$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa File: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (raw, json) Hash identifier: koU/9loJgLlXscwH7Ugt9bIlF5VmXUqwPODNhO+zMKQ= Subject key identifier: 00:27:88:A8:A9:29:EF:5F:38:8B:DC:36:F5:29:20:D7:6A:9A:29:10 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F43285849350E88CB4FD7EF53657F0780 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 64272 IP address blocks: 23.134.64.0/24 maxlen: 24 2602:fecb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:88:cb:4f:d7:ef:53:65:7f:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=c9a371a7-75e9-44da-955a-14d630454c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:1d:b2:28:ce:3e:4a:71:b9:80:a8:c4:83: a2:bd:22:c3:9a:6e:3c:1b:f7:ed:e9:2c:73:73:a3: 30:85:ad:54:93:40:78:3f:d7:5b:7a:c8:49:3f:85: 57:ef:c6:d4:ad:27:ba:36:4e:72:69:05:36:f0:0e: 76:50:35:66:84:3c:4c:c1:af:06:53:40:2b:95:bc: a7:28:da:a2:d2:ca:80:f3:15:55:bf:f8:fc:3a:07: f4:c9:fc:ed:7d:08:3b:28:af:60:4b:93:41:fb:57: 1b:a1:09:5e:f2:11:73:02:bd:90:c7:8c:86:44:f2: 43:cc:64:c6:6d:b8:e2:2e:b6:e4:0e:96:30:d3:88: 82:28:56:60:7a:de:3e:21:19:b4:a6:41:f8:8d:ab: 05:99:cc:58:bf:22:4d:46:63:a1:0e:e7:63:e7:c7: 7d:8a:19:b8:0e:87:88:5e:e7:b7:9a:0b:10:2d:18: 4e:dc:18:7b:31:21:e7:45:6a:14:94:37:87:c2:8e: 18:ad:17:79:5f:26:7a:2b:a5:60:10:72:92:76:ae: 9c:d9:a7:6d:c3:45:c4:41:59:f8:71:6f:9d:4f:c6: b9:fd:da:00:f0:c5:6a:e8:5c:09:6a:7a:ac:fc:29: a3:6f:b3:c0:0b:b1:8a:2f:23:54:09:2f:e4:7f:03: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:27:88:A8:A9:29:EF:5F:38:8B:DC:36:F5:29:20:D7:6A:9A:29:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: 23.134.64.0/24 IPv6: 2602:fecb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e0:02:39:53:3c:6e:99:10:fc:7b:33:a3:df:b2:18:0a:94: 53:c9:4c:69:a8:0b:cf:d0:aa:3b:a9:45:e8:81:62:4e:95:1b: 1c:92:d6:55:3b:47:04:0b:f4:0f:32:d3:ac:18:02:9a:94:7b: e0:64:5f:5b:f6:95:7d:65:c8:63:67:85:c6:02:9a:56:1f:28: fa:e2:b4:7b:d7:20:00:4e:09:74:f8:4d:10:c3:2b:9f:54:be: f4:4b:e2:11:de:a8:82:12:d2:11:f9:4d:68:08:5f:37:59:4e: 65:77:18:37:5e:58:0a:21:af:e9:53:fb:3c:4e:ac:25:d6:89: de:a4:02:71:a2:36:9f:cc:5d:8a:10:4d:96:3c:1b:44:be:23: e1:4f:f8:ca:db:cc:48:d8:f5:42:c8:ee:c6:38:c5:ad:66:d7: b9:95:71:cd:48:60:86:94:85:77:6f:0f:97:4f:28:a5:6d:c5: dc:97:21:50:b7:03:fa:44:d2:e4:48:1f:5d:4e:6f:20:67:de: ba:2c:6d:20:fc:81:2d:f0:85:bb:78:dd:35:6f:e8:eb:66:6d: 6e:4b:88:f6:a7:5c:f6:39:5a:52:d6:58:f4:46:a4:7b:a1:db: da:e6:be:4b:05:d8:c7:53:5a:8a:3d:74:f8:a7:42:d6:b0:fd: 44:32:33:37 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEk1DojLT9fvU2V/B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YzlhMzcxYTctNzVlOS00NGRhLTk1NWEtMTRkNjMwNDU0YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqAdsijOPkpxuYCoxIOivSLDmm48G/ft6Sxz c6Mwha1Uk0B4P9dbeshJP4VX78bUrSe6Nk5yaQU28A52UDVmhDxMwa8GU0Arlbyn KNqi0sqA8xVVv/j8Ogf0yfztfQg7KK9gS5NB+1cboQle8hFzAr2Qx4yGRPJDzGTG bbjiLrbkDpYw04iCKFZget4+IRm0pkH4jasFmcxYvyJNRmOhDudj58d9ihm4DoeI Xue3mgsQLRhO3Bh7MSHnRWoUlDeHwo4YrRd5XyZ6K6VgEHKSdq6c2adtw0XEQVn4 cW+dT8a5/doA8MVq6FwJanqs/Cmjb7PAC7GKLyNUCS/kfwOVhwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAAniKipKe9fOIvcNvUpINdqmikQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvYTliMDkwYmEtNGUyZS0z ZmQwLWJkYTItZjViMGU3MzhlNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZAMA4E AgACMAgDBgQmAv7LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAW4AI5UzxumRD8ezOj37IYCpRTyUxpqAvP 0Ko7qUXogWJOlRscktZVO0cEC/QPMtOsGAKalHvgZF9b9pV9ZchjZ4XGAppWHyj6 4rR71yAATgl0+E0QwyufVL70S+IR3qiCEtIR+U1oCF83WU5ldxg3XlgKIa/pU/s8 Tqwl1onepAJxojafzF2KEE2WPBtEviPhT/jK28xI2PVCyO7GOMWtZte5lXHNSGCG lIV3bw+XTyilbcXclyFQtwP6RNLkSB9dTm8gZ966LG0g/IEt8IW7eN01b+jrZm1u S4j2p1z2OVpS1lj0RqR7odva5r5LBdjHU1qKPXT4p0LWsP1EMjM3 -----END CERTIFICATE-----Generated at Sat Apr 12 02:15:54 2025 by rpki-client