$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa File: c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa (raw, json) Hash identifier: cd/3Ds5YXavpTnjl/gbd8Zy8kZmkN3Aa7BgQ25syXGw= Subject key identifier: C8:00:C5:DC:FA:64:0A:56:42:1B:49:ED:9A:4B:62:A1:62:91:51:C2 Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Certificate serial: 010D0C9F432858493C092290CEBA5072F02EA17C Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 16552 IP address blocks: 23.128.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:22:90:ce:ba:50:72:f0:2e:a1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=f522cbcc-16f3-49a2-aa8e-d98da08143f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:ea:4d:94:78:bc:67:21:34:4a:a3:35:d5: 15:bd:99:6c:60:bb:9b:bc:79:b2:f6:db:bd:72:71: e6:52:84:09:6e:3f:32:cf:4f:03:b2:e1:a2:59:33: 61:0a:72:67:cb:00:40:21:08:a5:7b:ea:55:e9:de: 0d:81:04:95:de:1a:18:46:6f:05:cf:b0:1e:62:f9: e7:ab:f1:d5:a8:aa:86:c5:42:7b:5b:6a:dc:d8:ca: 2f:66:4c:f7:60:a7:04:d5:7f:85:bd:03:0b:fc:64: a8:d8:e4:32:62:b1:83:24:e3:3c:8b:c9:e9:e0:96: 9d:75:26:8a:33:02:e0:7c:07:07:4c:d3:25:79:15: b4:9f:42:37:b1:97:c1:b4:06:42:4d:da:cd:49:a3: 41:e1:07:2a:38:aa:53:73:19:73:5f:4b:a4:8b:6b: 19:62:41:67:a0:ef:8e:28:86:10:0d:52:3d:0d:a6: 78:52:cb:4b:75:b0:a3:24:ae:85:ef:bd:f5:c4:40: 20:09:76:69:a2:a5:47:09:56:98:23:39:15:12:91: 37:a7:af:df:57:af:5c:f6:d4:17:d0:ab:19:1f:0f: 80:b2:22:02:95:fb:1c:5e:53:36:16:49:e2:b7:83: fe:f9:9d:2c:f0:0b:0b:f1:2c:c7:47:59:44:8f:6b: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:00:C5:DC:FA:64:0A:56:42:1B:49:ED:9A:4B:62:A1:62:91:51:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl X509v3 Authority Key Identifier: keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer sbgp-ipAddrBlock: critical IPv4: 23.128.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4c:64:c2:8a:a3:be:67:42:7e:6a:3a:46:f1:92:92:8e:44: 6f:ac:90:96:fb:3a:97:53:d6:09:bb:3c:3a:6c:fd:d0:ba:b4: 0e:5f:5d:9e:c5:7a:74:9b:8e:e9:59:4c:61:e7:70:f6:cb:b4: 0d:f0:d3:b0:3a:13:d5:dc:96:1e:f0:dd:22:67:83:90:e5:7d: 26:87:1d:7b:67:73:19:a7:34:87:d4:51:50:31:ae:c7:aa:5a: 06:b4:27:d9:52:aa:4d:11:f1:97:2e:36:90:2c:b9:94:6f:32: 45:64:07:02:ec:d0:38:c1:13:02:f7:3a:f3:78:a7:55:62:7b: 27:ea:2a:ff:98:f1:23:ba:9f:27:ff:f5:19:dd:0d:09:6c:89: b6:d9:79:1a:92:b9:62:18:a6:e0:f6:3c:68:4e:91:7f:ec:a2: 51:4f:01:a1:e4:e2:46:cd:0e:0a:db:6d:d9:7b:77:1e:87:9e: 37:25:4a:66:05:bf:25:c5:cf:bc:f3:cd:c3:6a:27:56:58:9c: ef:4e:51:66:66:b3:10:f1:f6:30:ad:21:0e:a1:97:ba:13:96: 43:bb:35:62:10:e0:61:a8:da:63:e9:02:ed:16:51:b5:33:b7: 16:95:ad:91:c7:4f:d0:4e:45:0e:0f:b4:54:ba:d8:1a:94:16: e5:d4:34:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSKQzrpQcvAuoXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3 ZjU0MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZjUyMmNiY2MtMTZmMy00OWEyLWFhOGUtZDk4ZGEwODE0M2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOvqTZR4vGchNEqjNdUVvZlsYLubvHmy9tu9 cnHmUoQJbj8yz08DsuGiWTNhCnJnywBAIQile+pV6d4NgQSV3hoYRm8Fz7AeYvnn q/HVqKqGxUJ7W2rc2MovZkz3YKcE1X+FvQML/GSo2OQyYrGDJOM8i8np4JaddSaK MwLgfAcHTNMleRW0n0I3sZfBtAZCTdrNSaNB4QcqOKpTcxlzX0uki2sZYkFnoO+O KIYQDVI9DaZ4UstLdbCjJK6F7731xEAgCXZpoqVHCVaYIzkVEpE3p6/fV69c9tQX 0KsZHw+AsiIClfscXlM2Fknit4P++Z0s8AsL8SzHR1lEj2s5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgAxdz6ZApWQhtJ7ZpLYqFikVHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2 ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvYzVlNzg0MGItNjYzNy0z MTI5LTliZmMtZWJkZWVjNWE2MWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3 N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhMZMKKo75nQn5qOkbxkpKORG+skJb7OpdT1gm7PDps/dC6tA5fXZ7F enSbjulZTGHncPbLtA3w07A6E9Xclh7w3SJng5DlfSaHHXtncxmnNIfUUVAxrseq Wga0J9lSqk0R8ZcuNpAsuZRvMkVkBwLs0DjBEwL3OvN4p1VieyfqKv+Y8SO6nyf/ 9RndDQlsibbZeRqSuWIYpuD2PGhOkX/solFPAaHk4kbNDgrbbdl7dx6HnjclSmYF vyXFz7zzzcNqJ1ZYnO9OUWZmsxDx9jCtIQ6hl7oTlkO7NWIQ4GGo2mPpAu0WUbUz txaVrZHHT9BORQ4PtFS62BqUFuXUNKA= -----END CERTIFICATE-----Generated at Sun Apr 6 13:51:32 2025 by rpki-client