$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa File: c629930b-0b54-3c4b-99e5-12e0b43928ec.roa (raw, json) Hash identifier: i0iKzafa98OFpVQDZV1JhpfdbOZJMkNx5mxa75sffj0= Subject key identifier: A0:FF:40:49:9A:E1:23:52:75:40:DC:96:27:E8:E0:6F:30:5B:D5:C0 Certificate issuer: /CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d Certificate serial: 010D0C9F4328584917DC26630D6328C3293380D0 Authority key identifier: C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 23.191.48.0/24 maxlen: 24 2620:9d:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:26:63:0d:63:28:c3:29:33:80:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=ef0903fc-860c-44ea-813d-30673458d8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:fe:01:b7:b2:1f:30:64:5d:03:a6:4c:25: e4:be:a6:e1:17:81:e2:a8:61:3f:01:ea:aa:72:41: b1:9b:fa:3b:e0:7c:b4:7f:88:b8:3b:99:fc:b9:11: 2e:6f:f7:c7:ef:0e:52:eb:78:83:2a:74:49:49:33: df:e3:64:43:84:01:00:71:24:21:b3:6a:5c:3a:2e: 1d:60:d5:47:22:a0:29:75:38:6f:7b:1e:94:e6:fc: 80:3b:04:ba:e0:98:2c:b1:a7:2e:27:8d:21:47:58: 28:9f:00:d0:ce:2c:03:6f:6a:a2:2a:3a:c5:40:72: 43:10:15:65:3b:7b:d0:48:3d:d9:04:9c:fa:1d:4a: 4f:57:0a:1a:7c:ec:32:ff:83:0a:9c:27:6c:3a:ec: a0:15:be:70:58:63:39:0d:1e:ff:b0:27:b6:e5:4b: 1f:07:b6:3c:3d:8b:1b:c3:e8:42:b2:0d:d7:89:4b: 7f:f4:13:93:6e:7e:7b:ab:d5:4a:30:97:74:0e:01: 50:60:75:96:c9:62:9b:7d:b4:56:a3:6a:d4:26:5b: 8f:2b:06:27:f8:7d:18:2f:be:fc:88:a8:c5:db:8c: b9:0e:47:6a:27:19:4c:8a:29:64:8a:b5:2b:24:83: 5a:82:da:10:e7:87:41:16:71:7c:6b:e8:82:7c:49: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FF:40:49:9A:E1:23:52:75:40:DC:96:27:E8:E0:6F:30:5B:D5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl X509v3 Authority Key Identifier: keyid:C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer sbgp-ipAddrBlock: critical IPv4: 23.191.48.0/24 IPv6: 2620:9d:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:06:e6:99:f5:22:2a:60:bd:2b:75:fe:97:32:5f:a3:07:79: 6d:7f:65:26:49:2f:b8:3e:49:7b:a6:6c:17:df:69:9b:89:97: 7c:23:8a:48:f4:6e:18:40:e7:90:6d:1d:cf:3d:3c:cd:83:cb: 18:7f:f2:d9:97:64:8d:35:69:1a:08:05:03:f8:01:5d:68:a1: 6f:85:17:e7:57:42:c4:a1:3a:f4:85:f2:e8:27:67:b6:63:b3: a2:a1:30:d8:e7:fa:99:23:c4:8b:27:8f:3e:39:4e:91:5c:ff: 63:90:00:20:5d:b7:b6:23:6a:fb:27:61:8e:01:79:1e:e0:c3: 23:c3:51:1f:a0:40:1a:6c:50:bb:a5:0e:73:de:ed:23:c6:7d: 1d:f0:ed:86:a3:3a:e8:14:87:78:c4:20:17:7f:3e:1c:b7:9a: 22:98:47:a4:9e:e2:5d:ba:80:19:ea:77:39:c8:4f:72:f3:97: 43:68:53:a2:1e:54:9e:e6:cd:f5:83:50:18:53:8d:db:27:9e: 41:2c:87:d1:60:7c:63:fa:87:5e:22:dc:52:d4:5c:03:39:65: 5c:2b:f5:ab:9d:e5:b3:49:7c:d1:29:9c:39:04:3e:8a:8f:3e: 8e:d9:45:fc:13:6d:28:1b:aa:d8:7f:b8:21:3c:e2:12:e8:a2: db:95:e3:54 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkX3CZjDWMowykzgNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmOWU0ZmEtOGEyMS00OTgxLWI4YzgtNmM3ZWFmNzkx ODZkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZWYwOTAzZmMtODYwYy00NGVhLTgxM2QtMzA2NzM0NThkOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywf+AbeyHzBkXQOmTCXkvqbhF4HiqGE/Aeqq ckGxm/o74Hy0f4i4O5n8uREub/fH7w5S63iDKnRJSTPf42RDhAEAcSQhs2pcOi4d YNVHIqApdThvex6U5vyAOwS64JgssacuJ40hR1gonwDQziwDb2qiKjrFQHJDEBVl O3vQSD3ZBJz6HUpPVwoafOwy/4MKnCdsOuygFb5wWGM5DR7/sCe25UsfB7Y8PYsb w+hCsg3XiUt/9BOTbn57q9VKMJd0DgFQYHWWyWKbfbRWo2rUJluPKwYn+H0YL778 iKjF24y5DkdqJxlMiilkirUrJINagtoQ54dBFnF8a+iCfEk67QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKD/QEma4SNSdUDclifo4G8wW9XAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81M2Y5 ZTRmYS04YTIxLTQ5ODEtYjhjOC02YzdlYWY3OTE4NmQvYzYyOTkzMGItMGI1NC0z YzRiLTk5ZTUtMTJlMGI0MzkyOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTNmOWU0ZmEtOGEyMS00OTgxLWI4 YzgtNmM3ZWFmNzkxODZkLzUzZjllNGZhLThhMjEtNDk4MS1iOGM4LTZjN2VhZjc5 MTg2ZC5jcmwwHwYDVR0jBBgwFoAUx8iLrM7Olv1z+9Odc8OqwULdTAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81M2Y5ZTRmYS04YTIxLTQ5ODEtYjhjOC02Yzdl YWY3OTE4NmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF78wMA8E AgACMAkDBwAmIACdYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAigbmmfUiKmC9K3X+lzJfowd5bX9lJkkv uD5Je6ZsF99pm4mXfCOKSPRuGEDnkG0dzz08zYPLGH/y2ZdkjTVpGggFA/gBXWih b4UX51dCxKE69IXy6CdntmOzoqEw2Of6mSPEiyePPjlOkVz/Y5AAIF23tiNq+ydh jgF5HuDDI8NRH6BAGmxQu6UOc97tI8Z9HfDthqM66BSHeMQgF38+HLeaIphHpJ7i XbqAGep3OchPcvOXQ2hToh5UnubN9YNQGFON2yeeQSyH0WB8Y/qHXiLcUtRcAzll XCv1q53ls0l80SmcOQQ+io8+jtlF/BNtKBuq2H+4ITziEuii25XjVA== -----END CERTIFICATE-----Generated at Fri Mar 14 13:52:22 2025 by rpki-client