$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1402812-1774-363f-8c30-b92aa1ae0717.roa File: e1402812-1774-363f-8c30-b92aa1ae0717.roa (raw, json) Hash identifier: 2Q7aTvURFRELkt/De2DdgGzxqKkvp84kjq80cIUN1d4= Subject key identifier: 43:2C:21:9F:A4:BC:12:F8:CD:7E:00:D8:68:02:63:54:6D:31:F0:4A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848CBAFE52510C37F86515C32A0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1402812-1774-363f-8c30-b92aa1ae0717.roa Signing time: Thu 06 Feb 2025 19:10:23 +0000 ROA not before: Thu 06 Feb 2025 19:10:23 +0000 ROA not after: Wed 07 May 2025 18:10:23 +0000 asID: 401152 IP address blocks: 23.26.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:af:e5:25:10:c3:7f:86:51:5c:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 6 19:10:23 2025 GMT Not After : May 7 18:10:23 2025 GMT Subject: CN=bf5f5b6b-9afe-4689-9d9f-a5f4f5e66782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:df:bd:cc:5a:40:bd:eb:9e:5d:06:c6:0e:7f: 55:08:bc:a4:ae:6e:f9:45:56:28:59:5f:d7:c4:d9: bf:b0:e3:ec:ed:4e:c3:18:1c:ef:dd:a8:79:39:c0: a6:f5:e4:a3:76:fc:b2:73:48:c0:83:32:ff:bc:c0: 48:32:4c:28:01:ed:2c:91:7f:65:ce:cd:d9:4a:0b: ae:b9:33:29:68:70:1a:6d:b0:64:72:79:f1:d3:f4: b1:cc:b4:a0:da:bb:64:d9:29:76:fe:78:a6:90:85: 81:bf:79:0a:ca:85:98:1c:c9:d2:bd:5c:70:2c:ff: b8:cf:c6:46:62:46:fe:52:db:2b:f6:dd:78:73:f2: e3:cd:e9:c4:05:82:54:c1:8f:86:b9:28:92:d9:2e: b9:2e:c3:24:d2:4e:0d:b7:4e:21:a3:31:50:71:5a: 4d:16:4e:25:4d:df:89:5f:59:56:8e:bd:fa:d6:55: 02:ad:86:49:94:28:36:a4:20:b2:bd:38:09:66:d2: 81:a5:de:d1:d7:3b:f1:df:ee:44:d0:01:3d:73:50: 9e:6c:22:46:46:9b:2c:32:1d:7f:a9:45:9c:b3:c3: fc:87:a6:58:4f:d2:ea:ab:6f:cd:5d:0b:eb:45:72: 16:31:ec:44:76:65:c4:bf:9b:e8:e2:33:d9:be:e3: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2C:21:9F:A4:BC:12:F8:CD:7E:00:D8:68:02:63:54:6D:31:F0:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1402812-1774-363f-8c30-b92aa1ae0717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:df:99:49:58:ea:8c:4b:f5:65:48:75:33:9c:16:c1:cc:a8: e0:da:cd:99:49:fb:7f:a2:40:8e:08:84:5e:29:a0:8d:b4:1c: 9a:1f:cf:7f:7e:a8:64:f3:24:03:03:ac:82:ad:3f:ff:da:b5: 0f:de:cb:02:d6:0e:bf:e4:52:f7:53:65:b2:ad:55:8e:35:20: 64:f0:4f:97:9e:bc:00:e6:ad:3d:50:f5:a7:69:93:a8:03:33: d5:69:d0:f9:69:71:57:16:ad:c4:26:08:53:c4:41:a6:f3:1a: 7c:59:d3:b1:5f:f7:76:3e:e7:bf:8b:4c:eb:3b:92:91:13:d4: 2e:13:31:ca:fe:94:34:cf:20:5f:d0:ac:ad:36:eb:69:10:fc: e6:a1:93:46:84:1b:88:1a:47:63:84:03:f3:4a:03:64:ff:46: d8:ff:ac:8f:5d:de:1b:50:0a:62:92:0c:d0:1a:9d:d3:a2:36: e2:da:b6:c2:47:e5:4a:6d:a9:11:d3:6c:de:ff:f3:54:20:b6: a2:a0:60:84:5e:4c:fd:fe:8b:fa:37:03:5e:70:e8:3b:e5:61: 25:04:b6:90:44:b0:e2:51:f2:e8:07:c1:ad:c9:b7:d4:5c:4d: eb:ea:69:ec:cb:aa:bb:02:f0:ae:3b:99:7e:a2:90:8c:6b:d3: 48:a7:eb:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLr+UlEMN/hlFcMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIwNjE5MTAyM1oXDTI1MDUwNzE4MTAyM1owLzEtMCsGA1UEAxMk YmY1ZjViNmItOWFmZS00Njg5LTlkOWYtYTVmNGY1ZTY2NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d+9zFpAveueXQbGDn9VCLykrm75RVYoWV/X xNm/sOPs7U7DGBzv3ah5OcCm9eSjdvyyc0jAgzL/vMBIMkwoAe0skX9lzs3ZSguu uTMpaHAabbBkcnnx0/SxzLSg2rtk2Sl2/nimkIWBv3kKyoWYHMnSvVxwLP+4z8ZG Ykb+Utsr9t14c/LjzenEBYJUwY+GuSiS2S65LsMk0k4Nt04hozFQcVpNFk4lTd+J X1lWjr361lUCrYZJlCg2pCCyvTgJZtKBpd7R1zvx3+5E0AE9c1CebCJGRpssMh1/ qUWcs8P8h6ZYT9Lqq2/NXQvrRXIWMexEdmXEv5vo4jPZvuOfWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMsIZ+kvBL4zX4A2GgCY1RtMfBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTE0MDI4MTItMTc3NC0z NjNmLThjMzAtYjkyYWExYWUwNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALfmUlY6oxL9WVIdTOcFsHMqODazZlJ+3+iQI4IhF4poI20HJofz39+ qGTzJAMDrIKtP//atQ/eywLWDr/kUvdTZbKtVY41IGTwT5eevADmrT1Q9adpk6gD M9Vp0PlpcVcWrcQmCFPEQabzGnxZ07Ff93Y+57+LTOs7kpET1C4TMcr+lDTPIF/Q rK0262kQ/Oahk0aEG4gaR2OEA/NKA2T/Rtj/rI9d3htQCmKSDNAandOiNuLatsJH 5UptqRHTbN7/81QgtqKgYIReTP3+i/o3A15w6DvlYSUEtpBEsOJR8ugHwa3Jt9Rc TevqaezLqrsC8K47mX6ikIxr00in62Y= -----END CERTIFICATE-----Generated at Sat Apr 5 10:05:13 2025 by rpki-client