$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: BKnG7qoj6HxponOMnpcLkR9fMy43AIrL1w3XYA/1deI= Subject key identifier: 44:8E:16:3E:60:81:6A:6E:C6:3C:63:82:6D:D7:8B:7E:4B:A5:11:AD Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F43285848A9961E873D73DF2FBF7C2F80 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1e:87:3d:73:df:2f:bf:7c:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=adcb76e9-e7d0-4abe-8b94-9c425105852a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:81:e2:8b:7b:ee:b5:ff:6e:9b:9f:18:a7: 6b:84:7c:f1:94:00:19:88:e2:8e:b4:78:ba:bd:6a: 24:3e:86:5c:a9:52:1b:0a:94:c7:52:f5:f8:4f:f3: 80:77:f1:c5:04:13:66:12:36:fc:bf:a5:82:b6:ac: 34:7e:1c:d3:6b:68:76:4d:51:e8:b6:b4:e3:41:12: 20:c6:38:db:44:f5:85:0a:4a:cc:5b:1b:f8:65:40: 17:95:d7:16:c3:1e:8d:45:ad:dc:c6:6f:47:c2:e7: 68:15:43:6b:e4:fc:d1:cb:84:2f:f0:2f:72:03:b6: ad:de:e3:fe:91:c3:73:e7:47:bc:7d:17:ef:a1:ba: 08:5e:42:46:d8:f4:8a:d7:84:e7:ea:b3:f1:3a:4c: 5c:9f:4d:70:6b:ce:e5:4d:46:85:28:25:ae:d2:44: d7:5c:69:5a:39:f8:ee:43:e5:05:85:99:8f:89:bd: 89:4e:ed:2d:c4:a5:fc:e4:cb:1f:b9:2e:9d:9e:eb: 40:dc:03:75:72:1f:1a:95:8d:3a:b0:01:2d:37:22: af:62:4c:9f:2d:20:82:1d:df:d5:6c:d8:08:90:8e: 45:80:61:fc:ca:b9:49:d4:a2:1f:42:d7:69:12:90: 9c:d2:32:13:00:2b:e5:1c:62:53:73:3f:d0:29:1f: 45:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8E:16:3E:60:81:6A:6E:C6:3C:63:82:6D:D7:8B:7E:4B:A5:11:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:35:57:da:ca:b4:bd:d9:6e:b3:84:36:5f:e7:c1:87:01:db: 5e:1c:d5:b6:d8:65:84:ef:8a:aa:9f:ac:da:99:54:26:72:36: 44:c7:8d:79:2e:f5:f1:14:8c:8e:09:27:a4:a8:87:0c:d9:26: 04:a6:8b:9c:b3:cb:dd:3d:6c:e1:54:e7:ca:31:4c:f2:61:31: bb:89:cb:20:8a:b6:bb:44:a4:07:a4:c1:0b:75:df:40:62:21: 0f:5b:ba:dd:b6:0c:ac:2f:92:22:23:fe:4c:d5:61:82:69:b1: b8:65:c7:61:1e:76:cf:de:a6:79:e4:fe:d3:40:90:1c:d2:d0: da:06:2b:f0:60:23:17:ed:4c:2f:64:73:1e:a1:20:5a:ac:b8: 28:7f:7d:21:69:b9:c0:f3:9e:6a:a9:ea:57:d2:b6:da:39:0c: c0:ca:09:b7:43:bf:ca:1f:d3:8f:7e:e1:9a:ea:0a:ea:c1:a3: a8:72:b0:f7:62:08:13:17:3f:84:75:47:c4:e3:20:9c:81:c5: e2:91:4d:df:ac:ce:e0:17:69:3d:67:bb:2e:67:44:2a:65:85: 53:d2:00:1c:5c:80:34:89:41:bd:43:83:8d:a3:15:42:db:54: c5:ee:4f:fa:9d:1e:14:39:10:2f:62:de:80:db:18:b4:f8:48: 13:96:6b:4b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiplh6HPXPfL798L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWRjYjc2ZTktZTdkMC00YWJlLThiOTQtOWM0MjUxMDU4NTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFyB4ot77rX/bpufGKdrhHzxlAAZiOKOtHi6 vWokPoZcqVIbCpTHUvX4T/OAd/HFBBNmEjb8v6WCtqw0fhzTa2h2TVHotrTjQRIg xjjbRPWFCkrMWxv4ZUAXldcWwx6NRa3cxm9HwudoFUNr5PzRy4Qv8C9yA7at3uP+ kcNz50e8fRfvoboIXkJG2PSK14Tn6rPxOkxcn01wa87lTUaFKCWu0kTXXGlaOfju Q+UFhZmPib2JTu0txKX85MsfuS6dnutA3AN1ch8alY06sAEtNyKvYkyfLSCCHd/V bNgIkI5FgGH8yrlJ1KIfQtdpEpCc0jITACvlHGJTcz/QKR9FZwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFESOFj5ggWpuxjxjgm3Xi35LpRGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiNVfayrS92W6zhDZf58GHAdteHNW22GWE 74qqn6zamVQmcjZEx415LvXxFIyOCSekqIcM2SYEpoucs8vdPWzhVOfKMUzyYTG7 icsgira7RKQHpMELdd9AYiEPW7rdtgysL5IiI/5M1WGCabG4ZcdhHnbP3qZ55P7T QJAc0tDaBivwYCMX7UwvZHMeoSBarLgof30habnA855qqepX0rbaOQzAygm3Q7/K H9OPfuGa6grqwaOocrD3YggTFz+EdUfE4yCcgcXikU3frM7gF2k9Z7suZ0QqZYVT 0gAcXIA0iUG9Q4ONoxVC21TF7k/6nR4UORAvYt6A2xi0+EgTlmtL -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:48 2025 by rpki-client