$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa File: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (raw, json) Hash identifier: URaBfrWfJcb+E1oUbrX2384QunsyrCFfPLhrmO9L3Uk= Subject key identifier: 1A:E1:5A:1D:3F:EF:C8:06:A9:77:E8:CE:D1:3B:C5:5A:34:BF:1F:6D Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F43285848B62615CF0D84BE951133B820 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 14618 IP address blocks: 162.216.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:15:cf:0d:84:be:95:11:33:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=2601c6d2-af34-458c-872c-31fcb7edef72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:e5:c4:c4:d9:f6:4b:34:a3:41:c1:b7:25: 39:53:3d:3f:70:79:1d:2e:13:80:0b:07:59:64:85: 80:bd:b5:46:ef:75:4a:97:e3:7b:fc:ee:69:09:04: c4:ee:9d:41:f1:25:e2:52:db:39:3f:10:dc:50:8d: e5:3f:74:2b:fb:89:45:a6:d6:94:1a:d3:dd:ab:47: 45:28:90:39:c3:76:4e:be:a0:68:86:9e:e9:75:cc: a0:3e:de:5f:e4:11:d3:dd:ef:0b:96:27:0e:bf:c3: e5:af:ac:20:0f:72:d0:e4:51:42:65:ae:1f:93:ed: bb:5f:4b:1a:25:e4:16:84:44:1e:13:04:96:14:d7: d3:fc:ae:7d:f1:32:19:71:80:b4:7b:2c:35:e7:91: 89:86:8b:87:cf:04:9a:23:fa:60:02:58:61:17:c3: 3e:58:43:70:01:5a:f4:84:76:16:30:48:e7:e9:dd: 0c:6b:67:aa:46:7f:40:53:71:17:d4:cf:49:18:08: 45:46:30:79:0d:5a:56:8e:3a:33:07:16:a4:f4:6b: 9a:dd:aa:07:f0:bd:be:8a:85:f3:e6:db:70:7c:37: 87:f5:e5:70:b7:88:70:e4:92:7c:9f:d0:17:d4:ab: b1:11:ed:1f:6f:ad:78:96:f3:36:aa:b3:0a:1d:11: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E1:5A:1D:3F:EF:C8:06:A9:77:E8:CE:D1:3B:C5:5A:34:BF:1F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:75:3e:36:f0:ed:20:76:12:61:8f:f7:45:90:05:3e:60:63: f1:e1:ae:e2:d0:71:23:5b:e1:df:d2:8e:24:32:84:dd:d4:99: 41:8c:0f:49:42:da:d7:bf:b1:03:06:bc:7a:9f:d2:d1:e9:c1: 0c:78:24:06:95:b1:ee:7a:65:f0:63:28:52:34:bf:4d:98:24: 7c:c7:84:ee:7f:9e:db:f1:fa:b0:07:e0:7b:e8:ad:24:bf:d0: 3a:10:90:c0:48:2f:00:26:6a:e5:50:57:ec:c5:2e:5b:1a:a3: fa:55:6b:cb:dc:0c:38:0d:00:ce:16:31:71:e5:ae:b1:78:37: 9d:3f:4b:a3:78:be:7d:d7:38:73:34:18:2b:33:0b:59:3e:88: 59:6a:77:dd:bc:04:b8:a9:0c:cc:a2:89:d6:15:45:93:74:67: 3f:ff:64:5d:f7:25:2e:19:7a:77:3b:3b:e4:c2:c7:70:f6:27: 31:a9:50:3b:35:72:2f:f4:76:8f:54:67:62:a5:4c:8a:61:b7: f5:50:02:d1:2d:bc:fd:68:67:e4:19:66:ee:b2:15:2e:f7:e0: 4c:68:63:63:ba:37:9a:db:6e:87:c8:b1:eb:ed:96:eb:23:b9: 97:0a:a9:b2:85:36:84:2a:74:32:2f:a8:90:2e:2b:93:46:f1: a5:8e:bf:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhXPDYS+lREzuCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk MjYwMWM2ZDItYWYzNC00NThjLTg3MmMtMzFmY2I3ZWRlZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9nlxMTZ9ks0o0HBtyU5Uz0/cHkdLhOACwdZ ZIWAvbVG73VKl+N7/O5pCQTE7p1B8SXiUts5PxDcUI3lP3Qr+4lFptaUGtPdq0dF KJA5w3ZOvqBohp7pdcygPt5f5BHT3e8LlicOv8Plr6wgD3LQ5FFCZa4fk+27X0sa JeQWhEQeEwSWFNfT/K598TIZcYC0eyw155GJhouHzwSaI/pgAlhhF8M+WENwAVr0 hHYWMEjn6d0Ma2eqRn9AU3EX1M9JGAhFRjB5DVpWjjozBxak9Gua3aoH8L2+ioXz 5ttwfDeH9eVwt4hw5JJ8n9AX1KuxEe0fb614lvM2qrMKHRFRcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrhWh0/78gGqXfoztE7xVo0vx9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvZmY4OWQ5YjQtZDNhOS0z ZTI5LTk1YTktMDkxNmFjNjZkNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF1Pjbw7SB2EmGP90WQBT5gY/HhruLQcSNb4d/SjiQyhN3UmUGMD0lC 2te/sQMGvHqf0tHpwQx4JAaVse56ZfBjKFI0v02YJHzHhO5/ntvx+rAH4HvorSS/ 0DoQkMBILwAmauVQV+zFLlsao/pVa8vcDDgNAM4WMXHlrrF4N50/S6N4vn3XOHM0 GCszC1k+iFlqd928BLipDMyiidYVRZN0Zz//ZF33JS4Zenc7O+TCx3D2JzGpUDs1 ci/0do9UZ2KlTIpht/VQAtEtvP1oZ+QZZu6yFS734ExoY2O6N5rbbofIsevtlusj uZcKqbKFNoQqdDIvqJAuK5NG8aWOv6o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:24 2025 by rpki-client