$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa File: b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa (raw, json) Hash identifier: qAnOGnQnHQCazlSr7rQ4bLOP5t/wVGyhIDOxRaUoT5g= Subject key identifier: B1:F2:DA:5F:D9:5D:44:35:2C:06:A7:C1:26:9A:D1:9D:93:CC:BB:07 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B275E91C6749677681B80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 162.222.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:27:5e:91:c6:74:96:77:68:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=2ca06a47-4e65-4e38-8fa2-14fa005aed35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:e9:1b:71:5c:d8:e1:4c:f4:3c:1e:b6:ac: 17:dc:ad:be:d2:14:7c:91:66:fe:a0:e1:91:f4:c4: 11:0b:0c:ab:eb:14:9f:6e:08:8a:ce:7f:39:69:fe: 6c:6a:f1:d7:f1:c0:7f:ec:11:37:66:7e:7e:b1:08: d4:b1:ed:ed:07:d1:9d:a9:26:b0:9a:7d:4c:37:f1: 49:c5:cd:50:52:9c:d9:b1:d8:8f:75:2d:65:53:39: 11:91:54:5b:45:30:55:07:62:ad:bb:f2:1f:af:65: dc:e0:f9:92:e8:8c:a1:b7:86:b4:38:e4:b7:15:6f: 3f:3a:08:84:06:15:3a:33:cf:54:53:68:77:5f:c1: 56:ed:43:53:57:ea:9c:93:eb:c3:14:80:56:39:6a: 22:a3:cf:a1:4c:18:da:f7:c5:27:c5:29:41:88:e7: c1:23:99:a9:85:f8:01:e8:14:85:14:13:38:21:0f: 09:28:92:65:84:b6:68:b4:52:b3:51:f3:08:ac:03: 7c:11:f9:c0:97:ff:69:78:72:f6:42:44:0c:e9:03: 68:90:02:ec:a6:08:3a:47:e1:89:8b:01:36:50:b1: 91:c0:cf:4f:e8:d6:c1:0a:8a:5c:8f:ad:94:4a:6f: 49:5e:91:f2:ca:6c:46:55:3e:af:3b:f1:f2:15:ff: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:DA:5F:D9:5D:44:35:2C:06:A7:C1:26:9A:D1:9D:93:CC:BB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.222.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:13:ea:99:36:64:f2:89:b1:c9:f3:18:bf:28:e3:30:fe:b9: 00:6b:19:f5:5e:11:31:e0:30:c1:58:62:38:55:1e:25:10:3d: ce:0a:3f:12:50:0e:92:33:7d:bd:e0:46:b3:2b:57:1e:71:9f: df:35:b7:92:77:d9:1b:17:77:a2:c8:9a:10:2e:54:83:94:61: 3a:1b:03:a6:8d:85:60:17:94:19:80:42:46:17:4a:27:11:1e: cc:87:cd:8c:71:5a:56:1f:e9:ab:46:6e:0a:11:f3:42:00:54: 46:be:3a:21:e3:b7:c0:19:40:ab:b8:72:59:c3:cb:f3:f5:59: 40:a7:d2:d4:b8:c0:04:e9:10:ab:ef:d5:cf:5c:27:e7:cd:3c: 5d:ca:9c:b5:40:bb:2b:c5:ce:1f:2c:79:fb:ad:f4:26:56:32: 58:72:55:b6:f7:0e:39:67:33:bb:b6:43:ca:b7:d7:e4:9f:ad: af:e1:06:31:2e:c7:1f:6d:38:4a:9e:2d:69:fe:37:ce:37:d5: fb:32:7c:f2:cb:9f:49:90:60:70:4b:fd:6c:da:21:be:b9:44: 46:7c:c4:91:a0:5f:18:4f:ea:62:c7:96:fb:f4:ab:2c:68:68: c9:46:b3:23:ca:44:a1:2d:c0:bc:f9:c5:3e:1b:3c:ba:7d:75: a6:5a:51:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKydekcZ0lndoG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk MmNhMDZhNDctNGU2NS00ZTM4LThmYTItMTRmYTAwNWFlZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk33pG3Fc2OFM9DwetqwX3K2+0hR8kWb+oOGR 9MQRCwyr6xSfbgiKzn85af5savHX8cB/7BE3Zn5+sQjUse3tB9GdqSawmn1MN/FJ xc1QUpzZsdiPdS1lUzkRkVRbRTBVB2Ktu/Ifr2Xc4PmS6Iyht4a0OOS3FW8/OgiE BhU6M89UU2h3X8FW7UNTV+qck+vDFIBWOWoio8+hTBja98UnxSlBiOfBI5mphfgB 6BSFFBM4IQ8JKJJlhLZotFKzUfMIrAN8EfnAl/9peHL2QkQM6QNokALspgg6R+GJ iwE2ULGRwM9P6NbBCopcj62USm9JXpHyymxGVT6vO/HyFf+5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHy2l/ZXUQ1LAanwSaa0Z2TzLsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjcxYzhlZDUtMGJkYi0z OTQwLTg5ZDQtNTZlZmJhMGJkZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwT6pk2ZPKJscnzGL8o4zD+uQBrGfVeETHgMMFYYjhVHiUQPc4KPxJQ DpIzfb3gRrMrVx5xn981t5J32RsXd6LImhAuVIOUYTobA6aNhWAXlBmAQkYXSicR HsyHzYxxWlYf6atGbgoR80IAVEa+OiHjt8AZQKu4clnDy/P1WUCn0tS4wATpEKvv 1c9cJ+fNPF3KnLVAuyvFzh8sefut9CZWMlhyVbb3DjlnM7u2Q8q31+Sfra/hBjEu xx9tOEqeLWn+N8431fsyfPLLn0mQYHBL/WzaIb65REZ8xJGgXxhP6mLHlvv0qyxo aMlGsyPKRKEtwLz5xT4bPLp9daZaUWY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:36 2025 by rpki-client