$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa File: 14a619d0-4751-3dd0-8357-da775049c7ff.roa (raw, json) Hash identifier: 4vFFwY4jnoO7tTBMNTLXY9145GfDxWjHLC5MfU5tMRU= Subject key identifier: 7C:C3:09:4F:76:CD:34:B3:ED:1B:D3:C6:DD:54:A4:F3:37:79:89:1D Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F43285848C150D384241291BE4BF43CC0 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 26554 IP address blocks: 65.23.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d3:84:24:12:91:be:4b:f4:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=217fe1ed-cbf4-4413-b3f1-5a4808b11d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:83:82:df:05:21:b9:7f:a4:8a:d0:3e:0a: 43:e0:27:2b:ce:1c:0e:42:51:78:9a:87:0e:8e:89: 43:31:d7:a7:8e:8d:9d:72:27:58:1e:ab:4a:9a:6a: 3a:c5:11:78:d7:91:72:41:33:5b:a5:a7:9e:8d:5f: 95:fb:4d:f7:39:92:5b:2d:d5:5f:98:28:f9:20:41: 6f:dc:e6:6c:34:8f:1d:3e:58:ba:46:82:e0:dd:4d: a2:f9:c8:2e:c0:eb:eb:e8:b4:f1:7c:e7:61:23:ac: c9:98:79:22:dd:71:ac:a4:0b:cc:7e:f4:00:7a:0c: 67:69:c7:9e:ab:3b:71:2e:d0:0e:5f:53:3c:fb:5f: b2:83:b4:87:76:8d:50:6c:2f:d3:c5:b4:1b:57:a0: c9:80:8c:4c:b5:65:87:a7:30:e9:bd:59:7c:e2:16: fe:17:b2:ca:1f:d7:79:45:53:cf:55:ea:86:a0:ea: 47:e3:b7:3e:76:ae:d2:8b:45:c4:ec:b8:5b:9f:1d: 1d:ae:df:d3:b3:e1:10:39:f8:14:6b:f4:f8:9a:e6: de:12:1d:90:6e:6d:ba:0d:88:b5:66:bc:4a:42:28: 9f:24:28:25:a6:e4:ae:35:96:08:ed:cc:db:4f:e3: 70:b5:8a:09:10:3e:99:50:8c:d0:ce:3a:7e:6f:2a: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:09:4F:76:CD:34:B3:ED:1B:D3:C6:DD:54:A4:F3:37:79:89:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: 65.23.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8b:c8:41:18:f0:71:ec:31:da:77:32:a4:7e:c0:4d:fb:4f: 54:06:c2:dd:54:0f:ed:6e:ef:6f:6a:f7:1e:06:4d:a0:f5:c9: 8d:9e:aa:56:14:02:de:93:03:1c:d9:d1:84:3c:a0:14:c5:ab: 38:88:63:ca:02:9a:2d:56:dc:35:59:40:54:f8:35:58:d2:38: cc:de:70:33:32:4a:cd:28:dd:ec:e8:6f:41:52:9d:95:93:1a: 7f:cc:12:63:8e:6a:59:fe:6b:38:b7:53:5c:5a:18:68:b0:f2: 21:d6:50:9b:fd:eb:17:63:ba:98:82:42:25:0e:3e:1f:51:65: ae:bc:dd:cf:a4:5b:93:85:a9:1b:6f:ff:ae:f8:0c:4b:df:76: f4:4e:b2:28:2c:da:26:95:2f:2f:35:ec:38:86:bc:bd:ec:86: b8:c7:3c:de:50:16:1e:0d:37:89:da:81:1d:97:9b:22:1d:29: c9:7d:75:48:3c:61:da:33:ff:e9:f6:0e:07:ef:dd:a8:ee:e8: 26:27:4c:7e:cb:a6:45:05:14:2c:50:41:4a:64:6d:15:b4:93: d5:3f:97:3e:7c:9b:9f:32:16:7a:db:bf:43:4e:e3:32:f0:be: c5:a6:4e:a0:bb:e6:26:a3:58:cd:b8:e9:55:a1:3d:c5:f5:d9: 0f:f1:d7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNOEJBKRvkv0PMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MjE3ZmUxZWQtY2JmNC00NDEzLWIzZjEtNWE0ODA4YjExZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtruDgt8FIbl/pIrQPgpD4CcrzhwOQlF4mocO jolDMdenjo2dcidYHqtKmmo6xRF415FyQTNbpaeejV+V+033OZJbLdVfmCj5IEFv 3OZsNI8dPli6RoLg3U2i+cguwOvr6LTxfOdhI6zJmHki3XGspAvMfvQAegxnacee qztxLtAOX1M8+1+yg7SHdo1QbC/TxbQbV6DJgIxMtWWHpzDpvVl84hb+F7LKH9d5 RVPPVeqGoOpH47c+dq7Si0XE7Lhbnx0drt/Ts+EQOfgUa/T4mubeEh2Qbm26DYi1 ZrxKQiifJCglpuSuNZYI7czbT+NwtYoJED6ZUIzQzjp+byr+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzDCU92zTSz7RvTxt1UpPM3eYkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMTRhNjE5ZDAtNDc1MS0z ZGQwLTgzNTctZGE3NzUwNDljN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSLyEEY8HHsMdp3MqR+wE37T1QGwt1UD+1u729q9x4GTaD1yY2eqlYU At6TAxzZ0YQ8oBTFqziIY8oCmi1W3DVZQFT4NVjSOMzecDMySs0o3ezob0FSnZWT Gn/MEmOOaln+azi3U1xaGGiw8iHWUJv96xdjupiCQiUOPh9RZa683c+kW5OFqRtv /674DEvfdvROsigs2iaVLy817DiGvL3shrjHPN5QFh4NN4nagR2XmyIdKcl9dUg8 Ydoz/+n2Dgfv3aju6CYnTH7LpkUFFCxQQUpkbRW0k9U/lz58m58yFnrbv0NO4zLw vsWmTqC75iajWM246VWhPcX12Q/x12k= -----END CERTIFICATE-----Generated at Wed Apr 9 22:10:30 2025 by rpki-client