$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa File: 2add9fe1-48d4-3387-8e97-eee33e138e28.roa (raw, json) Hash identifier: 7fgAzrpaFksaMyMfpAcBnPkVCLVrbjSsrzsP9TMNEKM= Subject key identifier: 1B:13:5A:08:54:A3:E2:82:D3:D5:10:22:41:51:EE:C5:0E:4E:E4:CF Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Certificate serial: 010D0C9F43285848EF6165E276A3C584C6C08080 Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7794 IP address blocks: 23.248.0.0/17 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:65:e2:76:a3:c5:84:c6:c0:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=3e7eab66-0e1f-45e8-8b9a-7f62d988a6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:ea:f7:e1:2d:6b:3e:02:dc:b8:3d:ab:53: a6:5b:23:93:32:76:c0:e5:fc:21:d6:94:af:cf:12: 7a:61:8c:1d:d1:5d:b7:6f:b7:c5:6a:44:82:6e:9e: 34:d6:35:f7:ae:22:9b:73:a4:e7:4a:8e:30:fd:ba: 50:62:55:5f:4d:fc:77:39:b8:93:6b:be:d7:84:95: dc:80:2c:48:18:a0:a3:02:21:4a:3f:33:d7:29:4c: d1:78:17:97:b7:2b:b2:75:83:6d:b1:4a:7a:41:91: a7:7d:00:d5:a9:14:a3:0e:5e:07:c3:7c:7e:5e:c3: 5c:69:27:6d:fb:61:a3:5c:98:23:81:bd:ac:e8:36: 26:80:a6:55:0b:d2:5b:c1:8a:0c:eb:78:1d:37:ee: 46:05:92:d2:48:3e:4a:d9:f8:29:01:bd:47:90:55: 78:70:4c:85:df:60:6f:56:1b:cb:f0:76:45:c2:f6: c8:4d:0c:98:27:5c:fb:0b:d2:7d:03:1c:37:37:03: 5b:0d:5a:46:88:80:04:bb:16:c6:a5:ff:0d:16:97: f5:a3:ab:b6:6e:ab:4a:d7:19:8b:e8:1e:e1:20:5c: 44:b8:4a:bc:3f:42:d8:fc:7c:ed:4a:2f:16:9e:df: d6:35:2b:95:5b:ce:4a:99:b8:49:cb:33:60:37:0e: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:5A:08:54:A3:E2:82:D3:D5:10:22:41:51:EE:C5:0E:4E:E4:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl X509v3 Authority Key Identifier: keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer sbgp-ipAddrBlock: critical IPv4: 23.248.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ba:84:d4:a1:92:e9:95:cc:73:1c:7e:2e:5e:c5:fa:4b:98: 76:f5:0c:87:37:b9:20:1d:ff:b5:ec:77:c4:8f:59:dc:36:d2: 89:0c:85:34:77:cb:3d:da:27:70:f6:2b:73:75:0f:03:4f:aa: 38:8d:98:9c:16:f4:51:3b:15:24:7c:80:e4:b7:40:99:eb:c9: 87:7d:98:76:64:d2:03:d9:c1:4f:8f:ed:92:39:7e:d7:4c:f4: 76:16:a6:bf:57:1a:9c:7c:0c:44:4e:c6:cb:14:d4:31:d5:fa: 7e:9f:3a:79:1f:c0:e0:54:be:18:6a:3a:bf:a3:f4:19:1f:9f: b8:9c:52:a9:bb:96:7a:49:4f:3c:91:28:1e:71:e4:12:00:f4: dc:fb:9b:60:1c:a9:31:0a:a9:13:a6:d1:fa:16:85:68:6a:ea: 0f:a6:f6:28:de:a1:fa:3d:32:6d:b9:cd:e8:c7:c3:7a:12:3f: 75:10:4e:3e:07:50:cd:fe:ec:9d:1b:ff:db:7d:6b:95:10:05: 90:2a:ac:8c:69:f8:3b:54:35:8d:9b:2d:b6:42:24:af:55:12: bf:6f:b4:98:d9:5f:b4:ee:57:b8:b7:07:9e:da:b6:f9:3b:90: a3:b8:9b:c1:e9:bb:06:5f:df:b6:07:e0:86:b5:fc:87:9f:23: 7d:79:8a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWXidqPFhMbAgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx NzZlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk M2U3ZWFiNjYtMGUxZi00NWU4LThiOWEtN2Y2MmQ5ODhhNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIbq9+Etaz4C3Lg9q1OmWyOTMnbA5fwh1pSv zxJ6YYwd0V23b7fFakSCbp401jX3riKbc6TnSo4w/bpQYlVfTfx3ObiTa77XhJXc gCxIGKCjAiFKPzPXKUzReBeXtyuydYNtsUp6QZGnfQDVqRSjDl4Hw3x+XsNcaSdt +2GjXJgjgb2s6DYmgKZVC9JbwYoM63gdN+5GBZLSSD5K2fgpAb1HkFV4cEyF32Bv VhvL8HZFwvbITQyYJ1z7C9J9Axw3NwNbDVpGiIAEuxbGpf8NFpf1o6u2bqtK1xmL 6B7hIFxEuEq8P0LY/HztSi8Wnt/WNSuVW85KmbhJyzNgNw5xpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsTWghUo+KC09UQIkFR7sUOTuTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvMmFkZDlmZTEtNDhkNC0z Mzg3LThlOTctZWVlMzNlMTM4ZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1 ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF/gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS6hNShkumVzHMcfi5exfpLmHb1DIc3uSAd/7Xsd8SPWdw20okMhTR3 yz3aJ3D2K3N1DwNPqjiNmJwW9FE7FSR8gOS3QJnryYd9mHZk0gPZwU+P7ZI5ftdM 9HYWpr9XGpx8DEROxssU1DHV+n6fOnkfwOBUvhhqOr+j9Bkfn7icUqm7lnpJTzyR KB5x5BIA9Nz7m2AcqTEKqROm0foWhWhq6g+m9ijeofo9Mm25zejHw3oSP3UQTj4H UM3+7J0b/9t9a5UQBZAqrIxp+DtUNY2bLbZCJK9VEr9vtJjZX7TuV7i3B57atvk7 kKO4m8HpuwZf37YH4Ia1/IefI315ikQ= -----END CERTIFICATE-----Generated at Mon Apr 7 15:45:56 2025 by rpki-client