$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa File: aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa (raw, json) Hash identifier: MFfNy0dpKvtPyG4u36R+znRtl5hXVvDBIBxt3ma3dFY= Subject key identifier: B5:F5:A9:FB:14:3B:C0:62:7C:5A:42:90:6E:DF:1C:26:26:54:7A:60 Certificate issuer: /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Certificate serial: 010D0C9F43285848D2114144FAD0EC2D4B829A10 Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 18615 IP address blocks: 23.252.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:41:44:fa:d0:ec:2d:4b:82:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=615c4e7d-b17e-4db1-bbb3-46d98f3c2251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:99:47:16:03:1a:9d:4c:e9:52:83:da:c6: f0:50:bc:5c:40:b8:9a:a1:3c:44:0c:cd:bd:95:12: f1:6c:5d:57:35:52:53:8f:97:76:3a:d1:20:b1:b3: 9d:33:83:3e:a1:19:ec:49:9b:c6:a2:95:f4:2f:d9: fc:fc:95:20:df:60:c8:c3:c8:b0:ef:48:56:c1:e6: 31:6a:2e:8c:59:44:7b:75:11:62:9c:d6:3c:5e:78: 56:6a:2d:8b:5b:0b:93:5b:60:b8:c7:a7:f3:18:09: 2a:8a:0d:1d:b3:e9:ee:55:3a:32:77:eb:ca:2d:74: d8:8c:65:ea:3a:03:ee:f6:30:c0:54:ea:aa:79:f1: e2:e0:f3:91:db:ef:5e:c8:7c:30:c5:73:a3:af:dd: ac:23:8d:c7:18:c3:e7:85:54:63:f2:a1:f4:93:9c: 91:b3:8e:62:73:8a:bb:5b:c7:0a:51:2c:73:e4:18: c8:11:33:be:e6:b1:35:9b:ec:46:0e:12:e6:a8:eb: 60:d6:21:e2:71:40:85:12:55:5e:69:3d:47:79:48: 4b:dd:97:af:cb:f0:19:f2:f4:85:60:26:7a:70:cf: 32:52:68:67:f1:7a:64:b0:05:3e:fb:ce:63:fb:92: e9:0d:f5:33:33:00:bc:40:ca:0c:13:ff:0d:16:f9: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:A9:FB:14:3B:C0:62:7C:5A:42:90:6E:DF:1C:26:26:54:7A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl X509v3 Authority Key Identifier: keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer sbgp-ipAddrBlock: critical IPv4: 23.252.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e2:77:51:35:6f:62:75:09:8e:16:2d:08:4b:fe:ad:10:cf: a6:98:d3:ca:50:33:3a:1c:00:2c:18:c1:4e:f3:e0:4a:a0:2f: 9b:47:c2:ee:92:e3:64:1e:d3:ea:25:b5:71:8c:a8:6d:cf:6b: 5f:4c:71:0e:d8:8d:4e:a4:fc:60:4e:f7:bb:2f:ea:f7:d9:f5: 26:08:f9:2f:af:84:af:f1:89:97:3a:a9:1e:2c:ec:ab:c5:81: 93:22:4f:70:1c:e0:25:8b:02:72:de:b0:30:a3:69:2c:d4:e6: 18:b4:43:6a:53:f9:ad:b8:a5:1a:71:0c:ae:60:90:c6:f0:e8: 8b:d2:da:e8:ea:2b:db:9e:95:94:93:e3:c7:d5:b3:dc:ce:57: 11:7e:1d:1a:b8:1e:6e:5c:ef:34:d5:08:c4:ec:b9:df:06:ee: 69:fe:42:ab:a0:54:ab:c6:33:f5:79:98:48:21:24:21:4f:6c: fc:7d:0c:29:b1:cc:de:88:7f:ee:d8:d3:4d:f8:ed:24:46:5f: 61:08:c5:6d:e0:58:51:c8:44:10:ab:5c:7c:95:ff:46:73:e4: 97:75:05:2a:34:31:39:9f:86:6a:af:98:1d:46:fd:c0:a8:13: 4a:21:a4:20:fb:9c:45:39:c3:bf:f6:cf:1e:9d:42:4c:9b:5d: 4c:a0:e9:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUFE+tDsLUuCmhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZiYzJkYTctNWIzYi00ZmY2LThiYzItNTljNDJjOTAx MDg2MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjE1YzRlN2QtYjE3ZS00ZGIxLWJiYjMtNDZkOThmM2MyMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwCZRxYDGp1M6VKD2sbwULxcQLiaoTxEDM29 lRLxbF1XNVJTj5d2OtEgsbOdM4M+oRnsSZvGopX0L9n8/JUg32DIw8iw70hWweYx ai6MWUR7dRFinNY8XnhWai2LWwuTW2C4x6fzGAkqig0ds+nuVToyd+vKLXTYjGXq OgPu9jDAVOqqefHi4POR2+9eyHwwxXOjr92sI43HGMPnhVRj8qH0k5yRs45ic4q7 W8cKUSxz5BjIETO+5rE1m+xGDhLmqOtg1iHicUCFElVeaT1HeUhL3Zevy/AZ8vSF YCZ6cM8yUmhn8XpksAU++85j+5LpDfUzMwC8QMoME/8NFvkolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX1qfsUO8BifFpCkG7fHCYmVHpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJj MmRhNy01YjNiLTRmZjYtOGJjMi01OWM0MmM5MDEwODYvYWFhZGQzODktYTU3NC0z OWYwLThlNzktNmY2ZGRjOGY4NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzZiYzJkYTctNWIzYi00ZmY2LThi YzItNTljNDJjOTAxMDg2L2M2YmMyZGE3LTViM2ItNGZmNi04YmMyLTU5YzQyYzkw MTA4Ni5jcmwwHwYDVR0jBBgwFoAUnWYfnyPnx7Ih8ugzbHvOq2WXMfIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJjMmRhNy01YjNiLTRmZjYtOGJjMi01OWM0 MmM5MDEwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPid1E1b2J1CY4WLQhL/q0Qz6aY08pQMzocACwYwU7z4EqgL5tHwu6S 42Qe0+oltXGMqG3Pa19McQ7YjU6k/GBO97sv6vfZ9SYI+S+vhK/xiZc6qR4s7KvF gZMiT3Ac4CWLAnLesDCjaSzU5hi0Q2pT+a24pRpxDK5gkMbw6IvS2ujqK9uelZST 48fVs9zOVxF+HRq4Hm5c7zTVCMTsud8G7mn+QqugVKvGM/V5mEghJCFPbPx9DCmx zN6If+7Y00347SRGX2EIxW3gWFHIRBCrXHyV/0Zz5Jd1BSo0MTmfhmqvmB1G/cCo E0ohpCD7nEU5w7/2zx6dQkybXUyg6c4= -----END CERTIFICATE-----Generated at Sun Apr 6 08:33:21 2025 by rpki-client