$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3e20d31-c38e-3d50-b252-46d2114e5b2e.roa File: e3e20d31-c38e-3d50-b252-46d2114e5b2e.roa (raw, json) Hash identifier: ky8yd5e65B3uKAyiHCbtQFrbZWmMD1jl6F9wVhVRWzY= Subject key identifier: 9B:BE:7D:01:76:1E:56:F6:CB:C3:81:9D:34:70:6A:F1:8B:C2:86:61 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848BBBB8639C964E6F1F78D6D80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3e20d31-c38e-3d50-b252-46d2114e5b2e.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 48976 IP address blocks: 23.26.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:86:39:c9:64:e6:f1:f7:8d:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=9c5ee9cb-2d55-4fe2-af12-a3b190ac1575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:14:35:e6:77:92:0f:bd:d2:55:e4:27:51: 51:24:82:ea:7c:65:b9:4e:59:31:77:ab:08:12:14: c5:17:02:f6:20:e9:53:84:4a:02:30:93:c1:a4:fc: ba:76:c3:9d:9d:68:8c:20:2e:76:1e:9c:3b:2b:ef: 23:b7:a0:12:81:92:d5:3b:10:9b:3b:82:1a:a3:05: a2:e7:11:cd:c6:d1:fd:76:8e:6f:00:4c:ec:a8:06: 74:0a:d4:79:67:fe:b1:db:08:e1:1f:b6:b3:97:87: a2:08:2d:ac:93:34:3a:6e:16:37:4a:6d:7b:5a:33: d5:51:50:c5:68:0b:80:03:b8:af:cb:e0:5b:79:71: 71:66:92:27:c8:9f:c2:2d:7b:54:3a:da:23:d4:75: 3b:5c:7a:b2:bc:b3:e3:ac:b1:21:2f:64:8e:d5:58: b6:93:d0:b8:0f:9b:82:9e:ff:52:22:8c:00:24:79: 32:c1:1c:90:73:20:9d:93:43:4a:ae:6d:fa:b0:88: b7:bc:67:92:3d:fd:3a:ce:a0:ac:5f:94:1c:78:87: f6:38:2c:fc:a3:86:c8:6e:d4:e3:c7:a0:85:78:04: 2a:10:6c:10:ac:aa:db:7c:18:ea:df:4e:56:44:14: a1:dd:67:58:24:34:7f:09:c6:11:4f:4b:46:11:54: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:7D:01:76:1E:56:F6:CB:C3:81:9D:34:70:6A:F1:8B:C2:86:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3e20d31-c38e-3d50-b252-46d2114e5b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9b:a2:1a:14:3e:a8:e4:65:bf:6d:e3:9e:b7:f5:72:00:e5: cc:5d:66:74:86:f6:66:c1:04:8e:6c:42:ff:71:21:36:f1:5f: a5:cc:bb:33:a1:2c:8b:09:85:ee:b6:16:8d:e3:ca:71:1f:1f: 7b:fb:07:28:1f:49:f7:b2:54:bf:db:cf:ef:3e:d2:83:7f:30: 24:a2:17:e7:fd:18:9f:06:a8:77:71:3c:5a:53:e3:9b:27:e7: b0:87:9d:8a:63:71:fa:0b:7b:25:03:13:1f:6d:32:c7:6f:d3: ea:b3:14:cc:66:0b:b2:9a:45:b2:9c:7c:38:7c:8e:66:9f:17: 19:f5:2f:6e:65:55:78:bd:fc:a0:d1:43:4f:49:45:a3:51:2e: 2c:c3:5f:34:37:8e:fa:2d:5b:d1:a2:58:d4:d4:21:6e:1d:00: 77:0d:43:90:9f:b3:e7:34:57:ad:2f:ed:33:19:bf:f5:ae:b5: 1b:5f:20:5f:8c:42:26:73:97:c9:6d:e5:ba:33:e6:5f:4b:52: ca:54:29:a6:16:1e:7f:06:aa:6c:09:3a:c2:28:d7:8b:ab:18: c9:c7:3c:98:c6:33:91:b4:8d:9a:39:b0:0f:ed:b9:ed:e6:80: a2:83:dc:6d:6b:6f:42:b5:83:58:98:37:6b:33:83:24:3e:f5: 37:38:57:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4Y5yWTm8feNbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk OWM1ZWU5Y2ItMmQ1NS00ZmUyLWFmMTItYTNiMTkwYWMxNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEMUNeZ3kg+90lXkJ1FRJILqfGW5Tlkxd6sI EhTFFwL2IOlThEoCMJPBpPy6dsOdnWiMIC52Hpw7K+8jt6ASgZLVOxCbO4IaowWi 5xHNxtH9do5vAEzsqAZ0CtR5Z/6x2wjhH7azl4eiCC2skzQ6bhY3Sm17WjPVUVDF aAuAA7ivy+BbeXFxZpInyJ/CLXtUOtoj1HU7XHqyvLPjrLEhL2SO1Vi2k9C4D5uC nv9SIowAJHkywRyQcyCdk0NKrm36sIi3vGeSPf06zqCsX5QceIf2OCz8o4bIbtTj x6CFeAQqEGwQrKrbfBjq305WRBSh3WdYJDR/CcYRT0tGEVTWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu+fQF2Hlb2y8OBnTRwavGLwoZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTNlMjBkMzEtYzM4ZS0z ZDUwLWIyNTItNDZkMjExNGU1YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFxpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqbohoUPqjkZb9t45639XIA5cxdZnSG9mbBBI5sQv9xITbxX6XMuzOh LIsJhe62Fo3jynEfH3v7BygfSfeyVL/bz+8+0oN/MCSiF+f9GJ8GqHdxPFpT45sn 57CHnYpjcfoLeyUDEx9tMsdv0+qzFMxmC7KaRbKcfDh8jmafFxn1L25lVXi9/KDR Q09JRaNRLizDXzQ3jvotW9GiWNTUIW4dAHcNQ5Cfs+c0V60v7TMZv/WutRtfIF+M QiZzl8lt5boz5l9LUspUKaYWHn8GqmwJOsIo14urGMnHPJjGM5G0jZo5sA/tue3m gKKD3G1rb0K1g1iYN2szgyQ+9Tc4V+I= -----END CERTIFICATE-----Generated at Sat Apr 12 15:31:17 2025 by rpki-client