$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa File: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (raw, json) Hash identifier: 6jYkQMAleVslDrLXJr9nSXnkNXmTMidEVVuZP0B3410= Subject key identifier: 45:A2:CD:CE:ED:EB:24:48:E3:7B:C4:2C:AE:07:E2:48:CC:98:AE:C6 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F43285848F926B110601461E197026D8C Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 26904 IP address blocks: 23.247.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b1:10:60:14:61:e1:97:02:6d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b92ead74-d25b-4e7e-8abc-fbd1f407a3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:9f:11:98:49:91:7c:d1:a7:7e:f7:ca:47: 7e:8b:70:cb:96:76:8a:d0:b4:b8:a4:15:57:ac:3a: 46:30:d5:c7:7b:0f:e1:91:de:30:1a:8f:8e:6b:a4: b3:78:1d:21:4b:2f:31:1b:10:72:4c:35:3c:07:50: 1f:85:13:8d:5f:5b:c6:a8:0e:6b:09:ed:03:f0:3b: 6d:c2:d7:a9:0d:fb:0b:4a:22:59:a8:e8:68:b0:e9: f6:22:67:e8:73:23:50:9d:48:b5:83:da:88:9f:17: 01:f3:22:83:1b:30:72:24:6a:7c:77:ad:8e:47:89: 26:77:c4:19:cc:56:40:f0:5c:f3:52:68:7e:de:12: eb:43:0e:27:f5:94:1f:d1:91:7d:57:67:b4:cc:38: fc:ec:d8:0d:e8:5d:95:a3:5a:f5:46:4b:1f:69:86: 99:35:a4:cd:b8:c3:f4:1c:f0:6f:8f:46:96:6f:de: b6:23:0a:c0:a1:d8:a2:3e:ec:ab:b3:ea:b5:14:4d: fe:e1:ba:2a:00:3e:a5:69:69:d9:9d:6c:64:3e:5d: 2e:ed:ea:70:6e:60:3b:9d:28:4e:b3:e8:4d:07:2a: 13:b2:02:76:44:d4:24:10:2b:34:01:fb:1c:ca:b2: 38:7d:ad:5c:3a:54:88:d9:e6:d6:b1:c4:be:40:3a: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A2:CD:CE:ED:EB:24:48:E3:7B:C4:2C:AE:07:E2:48:CC:98:AE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:01:26:f9:ae:31:c0:21:ef:6a:8d:2f:97:c9:fc:20:84:27: 0c:1c:ff:22:63:2c:cd:c4:eb:06:0b:e3:c6:38:80:e8:4a:84: 11:bb:1e:9c:16:b7:8b:e8:20:34:77:be:c4:25:54:38:0a:f8: c5:14:4a:c8:68:f0:1f:05:bb:2c:05:c7:4c:10:0b:5a:a3:54: b7:ac:65:56:38:4e:ec:9b:7c:45:cd:ff:73:e3:2f:91:6c:35: e9:5b:b5:3e:e3:74:1a:28:e9:11:88:d2:b3:9c:fa:f1:9f:d3: fa:8c:45:71:3b:65:68:8f:d2:2c:e2:93:99:69:d6:08:cb:e7: c1:59:47:71:c0:96:fa:ab:92:9a:e0:58:89:5a:91:83:8a:a7: aa:9e:06:5e:f5:a5:13:7c:b6:42:72:06:02:3b:41:89:9c:ff: fb:7f:1d:df:b6:35:8e:49:89:31:98:4e:af:5e:cf:ac:da:4b: 57:9e:51:70:ac:72:32:76:05:c3:6e:9f:03:6a:bf:94:3c:43: ae:f0:78:f2:7c:62:45:38:90:dd:69:57:d0:d0:2a:65:48:1b: 22:39:2f:43:82:29:69:f5:42:bf:95:eb:c1:15:ed:7f:13:c2: d8:7b:77:d0:8b:69:43:4b:43:5b:d3:4d:89:33:bf:58:f8:b2: e1:e1:7d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrEQYBRh4ZcCbYwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YjkyZWFkNzQtZDI1Yi00ZTdlLThhYmMtZmJkMWY0MDdhM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1+fEZhJkXzRp373ykd+i3DLlnaK0LS4pBVX rDpGMNXHew/hkd4wGo+Oa6SzeB0hSy8xGxByTDU8B1AfhRONX1vGqA5rCe0D8Dtt wtepDfsLSiJZqOhosOn2ImfocyNQnUi1g9qInxcB8yKDGzByJGp8d62OR4kmd8QZ zFZA8FzzUmh+3hLrQw4n9ZQf0ZF9V2e0zDj87NgN6F2Vo1r1RksfaYaZNaTNuMP0 HPBvj0aWb962IwrAodiiPuyrs+q1FE3+4boqAD6laWnZnWxkPl0u7epwbmA7nShO s+hNByoTsgJ2RNQkECs0AfscyrI4fa1cOlSI2ebWscS+QDpczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWizc7t6yRI43vELK4H4kjMmK7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvODgyZDBlYzQtODM4Ny0z OGUzLTkzZTktZTQ4MDZlYjJhMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwBJvmuMcAh72qNL5fJ/CCEJwwc/yJjLM3E6wYL48Y4gOhKhBG7HpwW t4voIDR3vsQlVDgK+MUUSsho8B8FuywFx0wQC1qjVLesZVY4TuybfEXN/3PjL5Fs NelbtT7jdBoo6RGI0rOc+vGf0/qMRXE7ZWiP0izik5lp1gjL58FZR3HAlvqrkprg WIlakYOKp6qeBl71pRN8tkJyBgI7QYmc//t/Hd+2NY5JiTGYTq9ez6zaS1eeUXCs cjJ2BcNunwNqv5Q8Q67wePJ8YkU4kN1pV9DQKmVIGyI5L0OCKWn1Qr+V68EV7X8T wth7d9CLaUNLQ1vTTYkzv1j4suHhffI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:37:26 2025 by rpki-client