHlxWOql+W2I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:11 2025 by rpki-client