$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa File: f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa (raw, json) Hash identifier: Hh0D8oCarxPNNkuzMggrSa4A8Bh2RlK3MIydOkjy7HA= Subject key identifier: 8D:39:4F:A2:DA:4A:7C:D9:60:C1:4F:9F:7E:8E:41:1F:FC:C3:54:57 Certificate issuer: /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58 Certificate serial: 010D0C9F432858489340ABE6CBA8A50E8924EC00 Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 395648 IP address blocks: 23.143.200.0/24 maxlen: 24 2602:290::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:ab:e6:cb:a8:a5:0e:89:24:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=a21f548a-a72d-4103-a5ea-86462acc95a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:5c:f9:d7:ca:de:f5:95:e7:65:4c:49:3a: 6c:9e:55:aa:59:71:db:14:b0:de:43:da:d0:30:eb: 58:4e:55:ad:fa:c5:77:18:df:0f:34:6b:63:16:48: 2d:9d:08:7c:4b:57:b6:c5:9e:4c:1c:da:57:36:ea: 14:c2:78:fa:15:ed:5d:c2:69:0a:c8:16:ab:86:81: 1b:bf:68:b9:c8:41:03:41:a2:02:3a:44:2c:7a:97: be:07:14:da:71:cb:0e:44:a6:cb:ff:25:a1:d8:bb: 30:23:c6:df:38:3a:63:78:2c:ad:7b:d0:ca:16:a8: e0:01:1a:d6:6a:a9:0e:b3:13:04:9f:ed:d3:36:f8: 3d:e8:db:43:81:4a:d0:85:50:8a:7d:3d:ad:9f:fe: 23:8a:2a:84:f5:d5:8c:f7:8a:3d:da:cd:9a:9a:19: 89:f8:83:25:4d:fa:1f:7a:e3:ee:a7:46:36:b0:e1: 5b:83:e5:da:1c:0c:27:e3:eb:f8:e6:12:13:fd:90: 87:49:b6:df:dd:f8:4a:26:97:94:ce:53:20:14:01: 28:a0:15:15:c9:b8:91:92:c3:ff:d8:aa:c1:af:95: f7:28:73:9a:5f:48:68:62:bd:ff:d4:1b:5c:d1:b5: 8a:cf:87:20:1c:fa:37:09:c0:86:39:60:04:63:3a: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:39:4F:A2:DA:4A:7C:D9:60:C1:4F:9F:7E:8E:41:1F:FC:C3:54:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl X509v3 Authority Key Identifier: keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer sbgp-ipAddrBlock: critical IPv4: 23.143.200.0/24 IPv6: 2602:290::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:31:e2:09:e5:34:3e:c2:39:35:01:1a:70:9b:8a:2e:28:e7: f6:8d:0a:26:b1:34:37:54:6a:1d:b1:2c:7a:d7:f5:16:36:4f: ca:55:66:e3:30:ba:ce:e5:72:87:98:56:45:d4:86:bf:f5:ca: 5c:3e:8b:50:14:74:cb:41:8c:cc:c9:9d:71:ca:0e:f0:56:c1: 37:0a:5a:17:89:60:e4:fb:a6:47:e5:b1:57:32:65:44:85:c2: 4d:a6:c7:f9:56:b9:c2:36:23:c7:15:c5:3f:cc:9a:ae:b2:1b: 41:85:c2:7a:5a:0d:68:5d:36:8e:aa:ac:e5:46:f7:4d:98:e4: 85:75:d9:d2:84:0a:81:40:49:21:fd:dc:e9:d1:0e:55:89:02: 6b:f1:83:89:6b:94:fa:8b:ad:d9:d1:90:cd:f7:88:ca:59:5c: 57:e5:24:89:e7:88:cf:04:a5:5c:92:b7:56:9f:fd:1e:52:00: 34:68:de:aa:68:7e:f8:65:64:b1:32:c4:1b:e3:b0:32:68:c1: cb:87:d5:cf:5b:c7:2e:11:f4:27:fe:1a:0c:be:7e:e8:1d:17: 5a:dc:b6:1d:4c:0b:52:0d:a4:af:09:7c:ec:e4:6c:01:59:ef: cc:5f:da:a7:79:4b:5f:62:b9:9b:94:36:c7:41:6c:c8:c0:64: 81:fd:c4:43 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiTQKvmy6ilDokk7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcwNmM2Y2EtYjE5YS00NGE2LTk0ZTEtMzQwY2JmZDI5 YTU4MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk YTIxZjU0OGEtYTcyZC00MTAzLWE1ZWEtODY0NjJhY2M5NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwxc+dfK3vWV52VMSTpsnlWqWXHbFLDeQ9rQ MOtYTlWt+sV3GN8PNGtjFkgtnQh8S1e2xZ5MHNpXNuoUwnj6Fe1dwmkKyBarhoEb v2i5yEEDQaICOkQsepe+BxTaccsORKbL/yWh2LswI8bfODpjeCyte9DKFqjgARrW aqkOsxMEn+3TNvg96NtDgUrQhVCKfT2tn/4jiiqE9dWM94o92s2amhmJ+IMlTfof euPup0Y2sOFbg+XaHAwn4+v45hIT/ZCHSbbf3fhKJpeUzlMgFAEooBUVybiRksP/ 2KrBr5X3KHOaX0hoYr3/1Btc0bWKz4cgHPo3CcCGOWAEYzowLQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI05T6LaSnzZYMFPn36OQR/8w1RXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NzA2 YzZjYS1iMTlhLTQ0YTYtOTRlMS0zNDBjYmZkMjlhNTgvZjA2MDMzN2QtYjcxZC0z NzA0LWFkNGMtNjZlZjRiOGViYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDcwNmM2Y2EtYjE5YS00NGE2LTk0 ZTEtMzQwY2JmZDI5YTU4LzQ3MDZjNmNhLWIxOWEtNDRhNi05NGUxLTM0MGNiZmQy OWE1OC5jcmwwHwYDVR0jBBgwFoAUcBMVmzmEx0GS/n6O3sEUB6Bk5GswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NzA2YzZjYS1iMTlhLTQ0YTYtOTRlMS0zNDBj YmZkMjlhNTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4/IMA4E AgACMAgDBgQmAgKQADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNMeIJ5TQ+wjk1ARpwm4ouKOf2jQomsTQ3 VGodsSx61/UWNk/KVWbjMLrO5XKHmFZF1Ia/9cpcPotQFHTLQYzMyZ1xyg7wVsE3 CloXiWDk+6ZH5bFXMmVEhcJNpsf5VrnCNiPHFcU/zJqushtBhcJ6Wg1oXTaOqqzl RvdNmOSFddnShAqBQEkh/dzp0Q5ViQJr8YOJa5T6i63Z0ZDN94jKWVxX5SSJ54jP BKVckrdWn/0eUgA0aN6qaH74ZWSxMsQb47AyaMHLh9XPW8cuEfQn/hoMvn7oHRda 3LYdTAtSDaSvCXzs5GwBWe/MX9qneUtfYrmblDbHQWzIwGSB/cRD -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:22 2025 by rpki-client