$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa File: 28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa (raw, json) Hash identifier: GKy+xF/JzIa+pdvV/S0bu7O4yOwDLehKTvzBXexmMfE= Subject key identifier: 4A:19:2A:C2:3E:22:29:07:5D:C5:CE:BE:7B:FD:F7:1D:34:89:5B:8B Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F432858489075EA5B8CFB5693A8998AC0 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 7029 IP address blocks: 162.254.0.0/21 maxlen: 24 216.185.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:ea:5b:8c:fb:56:93:a8:99:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=5e68db70-a8c3-4061-a694-ee19f3a82240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:19:4a:c2:1a:df:95:5f:89:71:3b:73:df: 5c:83:99:25:49:eb:ec:21:d1:24:21:64:0d:1e:bf: 79:4c:6e:0e:57:d8:b1:9f:9d:f9:6b:79:b3:20:84: 81:f8:eb:eb:af:a8:45:bf:0b:e0:3f:a2:b1:eb:41: 46:9d:72:a8:8b:b5:b6:b1:2e:04:fb:af:ac:e8:36: 9b:55:6b:43:c0:1e:d8:ab:4e:1b:02:8f:b5:3f:b1: 64:7d:8e:50:70:3e:44:e9:63:da:0b:c3:68:36:92: 62:e8:35:84:36:b1:cf:35:04:e5:c6:45:9d:c4:11: 7a:d9:2d:a9:06:e0:f8:4c:e0:ec:ec:e0:0c:34:d0: e8:96:39:f9:f4:a0:d0:7e:94:48:eb:3a:11:c1:6b: c3:4f:72:52:3b:0b:ac:60:8d:a9:19:80:c4:e3:5a: 4d:ce:25:05:60:98:57:ea:0f:ff:91:0a:dd:b4:fd: af:0f:bf:ef:5c:2c:b3:a1:71:bf:9a:7c:49:e5:4f: 8d:d7:bb:7c:70:f7:7a:97:66:ce:54:75:70:24:d0: 42:40:20:1c:5b:63:bf:2d:0f:92:2c:13:ae:31:b2: 8c:36:79:dc:dd:a6:69:1d:43:38:63:b7:ae:0c:60: f2:71:30:76:79:7a:2a:3a:0f:ac:ba:dd:c2:25:1e: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:2A:C2:3E:22:29:07:5D:C5:CE:BE:7B:FD:F7:1D:34:89:5B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 162.254.0.0/21 216.185.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b2:ed:5a:b3:98:b0:1e:81:b5:d8:4a:d9:f9:a1:58:31:a9: 78:4c:e6:b9:99:a7:ed:f3:7c:c6:62:80:39:13:d2:bd:08:48: 24:ad:6f:df:e8:a3:7f:05:35:54:09:67:6b:de:b9:a6:4f:a3: 71:06:b6:e0:2b:66:c5:6c:6b:3d:70:b8:70:09:94:f8:d0:3f: eb:45:27:17:34:de:df:a6:a1:ae:9b:be:2d:da:d1:0f:9d:73: 71:86:fe:68:29:69:aa:80:7c:85:38:62:26:db:b2:9a:5c:66: 68:d6:d8:6a:22:09:88:8b:02:95:e9:6c:e5:dd:28:1c:e4:45: b9:10:bc:26:08:11:81:93:23:33:16:60:5b:a2:c8:c0:d1:cb: 56:b6:ce:7d:8a:5f:6e:23:6b:3f:c1:78:96:29:c5:dc:a9:e1: 78:61:92:0e:14:56:c5:33:06:7e:c8:29:15:56:cc:e3:85:a2: 55:2c:a7:5f:8d:03:79:ba:fc:e2:89:94:f8:9d:fd:53:24:39: 52:c1:f7:20:02:40:d9:04:f8:b1:89:d9:a9:6f:57:48:f8:cf: d8:94:2c:05:64:e2:c0:9a:4b:f9:c6:e2:ee:ab:8f:35:68:fa: 76:3e:a2:09:66:a9:90:9f:21:fb:82:dd:c7:f2:5d:e3:e9:e3: de:8d:77:11 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiQdepbjPtWk6iZisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NWU2OGRiNzAtYThjMy00MDYxLWE2OTQtZWUxOWYzYTgyMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8sZSsIa35VfiXE7c99cg5klSevsIdEkIWQN Hr95TG4OV9ixn535a3mzIISB+Ovrr6hFvwvgP6Kx60FGnXKoi7W2sS4E+6+s6Dab VWtDwB7Yq04bAo+1P7FkfY5QcD5E6WPaC8NoNpJi6DWENrHPNQTlxkWdxBF62S2p BuD4TODs7OAMNNDoljn59KDQfpRI6zoRwWvDT3JSOwusYI2pGYDE41pNziUFYJhX 6g//kQrdtP2vD7/vXCyzoXG/mnxJ5U+N17t8cPd6l2bOVHVwJNBCQCAcW2O/LQ+S LBOuMbKMNnnc3aZpHUM4Y7euDGDycTB2eXoqOg+sut3CJR54UwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEoZKsI+IikHXcXOvnv99x00iVuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvMjhlZGQ3YmQtZjZmZC0z MmE5LThlODUtZjk4YjNiNWU0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov4AAwQC 2LncMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGWy7VqzmLAegbXYStn5oVgxqXhM5rmZp+3zfMZigDkT0r0I SCStb9/oo38FNVQJZ2veuaZPo3EGtuArZsVsaz1wuHAJlPjQP+tFJxc03t+moa6b vi3a0Q+dc3GG/mgpaaqAfIU4YibbsppcZmjW2GoiCYiLApXpbOXdKBzkRbkQvCYI EYGTIzMWYFuiyMDRy1a2zn2KX24jaz/BeJYpxdyp4Xhhkg4UVsUzBn7IKRVWzOOF olUsp1+NA3m6/OKJlPid/VMkOVLB9yACQNkE+LGJ2alvV0j4z9iULAVk4sCaS/nG 4u6rjzVo+nY+oglmqZCfIfuC3cfyXePp496NdxE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:48 2025 by rpki-client