$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/5c05e240-2031-3739-94fa-b39d23eea271.roa File: 5c05e240-2031-3739-94fa-b39d23eea271.roa (raw, json) Hash identifier: 1eZ9JgpB0rcrqrebGopV3HLyQ+y9RwEPzZI747lFUn8= Subject key identifier: 4B:01:68:0E:ED:29:E9:07:31:83:11:E6:7E:9D:52:18:E9:7D:8F:8F Certificate issuer: /CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Certificate serial: 010D0C9F43285848100A87C950E13604442C3480 Authority key identifier: 93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/5c05e240-2031-3739-94fa-b39d23eea271.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 55251 IP address blocks: 162.211.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:87:c9:50:e1:36:04:44:2c:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=3cf22e8b-ad00-4e71-a2e1-c182d4485c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:45:ed:dc:b8:57:05:3c:32:cf:35:a4:bb:15: bb:1a:2a:a2:52:a4:1a:c3:a2:f2:53:f7:40:48:43: 0c:52:2c:36:09:a6:95:c0:bf:10:5c:39:fc:97:e3: b1:d7:df:82:b6:a5:c0:ea:20:ab:08:15:5d:28:ee: 61:72:6b:e4:e1:56:79:3e:9e:80:99:eb:e9:00:54: 65:0b:b7:02:ff:ad:dd:e3:ac:f8:c2:75:54:3f:29: 90:2f:44:5c:36:ba:6a:b6:22:87:b9:22:50:6f:aa: 6c:e1:45:70:52:8d:45:30:70:4d:4d:9c:41:27:e9: 8a:4b:9d:67:d9:ee:6d:de:ea:0e:c8:82:23:10:c6: 0e:e9:95:14:f8:06:4e:63:8c:3d:94:50:cf:f8:01: ab:ff:6a:92:8b:cf:6b:e8:86:cb:4e:fb:cb:52:eb: 6d:56:cf:9a:47:e1:96:3f:46:c9:74:76:c0:80:55: 8e:26:cb:62:5c:36:a2:d7:cc:c8:bf:1f:49:61:1f: eb:e2:6c:4d:68:00:da:7d:1d:55:a7:77:f8:6e:48: 8c:81:37:b6:57:cc:87:8f:cc:d3:b2:5a:51:e9:ba: 6f:67:0f:08:bb:b4:bc:4c:24:a6:02:14:8a:9b:fd: 42:91:a6:7b:05:0a:c2:b0:3a:2c:c8:cb:38:45:00: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:01:68:0E:ED:29:E9:07:31:83:11:E6:7E:9D:52:18:E9:7D:8F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/5c05e240-2031-3739-94fa-b39d23eea271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl X509v3 Authority Key Identifier: keyid:93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer sbgp-ipAddrBlock: critical IPv4: 162.211.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:de:a2:ef:68:49:16:1f:07:80:10:37:2b:db:07:73:c9:a4: 71:9e:d5:67:05:92:55:77:ac:9c:38:2a:ac:5a:89:ab:83:36: 76:c1:95:3d:70:fb:6d:d9:31:5d:21:97:2e:80:f3:b0:dc:f6: 9e:8c:e6:8a:15:71:d9:6a:1a:8b:d0:ba:b7:b5:5e:65:13:78: 3f:fb:ec:fc:54:87:e2:2d:13:8c:b5:87:42:89:fc:dc:d5:e2: b4:9c:9f:c0:4a:dc:ba:7a:5b:9c:bd:c1:79:49:11:fd:4d:a1: 68:13:00:b1:fe:e4:29:c5:77:86:2f:86:9e:f2:f0:ad:91:9c: 33:61:43:8c:47:b3:da:33:87:a0:f4:1d:38:58:f0:f4:bd:5c: 0d:8b:b3:ab:ed:63:79:62:9b:2c:3a:f8:98:74:97:54:a3:f2: c4:ce:d7:a0:ab:4b:df:b3:07:fe:2d:06:27:4b:5d:54:8d:47: 56:97:be:e4:31:b4:9b:c7:b8:2b:54:d8:f6:0f:72:0b:a7:54: 48:9b:6b:60:ea:e4:fb:65:92:14:f2:fc:69:b0:7e:d1:a1:b7: 94:ce:f8:f0:70:fd:14:00:2b:05:2f:f3:1b:cb:95:bc:54:5b: 3e:4a:89:37:33:76:22:52:9c:03:b6:03:67:31:61:e6:f1:b1: 25:4e:67:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCofJUOE2BEQsNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxN2ViYjMtYTRjYy00OGE5LWJmNDItMDFkZTU1YTY2 ZGVmMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk M2NmMjJlOGItYWQwMC00ZTcxLWEyZTEtYzE4MmQ0NDg1YzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEXt3LhXBTwyzzWkuxW7GiqiUqQaw6LyU/dA SEMMUiw2CaaVwL8QXDn8l+Ox19+CtqXA6iCrCBVdKO5hcmvk4VZ5Pp6AmevpAFRl C7cC/63d46z4wnVUPymQL0RcNrpqtiKHuSJQb6ps4UVwUo1FMHBNTZxBJ+mKS51n 2e5t3uoOyIIjEMYO6ZUU+AZOY4w9lFDP+AGr/2qSi89r6IbLTvvLUuttVs+aR+GW P0bJdHbAgFWOJstiXDai18zIvx9JYR/r4mxNaADafR1Vp3f4bkiMgTe2V8yHj8zT slpR6bpvZw8Iu7S8TCSmAhSKm/1CkaZ7BQrCsDosyMs4RQDy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsBaA7tKekHMYMR5n6dUhjpfY+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3 ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRlNTVhNjZkZWYvNWMwNWUyNDAtMjAzMS0z NzM5LTk0ZmEtYjM5ZDIzZWVhMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDgxN2ViYjMtYTRjYy00OGE5LWJm NDItMDFkZTU1YTY2ZGVmLzQ4MTdlYmIzLWE0Y2MtNDhhOS1iZjQyLTAxZGU1NWE2 NmRlZi5jcmwwHwYDVR0jBBgwFoAUk9jXatQNVqalp94tfQbu0IZ0a+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRl NTVhNjZkZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHeou9oSRYfB4AQNyvbB3PJpHGe1WcFklV3rJw4KqxaiauDNnbBlT1w +23ZMV0hly6A87Dc9p6M5ooVcdlqGovQure1XmUTeD/77PxUh+ItE4y1h0KJ/NzV 4rScn8BK3Lp6W5y9wXlJEf1NoWgTALH+5CnFd4Yvhp7y8K2RnDNhQ4xHs9ozh6D0 HThY8PS9XA2Ls6vtY3limyw6+Jh0l1Sj8sTO16CrS9+zB/4tBidLXVSNR1aXvuQx tJvHuCtU2PYPcgunVEiba2Dq5PtlkhTy/GmwftGht5TO+PBw/RQAKwUv8xvLlbxU Wz5KiTczdiJSnAO2A2cxYebxsSVOZ/Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:16 2025 by rpki-client