$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa File: ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa (raw, json) Hash identifier: DswGXW0e7jpYDabQQNqw1ew+CvpH/dduUE4Vy5pyn8U= Subject key identifier: 1C:33:CD:89:8B:34:C6:BC:89:9F:BA:05:90:E4:63:12:BC:05:32:76 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F432858480EA5095DBFFD6DB17F492A80 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 7782 IP address blocks: 162.211.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:09:5d:bf:fd:6d:b1:7f:49:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=4c201485-5ebb-405d-8298-832d5995ea88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:27:61:1e:d3:b0:08:3d:a0:69:b5:24:32:a2: 4a:ec:31:79:ef:60:ae:84:f8:e4:99:df:0a:f5:d6: 9e:29:2d:c6:bd:8d:13:9a:b3:f5:dd:fb:c9:29:f5: d5:31:8f:1e:5e:3d:2e:a8:83:bf:b5:32:15:7c:0b: 24:dd:73:48:51:4b:82:cd:7c:4f:8e:cc:88:5f:a4: 72:ba:e4:d9:79:f6:a2:82:0f:17:f1:3a:46:d1:77: 75:82:e4:c4:a8:58:ed:57:0c:63:7d:64:99:f1:00: 21:04:3b:3f:f4:cd:21:50:0a:5d:5e:3f:bb:32:0e: 52:8f:95:de:60:5e:b3:f0:50:06:17:ea:6f:6a:23: f9:f1:1f:dc:7d:69:ed:d3:d6:91:c2:0a:00:13:50: bb:35:0d:cd:c3:0f:26:d0:a9:60:ff:f1:c0:5b:c9: 4c:03:a5:2c:d0:91:49:f7:37:a8:64:b7:e7:26:93: aa:ea:e7:32:3f:a9:b0:8a:eb:9d:9f:33:63:48:13: 2f:e9:fc:10:4d:dd:00:5d:fd:0d:07:a4:c2:2c:ee: 70:cf:34:7d:71:2a:d8:4b:54:c6:81:09:51:a6:e7: 73:29:de:e9:ae:98:bd:b9:12:ba:91:bd:dc:e1:4b: 81:17:6e:19:8f:e8:eb:b6:f2:18:38:89:17:88:14: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:33:CD:89:8B:34:C6:BC:89:9F:BA:05:90:E4:63:12:BC:05:32:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.211.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:05:f3:1e:39:ac:93:97:d0:8f:e7:c7:0e:4f:12:81:3f:dd: 38:de:ec:e9:b7:05:67:e2:3e:6c:dc:d8:81:85:50:f9:11:1b: 58:b9:fa:39:08:79:1d:88:b5:26:43:d1:b3:01:82:02:e2:9b: 0b:5c:89:fb:96:be:2a:bc:ff:84:f4:5d:eb:a1:8b:07:51:08: 43:0e:a1:af:b5:0b:ee:9b:e9:40:11:46:6f:6d:fd:e7:fe:81: e7:45:06:18:a8:78:2d:f5:b5:bb:29:98:ca:61:ae:08:37:bc: 55:9c:be:bf:91:82:af:88:a2:57:b6:92:8c:cb:cc:a4:bc:af: 41:26:44:c2:eb:c0:f4:1f:93:02:a1:40:86:42:ea:1a:0a:f3: 0d:82:3e:97:94:13:bc:db:77:af:ec:6b:c8:12:dd:2b:81:93: 70:14:67:ce:27:ce:2e:52:a0:31:da:bf:cf:cd:52:2f:e4:4f: e5:7c:15:65:c0:0f:ad:16:19:69:8d:1c:e4:a8:24:e5:a5:05: 4a:5f:80:d6:7b:11:68:1b:1f:0f:5d:2f:90:37:e1:68:2c:45: 1a:32:3e:ee:22:1e:6f:a3:ee:4d:c2:17:e8:4d:6f:f3:51:f3: 15:4e:95:a5:51:34:52:26:99:d3:60:b0:8e:51:ec:ac:0d:37: 30:f3:4f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQldv/1tsX9JKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk NGMyMDE0ODUtNWViYi00MDVkLTgyOTgtODMyZDU5OTVlYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCdhHtOwCD2gabUkMqJK7DF572CuhPjkmd8K 9daeKS3GvY0TmrP13fvJKfXVMY8eXj0uqIO/tTIVfAsk3XNIUUuCzXxPjsyIX6Ry uuTZefaigg8X8TpG0Xd1guTEqFjtVwxjfWSZ8QAhBDs/9M0hUApdXj+7Mg5Sj5Xe YF6z8FAGF+pvaiP58R/cfWnt09aRwgoAE1C7NQ3Nww8m0Klg//HAW8lMA6Us0JFJ 9zeoZLfnJpOq6ucyP6mwiuudnzNjSBMv6fwQTd0AXf0NB6TCLO5wzzR9cSrYS1TG gQlRpudzKd7prpi9uRK6kb3c4UuBF24Zj+jrtvIYOIkXiBRRwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwzzYmLNMa8iZ+6BZDkYxK8BTJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYWU1MDhjNjYtMTlmMy0z MjVlLTlhYzktMmZhNzE0ZGM5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQF8x45rJOX0I/nxw5PEoE/3Tje7Om3BWfiPmzc2IGFUPkRG1i5+jkI eR2ItSZD0bMBggLimwtcifuWviq8/4T0XeuhiwdRCEMOoa+1C+6b6UARRm9t/ef+ gedFBhioeC31tbspmMphrgg3vFWcvr+Rgq+Iole2kozLzKS8r0EmRMLrwPQfkwKh QIZC6hoK8w2CPpeUE7zbd6/sa8gS3SuBk3AUZ84nzi5SoDHav8/NUi/kT+V8FWXA D60WGWmNHOSoJOWlBUpfgNZ7EWgbHw9dL5A34WgsRRoyPu4iHm+j7k3CF+hNb/NR 8xVOlaVRNFImmdNgsI5R7KwNNzDzT0E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:16 2025 by rpki-client