$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa File: 0e0fc866-45da-33ff-bcd7-998937e25816.roa (raw, json) Hash identifier: M2zc9R7L+RpZFjRQ+z+OGnUtTy7zfmreTl8g3Wair38= Subject key identifier: A5:D5:FB:17:D1:B8:61:3D:D8:16:79:B2:7D:00:A7:54:02:DC:29:F1 Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F432858489340ABF8AC87694B8087BA80 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 395648 IP address blocks: 23.132.8.0/24 maxlen: 24 2602:fcea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:ab:f8:ac:87:69:4b:80:87:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=068aa50c-699f-4796-aeb4-ba4325187529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:11:5b:2b:61:59:a6:a9:f5:c9:bf:cf:b4: f9:1c:90:29:03:58:9d:8c:40:af:b9:db:5e:95:78: ed:f6:eb:31:0d:d1:2a:6f:1c:47:91:b7:cc:2d:30: 2e:03:a6:2f:98:68:04:fc:8d:d2:3f:06:97:53:1b: 2c:dd:91:66:76:25:b3:cc:3a:d1:e4:3e:95:b0:7a: 34:fb:f8:30:06:3d:ac:04:d8:eb:c9:a6:72:4d:4b: cf:62:b1:c5:a5:a0:68:99:26:f1:fb:e5:fc:09:c2: 86:8a:92:80:6f:dc:32:46:03:f9:e7:dd:68:c5:70: b1:25:1b:e2:47:93:12:b4:df:cb:26:7d:75:56:36: 2d:1d:8e:5e:f4:29:e8:8a:bc:1e:11:ce:06:76:75: ed:c7:88:96:b3:b8:80:52:54:f2:38:4a:2f:2a:e5: 7f:22:55:87:8f:ca:56:b7:42:b2:18:df:60:a7:0d: 71:f9:33:ca:7e:f7:83:1c:21:75:ad:2c:4a:e1:b7: af:e8:24:62:74:48:28:b5:77:d6:3c:11:a6:33:1c: 8d:f4:1d:fa:2f:e5:e5:83:0b:2a:07:13:78:69:3d: 80:90:33:09:06:8e:6d:47:df:aa:fe:09:c6:b8:b1: e1:6a:dc:10:26:ae:92:ed:3a:b8:a6:6b:d8:e5:45: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D5:FB:17:D1:B8:61:3D:D8:16:79:B2:7D:00:A7:54:02:DC:29:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 IPv6: 2602:fcea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6b:bd:0f:23:f9:38:5b:ce:f1:c0:7b:0e:91:6e:6d:5f:17: 03:e0:e3:52:9d:04:82:f0:93:1b:8f:7f:a5:70:9f:1c:f2:d3: b5:7b:39:59:96:a5:5b:34:d6:5e:d0:6d:2d:74:51:8c:0e:b6: 95:db:1b:97:f6:d3:12:64:ca:b3:68:bf:e1:6a:5a:55:1f:28: 0c:70:c7:ef:63:94:c8:a9:e0:d6:03:97:4b:bc:61:ce:07:ca: 8e:b2:32:05:a0:f6:e6:29:a8:3a:fb:41:b1:12:1f:6f:30:7d: 20:d0:0f:92:fa:dc:85:97:b3:a4:e7:d2:e5:8a:8a:32:34:05: e9:60:ff:83:d7:83:dd:dc:37:9d:92:1b:9b:bd:9b:43:e3:4c: 1f:28:0c:fd:12:b5:62:c1:f4:95:1f:9b:d8:ec:b1:65:7c:10: ea:91:4a:1f:39:75:42:19:34:5d:32:4f:e0:fb:37:1a:ae:00: 26:93:53:88:c6:ea:87:94:0c:e0:2f:d9:e5:8c:4e:61:f2:b0: b5:a4:a1:98:10:09:4a:ac:e9:17:c0:fd:72:cb:d0:a7:eb:c1: 87:8b:52:95:c5:f9:ae:f4:87:9f:46:01:3f:9c:e0:44:e4:4c: 9c:be:bc:6e:29:d7:f0:5a:65:60:ce:5c:1f:b4:d5:27:85:f0: 16:5d:13:d6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiTQKv4rIdpS4CHuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk MDY4YWE1MGMtNjk5Zi00Nzk2LWFlYjQtYmE0MzI1MTg3NTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUARWythWaap9cm/z7T5HJApA1idjECvudte lXjt9usxDdEqbxxHkbfMLTAuA6YvmGgE/I3SPwaXUxss3ZFmdiWzzDrR5D6VsHo0 +/gwBj2sBNjryaZyTUvPYrHFpaBomSbx++X8CcKGipKAb9wyRgP5591oxXCxJRvi R5MStN/LJn11VjYtHY5e9CnoirweEc4GdnXtx4iWs7iAUlTyOEovKuV/IlWHj8pW t0KyGN9gpw1x+TPKfveDHCF1rSxK4bev6CRidEgotXfWPBGmMxyN9B36L+Xlgwsq BxN4aT2AkDMJBo5tR9+q/gnGuLHhatwQJq6S7Tq4pmvY5UXEFQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKXV+xfRuGE92BZ5sn0Ap1QC3CnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvMGUwZmM4NjYtNDVkYS0z M2ZmLWJjZDctOTk4OTM3ZTI1ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4QIMA4E AgACMAgDBgQmAvzqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKa70PI/k4W87xwHsOkW5tXxcD4ONSnQSC 8JMbj3+lcJ8c8tO1ezlZlqVbNNZe0G0tdFGMDraV2xuX9tMSZMqzaL/halpVHygM cMfvY5TIqeDWA5dLvGHOB8qOsjIFoPbmKag6+0GxEh9vMH0g0A+S+tyFl7Ok59Ll iooyNAXpYP+D14Pd3DedkhubvZtD40wfKAz9ErViwfSVH5vY7LFlfBDqkUofOXVC GTRdMk/g+zcargAmk1OIxuqHlAzgL9nljE5h8rC1pKGYEAlKrOkXwP1yy9Cn68GH i1KVxfmu9IefRgE/nOBE5EycvrxuKdfwWmVgzlwftNUnhfAWXRPW -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:26 2025 by rpki-client