$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa File: 2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json) Hash identifier: h1vA1M9TNQO4YEE4zuZFw1Gc3h4zP0+tMINg1i49U1o= Subject key identifier: 17:2A:CF:46:C6:34:B4:85:55:6A:4C:7B:3A:10:2F:3E:F2:F8:FB:5D Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Certificate serial: 010D0C9F432858498769B9F8391C620670BFC0C0 Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 401468 IP address blocks: 23.128.124.0/24 maxlen: 24 2602:f9a0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b9:f8:39:1c:62:06:70:bf:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=47914535-4bbd-47eb-a24a-e0b3ef2c7a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:d3:75:95:63:dd:d1:f9:55:c2:8f:43:de: e6:dc:7d:ab:83:e6:8b:3c:59:7c:64:3a:68:14:54: 6e:66:a9:84:bc:0d:2a:ee:c7:bf:34:f8:37:7b:12: ec:a1:d3:51:f2:91:c8:80:1a:1f:4a:56:89:00:89: d2:40:2e:db:f6:dc:c3:6e:40:c2:90:c8:85:3e:10: 8c:3e:87:4d:4c:42:2f:20:9f:56:b0:d0:28:97:a6: 52:78:2c:34:5e:e2:29:f7:4f:c4:8a:ef:8d:0b:0d: 63:dd:49:85:8c:31:49:75:96:eb:a4:42:4a:e1:04: 32:99:92:8a:c3:63:b3:7d:15:28:d8:70:66:c9:25: 5d:1b:1e:16:78:64:52:9a:52:73:2d:b5:6b:fc:6a: 30:c0:90:9c:a0:79:2e:b7:4c:b4:94:8e:bb:d4:60: 5f:f8:a5:fc:ac:6e:75:84:a5:63:ec:51:e3:b8:19: bb:85:07:05:e2:ec:1e:fd:93:62:ea:33:d4:b7:76: 0f:82:f8:bf:8c:33:e8:29:e3:ec:7a:46:0a:54:74: e7:5e:cc:c1:4f:c1:90:b4:01:29:c4:b4:81:1c:8c: 80:91:e3:68:58:29:9d:6e:32:a7:81:2c:d7:59:70: ce:17:7a:fb:67:b1:3f:f8:28:93:7c:d7:ff:88:e0: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2A:CF:46:C6:34:B4:85:55:6A:4C:7B:3A:10:2F:3E:F2:F8:FB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl X509v3 Authority Key Identifier: keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer sbgp-ipAddrBlock: critical IPv4: 23.128.124.0/24 IPv6: 2602:f9a0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:57:37:09:64:e9:c0:3b:1c:1e:46:0b:95:d3:2b:39:1f:a6: 96:7e:0d:e0:2f:23:ac:7a:60:a0:19:73:93:89:f0:84:f5:86: 07:6a:32:f3:8d:0f:ff:de:3f:49:7e:ed:2c:24:34:b9:c7:45: e2:bf:2c:16:15:e6:28:eb:22:f8:4e:b6:88:26:1c:b7:e8:8f: e3:f0:ee:30:a7:1e:6b:6d:57:ed:50:43:ca:d8:ee:3d:68:29: ae:30:ba:6a:27:75:1d:fc:d2:84:b4:f7:f9:1c:24:63:41:51: ed:b5:c8:be:4a:51:b7:8c:0d:5a:97:ce:8a:ad:59:03:6b:74: 86:91:a1:8e:68:11:d9:d2:1e:6b:dc:e1:19:bc:42:e5:ca:d8: 09:e0:91:49:b9:43:0d:91:da:14:df:17:a3:1d:e5:3a:92:e6: 22:c2:f9:9e:db:2c:68:ac:d0:59:d1:fe:65:57:8d:b4:41:e9: f8:75:fb:06:fd:10:7b:42:da:22:17:e2:53:01:e4:c7:46:72: d0:12:ac:66:da:a0:c1:e2:01:30:11:46:3a:f8:f9:49:aa:6c: 20:b7:d5:25:4c:df:5e:06:12:15:74:f3:76:a0:cb:a1:ff:2d: 04:b0:d4:25:c4:95:7e:f6:47:e8:86:7a:f9:ac:b3:8b:f9:e1: ba:d6:3c:fe -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmHabn4ORxiBnC/wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi Njk3MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NDc5MTQ1MzUtNGJiZC00N2ViLWEyNGEtZTBiM2VmMmM3YTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrbTdZVj3dH5VcKPQ97m3H2rg+aLPFl8ZDpo FFRuZqmEvA0q7se/NPg3exLsodNR8pHIgBofSlaJAInSQC7b9tzDbkDCkMiFPhCM PodNTEIvIJ9WsNAol6ZSeCw0XuIp90/Eiu+NCw1j3UmFjDFJdZbrpEJK4QQymZKK w2OzfRUo2HBmySVdGx4WeGRSmlJzLbVr/GowwJCcoHkut0y0lI671GBf+KX8rG51 hKVj7FHjuBm7hQcF4uwe/ZNi6jPUt3YPgvi/jDPoKePsekYKVHTnXszBT8GQtAEp xLSBHIyAkeNoWCmdbjKngSzXWXDOF3r7Z7E/+CiTfNf/iOApkQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBcqz0bGNLSFVWpMezoQLz7y+PtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMmY0ZWU4N2UtMGU4Mi0z MWU5LTgzNjQtYzg4OTMwZTdkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh MGY5ZGI2OTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4B8MA4E AgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaVzcJZOnAOxweRguV0ys5H6aWfg3gLyOs emCgGXOTifCE9YYHajLzjQ//3j9Jfu0sJDS5x0XivywWFeYo6yL4TraIJhy36I/j 8O4wpx5rbVftUEPK2O49aCmuMLpqJ3Ud/NKEtPf5HCRjQVHttci+SlG3jA1al86K rVkDa3SGkaGOaBHZ0h5r3OEZvELlytgJ4JFJuUMNkdoU3xejHeU6kuYiwvme2yxo rNBZ0f5lV420Qen4dfsG/RB7QtoiF+JTAeTHRnLQEqxm2qDB4gEwEUY6+PlJqmwg t9UlTN9eBhIVdPN2oMuh/y0EsNQlxJV+9kfohnr5rLOL+eG61jz+ -----END CERTIFICATE-----Generated at Wed Apr 16 16:47:06 2025 by rpki-client