$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa File: 46e5f02a-6c64-3546-b9b3-d0df60c70801.roa (raw, json) Hash identifier: ROCuUlz1XpSDHW9DKf7MomXB+S4hAy+9xWBJkLM4cqI= Subject key identifier: 50:29:5F:98:EE:5E:9A:A1:F7:4E:A6:C1:4B:AC:6F:4B:65:03:83:EE Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848143A77C00FF4761464D27D00 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 25649 IP address blocks: 162.33.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:77:c0:0f:f4:76:14:64:d2:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=f929c40b-5e58-4891-bd25-ae4309e92c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:74:a2:c8:7d:69:d2:09:15:29:e4:96:9a: a5:04:5d:7e:d8:12:ff:a2:ec:71:b3:e1:1c:a6:bc: 41:31:14:25:63:1e:cd:c1:d2:5f:59:d4:26:4b:92: 60:ed:bf:ff:81:72:3a:71:d9:94:ae:2c:a6:4f:37: d9:fe:08:f9:a4:eb:a7:46:f6:f5:83:1a:1d:cd:22: 53:be:91:3a:3d:6b:0c:49:0a:84:43:e1:5e:03:14: b7:57:89:a1:81:e5:6a:9f:a0:24:10:f6:f5:e4:98: 9b:3f:35:81:87:16:76:fe:77:92:d5:81:e9:ef:98: fb:86:60:da:06:d3:cb:b0:31:e3:85:21:57:1d:1a: bb:68:20:f7:9b:80:3b:d8:2c:3b:de:b8:e5:2e:cd: e2:30:cf:41:17:af:e1:98:6d:2f:71:d5:f8:b9:63: 73:9f:14:53:cb:25:e9:88:8c:d3:76:80:dc:8e:df: ac:2f:19:32:86:1a:be:0a:5e:42:f3:2c:75:5e:d0: 1a:a6:2b:6d:bf:25:d7:36:6b:9b:c4:dc:12:46:97: 2d:53:00:98:e1:f8:6b:86:08:61:6a:e9:a2:51:fa: 64:52:6e:6b:2c:f3:ee:85:0d:09:1b:9a:07:88:cc: 93:f2:91:14:6e:3c:4f:83:19:ff:10:f8:e1:59:7c: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:29:5F:98:EE:5E:9A:A1:F7:4E:A6:C1:4B:AC:6F:4B:65:03:83:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 162.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3a:35:6a:e6:94:93:4b:6e:28:61:06:97:d1:de:4c:ff:f7: 0d:09:ca:88:90:49:bb:78:a7:f2:ed:bc:96:4c:63:a5:5d:a4: 69:89:08:05:fe:10:f3:8e:d2:d0:16:f7:79:53:81:42:10:bc: 33:5d:e3:0c:7f:55:80:f9:76:33:87:41:34:54:89:18:33:f6: 3d:67:d2:78:96:03:05:e0:1e:51:12:27:03:17:d5:e4:22:3d: 80:5a:f2:4b:9f:2c:f4:48:ce:50:8f:58:6f:25:7f:73:4c:25: 94:35:6b:58:cd:0b:96:46:7d:63:cb:2f:a4:e4:b7:24:9d:5c: 17:76:8e:d5:c2:5d:48:62:71:ba:57:e0:bd:33:ec:77:28:6c: 48:b8:e5:67:08:c8:fc:bb:5b:ea:10:2f:70:b2:8d:b7:bc:22: db:6e:91:64:c2:e8:46:cd:21:ae:10:aa:2b:34:22:e2:c2:c4: d9:58:0b:c2:0f:12:c3:9a:23:83:f2:c5:18:a9:bb:0c:59:2b: c4:d2:79:ee:bc:a3:0f:ad:54:73:da:0b:49:7e:56:e0:d1:6a: 1f:77:c9:65:96:ed:bf:12:37:49:0b:58:da:f5:a6:5e:3f:be: ed:86:ec:69:69:b1:98:c4:28:67:09:bb:6a:17:e6:b9:9b:2a: 5f:c3:cd:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOnfAD/R2FGTSfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk ZjkyOWM0MGItNWU1OC00ODkxLWJkMjUtYWU0MzA5ZTkyYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNp0osh9adIJFSnklpqlBF1+2BL/ouxxs+Ec prxBMRQlYx7NwdJfWdQmS5Jg7b//gXI6cdmUriymTzfZ/gj5pOunRvb1gxodzSJT vpE6PWsMSQqEQ+FeAxS3V4mhgeVqn6AkEPb15JibPzWBhxZ2/neS1YHp75j7hmDa BtPLsDHjhSFXHRq7aCD3m4A72Cw73rjlLs3iMM9BF6/hmG0vcdX4uWNznxRTyyXp iIzTdoDcjt+sLxkyhhq+Cl5C8yx1XtAapittvyXXNmubxNwSRpctUwCY4fhrhghh aumiUfpkUm5rLPPuhQ0JG5oHiMyT8pEUbjxPgxn/EPjhWXwGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFApX5juXpqh906mwUusb0tlA4PuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNDZlNWYwMmEtNmM2NC0z NTQ2LWI5YjMtZDBkZjYwYzcwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc6NWrmlJNLbihhBpfR3kz/9w0JyoiQSbt4p/LtvJZMY6VdpGmJCAX+ EPOO0tAW93lTgUIQvDNd4wx/VYD5djOHQTRUiRgz9j1n0niWAwXgHlESJwMX1eQi PYBa8kufLPRIzlCPWG8lf3NMJZQ1a1jNC5ZGfWPLL6TktySdXBd2jtXCXUhicbpX 4L0z7HcobEi45WcIyPy7W+oQL3Cyjbe8IttukWTC6EbNIa4Qqis0IuLCxNlYC8IP EsOaI4PyxRipuwxZK8TSee68ow+tVHPaC0l+VuDRah93yWWW7b8SN0kLWNr1pl4/ vu2G7GlpsZjEKGcJu2oX5rmbKl/Dzas= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:55 2025 by rpki-client