$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa File: 791354d3-b69a-3f80-9895-25a56bac7468.roa (raw, json) Hash identifier: K6bgfRtnzxyx/bChs4FjcIjeArNdj1W8t/nWM5MGgVg= Subject key identifier: 71:D2:97:98:C5:A2:CA:E3:9E:2F:5A:49:BA:9B:DA:12:F0:20:8A:30 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F432858486EF5C14A8D3A31CBF9E65100 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa Signing time: Sat 04 Jan 2025 14:00:51 +0000 ROA not before: Sat 04 Jan 2025 14:00:51 +0000 ROA not after: Fri 04 Apr 2025 13:00:51 +0000 asID: 399091 IP address blocks: 162.218.8.0/22 maxlen: 22 198.22.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6e:f5:c1:4a:8d:3a:31:cb:f9:e6:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Jan 4 14:00:51 2025 GMT Not After : Apr 4 13:00:51 2025 GMT Subject: CN=d943468a-da95-4930-8fe2-9a0dce83989f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:73:72:aa:dc:c0:ad:d1:83:01:cd:d2:f5: bc:31:18:dd:2c:14:60:23:d7:96:c3:12:bd:e0:88: 3e:04:c1:0f:64:9b:b3:54:79:01:3c:7c:c6:75:3a: 19:1a:c3:f7:b3:0a:8e:58:77:6b:a7:16:9c:c1:b2: d6:47:ec:81:22:c5:0d:6e:ad:d6:cc:43:99:d4:57: 02:bf:90:6c:df:4a:a8:e4:21:86:43:a4:f7:cb:f9: 8d:ac:65:da:d3:71:54:2d:0a:8c:ec:5d:b3:50:cb: 4c:5c:98:26:a3:74:8d:41:9c:b1:d8:5e:c2:99:dd: 6f:44:68:78:bb:22:0d:81:60:1c:9e:26:69:f0:8e: 68:63:7c:98:50:b7:8d:6a:a8:86:6b:4e:0c:bd:cc: 9c:10:0a:bc:a4:2f:ff:c9:2c:41:3b:37:8a:77:64: 8a:52:ac:70:bc:bd:f6:f9:01:d2:f3:08:f6:85:cd: 7e:b9:52:16:4e:78:36:e3:83:fa:e1:c4:7d:ed:6f: 51:c7:be:6b:97:f3:0e:be:b9:49:5d:bb:a4:ab:fd: e5:14:50:d4:4d:bd:68:41:83:ef:3f:f3:df:89:ff: 9a:71:00:20:0d:00:1f:47:a7:15:58:ed:f2:c2:a0: 2c:20:4c:b3:40:a6:80:cd:08:fd:81:f5:d3:ea:77: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D2:97:98:C5:A2:CA:E3:9E:2F:5A:49:BA:9B:DA:12:F0:20:8A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 162.218.8.0/22 198.22.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:25:82:1f:af:ff:45:70:85:44:ed:18:dc:05:53:76:ef:ba: 1b:62:84:6a:d5:59:46:33:ae:27:23:6f:09:72:bb:ea:08:07: 9f:a6:2b:42:2d:04:1e:91:64:44:72:70:1c:04:28:dd:d0:23: 1a:28:f2:08:3e:5a:f0:c4:e1:93:c5:88:35:7e:a2:e7:af:cd: 9b:64:b6:87:fc:38:06:9d:e2:d2:e6:d8:8a:8b:b3:52:09:0b: 43:4f:dd:be:93:50:ab:2c:41:91:88:bb:d7:1b:b4:8c:1a:e3: 7a:6f:6d:31:23:47:c9:90:d6:13:41:3c:58:fb:c4:b9:8f:f1: 3e:e9:f2:40:3b:ba:f1:d9:b8:79:e5:d1:3d:d7:30:2f:b7:29: 1f:bd:ff:63:a1:dd:9a:cd:68:73:28:99:cd:aa:6e:87:92:8e: 70:d4:e3:64:1e:e9:57:3a:40:54:55:19:17:4b:98:48:26:d7: 8d:6d:76:38:85:d5:38:ae:db:c3:9a:b7:93:29:de:a0:c0:d3: 63:35:62:56:90:7d:ab:5f:37:9a:a1:e3:ad:8e:14:68:bb:a1: 7f:a7:47:ce:06:86:8e:a0:cd:65:c1:42:cb:72:a3:d8:35:ac: c3:ab:d3:b7:2e:1c:29:06:7b:c0:b6:a2:0d:25:0d:04:e3:45: 40:f5:1b:24 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhu9cFKjToxy/nmUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk ZDk0MzQ2OGEtZGE5NS00OTMwLThmZTItOWEwZGNlODM5ODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvVzcqrcwK3RgwHN0vW8MRjdLBRgI9eWwxK9 4Ig+BMEPZJuzVHkBPHzGdToZGsP3swqOWHdrpxacwbLWR+yBIsUNbq3WzEOZ1FcC v5Bs30qo5CGGQ6T3y/mNrGXa03FULQqM7F2zUMtMXJgmo3SNQZyx2F7Cmd1vRGh4 uyINgWAcniZp8I5oY3yYULeNaqiGa04MvcycEAq8pC//ySxBOzeKd2SKUqxwvL32 +QHS8wj2hc1+uVIWTng244P64cR97W9Rx75rl/MOvrlJXbukq/3lFFDUTb1oQYPv P/Pfif+acQAgDQAfR6cVWO3ywqAsIEyzQKaAzQj9gfXT6ncTXwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHHSl5jFosrjni9aSbqb2hLwIIowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvNzkxMzU0ZDMtYjY5YS0z ZjgwLTk4OTUtMjVhNTZiYWM3NDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotoIAwQC xhbQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABUlgh+v/0VwhUTtGNwFU3bvuhtihGrVWUYzricjbwlyu+oI B5+mK0ItBB6RZERycBwEKN3QIxoo8gg+WvDE4ZPFiDV+ouevzZtktof8OAad4tLm 2IqLs1IJC0NP3b6TUKssQZGIu9cbtIwa43pvbTEjR8mQ1hNBPFj7xLmP8T7p8kA7 uvHZuHnl0T3XMC+3KR+9/2Oh3ZrNaHMomc2qboeSjnDU42Qe6Vc6QFRVGRdLmEgm 141tdjiF1Tiu28Oat5Mp3qDA02M1YlaQfatfN5qh462OFGi7oX+nR84Gho6gzWXB Qstyo9g1rMOr07cuHCkGe8C2og0lDQTjRUD1GyQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:09 2025 by rpki-client