$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa File: 854709f1-c55c-3f5f-9469-3bea6718e5b4.roa (raw, json) Hash identifier: YrbOa2X2M1VdLxbzxqf9hi9d6FKa0HArgkjz9icQ6Hw= Subject key identifier: 3B:86:C0:AE:C9:2F:7C:5E:16:EC:12:40:D6:27:77:73:04:33:D9:0A Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584900216EAFBC3A19561AE27580 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 26930 IP address blocks: 23.133.6.0/24 maxlen: 24 202.5.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6e:af:bc:3a:19:56:1a:e2:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=2c854d11-b121-4e0c-b4ef-511e02a35f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:45:92:e5:5d:f8:08:fe:d3:89:e5:11:b6:f6: dd:ed:b8:6b:c8:33:88:ca:70:18:d3:d3:1e:c4:08: 5a:1f:f5:e2:30:12:7e:62:08:80:84:73:95:4e:ef: a6:a1:25:9e:42:34:68:a2:1b:f6:e7:c9:d2:09:fd: 62:f6:e7:66:89:99:b9:77:4d:2d:fb:04:1e:74:08: 54:2a:e0:3f:9f:29:3a:93:99:59:95:ff:57:2c:d3: 1e:f9:61:0f:74:53:1d:ae:81:39:3e:39:1e:73:23: 25:3a:f7:d8:a3:fb:ca:f9:66:3e:96:02:3a:f1:7d: f3:e9:0d:f5:8b:be:56:d6:dc:67:f2:ee:41:25:c4: 75:ca:ff:ad:61:e9:f8:0a:39:d6:01:b2:7e:f9:56: f3:63:10:1c:87:41:56:eb:8b:bd:b1:3f:16:d4:40: 41:70:c1:98:9b:2d:8a:cd:74:be:d2:69:2e:d6:06: 19:8b:45:fb:cf:a7:18:df:0c:50:a3:4c:f2:5d:9c: 01:55:a3:8e:63:d9:a8:4e:da:5a:f1:99:57:83:a1: 11:9b:91:37:2f:0d:43:3d:d0:4b:72:58:81:73:f2: f9:92:92:41:b6:6d:93:48:3a:e7:7b:b8:b4:2a:1a: f2:32:a9:06:0b:e5:c7:3b:3c:79:b8:72:9e:bb:e4: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:86:C0:AE:C9:2F:7C:5E:16:EC:12:40:D6:27:77:73:04:33:D9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.6.0/24 202.5.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8d:6e:52:2b:3c:f7:c4:81:7a:bb:ef:b9:f9:c1:a6:7a:48: ac:05:de:e7:96:22:1b:f5:ff:2f:36:c2:09:1c:51:55:99:d4: 5b:cb:a9:0d:77:aa:2e:35:79:0a:13:50:2c:76:ba:99:1b:5d: e6:df:8b:e1:cf:8c:83:16:13:6e:ae:7e:40:88:db:21:75:57: d6:fb:7e:49:95:a6:67:6f:60:53:a4:6a:bc:5f:57:de:05:51: 90:4e:0e:de:46:d2:d1:1a:5a:8d:38:5c:2a:00:9c:2f:70:fa: 18:da:40:19:91:a1:fe:1a:80:b7:9c:cb:26:92:8a:a3:b1:9f: b6:00:49:6c:e1:d0:2d:c9:a3:a2:6d:b5:cb:45:d1:ca:95:d0: a3:d1:bf:c1:c9:ae:02:35:bb:30:0f:35:c5:89:a9:75:aa:84: 05:9a:29:d0:54:17:00:cb:cb:29:00:a8:95:db:46:35:24:ba: c2:41:53:05:13:48:12:bf:e8:11:da:c4:f2:f3:38:1d:6e:80: 73:33:8b:1b:1a:b0:bf:15:8a:24:93:1b:bd:ef:90:4a:78:95: 9e:77:67:58:6e:5d:ef:c5:b4:a0:a0:da:5c:d1:b2:bf:65:67: ee:50:b6:e0:fc:e5:46:a4:3f:7f:60:53:a1:d1:13:32:27:83: 05:78:47:19 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkAIW6vvDoZVhridYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MmM4NTRkMTEtYjEyMS00ZTBjLWI0ZWYtNTExZTAyYTM1ZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkWS5V34CP7TieURtvbd7bhryDOIynAY09Me xAhaH/XiMBJ+YgiAhHOVTu+moSWeQjRoohv258nSCf1i9udmiZm5d00t+wQedAhU KuA/nyk6k5lZlf9XLNMe+WEPdFMdroE5PjkecyMlOvfYo/vK+WY+lgI68X3z6Q31 i75W1txn8u5BJcR1yv+tYen4CjnWAbJ++VbzYxAch0FW64u9sT8W1EBBcMGYmy2K zXS+0mku1gYZi0X7z6cY3wxQo0zyXZwBVaOOY9moTtpa8ZlXg6ERm5E3Lw1DPdBL cliBc/L5kpJBtm2TSDrne7i0KhryMqkGC+XHOzx5uHKeu+QnewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDuGwK7JL3xeFuwSQNYnd3MEM9kKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODU0NzA5ZjEtYzU1Yy0z ZjVmLTk0NjktM2JlYTY3MThlNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4UGAwQA ygUaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGqNblIrPPfEgXq777n5waZ6SKwF3ueWIhv1/y82wgkcUVWZ 1FvLqQ13qi41eQoTUCx2upkbXebfi+HPjIMWE26ufkCI2yF1V9b7fkmVpmdvYFOk arxfV94FUZBODt5G0tEaWo04XCoAnC9w+hjaQBmRof4agLecyyaSiqOxn7YASWzh 0C3Jo6JttctF0cqV0KPRv8HJrgI1uzAPNcWJqXWqhAWaKdBUFwDLyykAqJXbRjUk usJBUwUTSBK/6BHaxPLzOB1ugHMzixsasL8ViiSTG73vkEp4lZ53Z1huXe/FtKCg 2lzRsr9lZ+5QtuD85UakP39gU6HREzIngwV4Rxk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:04:01 2025 by rpki-client