$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/5c05e240-2031-3739-94fa-b39d23eea271.roa File: 5c05e240-2031-3739-94fa-b39d23eea271.roa (raw, json) Hash identifier: srSn5Tuu+R2qh8NfpbbsXLnZ8v3pYK1H85dnTT2QVG4= Subject key identifier: F4:97:56:56:78:8F:01:67:07:75:88:81:00:DB:4D:35:11:47:4C:31 Certificate issuer: /CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Certificate serial: 010D0C9F43285848EF615FF62BD8A04D689CDC10 Authority key identifier: 93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/5c05e240-2031-3739-94fa-b39d23eea271.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 55251 IP address blocks: 162.211.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5f:f6:2b:d8:a0:4d:68:9c:dc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=1db0f4c8-7528-4021-92d8-3b9e79ad1498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:f5:6c:b2:d4:43:ee:b2:7a:f9:8c:87:ac: 9b:91:b6:2e:33:20:2e:52:e2:18:4a:89:31:07:8d: 00:9e:38:9c:9c:22:3f:c9:28:68:31:8a:db:a3:ac: b4:d6:a7:08:68:5e:60:c5:ec:45:94:db:aa:ca:c3: 20:38:95:1a:7a:69:fa:6b:97:35:6a:9e:77:2b:6e: 39:28:1c:d5:d9:f7:10:92:ef:73:e5:c9:a4:79:8e: b5:0b:2f:02:e2:eb:85:67:ae:9a:20:17:38:5b:ea: 2b:26:27:af:9a:6a:4b:e5:86:28:8a:ff:a5:f3:ef: 20:3e:0a:ae:61:c6:67:ac:6f:0c:7b:31:5c:b5:23: ec:ad:7a:d8:26:d8:c2:48:37:94:ee:b7:67:47:c5: 02:e7:74:02:b6:35:09:55:27:3c:5d:01:4d:ca:e1: 69:02:c3:c2:74:dd:97:06:07:fc:ff:cf:c8:e6:57: 64:52:89:71:a3:4e:0f:57:8f:77:36:97:c2:d6:c4: 90:6d:79:7b:8d:10:b3:5b:15:50:21:90:cb:90:f5: eb:ed:81:82:1e:de:52:f7:6f:aa:0c:5e:37:e5:5a: 19:d3:8d:a5:9d:8c:d3:d9:02:6f:ac:0a:dc:8c:5a: 54:2d:df:fa:59:79:4a:79:51:94:f6:8d:67:64:87: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:56:56:78:8F:01:67:07:75:88:81:00:DB:4D:35:11:47:4C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/5c05e240-2031-3739-94fa-b39d23eea271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl X509v3 Authority Key Identifier: keyid:93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer sbgp-ipAddrBlock: critical IPv4: 162.211.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:63:b3:ff:ea:f0:23:18:da:4e:d9:01:eb:db:f8:93:92:04: 10:ec:0f:c4:17:7e:f5:08:21:b7:da:77:3f:3a:67:e1:50:65: 2b:e2:96:24:ed:9a:66:03:7a:ee:e7:ba:a5:89:c3:3b:7d:2c: 7d:73:d0:41:24:ee:4d:63:23:64:4b:a3:4a:98:b6:fa:43:6a: 0b:61:62:b9:c3:21:71:37:bc:e6:97:1b:5b:36:28:68:98:5e: ce:ce:d7:d3:50:e5:33:21:c2:6f:6d:eb:ee:10:53:97:86:5b: 7d:59:68:b6:23:a4:fe:08:ce:b0:d8:3b:85:47:c2:cf:ec:27: 3d:e7:e0:28:a0:8c:16:32:80:bd:3b:81:63:45:a9:fa:81:a5: 3b:60:40:98:5d:9d:06:92:39:07:47:53:7d:e3:c1:80:c9:55: 51:1d:85:52:f9:4e:cf:28:8b:c8:6a:c2:a4:f7:a1:78:7c:e4: 59:00:c1:6e:0a:fd:9f:3c:07:54:26:1c:a4:83:3f:d9:e5:34: 42:1d:6d:a3:a7:4e:4b:3f:43:bb:4e:ad:34:d3:14:1f:94:e2: 3b:b0:17:55:5d:10:41:85:15:1a:55:fc:52:0e:51:50:36:05: a1:c5:1f:a0:03:b4:44:df:db:39:6f:85:9a:f2:d2:a7:8c:94: 66:66:db:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYV/2K9igTWic3BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxN2ViYjMtYTRjYy00OGE5LWJmNDItMDFkZTU1YTY2 ZGVmMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MWRiMGY0YzgtNzUyOC00MDIxLTkyZDgtM2I5ZTc5YWQxNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxv1bLLUQ+6yevmMh6ybkbYuMyAuUuIYSokx B40AnjicnCI/yShoMYrbo6y01qcIaF5gxexFlNuqysMgOJUaemn6a5c1ap53K245 KBzV2fcQku9z5cmkeY61Cy8C4uuFZ66aIBc4W+orJievmmpL5YYoiv+l8+8gPgqu YcZnrG8MezFctSPsrXrYJtjCSDeU7rdnR8UC53QCtjUJVSc8XQFNyuFpAsPCdN2X Bgf8/8/I5ldkUolxo04PV493NpfC1sSQbXl7jRCzWxVQIZDLkPXr7YGCHt5S92+q DF435VoZ042lnYzT2QJvrArcjFpULd/6WXlKeVGU9o1nZIexswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSXVlZ4jwFnB3WIgQDbTTURR0wxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3 ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRlNTVhNjZkZWYvNWMwNWUyNDAtMjAzMS0z NzM5LTk0ZmEtYjM5ZDIzZWVhMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDgxN2ViYjMtYTRjYy00OGE5LWJm NDItMDFkZTU1YTY2ZGVmLzQ4MTdlYmIzLWE0Y2MtNDhhOS1iZjQyLTAxZGU1NWE2 NmRlZi5jcmwwHwYDVR0jBBgwFoAUk9jXatQNVqalp94tfQbu0IZ0a+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRl NTVhNjZkZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNjs//q8CMY2k7ZAevb+JOSBBDsD8QXfvUIIbfadz86Z+FQZSviliTt mmYDeu7nuqWJwzt9LH1z0EEk7k1jI2RLo0qYtvpDagthYrnDIXE3vOaXG1s2KGiY Xs7O19NQ5TMhwm9t6+4QU5eGW31ZaLYjpP4IzrDYO4VHws/sJz3n4CigjBYygL07 gWNFqfqBpTtgQJhdnQaSOQdHU33jwYDJVVEdhVL5Ts8oi8hqwqT3oXh85FkAwW4K /Z88B1QmHKSDP9nlNEIdbaOnTks/Q7tOrTTTFB+U4juwF1VdEEGFFRpV/FIOUVA2 BaHFH6ADtETf2zlvhZry0qeMlGZm27M= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:52 2025 by rpki-client