$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa File: 506410f2-e4be-3935-b59a-be62788b95ae.roa (raw, json) Hash identifier: ig2DaIV88ESqGUhxqU/m0v0raZzPOS7DtHpPu04gWks= Subject key identifier: 78:4D:60:16:2D:36:18:D9:01:0E:D1:EB:AE:3B:06:20:B2:B5:D3:9C Certificate issuer: /CN=206290f3-53e1-4d17-8678-29dace17c006 Certificate serial: 010D0C9F4328584930DE7887DBCB335B3D5101A0 Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 64289 IP address blocks: 23.161.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:78:87:db:cb:33:5b:3d:51:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=0d1d33d4-43a0-45e1-96e3-bbc0c3ab6d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:13:a1:df:3a:10:70:7a:bf:71:fd:7c:c5: f2:45:f1:52:ce:9a:1a:65:a8:cb:9b:cf:4a:af:17: 85:6e:af:7a:c2:c8:05:80:f0:4b:e6:8a:9b:22:aa: 70:b8:ba:7f:ca:dd:dc:d5:58:1f:a1:ee:7e:3a:39: 71:33:a7:67:73:31:d4:2d:39:51:d9:bc:29:63:4a: 02:b0:83:30:69:23:fc:52:c4:d8:2a:ae:a2:66:2f: e9:7d:27:02:e8:64:43:d4:b7:ce:f7:b6:96:8d:05: 2c:df:61:2e:8f:49:3e:d8:63:39:d8:f2:b0:80:b9: 84:83:4d:76:01:cf:4a:7f:67:95:2d:96:8f:d8:18: 9c:f3:b8:4d:c6:ef:73:c3:25:20:60:87:a4:ee:32: 4c:83:bf:a7:d2:63:16:6f:6e:7e:bc:ad:da:e1:b0: 2c:97:e4:ed:27:f5:cb:90:46:2b:77:55:55:e4:cd: b9:6c:da:b6:57:f7:94:b3:63:06:d2:cb:dd:bf:05: 6d:af:8d:fe:f2:ff:c0:14:21:ed:22:35:4b:6b:e0: bd:b6:df:7e:72:7b:5b:a2:73:03:04:0e:d7:aa:fa: b7:c7:42:4b:fb:1d:2a:d6:4c:4b:de:8f:38:5c:57: 35:3e:c5:26:79:cf:86:e0:2e:a1:38:98:89:df:58: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4D:60:16:2D:36:18:D9:01:0E:D1:EB:AE:3B:06:20:B2:B5:D3:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl X509v3 Authority Key Identifier: keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer sbgp-ipAddrBlock: critical IPv4: 23.161.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:cc:2d:fe:a7:77:f3:d3:9b:94:5f:7a:88:d6:2d:f7:68:d8: 78:e0:fd:c1:0c:68:73:05:ec:7c:55:94:71:a9:21:f8:02:e0: a3:79:90:7e:95:49:3f:d5:da:4f:fc:f8:d2:a3:f8:f4:cf:e8: 67:b0:23:e3:34:f5:3d:f5:96:14:52:a3:1f:4e:1a:90:a8:e7: 10:84:df:43:3b:b9:c2:66:ed:7a:0a:b1:20:7c:47:d2:c5:cf: 31:38:b0:67:86:df:58:e6:9f:09:be:cf:2f:52:e4:d9:74:48: 2b:37:f2:32:b9:42:e0:3b:a2:02:26:73:c3:1f:c9:1e:8b:f0: d0:f0:54:3d:90:c7:f1:28:d1:8a:35:b3:94:54:1e:cb:58:17: f1:93:9c:09:9c:4f:cd:e1:39:29:c3:93:30:e8:a4:d1:d6:de: c0:76:54:c2:82:86:d2:ad:c9:11:64:e7:ee:e6:a3:da:c0:fd: d3:79:d6:4b:33:ce:4e:d7:75:23:a5:2f:87:b9:4e:44:57:90: d2:b7:1b:63:34:57:48:e5:0b:e0:85:b1:59:6b:84:8e:b1:24: 92:1c:b9:7b:e6:13:cb:50:b5:5e:bd:b9:a1:3d:98:47:fc:41: 19:87:15:4d:d8:80:e0:e2:11:03:de:c8:a5:16:4f:fb:f1:27: b0:3d:d8:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3niH28szWz1RAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj MDA2MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MGQxZDMzZDQtNDNhMC00NWUxLTk2ZTMtYmJjMGMzYWI2ZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVoTod86EHB6v3H9fMXyRfFSzpoaZajLm89K rxeFbq96wsgFgPBL5oqbIqpwuLp/yt3c1Vgfoe5+OjlxM6dnczHULTlR2bwpY0oC sIMwaSP8UsTYKq6iZi/pfScC6GRD1LfO97aWjQUs32Euj0k+2GM52PKwgLmEg012 Ac9Kf2eVLZaP2Bic87hNxu9zwyUgYIek7jJMg7+n0mMWb25+vK3a4bAsl+TtJ/XL kEYrd1VV5M25bNq2V/eUs2MG0svdvwVtr43+8v/AFCHtIjVLa+C9tt9+cntbonMD BA7Xqvq3x0JL+x0q1kxL3o84XFc1PsUmec+G4C6hOJiJ31gLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhNYBYtNhjZAQ7R6647BiCytdOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvNTA2NDEwZjItZTRiZS0z OTM1LWI1OWEtYmU2Mjc4OGI5NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2 NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3 YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh Y2UxN2MwMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInMLf6nd/PTm5RfeojWLfdo2Hjg/cEMaHMF7HxVlHGpIfgC4KN5kH6V ST/V2k/8+NKj+PTP6GewI+M09T31lhRSox9OGpCo5xCE30M7ucJm7XoKsSB8R9LF zzE4sGeG31jmnwm+zy9S5Nl0SCs38jK5QuA7ogImc8MfyR6L8NDwVD2Qx/Eo0Yo1 s5RUHstYF/GTnAmcT83hOSnDkzDopNHW3sB2VMKChtKtyRFk5+7mo9rA/dN51ksz zk7XdSOlL4e5TkRXkNK3G2M0V0jlC+CFsVlrhI6xJJIcuXvmE8tQtV69uaE9mEf8 QRmHFU3YgODiEQPeyKUWT/vxJ7A92OI= -----END CERTIFICATE-----Generated at Sun Apr 6 03:36:09 2025 by rpki-client