$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa File: 471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa (raw, json) Hash identifier: nJ+8hIvWsbiHYwq2+lZT+qPLVItUHOItexBEgDvNSHM= Subject key identifier: 24:78:F1:03:31:82:51:25:7C:45:B1:33:39:70:91:E5:8F:C8:D3:EC Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285848EF6131C891506575A60C0A14 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7782 IP address blocks: 162.218.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:31:c8:91:50:65:75:a6:0c:0a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=07182c47-5ad5-49c7-b02c-8204fe4870fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:5d:fe:82:da:0c:fc:34:08:4a:37:36:73: ac:c1:68:ec:d5:d4:0d:d5:c7:35:93:b6:c5:1a:e4: 4d:fb:c0:bb:c1:b4:4a:97:73:ae:43:ab:cb:1b:f5: 72:2a:90:7b:2b:9b:36:ed:c1:36:80:53:b9:5b:c3: 3c:6b:0b:e7:60:9a:79:f0:95:73:e7:03:03:7b:2f: 7b:c6:f4:69:0d:2d:60:c2:21:2e:85:96:fa:85:25: 02:3c:81:ea:b5:e5:a4:d3:73:3a:f9:ea:13:c7:47: f5:11:6c:fc:b6:8b:0d:82:04:a2:da:2c:7b:42:3e: 67:24:ee:03:8c:2e:15:90:4b:4f:6a:28:d5:43:c2: 8b:56:46:e7:1f:84:11:e0:9e:15:11:a4:60:5b:4e: dc:ef:0c:f0:51:7b:0d:d5:d3:45:56:01:a8:d8:c1: 28:f2:da:5e:1c:9e:31:05:6c:23:48:3c:2d:2d:11: 3b:d4:8c:01:ca:5a:ca:ca:13:70:15:55:e8:64:9d: 3d:b0:01:11:70:5f:30:cf:e4:19:48:5b:75:16:c7: 05:40:01:9d:8b:04:31:55:5b:89:a0:7b:4e:17:97: 69:08:c6:02:3d:e7:3a:c9:1f:23:6a:7a:c5:05:d3: a1:28:b1:db:cb:d1:ef:72:00:c6:1e:8c:37:49:e6: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:78:F1:03:31:82:51:25:7C:45:B1:33:39:70:91:E5:8F:C8:D3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.218.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c1:81:45:35:b0:aa:d1:dc:14:27:3e:2c:8f:c3:4f:6e:8a: 9d:5b:f6:be:21:83:7f:b4:46:22:e8:e5:5b:fc:20:53:b3:98: 47:a9:f0:c5:0e:92:14:ef:6c:d8:04:5b:53:5c:d1:10:da:9c: 96:06:4f:a4:de:db:74:b0:40:af:b8:99:ac:e2:e6:84:af:ce: 74:07:a0:a6:80:3e:8e:b5:bf:1e:f0:a9:4e:d0:6a:c2:ff:c2: 09:40:36:2e:57:88:24:97:83:f0:12:13:16:af:17:33:1e:55: f0:02:df:05:cc:36:20:ce:ae:47:2a:9f:d6:3d:b6:b0:7c:e7: 0e:72:3d:b2:7e:9e:51:a4:23:e7:44:62:ad:14:38:a1:3e:2d: 6e:04:cc:b1:3b:d2:b5:dc:10:85:e0:39:cf:00:f1:08:63:fc: 1b:b0:e9:b8:e3:e5:54:ce:b1:53:f4:43:9d:7d:f7:63:2c:8d: c8:c8:3b:19:c0:87:6a:5e:70:32:76:7f:1e:c5:f5:17:56:74: 5d:e0:59:5c:9a:10:0d:92:a8:5a:bd:75:7d:bd:1c:b8:a4:d8: a1:39:d9:4d:48:d4:55:ae:42:6d:18:49:4e:75:26:e3:9d:26: bf:81:6d:35:54:9e:61:23:69:14:88:ae:8d:8c:cd:dc:b9:70: f9:f1:8a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTHIkVBldaYMChQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MDcxODJjNDctNWFkNS00OWM3LWIwMmMtODIwNGZlNDg3MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Bd/oLaDPw0CEo3NnOswWjs1dQN1cc1k7bF GuRN+8C7wbRKl3OuQ6vLG/VyKpB7K5s27cE2gFO5W8M8awvnYJp58JVz5wMDey97 xvRpDS1gwiEuhZb6hSUCPIHqteWk03M6+eoTx0f1EWz8tosNggSi2ix7Qj5nJO4D jC4VkEtPaijVQ8KLVkbnH4QR4J4VEaRgW07c7wzwUXsN1dNFVgGo2MEo8tpeHJ4x BWwjSDwtLRE71IwBylrKyhNwFVXoZJ09sAERcF8wz+QZSFt1FscFQAGdiwQxVVuJ oHtOF5dpCMYCPec6yR8janrFBdOhKLHby9HvcgDGHow3SeZR6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR48QMxglElfEWxMzlwkeWPyNPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNDcxNTM0YTQtOGU1NC0z ZDU2LWE4ZDgtY2ZjZTNmZmVkNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnBgUU1sKrR3BQnPiyPw09uip1b9r4hg3+0RiLo5Vv8IFOzmEep8MUO khTvbNgEW1Nc0RDanJYGT6Te23SwQK+4mazi5oSvznQHoKaAPo61vx7wqU7QasL/ wglANi5XiCSXg/ASExavFzMeVfAC3wXMNiDOrkcqn9Y9trB85w5yPbJ+nlGkI+dE Yq0UOKE+LW4EzLE70rXcEIXgOc8A8Qhj/Buw6bjj5VTOsVP0Q51992MsjcjIOxnA h2pecDJ2fx7F9RdWdF3gWVyaEA2SqFq9dX29HLik2KE52U1I1FWuQm0YSU51JuOd Jr+BbTVUnmEjaRSIro2Mzdy5cPnxipA= -----END CERTIFICATE-----Generated at Fri Mar 14 08:43:02 2025 by rpki-client