$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa File: 6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa (raw, json) Hash identifier: lr77JS1U7z+687REk0xwb+mJmRh6mabY/DbVoWBBs5M= Subject key identifier: 06:6B:52:25:3A:D8:39:28:A1:EB:A7:4A:57:0A:C0:0C:6A:8D:AE:EF Certificate issuer: /CN=a84de681-fe45-480a-a775-c78ed66cd40b Certificate serial: 010D0C9F4328584902EC229FF0FD6B259B5F9500 Authority key identifier: 20:2A:0D:8A:35:58:D9:37:5C:B5:1D:24:FB:4C:95:F8:BD:BF:0D:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 396302 IP address blocks: 23.156.160.0/24 maxlen: 24 2604:4140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:22:9f:f0:fd:6b:25:9b:5f:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84de681-fe45-480a-a775-c78ed66cd40b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=906d04dd-e12f-4a08-b3ce-bfdbfd09dd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:69:15:b5:40:5b:1e:bf:8a:21:3c:24:c4: 77:1d:25:8d:0b:61:42:4e:5c:d7:88:a8:7a:22:61: e8:40:2a:c7:a5:ce:55:0f:80:ca:dd:7d:77:55:27: d4:f6:2e:7f:3c:89:04:b5:0d:eb:58:33:2f:ad:a0: 13:d5:f8:79:53:18:04:14:6a:49:c8:62:e4:f4:4c: c7:cb:2b:f6:f7:ec:bc:8a:f4:9d:ba:b3:9f:af:52: 21:d1:b6:6c:24:1e:38:be:f3:b3:fc:dc:e7:13:f4: 65:f8:08:3c:03:87:4a:2a:c1:1c:26:59:9f:7f:6b: cb:89:03:08:f1:5e:21:30:14:58:e4:04:38:33:27: 11:96:7e:ba:f8:29:17:05:2b:0d:6d:cc:8d:8f:6c: eb:d5:97:58:83:71:fd:85:f3:85:ea:c5:64:80:45: 75:05:62:2c:de:4a:fc:d7:a6:0d:eb:c9:6d:ea:6d: 05:58:a1:3a:ff:bf:55:34:e0:f2:9f:29:6b:9a:de: 96:ff:88:ba:43:56:7f:46:2b:fa:83:92:3b:37:42: 5e:d0:c5:c1:89:f7:e3:bf:9b:d2:e5:a2:2a:f4:0f: 37:b4:e2:a0:47:8f:dc:6b:ee:f7:01:00:a9:63:d3: af:66:93:58:4f:3e:91:43:39:3b:a1:02:0c:96:15: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6B:52:25:3A:D8:39:28:A1:EB:A7:4A:57:0A:C0:0C:6A:8D:AE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.crl X509v3 Authority Key Identifier: keyid:20:2A:0D:8A:35:58:D9:37:5C:B5:1D:24:FB:4C:95:F8:BD:BF:0D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b.cer sbgp-ipAddrBlock: critical IPv4: 23.156.160.0/24 IPv6: 2604:4140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ca:e5:de:2c:c7:68:87:e8:ea:1d:51:6f:83:20:c0:72:ae: a4:76:9a:ee:2b:74:2a:e1:ed:b3:21:81:09:7a:ec:20:42:8b: 5f:bc:09:a7:b1:96:07:34:bf:3d:ea:a5:56:fb:09:3b:49:fe: 3f:4b:39:1d:b8:38:b7:c7:c1:ab:18:b5:5f:8e:19:87:13:c0: 49:9b:7c:1e:e9:c4:5c:06:c6:f7:34:02:e5:7b:bd:0a:75:88: 37:42:28:2a:63:c6:c3:a4:80:20:84:89:6b:20:c7:b6:29:05: d4:ae:8a:b4:c6:3f:dc:35:df:dc:a0:92:e7:86:4d:a9:40:28: c3:13:49:87:f7:b6:e3:9e:de:37:9e:f1:a2:e7:a2:d6:a1:00: 8b:1d:1d:55:63:ff:1e:0a:4e:b7:22:b0:ab:9e:7d:fb:30:f3: 89:b6:50:28:56:36:fd:89:13:57:71:02:d7:cf:43:1f:98:f4: 38:22:4c:66:0b:f3:56:30:70:de:49:33:6e:f0:be:2e:52:1d: 9f:72:86:ed:e0:00:5e:45:ff:78:84:46:38:a2:c1:1b:43:45: fd:67:6a:68:1d:89:29:66:fc:17:30:c3:27:85:84:cb:8e:dd: 37:57:b0:3f:db:d1:85:a2:fe:01:3b:aa:6e:e9:8a:a2:6e:f8: 0d:83:17:9b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkC7CKf8P1rJZtflQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg0ZGU2ODEtZmU0NS00ODBhLWE3NzUtYzc4ZWQ2NmNk NDBiMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk OTA2ZDA0ZGQtZTEyZi00YTA4LWIzY2UtYmZkYmZkMDlkZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiNpFbVAWx6/iiE8JMR3HSWNC2FCTlzXiKh6 ImHoQCrHpc5VD4DK3X13VSfU9i5/PIkEtQ3rWDMvraAT1fh5UxgEFGpJyGLk9EzH yyv29+y8ivSdurOfr1Ih0bZsJB44vvOz/NznE/Rl+Ag8A4dKKsEcJlmff2vLiQMI 8V4hMBRY5AQ4MycRln66+CkXBSsNbcyNj2zr1ZdYg3H9hfOF6sVkgEV1BWIs3kr8 16YN68lt6m0FWKE6/79VNODynylrmt6W/4i6Q1Z/Riv6g5I7N0Je0MXBiffjv5vS 5aIq9A83tOKgR4/ca+73AQCpY9OvZpNYTz6RQzk7oQIMlhUaBwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAZrUiU62DkooeunSlcKwAxqja7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hODRk ZTY4MS1mZTQ1LTQ4MGEtYTc3NS1jNzhlZDY2Y2Q0MGIvNjA5MmIzYjItZjAwYS0z NTlkLWE2MGUtN2QzZTRiNzMzYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTg0ZGU2ODEtZmU0NS00ODBhLWE3 NzUtYzc4ZWQ2NmNkNDBiL2E4NGRlNjgxLWZlNDUtNDgwYS1hNzc1LWM3OGVkNjZj ZDQwYi5jcmwwHwYDVR0jBBgwFoAUICoNijVY2TdctR0k+0yV+L2/DTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hODRkZTY4MS1mZTQ1LTQ4MGEtYTc3NS1jNzhl ZDY2Y2Q0MGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5ygMA0E AgACMAcDBQAmBEFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKLK5d4sx2iH6OodUW+DIMByrqR2mu4rdCrh 7bMhgQl67CBCi1+8Caexlgc0vz3qpVb7CTtJ/j9LOR24OLfHwasYtV+OGYcTwEmb fB7pxFwGxvc0AuV7vQp1iDdCKCpjxsOkgCCEiWsgx7YpBdSuirTGP9w139ygkueG TalAKMMTSYf3tuOe3jee8aLnotahAIsdHVVj/x4KTrcisKueffsw84m2UChWNv2J E1dxAtfPQx+Y9DgiTGYL81YwcN5JM27wvi5SHZ9yhu3gAF5F/3iERjiiwRtDRf1n amgdiSlm/BcwwyeFhMuO3TdXsD/b0YWi/gE7qm7piqJu+A2DF5s= -----END CERTIFICATE-----Generated at Sat Apr 12 00:46:36 2025 by rpki-client