$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa File: 1eef2e2c-6325-3083-a2ca-8378929a914b.roa (raw, json) Hash identifier: jr865owER7JjUOOY2tJNnFFHQP2bhTd50FhaHWhRUQo= Subject key identifier: 01:67:99:B5:43:F9:25:27:9E:3D:1A:C0:4F:01:E2:E1:F3:BC:E5:68 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F432858472C65DF21557020C193EC2E00 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 26512 IP address blocks: 162.221.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:df:21:55:70:20:c1:93:ec:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=0d9fa9fd-5a69-4844-9c84-7d474b19bcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:95:e5:2c:f4:14:89:58:89:4f:3a:a2:45: 6c:1b:25:b8:55:6e:21:73:6f:6f:f2:b2:73:c9:cc: 40:ae:a7:c7:ce:e9:5e:e0:69:e3:94:0e:aa:bf:24: 38:07:86:26:4c:5a:80:db:84:f6:83:da:1d:bf:30: 5a:72:7a:99:7a:a9:1d:b6:27:ad:e2:e8:1f:3a:0a: 93:a6:65:e4:88:05:95:a6:aa:eb:dd:81:bc:19:16: b9:8c:f6:14:d2:2c:1c:0e:a5:f3:c3:bf:ad:d7:20: be:31:bc:46:43:42:08:ad:63:33:d4:cf:55:f1:14: 92:dd:20:d9:66:5b:3e:a7:f8:7e:40:d4:fc:1a:d1: 82:50:ba:c8:f5:3a:1a:5a:ac:97:d2:27:81:db:1d: b8:16:f5:31:06:09:23:34:cf:d2:1a:54:58:53:c1: 2d:2a:b9:15:d9:c7:5d:93:79:76:39:30:4e:8e:0c: c0:7a:56:de:76:af:93:3e:fb:05:ce:60:7e:a0:3e: 44:c0:51:39:9b:38:cc:55:67:72:54:81:87:d9:f6: 8c:cf:d5:30:47:66:eb:a1:07:fd:17:53:03:f1:28: da:20:fb:7e:13:2f:f2:80:c3:2f:cb:0c:eb:1b:af: 8b:f2:88:13:a9:23:70:9e:ce:16:ba:a1:f6:9d:a9: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:67:99:B5:43:F9:25:27:9E:3D:1A:C0:4F:01:E2:E1:F3:BC:E5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 162.221.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4d:61:9f:a3:a3:7b:8b:69:c7:5d:d6:cd:8f:ca:b7:7d:e8: 6b:21:37:e5:53:36:b8:73:0e:19:90:61:c8:1f:79:7c:81:7a: 2a:1e:71:71:55:7a:be:81:b7:77:4a:18:96:5f:5c:a3:12:ba: 39:82:b5:ea:ff:aa:85:03:07:6a:01:1e:95:d9:fb:0f:92:66: 86:00:af:e8:46:5c:8c:25:b3:e6:54:1c:07:0f:c8:3c:1d:70: 01:98:f0:c9:63:dd:ba:33:4b:3d:f4:1d:01:fc:49:84:5b:87: 7b:ce:f8:e3:35:4d:da:83:43:b7:d6:95:41:22:b6:a1:b9:a0: f8:00:35:ec:3a:e4:b7:72:cb:ac:c1:0f:2b:e9:7c:58:ec:76: f1:b2:98:ba:a4:55:16:52:62:e9:85:21:12:77:d9:f3:63:84: 74:ef:e3:57:fd:24:84:e8:96:4d:05:33:80:7a:0a:cf:62:be: 71:d3:86:9f:e8:e3:1e:0c:ea:46:a6:d4:3b:33:8c:38:00:08: b7:a1:57:2c:54:15:3c:7c:09:97:84:92:3a:cb:d0:cf:d3:97: 50:cc:4f:68:ef:dc:62:7e:1e:35:4f:27:5c:5d:01:3c:d6:f9: 4b:5c:23:28:25:79:47:01:d1:56:9e:ea:c4:3a:3d:6d:37:d0: 43:75:6a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZd8hVXAgwZPsLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MGQ5ZmE5ZmQtNWE2OS00ODQ0LTljODQtN2Q0NzRiMTliY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwceV5Sz0FIlYiU86okVsGyW4VW4hc29v8rJz ycxArqfHzule4GnjlA6qvyQ4B4YmTFqA24T2g9odvzBacnqZeqkdtiet4ugfOgqT pmXkiAWVpqrr3YG8GRa5jPYU0iwcDqXzw7+t1yC+MbxGQ0IIrWMz1M9V8RSS3SDZ Zls+p/h+QNT8GtGCULrI9ToaWqyX0ieB2x24FvUxBgkjNM/SGlRYU8EtKrkV2cdd k3l2OTBOjgzAelbedq+TPvsFzmB+oD5EwFE5mzjMVWdyVIGH2faMz9UwR2broQf9 F1MD8SjaIPt+Ey/ygMMvywzrG6+L8ogTqSNwns4WuqH2namhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFnmbVD+SUnnj0awE8B4uHzvOVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvMWVlZjJlMmMtNjMyNS0z MDgzLWEyY2EtODM3ODkyOWE5MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot0ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABNYZ+jo3uLacdd1s2Pyrd96GshN+VTNrhzDhmQYcgfeXyBeioecXFV er6Bt3dKGJZfXKMSujmCter/qoUDB2oBHpXZ+w+SZoYAr+hGXIwls+ZUHAcPyDwd cAGY8Mlj3bozSz30HQH8SYRbh3vO+OM1TdqDQ7fWlUEitqG5oPgANew65Ldyy6zB DyvpfFjsdvGymLqkVRZSYumFIRJ32fNjhHTv41f9JITolk0FM4B6Cs9ivnHThp/o 4x4M6kam1DszjDgACLehVyxUFTx8CZeEkjrL0M/Tl1DMT2jv3GJ+HjVPJ1xdATzW +UtcIygleUcB0Vae6sQ6PW030EN1ass= -----END CERTIFICATE-----Generated at Sat Nov 23 20:36:01 2024 by rpki-client on console-fra.rpki-client.org