$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa File: 86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa (raw, json) Hash identifier: xMbAUlyssjJFY+K5Imx3CIF/zJ3xLStI9YV2IQY0I34= Subject key identifier: B6:82:5C:2B:47:EB:DD:AB:22:EE:F4:D9:A9:A4:12:F1:FC:22:09:F8 Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F43285848A29B558A7390CAD45B283B80 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 396423 IP address blocks: 23.132.8.0/24 maxlen: 24 198.62.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:55:8a:73:90:ca:d4:5b:28:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=aa12dbc7-7857-4607-8df2-f6a6d565a85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:fe:21:87:c6:01:29:28:83:6d:c0:17:ec: cf:6a:ca:0a:25:b0:1b:d5:61:1d:73:69:d8:4d:fb: ec:f8:5c:44:76:a0:11:b7:f9:a7:81:91:a9:8c:29: 7e:57:92:19:4b:39:54:d2:1f:31:0d:b1:6a:b0:68: 9f:a7:a7:e3:49:d6:2c:89:a9:87:17:df:d1:4e:86: 00:dc:9a:1f:ec:d1:ae:d7:db:16:ed:28:d1:58:bb: 57:65:5e:38:0f:03:01:53:48:5f:70:83:3b:6d:5d: 55:14:8e:01:94:66:ac:7c:d1:08:b0:10:0d:f2:c1: bd:8a:58:54:64:67:1f:74:51:1c:8c:a9:30:b7:b1: 6b:e8:04:7a:92:d4:58:fa:c0:90:6a:df:40:96:61: d2:91:21:22:53:b3:43:75:f3:04:e9:bf:db:5e:22: 5c:6f:6d:84:f9:e8:b1:e9:36:12:20:96:c3:32:46: e6:f0:97:b8:af:0e:ea:ed:63:4c:68:75:ae:f6:19: bf:26:85:f8:5d:4c:9d:03:61:3a:51:f6:e5:56:90: a4:f3:71:8c:9f:b0:e7:14:0c:08:2d:a4:49:5f:bb: ed:46:5f:d1:31:dc:b7:fb:42:94:6b:24:9a:69:9e: 81:a4:64:17:de:e2:e2:91:35:86:dd:f2:b3:54:e1: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:82:5C:2B:47:EB:DD:AB:22:EE:F4:D9:A9:A4:12:F1:FC:22:09:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 198.62.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c9:30:bf:90:06:ac:e0:a7:35:8d:e8:76:f0:32:54:e3:82: 63:c4:86:a8:22:b2:91:c9:f7:42:dc:1a:31:c4:6a:b4:4b:c7: 05:e6:1c:92:23:15:0d:90:63:fe:e7:59:a1:47:ce:17:a4:4f: 50:6d:a1:59:c5:71:4a:2d:0a:ac:e6:5b:00:0a:58:b8:b6:7f: 55:48:02:25:86:b8:f4:9f:06:79:1a:40:d4:85:a4:2b:a8:de: 6a:0c:34:3f:45:10:9d:21:e3:bb:be:ca:bb:89:cb:37:87:0d: 95:40:13:83:46:68:c1:5a:ee:95:5c:95:e7:4d:ad:c3:2b:d0: 9a:0e:cb:20:71:a3:62:a5:bd:47:50:3d:1b:32:ed:4e:5e:14: 49:1a:64:99:2b:b9:e4:16:39:8d:95:4a:b6:1d:a1:93:02:83: 20:10:1d:bb:e1:2d:00:ba:ce:f7:d5:3f:9c:6c:c6:32:9c:40: 54:90:62:37:e7:ed:fb:d8:8f:98:a2:a7:42:f2:53:53:29:f2: f6:c3:52:91:6d:77:1b:bc:29:d7:e7:bc:1c:ea:fe:54:e4:12: 16:ec:c1:51:fe:72:26:72:c8:62:c7:8f:a5:2e:0d:eb:64:98: 37:52:4b:a0:92:52:92:dd:b1:8f:cc:00:80:f5:48:ab:93:c8: 21:42:8b:c9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiim1WKc5DK1FsoO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YWExMmRiYzctNzg1Ny00NjA3LThkZjItZjZhNmQ1NjVhODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvn+IYfGASkog23AF+zPasoKJbAb1WEdc2nY Tfvs+FxEdqARt/mngZGpjCl+V5IZSzlU0h8xDbFqsGifp6fjSdYsiamHF9/RToYA 3Jof7NGu19sW7SjRWLtXZV44DwMBU0hfcIM7bV1VFI4BlGasfNEIsBAN8sG9ilhU ZGcfdFEcjKkwt7Fr6AR6ktRY+sCQat9AlmHSkSEiU7NDdfME6b/bXiJcb22E+eix 6TYSIJbDMkbm8Je4rw7q7WNMaHWu9hm/JoX4XUydA2E6UfblVpCk83GMn7DnFAwI LaRJX7vtRl/RMdy3+0KUaySaaZ6BpGQX3uLikTWG3fKzVOEYxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLaCXCtH692rIu702amkEvH8Ign4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvODZkOWM1NTAtZWU1Ny0z ZWE1LTg5ZTMtYmNiMDA3ZjY2NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4QIAwQA xj6IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIjJML+QBqzgpzWN6HbwMlTjgmPEhqgispHJ90LcGjHEarRL xwXmHJIjFQ2QY/7nWaFHzhekT1BtoVnFcUotCqzmWwAKWLi2f1VIAiWGuPSfBnka QNSFpCuo3moMND9FEJ0h47u+yruJyzeHDZVAE4NGaMFa7pVcledNrcMr0JoOyyBx o2KlvUdQPRsy7U5eFEkaZJkrueQWOY2VSrYdoZMCgyAQHbvhLQC6zvfVP5xsxjKc QFSQYjfn7fvYj5iip0LyU1Mp8vbDUpFtdxu8KdfnvBzq/lTkEhbswVH+ciZyyGLH j6UuDetkmDdSS6CSUpLdsY/MAID1SKuTyCFCi8k= -----END CERTIFICATE-----Generated at Mon Apr 7 20:00:31 2025 by rpki-client