$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa File: ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa (raw, json) Hash identifier: 7CclemnVHBb9IV5rCKKDToyPc5LJv1Q7IOoy9yu4OUs= Subject key identifier: 3C:53:0A:C9:E9:FD:CE:F8:56:31:6D:38:F9:40:24:AA:F2:94:E3:75 Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F43285848EC96919A2CB58FAE26903A00 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 52347 IP address blocks: 162.217.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:91:9a:2c:b5:8f:ae:26:90:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=3b56db3b-4449-48f9-83b5-af7895fe4e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:04:b1:e6:a9:51:f0:d8:0b:7e:57:8b:7b: 2a:2b:f7:cb:8d:68:83:11:40:c6:17:21:17:38:67: 4d:b6:74:f0:35:aa:9a:9e:40:99:f1:83:ef:9f:90: 6d:fb:d4:3e:97:3d:75:c4:26:6c:0d:bc:af:98:4c: 56:f7:f5:88:f1:90:7b:81:a2:d7:f2:eb:45:99:b7: ec:ce:03:47:b2:1f:64:1b:52:b0:33:e2:b7:e6:69: 9c:72:1a:7d:b1:63:28:02:68:09:95:88:47:45:50: ae:4d:8e:b8:b6:b2:e7:5c:05:ac:79:15:1f:bb:a5: 39:17:22:82:9e:1c:69:17:4e:e8:a7:19:13:4c:3b: b3:c1:d0:89:00:31:11:ab:a8:85:45:50:bf:08:1a: b3:45:ef:cf:d9:96:38:0d:b5:a1:5a:ce:18:86:3a: 2e:09:f1:b0:ba:75:8e:6b:0f:bc:c3:94:2a:41:d5: ec:72:55:1c:8a:b9:d2:9b:39:39:cc:dc:cd:2c:e6: cd:f0:7b:08:ca:df:74:b8:66:e7:ae:6d:fa:d0:65: 3b:d8:bf:da:8a:1d:1c:5e:63:c4:92:bd:89:ba:40: cc:cb:3a:64:6b:ce:c5:a8:43:23:5e:a7:e9:a4:5f: 0f:30:d8:8a:e8:77:a5:a9:40:3a:8e:75:a9:cd:1e: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:53:0A:C9:E9:FD:CE:F8:56:31:6D:38:F9:40:24:AA:F2:94:E3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:4f:a3:da:83:31:6f:f1:cf:25:23:20:f8:6e:bf:f2:2e:0d: 4d:ef:06:c5:52:f0:08:c5:88:bc:3d:2f:c4:bd:b8:dd:84:64: 22:f1:e0:df:51:c0:2d:7f:21:e6:ba:e0:61:6a:10:f3:bf:3b: de:e4:19:8b:a3:46:37:75:83:f8:2e:49:6f:fb:d5:ca:02:d6: ce:89:fe:67:7e:39:29:b5:bb:91:dc:3d:d5:fd:e4:bb:7f:3e: a6:f5:b2:18:a0:2d:58:b1:4e:52:8d:d8:1f:4c:66:0e:49:17: e5:78:d8:f4:44:57:b0:95:36:0d:67:6f:92:c6:f9:96:8c:b2: 2e:84:75:38:b4:f2:84:d4:87:74:a0:05:6d:70:a3:0b:90:53: 2e:a2:e8:c8:f7:19:18:b3:a7:14:5e:77:72:da:2e:ca:0e:55: 34:b8:4b:e5:5c:13:98:df:ce:18:b7:d1:f4:1c:90:f5:b3:8e: 81:da:46:2a:e8:ba:fa:e2:50:4b:73:a7:f7:f5:bc:07:55:46: c7:45:6b:8d:0d:a2:5c:76:25:8c:86:11:3f:71:ad:9b:d4:76: 3d:91:77:28:ee:c0:f0:b5:e7:13:f2:f9:e4:47:e6:b8:04:b3: 7e:a1:96:db:eb:f4:7f:f3:70:a7:58:24:60:71:7f:27:ec:65: 12:71:23:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpGaLLWPriaQOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk M2I1NmRiM2ItNDQ0OS00OGY5LTgzYjUtYWY3ODk1ZmU0ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxAEseapUfDYC35Xi3sqK/fLjWiDEUDGFyEX OGdNtnTwNaqankCZ8YPvn5Bt+9Q+lz11xCZsDbyvmExW9/WI8ZB7gaLX8utFmbfs zgNHsh9kG1KwM+K35mmcchp9sWMoAmgJlYhHRVCuTY64trLnXAWseRUfu6U5FyKC nhxpF07opxkTTDuzwdCJADERq6iFRVC/CBqzRe/P2ZY4DbWhWs4YhjouCfGwunWO aw+8w5QqQdXsclUcirnSmzk5zNzNLObN8HsIyt90uGbnrm360GU72L/aih0cXmPE kr2JukDMyzpka87FqEMjXqfppF8PMNiK6HelqUA6jnWpzR6+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxTCsnp/c74VjFtOPlAJKrylON1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvZmY2MzNmZTMtMGUyNC0z Y2IwLWI2YTQtMmFlODJkZGQ4NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdPo9qDMW/xzyUjIPhuv/IuDU3vBsVS8AjFiLw9L8S9uN2EZCLx4N9R wC1/Iea64GFqEPO/O97kGYujRjd1g/guSW/71coC1s6J/md+OSm1u5HcPdX95Lt/ Pqb1shigLVixTlKN2B9MZg5JF+V42PREV7CVNg1nb5LG+ZaMsi6EdTi08oTUh3Sg BW1wowuQUy6i6Mj3GRizpxRed3LaLsoOVTS4S+VcE5jfzhi30fQckPWzjoHaRiro uvriUEtzp/f1vAdVRsdFa40Nolx2JYyGET9xrZvUdj2RdyjuwPC15xPy+eRH5rgE s36hltvr9H/zcKdYJGBxfyfsZRJxI/0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:12:08 2025 by rpki-client