$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/810d6f61-ce29-38e9-85b1-7c663e562d69.roa File: 810d6f61-ce29-38e9-85b1-7c663e562d69.roa (raw, json) Hash identifier: bXRqQiWeyWXl+/Ew9NR2MT0k0GgHNvpDgX66cK9t5kg= Subject key identifier: A6:F3:5B:2B:1A:90:43:C6:17:E6:BC:08:64:86:4A:C9:60:46:B8:33 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F43285848A99621E8F747DB12A5ECBF00 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/810d6f61-ce29-38e9-85b1-7c663e562d69.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 800 IP address blocks: 23.160.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:21:e8:f7:47:db:12:a5:ec:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d3b9c02a-2d42-40ec-a504-442ed9a55231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:eb:92:97:71:84:c3:67:2f:02:3b:29:ef: 3b:ac:75:61:6e:81:43:af:70:81:92:4f:7e:e2:d7: 81:50:15:57:03:8d:7e:04:36:88:53:2e:f6:ec:e7: fe:80:83:bd:27:a3:89:03:26:0e:38:f7:fc:c7:63: 0a:3c:9f:f5:e2:a0:8d:e8:38:3b:61:2a:47:86:dc: 6e:cc:7e:2c:94:c1:68:24:03:6c:6d:16:39:2c:cb: 84:40:0f:f0:08:e1:41:9d:06:e4:ae:a5:3f:02:86: 0a:98:e3:8e:39:49:e3:41:03:60:89:f7:37:ba:33: 74:fe:1e:e2:28:83:f8:5d:d4:64:f5:26:7f:c8:98: 98:2e:92:37:fb:c1:87:7a:fe:6f:96:75:6f:86:e6: 68:1f:ac:9a:71:5e:9e:3e:ca:c4:15:65:72:72:38: 4c:2c:d1:fb:93:86:3a:3c:60:62:fe:cc:2d:b9:84: 19:a5:f5:20:75:18:d3:0f:97:f4:e5:0a:0f:29:88: 67:b5:9b:45:fd:21:f8:d4:1f:c6:9c:ab:dd:d2:9b: 53:36:70:c5:7f:5c:86:29:2c:9a:47:bd:b7:e4:fd: 28:4a:1f:20:1d:bd:81:9a:d8:65:50:de:02:be:81: 5b:9f:2e:9f:e0:87:65:a0:56:fd:07:0b:33:d5:04: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F3:5B:2B:1A:90:43:C6:17:E6:BC:08:64:86:4A:C9:60:46:B8:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/810d6f61-ce29-38e9-85b1-7c663e562d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 23.160.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e4:fc:f0:7b:79:77:e6:88:aa:68:8e:6a:d8:71:47:89:da: 70:e7:00:b2:50:d6:e0:ef:90:f9:6e:e0:3a:b2:f5:2f:1b:6e: 2d:5c:52:9f:d2:47:bf:28:93:03:cf:08:f6:f2:cf:02:a4:4e: 69:3b:3b:d3:9b:10:c0:9a:47:db:9e:95:f0:0b:ac:a6:f4:60: 60:0c:4c:21:d9:17:c9:4d:7b:99:6d:31:8e:b9:45:51:1c:71: 1d:ad:05:b6:3f:e0:9b:b4:75:b1:e4:93:44:dc:2c:d0:73:ae: ac:6b:95:b3:58:c2:09:f1:c4:fd:f4:41:e2:cd:4d:b0:37:1d: 11:c0:fd:71:0b:ed:92:96:f2:6d:df:a6:86:e9:b1:1f:de:36: f2:35:b5:6c:af:d2:d4:23:01:d6:40:ed:0b:49:8f:bf:fa:53: 3a:37:17:38:89:e7:fa:b7:ed:7c:f7:32:74:e6:6d:e9:6e:c8: a4:90:cf:8f:bd:56:29:6a:4d:dd:43:d5:68:87:3b:4d:ad:8a: 88:98:96:82:11:40:3c:32:0b:86:b1:9c:38:dc:f1:a1:6e:0f: c2:f8:b2:64:32:99:2c:a4:e3:8f:61:63:3b:e8:a9:51:e7:81: 0e:69:2d:34:7f:c0:89:3e:cf:26:9e:8a:a3:a1:67:1a:b9:ee: da:7c:b0:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliHo90fbEqXsvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDNiOWMwMmEtMmQ0Mi00MGVjLWE1MDQtNDQyZWQ5YTU1MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dzrkpdxhMNnLwI7Ke87rHVhboFDr3CBkk9+ 4teBUBVXA41+BDaIUy727Of+gIO9J6OJAyYOOPf8x2MKPJ/14qCN6Dg7YSpHhtxu zH4slMFoJANsbRY5LMuEQA/wCOFBnQbkrqU/AoYKmOOOOUnjQQNgifc3ujN0/h7i KIP4XdRk9SZ/yJiYLpI3+8GHev5vlnVvhuZoH6yacV6ePsrEFWVycjhMLNH7k4Y6 PGBi/swtuYQZpfUgdRjTD5f05QoPKYhntZtF/SH41B/GnKvd0ptTNnDFf1yGKSya R7235P0oSh8gHb2BmthlUN4CvoFbny6f4IdloFb9Bwsz1QSe+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbzWysakEPGF+a8CGSGSslgRrgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvODEwZDZmNjEtY2UyOS0z OGU5LTg1YjEtN2M2NjNlNTYyZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3k/PB7eXfmiKpojmrYcUeJ2nDnALJQ1uDvkPlu4Dqy9S8bbi1cUp/S R78okwPPCPbyzwKkTmk7O9ObEMCaR9uelfALrKb0YGAMTCHZF8lNe5ltMY65RVEc cR2tBbY/4Ju0dbHkk0TcLNBzrqxrlbNYwgnxxP30QeLNTbA3HRHA/XEL7ZKW8m3f pobpsR/eNvI1tWyv0tQjAdZA7QtJj7/6Uzo3FziJ5/q37Xz3MnTmbeluyKSQz4+9 VilqTd1D1WiHO02tioiYloIRQDwyC4axnDjc8aFuD8L4smQymSyk449hYzvoqVHn gQ5pLTR/wIk+zyaeiqOhZxq57tp8sPI= -----END CERTIFICATE-----Generated at Sun Apr 6 00:53:20 2025 by rpki-client