$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa File: f2d6896d-681b-32c5-9502-74c90202e12a.roa (raw, json) Hash identifier: C6yTgU+5oCrw/pvQE7K/O5umEciIONDXuvv77iHXcu8= Subject key identifier: D0:BD:30:60:08:D7:99:2C:CF:6E:89:45:6A:E5:75:8C:3E:C6:49:2B Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Certificate serial: 010D0C9F43285848EF6165F08DD8971841337300 Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7794 IP address blocks: 23.248.128.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:65:f0:8d:d8:97:18:41:33:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=6580a795-3882-4951-bc9a-0d14f87e9cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:23:0d:66:cf:43:55:ab:51:ce:6c:29:9a: d3:1f:16:64:65:c5:86:20:8f:1d:a7:f7:6f:bc:ae: cc:5e:6e:cf:5e:47:d9:fe:18:77:a5:4a:3d:3c:f0: a4:c8:59:3c:60:1d:7e:64:6f:74:33:fb:2f:50:b9: 7d:02:4f:0e:b3:cb:3f:e5:2f:b9:f9:47:a1:38:57: 30:8e:f2:93:a2:22:72:23:28:c3:3e:87:75:3d:48: cb:7d:e5:2e:b8:9e:32:8a:48:61:86:31:64:de:c1: e7:dd:b9:aa:e0:83:e1:75:fb:8f:2d:8e:e8:3b:61: 4f:a0:5a:98:4c:a8:d5:35:60:de:58:3b:f3:0c:67: 91:65:d2:d0:ef:b4:c2:a6:0d:29:7d:1a:ed:cc:5d: 1f:01:3a:6d:9a:39:c7:56:7c:5b:e2:14:01:08:4b: 8a:68:df:03:9c:fb:57:a1:8b:8e:e5:19:e1:f6:e1: 2c:98:5f:7a:bc:21:1e:81:b6:9c:aa:b0:89:e0:3a: 3b:7d:c2:97:94:1b:e4:96:a7:cf:d1:31:b8:66:16: 9f:6c:83:6b:48:ec:9f:9c:43:ff:0f:06:08:22:f2: 74:3e:65:4e:09:98:3a:1d:90:cc:ba:fe:15:9e:08: fc:bc:e4:59:ff:0b:4d:66:8f:ed:72:f5:f3:43:14: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BD:30:60:08:D7:99:2C:CF:6E:89:45:6A:E5:75:8C:3E:C6:49:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl X509v3 Authority Key Identifier: keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer sbgp-ipAddrBlock: critical IPv4: 23.248.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:02:a5:33:7f:a4:a0:ff:42:64:78:d5:7b:de:1c:9f:6d:91: c2:48:40:21:71:c2:37:d5:fb:e3:00:69:40:f4:7d:43:41:1f: 35:e5:4a:d8:9e:08:ee:30:53:b3:de:22:8c:64:ba:e2:33:62: 94:7d:67:ec:1e:02:41:65:49:50:f5:c4:5f:d5:82:2c:94:95: ff:02:7b:01:af:c0:d6:9d:8d:03:df:9c:b3:44:a5:61:6c:e9: b0:4c:1b:f9:52:be:9c:4f:2b:83:e4:02:5f:82:91:ee:d9:b0: b0:04:ad:e3:2f:c9:37:07:c5:2a:1f:90:a3:f9:91:df:74:ee: 31:f0:ac:34:0a:ee:8c:20:6d:40:1a:df:a6:09:50:d3:74:74: fb:82:0d:0b:bc:fc:93:15:e3:cb:b3:f3:72:05:66:6f:77:f9: 6e:a4:e4:52:56:6a:ce:be:55:43:8a:4e:89:20:34:ed:f0:25: 17:f3:77:ea:8e:5a:ce:e9:b0:93:90:3e:a7:be:23:52:b2:e3: 16:f2:15:15:66:8a:40:23:ea:00:7c:67:11:c0:8f:f8:32:69: d4:3e:a0:39:9a:2d:62:db:ea:97:74:ea:4d:b9:49:34:c7:d7: 48:dd:56:23:1a:50:0f:84:92:dc:60:e5:82:e0:e6:86:76:82: 01:17:67:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWXwjdiXGEEzcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx NzZlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NjU4MGE3OTUtMzg4Mi00OTUxLWJjOWEtMGQxNGY4N2U5Y2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfEjDWbPQ1WrUc5sKZrTHxZkZcWGII8dp/dv vK7MXm7PXkfZ/hh3pUo9PPCkyFk8YB1+ZG90M/svULl9Ak8Os8s/5S+5+UehOFcw jvKToiJyIyjDPod1PUjLfeUuuJ4yikhhhjFk3sHn3bmq4IPhdfuPLY7oO2FPoFqY TKjVNWDeWDvzDGeRZdLQ77TCpg0pfRrtzF0fATptmjnHVnxb4hQBCEuKaN8DnPtX oYuO5Rnh9uEsmF96vCEegbacqrCJ4Do7fcKXlBvklqfP0TG4ZhafbINrSOyfnEP/ DwYIIvJ0PmVOCZg6HZDMuv4Vngj8vORZ/wtNZo/tcvXzQxSUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC9MGAI15ksz26JRWrldYw+xkkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvZjJkNjg5NmQtNjgxYi0z MmM1LTk1MDItNzRjOTAyMDJlMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1 ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUCpTN/pKD/QmR41XveHJ9tkcJIQCFxwjfV++MAaUD0fUNBHzXlStie CO4wU7PeIoxkuuIzYpR9Z+weAkFlSVD1xF/VgiyUlf8CewGvwNadjQPfnLNEpWFs 6bBMG/lSvpxPK4PkAl+Cke7ZsLAEreMvyTcHxSofkKP5kd907jHwrDQK7owgbUAa 36YJUNN0dPuCDQu8/JMV48uz83IFZm93+W6k5FJWas6+VUOKTokgNO3wJRfzd+qO Ws7psJOQPqe+I1Ky4xbyFRVmikAj6gB8ZxHAj/gyadQ+oDmaLWLb6pd06k25STTH 10jdViMaUA+Ektxg5YLg5oZ2ggEXZ9Y= -----END CERTIFICATE-----Generated at Mon Apr 7 15:43:26 2025 by rpki-client