$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/b5f29178-ab1c-3831-8d29-501dfe7028a5.roa File: b5f29178-ab1c-3831-8d29-501dfe7028a5.roa (raw, json) Hash identifier: +TGNp2+PsNNDobY1m6kZopmxtEK3++EsQoyG3A7QHp0= Subject key identifier: 4D:AA:AF:1E:1E:3A:90:95:BB:05:8E:91:F5:D7:DD:3C:2A:AB:62:E4 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F432858488DAB436D7546F117804D52F0 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/b5f29178-ab1c-3831-8d29-501dfe7028a5.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 53768 IP address blocks: 162.134.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:43:6d:75:46:f1:17:80:4d:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=922f831d-25dc-48f3-b5f7-9ab57ace58af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:60:f6:a2:7e:71:25:c9:cb:e6:df:67:35: df:35:cc:ea:10:0d:0f:a4:e0:1a:3a:22:27:1d:3c: 11:39:0a:62:6f:4d:21:76:2f:7b:dd:da:a7:26:5e: c0:59:03:be:df:bd:da:99:7e:61:4d:dc:c3:cd:8f: 43:64:21:66:8b:31:88:ae:31:74:b5:f5:19:91:ec: b9:99:c2:65:91:81:d9:c1:bf:cd:f2:da:e4:dd:2d: 87:67:38:e0:18:0e:d1:19:1a:59:16:2a:bd:84:c9: 52:4e:99:a4:84:87:f9:f6:5b:cb:d3:c2:3c:56:53: 50:ec:fe:9f:07:9b:4d:43:97:ff:9a:55:01:9b:41: bb:3f:cd:8e:21:04:08:05:b8:c9:9f:e5:5d:c0:8b: 1e:38:65:3b:ac:d7:b2:1b:25:83:75:40:79:79:53: 8b:56:62:20:bd:35:26:41:f8:87:7e:64:f2:63:2a: f6:2b:1f:44:52:36:d2:1a:02:3e:67:b0:ad:47:99: a8:95:67:7a:50:89:dc:33:04:cc:31:7c:6b:38:89: 2e:2d:45:67:45:18:03:ba:82:9b:e4:06:53:e1:40: bc:6a:ef:c4:4b:e0:58:72:c4:b3:8f:5f:22:9d:ea: 66:ab:ef:2a:41:86:02:80:50:e7:bb:5c:cd:43:f0: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AA:AF:1E:1E:3A:90:95:BB:05:8E:91:F5:D7:DD:3C:2A:AB:62:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/b5f29178-ab1c-3831-8d29-501dfe7028a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ce:1e:36:63:31:59:9f:74:62:b3:1a:8f:35:38:47:98:0c: c5:e4:ef:26:97:b3:01:c1:1f:01:41:bd:ab:15:88:34:b9:6b: 5d:46:49:40:e7:7f:55:b4:6c:fc:72:0d:90:e6:0e:5a:04:07: 62:6c:9d:57:77:68:6b:0c:53:58:81:80:67:c3:08:83:cf:42: 2d:b4:d7:fe:94:33:af:03:d3:5b:61:98:e6:9b:83:23:d2:96: 6a:3c:fd:25:39:0c:06:57:14:56:89:5a:90:49:1a:c5:a0:22: 57:cb:35:1e:fd:94:f0:03:ef:fe:c8:72:17:9c:9f:4f:27:73: 37:2c:78:33:c2:1d:21:67:08:ce:fe:18:c9:f4:9d:24:84:6d: 92:e3:f9:75:f1:fb:74:c5:2e:af:68:87:1d:82:cb:d0:9b:7f: ce:2c:dd:b7:6b:4d:25:d3:a1:78:87:7a:bd:e4:a6:c9:b4:f8: b4:86:f6:17:e9:9d:08:ef:a0:c4:1e:4d:f0:0b:d8:81:47:eb: 2e:d3:09:f0:c6:b0:c4:91:4a:ec:c4:83:a0:cc:20:20:5d:9a: e5:51:0a:64:da:2d:c3:72:d0:65:4e:21:5f:19:97:57:f9:71: a4:04:53:aa:58:bb:97:34:15:0a:0d:5d:4e:1c:d9:11:e0:53: ff:d9:5e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0NtdUbxF4BNUvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk OTIyZjgzMWQtMjVkYy00OGYzLWI1ZjctOWFiNTdhY2U1OGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Vg9qJ+cSXJy+bfZzXfNczqEA0PpOAaOiIn HTwROQpib00hdi973dqnJl7AWQO+373amX5hTdzDzY9DZCFmizGIrjF0tfUZkey5 mcJlkYHZwb/N8trk3S2HZzjgGA7RGRpZFiq9hMlSTpmkhIf59lvL08I8VlNQ7P6f B5tNQ5f/mlUBm0G7P82OIQQIBbjJn+VdwIseOGU7rNeyGyWDdUB5eVOLVmIgvTUm QfiHfmTyYyr2Kx9EUjbSGgI+Z7CtR5molWd6UIncMwTMMXxrOIkuLUVnRRgDuoKb 5AZT4UC8au/ES+BYcsSzj18inepmq+8qQYYCgFDnu1zNQ/AesQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2qrx4eOpCVuwWOkfXX3Twqq2LkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvYjVmMjkxNzgtYWIxYy0z ODMxLThkMjktNTAxZGZlNzAyOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBooZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/OHjZjMVmfdGKzGo81OEeYDMXk7yaXswHBHwFBvasViDS5a11GSUDn f1W0bPxyDZDmDloEB2JsnVd3aGsMU1iBgGfDCIPPQi201/6UM68D01thmOabgyPS lmo8/SU5DAZXFFaJWpBJGsWgIlfLNR79lPAD7/7Ichecn08nczcseDPCHSFnCM7+ GMn0nSSEbZLj+XXx+3TFLq9ohx2Cy9Cbf84s3bdrTSXToXiHer3kpsm0+LSG9hfp nQjvoMQeTfAL2IFH6y7TCfDGsMSRSuzEg6DMICBdmuVRCmTaLcNy0GVOIV8Zl1f5 caQEU6pYu5c0FQoNXU4c2RHgU//ZXng= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:52 2025 by rpki-client