$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa File: b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa (raw, json) Hash identifier: JXAFb+5Bf3u+c6dvfBJX6teD5Ir2PMHu9F+HAsm7VYo= Subject key identifier: FA:CE:47:4C:9E:67:50:26:04:9D:AB:7C:36:14:15:5B:03:83:1E:96 Certificate issuer: /CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c Certificate serial: 010D0C9F432858481F652CDCBF238F70A49AD380 Authority key identifier: 07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 393719 IP address blocks: 162.222.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:2c:dc:bf:23:8f:70:a4:9a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=6dc053c5-cf00-45fd-9b14-2aea127aa434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:d1:28:46:3c:0d:eb:38:3f:97:7d:c2:a4: ee:33:e3:6c:24:c1:02:c7:13:26:82:3e:ae:0f:1f: 1b:9a:9d:8b:00:87:3a:1b:bb:31:bf:20:7c:03:b8: 1b:23:ed:be:29:bb:bb:e4:6b:70:e7:50:4d:a7:08: 28:3b:35:38:e8:27:02:db:02:ae:61:56:c9:e1:35: 1e:ec:b8:5e:25:44:6a:6d:6e:50:87:01:39:ab:c4: 4c:f5:ee:69:14:cd:74:3e:9a:ac:83:ac:9d:80:03: 9f:af:04:22:94:02:9b:bc:90:98:d5:56:9e:69:16: 0d:84:e8:62:a2:25:56:1b:0a:10:f8:2e:3a:98:54: 09:76:47:ac:e0:98:7c:23:0b:0b:a5:d1:64:48:86: e3:b1:12:c3:9d:10:40:1d:7a:5f:ae:00:ef:aa:b6: dc:4e:99:16:06:9a:16:8a:c4:b6:36:32:90:47:2a: dc:01:85:6f:80:ac:d7:7d:51:45:e3:6b:38:77:14: 62:fa:02:f5:c7:09:c1:de:2a:f9:9e:1a:49:48:65: 08:8c:6f:cd:0a:ac:32:4d:c8:8c:2d:b4:90:21:3d: 42:6b:35:63:11:a9:e3:2f:f2:04:27:de:77:ae:43: 16:6f:c3:78:9e:a9:83:ce:1d:29:60:62:b4:d0:06: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CE:47:4C:9E:67:50:26:04:9D:AB:7C:36:14:15:5B:03:83:1E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl X509v3 Authority Key Identifier: keyid:07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer sbgp-ipAddrBlock: critical IPv4: 162.222.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8e:f3:b7:b7:c6:81:4a:60:b8:c0:fe:03:bf:3a:b1:a5:13: 5e:ea:80:22:be:78:df:01:52:ab:1c:db:e5:83:ca:43:f5:36: a8:7d:f1:eb:fd:b2:15:ef:49:f5:90:ad:da:25:47:66:d2:b5: 8e:b7:08:cc:0c:50:84:dc:4e:bf:b7:8c:8c:95:8a:af:d4:56: e4:1e:35:46:f8:14:36:d7:c8:97:11:4b:77:0e:cc:99:b1:0c: 91:67:c9:c7:c4:eb:48:2a:36:ec:50:56:cc:de:6a:13:68:9f: 22:46:88:b3:c9:a3:0a:9d:b1:19:e8:48:87:08:6a:32:a0:ae: d4:2d:3e:be:9d:76:b8:7f:5e:d6:41:e6:b9:a7:55:80:49:1f: 30:fd:50:6b:41:a1:33:e0:cf:86:08:f3:60:07:f3:aa:64:15: 44:15:5d:15:af:7c:00:b6:73:e9:b8:7b:cb:86:13:ef:25:e1: 22:30:80:5e:51:2f:d9:e6:83:57:bc:36:17:7c:5e:e9:22:04: f9:c1:3c:36:c0:74:01:a4:91:de:b1:90:17:f2:64:b1:a5:ae: 2a:40:be:fa:6e:10:d5:61:c4:92:ee:32:a3:0a:dd:c1:d2:ab: 5f:c7:0f:de:39:e9:bc:21:8b:66:e5:e4:4a:da:de:1a:14:76: 83:d3:1c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZSzcvyOPcKSa04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYxMmNiZWItNzQ1Ni00MWNlLTliZjUtYzk2MzRmYTEy NTRjMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk NmRjMDUzYzUtY2YwMC00NWZkLTliMTQtMmFlYTEyN2FhNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AnRKEY8Des4P5d9wqTuM+NsJMECxxMmgj6u Dx8bmp2LAIc6G7sxvyB8A7gbI+2+Kbu75Gtw51BNpwgoOzU46CcC2wKuYVbJ4TUe 7LheJURqbW5QhwE5q8RM9e5pFM10Ppqsg6ydgAOfrwQilAKbvJCY1VaeaRYNhOhi oiVWGwoQ+C46mFQJdkes4Jh8IwsLpdFkSIbjsRLDnRBAHXpfrgDvqrbcTpkWBpoW isS2NjKQRyrcAYVvgKzXfVFF42s4dxRi+gL1xwnB3ir5nhpJSGUIjG/NCqwyTciM LbSQIT1CazVjEanjL/IEJ953rkMWb8N4nqmDzh0pYGK00AY7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrOR0yeZ1AmBJ2rfDYUFVsDgx6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lNjEy Y2JlYi03NDU2LTQxY2UtOWJmNS1jOTYzNGZhMTI1NGMvYjVjZmRjYjEtNjVkNy0z ZWIxLThlYmYtODU3NDY3MmI4YTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTYxMmNiZWItNzQ1Ni00MWNlLTli ZjUtYzk2MzRmYTEyNTRjL2U2MTJjYmViLTc0NTYtNDFjZS05YmY1LWM5NjM0ZmEx MjU0Yy5jcmwwHwYDVR0jBBgwFoAUB9y+Zif/oJzf9Uvsasxa9EHrq0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lNjEyY2JlYi03NDU2LTQxY2UtOWJmNS1jOTYz NGZhMTI1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot7vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOO87e3xoFKYLjA/gO/OrGlE17qgCK+eN8BUqsc2+WDykP1Nqh98ev9 shXvSfWQrdolR2bStY63CMwMUITcTr+3jIyViq/UVuQeNUb4FDbXyJcRS3cOzJmx DJFnycfE60gqNuxQVszeahNonyJGiLPJowqdsRnoSIcIajKgrtQtPr6ddrh/XtZB 5rmnVYBJHzD9UGtBoTPgz4YI82AH86pkFUQVXRWvfAC2c+m4e8uGE+8l4SIwgF5R L9nmg1e8Nhd8XukiBPnBPDbAdAGkkd6xkBfyZLGlripAvvpuENVhxJLuMqMK3cHS q1/HD9456bwhi2bl5Era3hoUdoPTHA8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:47 2025 by rpki-client