$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6b4b2579-2d10-31b3-87a8-a94f7a423020.roa File: 6b4b2579-2d10-31b3-87a8-a94f7a423020.roa (raw, json) Hash identifier: A5CsCC/SGhJVp124e8aHc28Lb6h72ORsf+rxF3UsR/s= Subject key identifier: EC:1A:9B:10:74:FD:1A:EB:03:86:6D:5E:4F:33:34:ED:BF:1D:BA:7A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848B78B84A89050DF128EC58680 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6b4b2579-2d10-31b3-87a8-a94f7a423020.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 7131 IP address blocks: 64.193.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:84:a8:90:50:df:12:8e:c5:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=1eeedb77-f2ca-45f1-bd2a-0872b6197613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:44:df:61:59:c9:bf:45:f7:bb:33:0a:38: 62:93:5d:46:8b:a4:8b:da:65:dd:59:95:8e:ab:55: de:34:ca:be:7c:7d:40:a2:db:63:0a:3f:1f:f0:2d: dc:c8:2e:f6:cb:70:13:14:7d:5e:e4:15:62:c3:c4: 85:b1:5f:7e:37:87:77:b5:cd:12:48:af:e1:20:58: fe:9d:6c:af:af:39:89:08:2a:fa:0d:b8:5b:d9:82: 24:13:ce:ed:2a:38:ab:bd:d0:bb:60:5b:1b:68:74: b4:70:e0:a9:3e:eb:39:6d:7c:e8:cb:b7:1a:85:99: 32:f8:cb:5e:e8:ef:45:73:02:c8:40:d8:49:7c:15: e6:70:04:db:14:6a:a3:67:35:07:2a:63:e4:52:49: 6f:a4:bb:4a:77:f1:04:8d:40:f8:50:e7:ec:b0:19: 44:90:c3:67:45:0b:c2:23:7f:50:9a:3f:30:21:9e: b8:8d:81:93:cf:af:d8:09:c6:64:75:4d:da:d9:91: 61:41:05:21:42:67:76:63:af:49:b7:24:fb:a7:17: 11:43:39:a4:e1:ce:c0:5d:c9:85:e8:40:ff:79:e6: 76:ee:64:93:26:78:d0:9d:41:f7:9e:7a:b7:38:b5: 5c:87:2b:19:5b:bf:b2:da:86:c2:c7:ba:bf:71:e1: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1A:9B:10:74:FD:1A:EB:03:86:6D:5E:4F:33:34:ED:BF:1D:BA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6b4b2579-2d10-31b3-87a8-a94f7a423020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.193.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:99:e7:de:b7:9e:7d:e4:25:cc:b8:46:46:1e:9a:85:54:e4: f9:18:a1:80:cc:e0:ff:e2:98:6f:7d:53:b5:ca:76:c6:10:56: 89:37:ff:19:59:1c:b5:cc:43:7d:85:46:77:92:62:42:cd:9b: 87:15:f2:84:de:60:cc:2d:23:00:ae:cc:f7:b2:fe:98:1c:2d: 3d:2a:fb:e9:0b:c3:01:79:28:fe:37:97:87:4e:07:4d:7c:51: 48:4d:5f:3f:e6:46:e5:48:10:87:c4:24:29:f9:bb:8d:f2:9e: 56:c4:de:3a:fb:ef:44:d5:61:55:b5:7a:20:46:15:bd:93:da: d7:8e:27:26:6c:c1:74:44:b1:dc:c5:a3:a2:fa:0f:5e:2d:cc: 89:a6:bd:fd:37:32:0f:59:af:3d:8e:f6:91:3f:c1:63:e1:e8: 38:a9:be:ef:6f:16:37:66:c4:52:c6:3e:66:99:a0:6b:d8:26: 0f:b1:e7:1d:aa:90:2c:e6:94:87:4e:c5:84:e9:0f:1e:c1:b9: 65:c6:9e:a0:43:ca:b1:27:66:0d:0e:a4:09:b0:3c:17:41:4b: fc:e4:e8:25:5a:ae:aa:c1:4b:52:00:8a:24:35:46:8b:10:1c: de:12:f3:5d:8c:59:f3:2d:4d:0b:6c:d5:fe:79:70:a2:64:6b: 69:17:ab:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4SokFDfEo7FhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk MWVlZWRiNzctZjJjYS00NWYxLWJkMmEtMDg3MmI2MTk3NjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW9E32FZyb9F97szCjhik11Gi6SL2mXdWZWO q1XeNMq+fH1AottjCj8f8C3cyC72y3ATFH1e5BViw8SFsV9+N4d3tc0SSK/hIFj+ nWyvrzmJCCr6Dbhb2YIkE87tKjirvdC7YFsbaHS0cOCpPus5bXzoy7cahZky+Mte 6O9FcwLIQNhJfBXmcATbFGqjZzUHKmPkUklvpLtKd/EEjUD4UOfssBlEkMNnRQvC I39Qmj8wIZ64jYGTz6/YCcZkdU3a2ZFhQQUhQmd2Y69JtyT7pxcRQzmk4c7AXcmF 6ED/eeZ27mSTJnjQnUH3nnq3OLVchysZW7+y2obCx7q/ceGd1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwamxB0/RrrA4ZtXk8zNO2/Hbp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNmI0YjI1NzktMmQxMC0z MWIzLTg3YTgtYTk0ZjdhNDIzMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGZ5963nn3kJcy4RkYemoVU5PkYoYDM4P/imG99U7XKdsYQVok3/xlZ HLXMQ32FRneSYkLNm4cV8oTeYMwtIwCuzPey/pgcLT0q++kLwwF5KP43l4dOB018 UUhNXz/mRuVIEIfEJCn5u43ynlbE3jr770TVYVW1eiBGFb2T2teOJyZswXREsdzF o6L6D14tzImmvf03Mg9Zrz2O9pE/wWPh6Dipvu9vFjdmxFLGPmaZoGvYJg+x5x2q kCzmlIdOxYTpDx7BuWXGnqBDyrEnZg0OpAmwPBdBS/zk6CVarqrBS1IAiiQ1RosQ HN4S812MWfMtTQts1f55cKJka2kXq8s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:01 2025 by rpki-client