$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ccc222e8-ac06-3572-b1dc-370206cdb032.roa File: ccc222e8-ac06-3572-b1dc-370206cdb032.roa (raw, json) Hash identifier: cZBY4CVK7VpaI214GjlsSLhhtZyCesqqAMfS43uudnw= Subject key identifier: 6A:48:8D:71:3E:A0:A5:D5:36:05:71:92:35:20:3E:F2:44:F7:5E:56 Certificate issuer: /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Certificate serial: 010D0C9F4328584917DC3196CD2E5BCB740DDD80 Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ccc222e8-ac06-3572-b1dc-370206cdb032.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 23.174.40.0/24 maxlen: 24 2607:9f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:31:96:cd:2e:5b:cb:74:0d:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=b82a8f01-6f93-4630-8739-eaf362452dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:81:5b:5f:24:26:6d:df:95:b4:f8:bc:4e: 87:5f:14:a1:b6:4b:78:90:9a:f0:f1:5e:64:dc:fd: 88:76:fd:e0:36:cd:c5:73:76:ee:44:36:7a:98:df: e7:f7:1a:ba:6d:d3:f4:b8:45:cb:33:cc:b8:2b:9a: 24:72:a9:c1:34:6a:c8:9b:64:5d:07:2f:41:93:0a: 7f:12:7a:5f:47:11:02:f8:cc:dc:4e:a4:99:bf:50: 62:1e:be:e7:ed:ff:2d:ff:f9:5d:2b:3b:ad:16:72: 3c:81:ae:21:5c:93:26:60:f8:89:cf:84:7f:bb:60: 93:b2:35:cd:47:d1:a8:10:d1:b1:4b:b0:54:f3:05: 0a:0f:36:b4:aa:ad:a7:80:52:de:36:c6:18:3d:0b: a0:13:46:d7:2d:51:1b:2c:57:e0:34:57:78:3c:e3: 39:cb:b7:f7:4d:93:11:f3:4b:d0:87:ca:91:97:98: 41:8a:f1:17:e3:b2:07:0f:e7:89:b5:0e:4b:6b:b8: 73:2a:3c:49:29:7b:14:e6:ac:f1:31:34:36:7f:ef: 80:0e:e4:68:4e:4b:cc:cd:19:0c:85:c5:b7:2a:84: b2:d6:e6:ce:8f:8b:13:73:02:c6:35:b5:dc:7d:77: c0:4c:76:80:7b:fa:6b:4c:0f:64:17:dd:0e:43:7f: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:48:8D:71:3E:A0:A5:D5:36:05:71:92:35:20:3E:F2:44:F7:5E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ccc222e8-ac06-3572-b1dc-370206cdb032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl X509v3 Authority Key Identifier: keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer sbgp-ipAddrBlock: critical IPv4: 23.174.40.0/24 IPv6: 2607:9f40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4e:8d:f7:51:80:4b:31:55:15:f8:63:40:a1:9a:31:74:b6: 66:fd:6c:2f:6d:93:af:32:9f:04:51:c2:35:f4:f4:73:2e:58: f3:a5:3c:45:3c:29:1a:f6:a5:47:1f:c5:20:3e:7f:66:cc:a6: f4:8b:97:75:c5:32:74:47:f2:26:16:be:ec:63:da:a3:16:4f: 71:45:09:3a:27:5f:b1:c6:4d:0d:8e:10:96:3f:a7:4f:7b:05: ca:8e:6f:b7:f0:e7:24:f4:75:90:77:77:27:0a:5c:7f:01:32: c3:33:2d:05:a7:67:50:d7:c4:94:53:38:2b:4d:41:ba:00:b6: 45:5d:7f:0b:85:91:e5:28:1b:8b:3c:c3:02:fb:00:11:c4:53: 81:92:bf:5e:11:d2:ad:06:b1:3c:2e:a0:28:d7:37:79:06:8a: 92:f9:3b:5e:26:a8:61:30:84:0d:29:51:32:fb:30:b1:ac:42: 3c:83:68:f7:f8:a3:9f:90:80:e7:06:4f:0d:20:92:df:8e:5c: 06:0f:ab:6c:97:e3:37:c4:08:92:a4:0e:fe:6d:49:cf:8b:f5: 26:fc:f9:6d:f3:c0:f9:57:50:07:cd:0c:97:db:6c:3b:3d:d8: d0:b1:19:a0:1c:c8:85:09:8e:64:45:b9:62:0d:f8:fb:03:25: 30:96:e3:c2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkX3DGWzS5by3QN3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJh ZDk5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YjgyYThmMDEtNmY5My00NjMwLTg3MzktZWFmMzYyNDUyZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDGBW18kJm3flbT4vE6HXxShtkt4kJrw8V5k 3P2Idv3gNs3Fc3buRDZ6mN/n9xq6bdP0uEXLM8y4K5okcqnBNGrIm2RdBy9Bkwp/ EnpfRxEC+MzcTqSZv1BiHr7n7f8t//ldKzutFnI8ga4hXJMmYPiJz4R/u2CTsjXN R9GoENGxS7BU8wUKDza0qq2ngFLeNsYYPQugE0bXLVEbLFfgNFd4POM5y7f3TZMR 80vQh8qRl5hBivEX47IHD+eJtQ5La7hzKjxJKXsU5qzxMTQ2f++ADuRoTkvMzRkM hcW3KoSy1ubOj4sTcwLGNbXcfXfATHaAe/prTA9kF90OQ3+3CQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGpIjXE+oKXVNgVxkjUgPvJE915WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmJl ZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvY2NjMjIyZTgtYWMwNi0z NTcyLWIxZGMtMzcwMjA2Y2RiMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JiZWU5YjEtMWIzMy00OTUxLWE2 MTctZWNiODBkOWJhZDk5LzdiYmVlOWIxLTFiMzMtNDk1MS1hNjE3LWVjYjgwZDli YWQ5OS5jcmwwHwYDVR0jBBgwFoAUKSL34vJ0kytfzKQDs/xSZeeGwpowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4 MGQ5YmFkOTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF64oMA8E AgACMAkDBwAmB59AAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdE6N91GASzFVFfhjQKGaMXS2Zv1sL22T rzKfBFHCNfT0cy5Y86U8RTwpGvalRx/FID5/Zsym9IuXdcUydEfyJha+7GPaoxZP cUUJOidfscZNDY4Qlj+nT3sFyo5vt/DnJPR1kHd3JwpcfwEywzMtBadnUNfElFM4 K01BugC2RV1/C4WR5SgbizzDAvsAEcRTgZK/XhHSrQaxPC6gKNc3eQaKkvk7Xiao YTCEDSlRMvswsaxCPINo9/ijn5CA5wZPDSCS345cBg+rbJfjN8QIkqQO/m1Jz4v1 Jvz5bfPA+VdQB80Ml9tsOz3Y0LEZoBzIhQmOZEW5Yg34+wMlMJbjwg== -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:35 2025 by rpki-client