$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/325c49cf-ad04-3c83-b116-23285190c11e.roa File: 325c49cf-ad04-3c83-b116-23285190c11e.roa (raw, json) Hash identifier: ax5pLHG7hofWo8++HffpWHzxVawth7BOEuN7AHo+XuA= Subject key identifier: BE:6A:DF:91:61:68:AD:50:C3:5F:1B:91:91:D1:67:DB:8C:6C:0D:16 Certificate issuer: /CN=6213b5ae-ce34-4898-bd87-dec0995e7d16 Certificate serial: 010D0C9F43285848E16BE367FC24E56EC17C5540 Authority key identifier: 21:80:EF:97:B8:26:8F:9D:BC:71:5F:64:E2:C0:18:03:EA:37:89:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/325c49cf-ad04-3c83-b116-23285190c11e.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 4556 IP address blocks: 23.159.0.0/24 maxlen: 24 2606:db80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/6213b5ae-ce34-4898-bd87-dec0995e7d16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/6213b5ae-ce34-4898-bd87-dec0995e7d16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e3:67:fc:24:e5:6e:c1:7c:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6213b5ae-ce34-4898-bd87-dec0995e7d16 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=4441a54b-cd83-4675-95d4-a5bac636dd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:f0:65:cd:84:4f:bf:11:be:f8:63:63:20: 35:4d:bb:b2:86:89:d0:9b:fb:c2:8c:d0:c3:b4:06: f7:78:51:a1:46:67:e2:cc:ec:b9:34:b8:de:37:2e: 38:45:e5:74:d1:a7:68:30:71:4b:e3:b1:ef:ae:44: d7:32:d7:f8:c8:92:57:d7:ba:c4:f9:b0:ce:9d:6c: e9:a3:7e:8e:98:91:88:db:d6:58:f1:c4:60:f4:f3: b1:8b:e0:4c:74:b4:bf:c0:46:68:63:20:c0:f8:40: 52:80:7a:8f:54:77:ba:e3:9c:64:7a:ea:ed:3e:30: e7:8b:f5:55:73:e7:1a:79:27:51:28:03:0b:f1:d8: 3a:0f:ce:37:1b:52:01:bb:65:26:1c:12:0d:9c:82: a3:b2:38:fb:25:99:42:db:21:1c:8b:08:34:7c:ee: be:e6:4d:43:e8:93:5c:f7:2e:34:4c:8a:c1:e9:b8: ea:47:d1:ac:37:fb:1e:c0:40:4a:30:40:0d:ef:71: c3:7f:a0:a8:c3:5e:b7:06:1a:e4:21:e9:3b:3b:bf: 97:f1:23:07:e6:6e:ee:c3:a1:3f:3c:41:b7:c5:a1: 70:5b:01:c6:2e:1e:98:b1:d6:2b:28:27:ae:d9:57: 19:29:ec:91:e3:e2:1b:49:0c:65:17:b1:94:7b:96: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6A:DF:91:61:68:AD:50:C3:5F:1B:91:91:D1:67:DB:8C:6C:0D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/325c49cf-ad04-3c83-b116-23285190c11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/6213b5ae-ce34-4898-bd87-dec0995e7d16.crl X509v3 Authority Key Identifier: keyid:21:80:EF:97:B8:26:8F:9D:BC:71:5F:64:E2:C0:18:03:EA:37:89:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16.cer sbgp-ipAddrBlock: critical IPv4: 23.159.0.0/24 IPv6: 2606:db80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ef:8f:a6:22:ed:52:0a:2f:cc:0e:56:1d:e4:c4:48:6f:a4: a8:07:4c:4c:e7:47:01:0a:71:02:52:96:b6:c5:41:a0:46:b9: 07:14:dc:b7:17:35:c6:cc:61:f0:44:cc:bd:77:07:7e:ec:e1: 75:fd:0d:80:cb:06:b5:96:6a:c0:6e:3a:97:87:bc:cd:f1:31: d3:4c:df:4d:d0:a9:9e:4a:20:72:97:86:46:57:7c:ca:29:e8: 75:74:13:e0:68:0e:e7:ae:4f:b3:05:1a:72:2d:9e:3f:1d:1c: 4b:d5:c9:5a:87:10:b1:36:dc:67:57:26:86:68:7e:01:34:1b: 21:20:a2:c8:ee:bd:97:97:d6:07:f9:59:69:73:a0:de:3a:7f: d1:09:ab:37:01:b6:c8:0a:f5:f7:34:7b:35:fb:fb:37:16:05: fd:3b:9c:7a:e7:4e:e2:bf:a7:36:45:fe:56:4d:cb:72:bb:e3: 8c:09:d2:ec:c0:68:f4:cd:2c:47:cf:cb:18:1a:9c:47:26:21: 5d:f5:25:e0:51:b9:0c:b1:16:ac:06:8b:1b:67:70:c2:39:a8: e4:54:2b:94:14:cd:d1:85:17:e2:1f:76:f7:5d:8d:a9:98:df: d0:d9:c4:69:f8:3c:63:7d:c1:59:0c:e2:10:67:35:08:25:8a: ff:7c:c9:60 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEjha+Nn/CTlbsF8VUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIxM2I1YWUtY2UzNC00ODk4LWJkODctZGVjMDk5NWU3 ZDE2MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NDQ0MWE1NGItY2Q4My00Njc1LTk1ZDQtYTViYWM2MzZkZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfbwZc2ET78RvvhjYyA1TbuyhonQm/vCjNDD tAb3eFGhRmfizOy5NLjeNy44ReV00adoMHFL47HvrkTXMtf4yJJX17rE+bDOnWzp o36OmJGI29ZY8cRg9POxi+BMdLS/wEZoYyDA+EBSgHqPVHe645xkeurtPjDni/VV c+caeSdRKAML8dg6D843G1IBu2UmHBINnIKjsjj7JZlC2yEciwg0fO6+5k1D6JNc 9y40TIrB6bjqR9GsN/sewEBKMEAN73HDf6Cow163BhrkIek7O7+X8SMH5m7uw6E/ PEG3xaFwWwHGLh6YsdYrKCeu2VcZKeyR4+IbSQxlF7GUe5ZeMwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFL5q35FhaK1Qw18bkZHRZ9uMbA0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MjEz YjVhZS1jZTM0LTQ4OTgtYmQ4Ny1kZWMwOTk1ZTdkMTYvMzI1YzQ5Y2YtYWQwNC0z YzgzLWIxMTYtMjMyODUxOTBjMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjIxM2I1YWUtY2UzNC00ODk4LWJk ODctZGVjMDk5NWU3ZDE2LzYyMTNiNWFlLWNlMzQtNDg5OC1iZDg3LWRlYzA5OTVl N2QxNi5jcmwwHwYDVR0jBBgwFoAUIYDvl7gmj528cV9k4sAYA+o3iVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MjEzYjVhZS1jZTM0LTQ4OTgtYmQ4Ny1kZWMw OTk1ZTdkMTYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF58AMA0E AgACMAcDBQAmBtuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAF3vj6Yi7VIKL8wOVh3kxEhvpKgHTEznRwEK cQJSlrbFQaBGuQcU3LcXNcbMYfBEzL13B37s4XX9DYDLBrWWasBuOpeHvM3xMdNM 303QqZ5KIHKXhkZXfMop6HV0E+BoDueuT7MFGnItnj8dHEvVyVqHELE23GdXJoZo fgE0GyEgosjuvZeX1gf5WWlzoN46f9EJqzcBtsgK9fc0ezX7+zcWBf07nHrnTuK/ pzZF/lZNy3K744wJ0uzAaPTNLEfPyxganEcmIV31JeBRuQyxFqwGixtncMI5qORU K5QUzdGFF+IfdvddjamY39DZxGn4PGN9wVkM4hBnNQgliv98yWA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:36 2025 by rpki-client