$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa File: 20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa (raw, json) Hash identifier: X5ZORhllYtFKKqTP5GSMxZ0N5d8lwsohNBNdS4Ynmc0= Subject key identifier: 29:6B:25:9E:EE:13:21:FB:24:CD:4C:48:08:AB:5B:1A:1E:9B:7E:D1 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F43285848DE6E74AC93AFE5CE18244D00 Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa Signing time: Thu 13 Feb 2025 12:18:54 +0000 ROA not before: Thu 13 Feb 2025 12:18:54 +0000 ROA not after: Wed 14 May 2025 11:18:54 +0000 asID: 19684 IP address blocks: 23.174.152.0/24 maxlen: 24 23.174.153.0/24 maxlen: 24 162.254.224.0/21 maxlen: 24 2607:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:6e:74:ac:93:af:e5:ce:18:24:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Feb 13 12:18:54 2025 GMT Not After : May 14 11:18:54 2025 GMT Subject: CN=0185f72c-545b-4457-8ae9-4e519c94d90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4e:c5:c3:52:86:86:47:6a:c0:64:01:69:c3: d7:09:96:58:10:61:61:a4:e0:78:82:b0:5b:9d:8c: c6:da:02:8d:71:6d:b4:f0:ba:58:91:2b:c2:4e:e3: 0c:29:18:2d:3e:15:df:f4:bd:7c:0e:1c:4c:f5:2d: f7:84:8d:41:69:48:1c:58:b7:f4:ee:e3:ac:2e:c8: 01:e0:85:e3:a3:4c:a7:6d:67:42:28:c4:b7:66:b5: e6:89:b9:b2:b9:b9:5b:f3:2c:71:88:3f:ff:68:a0: db:39:88:52:51:e9:51:30:f2:da:0d:c7:20:d2:46: c3:e5:f8:b3:13:c3:e1:85:c7:09:a3:45:ab:3d:f1: 58:82:c8:66:d4:6f:36:4f:0f:b7:a6:30:94:8b:30: 48:54:5f:e0:ec:b9:b7:6c:7a:7e:f7:27:54:33:e6: 68:a3:38:f0:47:62:3c:be:df:50:24:c6:ae:a4:d3: d9:51:fb:52:fb:b2:53:10:77:66:43:ed:e4:21:43: 49:7b:03:8e:1c:29:75:f8:23:69:4c:37:c9:00:1c: bc:74:a7:c0:eb:03:c3:18:96:af:a8:9b:67:c6:27: 4d:a0:29:51:dc:c2:bf:81:e0:e8:e1:d3:cd:65:2c: 7b:fb:6b:09:6f:82:fc:59:dd:37:19:e6:ae:8f:4d: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6B:25:9E:EE:13:21:FB:24:CD:4C:48:08:AB:5B:1A:1E:9B:7E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: 23.174.152.0/23 162.254.224.0/21 IPv6: 2607:9540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:fe:46:29:0d:3d:41:80:b0:fb:ae:2b:51:61:e2:6c:b9:6e: 16:9a:c7:17:a3:ba:46:20:e9:47:d5:6b:27:30:62:b5:18:55: 8a:f4:a3:ee:45:b9:41:3a:8f:ea:c3:a5:8b:d4:4f:f1:ff:ff: 9f:e6:2d:96:1c:e7:e3:9b:c2:ff:0c:c7:bf:bc:5f:ac:ef:db: 41:bb:05:0a:48:07:f6:47:78:23:5c:7a:88:33:51:64:96:ce: df:ce:1e:9f:ef:36:7a:3f:ab:9e:c6:f5:8a:f5:b5:d9:bf:a1: ac:50:fe:e0:91:2a:65:bf:fe:f6:99:15:af:ac:a5:9f:37:c4: 8f:aa:ce:38:02:87:5b:9f:1d:46:d2:b1:83:69:78:17:f9:8a: 04:f8:37:50:de:e8:e0:81:64:2b:6f:e4:5d:d9:e6:30:49:1b: 4f:3d:83:97:61:e1:bf:e4:7f:24:cd:b9:0b:cf:64:3a:e9:79: 1b:8e:72:5b:35:a3:aa:2c:32:a2:f5:4c:81:eb:e6:9c:c2:b2: 34:b7:75:e1:e5:30:98:53:be:9e:af:7b:e0:83:7e:26:49:aa: 28:e3:21:43:a5:2a:62:cf:5a:31:95:a5:e4:a0:87:b9:c4:0e: 91:cb:95:a1:24:e4:0c:d7:8a:59:2a:96:16:13:32:77:56:ba: a9:25:ff:15 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjebnSsk6/lzhgkTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MDIxMzEyMTg1NFoXDTI1MDUxNDExMTg1NFowLzEtMCsGA1UEAxMk MDE4NWY3MmMtNTQ1Yi00NDU3LThhZTktNGU1MTljOTRkOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E7Fw1KGhkdqwGQBacPXCZZYEGFhpOB4grBb nYzG2gKNcW208LpYkSvCTuMMKRgtPhXf9L18DhxM9S33hI1BaUgcWLf07uOsLsgB 4IXjo0ynbWdCKMS3ZrXmibmyublb8yxxiD//aKDbOYhSUelRMPLaDccg0kbD5fiz E8PhhccJo0WrPfFYgshm1G82Tw+3pjCUizBIVF/g7Lm3bHp+9ydUM+ZoozjwR2I8 vt9QJMaupNPZUftS+7JTEHdmQ+3kIUNJewOOHCl1+CNpTDfJABy8dKfA6wPDGJav qJtnxidNoClR3MK/geDo4dPNZSx7+2sJb4L8Wd03Geauj00qKQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFClrJZ7uEyH7JM1MSAirWxoem37RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvMjBmZTEyMTItY2VhYy0z NGQ2LWFiYmMtZmM1ZWEwYmFkZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBF66YAwQD ov7gMA0EAgACMAcDBQAmB5VAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKT+RikNPUGAsPuuK1Fh4my5bhaa xxejukYg6UfVaycwYrUYVYr0o+5FuUE6j+rDpYvUT/H//5/mLZYc5+Obwv8Mx7+8 X6zv20G7BQpIB/ZHeCNceogzUWSWzt/OHp/vNno/q57G9Yr1tdm/oaxQ/uCRKmW/ /vaZFa+spZ83xI+qzjgCh1ufHUbSsYNpeBf5igT4N1De6OCBZCtv5F3Z5jBJG089 g5dh4b/kfyTNuQvPZDrpeRuOcls1o6osMqL1TIHr5pzCsjS3deHlMJhTvp6ve+CD fiZJqijjIUOlKmLPWjGVpeSgh7nEDpHLlaEk5AzXilkqlhYTMndWuqkl/xU= -----END CERTIFICATE-----Generated at Fri Mar 14 15:05:45 2025 by rpki-client