$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa File: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (raw, json) Hash identifier: Xp7PnW/sDZqSAt111zZC1fITpZXQXfFRD+qgz2jL6wE= Subject key identifier: AC:11:31:C3:F6:78:E6:E0:2F:3E:1F:C8:80:E8:93:DA:76:EF:86:80 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F432858492CAE7EA6FD25FEF39A5E8EE0 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 393444 IP address blocks: 23.165.48.0/24 maxlen: 24 2602:fd1c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7e:a6:fd:25:fe:f3:9a:5e:8e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=983d2a4c-4156-4410-b49b-2a1b2760e183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:92:a5:bf:49:d0:b4:8f:1a:2c:11:a6:b6: ad:b9:6e:7e:16:d7:91:66:2c:0e:8e:55:10:0a:7e: aa:29:2e:fa:2f:37:c9:db:f2:c9:76:8e:cf:2f:2d: 18:3b:6d:11:f6:d5:fe:7a:f6:0f:85:1d:98:c2:86: 43:c3:9d:72:ba:a7:3b:c5:26:56:01:b5:47:ab:c0: f9:5c:f6:4c:79:93:7e:f3:35:bf:f1:d2:89:90:83: 87:00:73:9d:52:2d:ca:19:5b:d6:f9:de:40:b1:2d: 55:ee:0f:23:06:29:0a:1a:65:47:93:fc:eb:de:79: 65:43:fa:72:a5:2f:65:39:b9:f6:f9:9e:54:2c:b6: 05:5d:ee:59:aa:c0:0e:be:2b:c2:f0:42:dd:dd:dc: 33:55:b3:b2:c1:10:f2:97:f9:f0:6e:12:60:b9:d2: 1d:a9:97:fa:80:3a:1b:b6:46:d3:1b:80:2e:6a:fe: 1e:d2:b5:cc:5d:22:b1:3a:07:03:06:93:64:d0:09: b1:d8:9f:17:83:f1:ed:4b:66:5d:87:31:bf:e2:00: 4c:bb:71:69:62:5b:28:42:b1:2b:36:63:1c:fd:1d: a6:fb:f9:80:8a:7c:5a:6a:73:7a:89:d5:ce:93:2a: 7b:a7:8e:85:f8:c1:35:dd:a3:ad:02:ee:d5:e1:83: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:11:31:C3:F6:78:E6:E0:2F:3E:1F:C8:80:E8:93:DA:76:EF:86:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 23.165.48.0/24 IPv6: 2602:fd1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:4d:6b:53:7b:4e:3a:dc:7b:27:67:ec:43:48:7a:f5:a1:53: 6f:03:4e:3f:54:7b:88:c1:fe:d3:6e:16:10:6b:65:58:88:95: 3e:c0:22:9e:db:60:bb:f0:77:f4:95:3a:91:b9:18:be:f6:41: 3a:8f:ee:81:30:0e:e2:62:af:2f:fc:cd:73:d2:86:93:9f:2d: 82:d2:17:dc:ec:0d:a4:6d:03:02:f8:14:b6:44:0a:48:27:10: b1:a9:8b:61:44:62:6b:b6:b0:d7:62:a0:ea:bf:fa:71:08:c0: 67:91:44:32:02:cf:20:cc:f2:00:10:54:75:a7:4b:be:90:fe: 7b:d2:99:2d:69:41:3a:9b:94:11:01:cd:0e:52:24:5d:27:df: f0:c5:dc:2b:a4:c9:b1:c3:bb:ce:f3:cc:66:d6:04:d1:6c:a9: 85:9d:d8:76:44:53:f6:4c:3e:75:32:5b:e4:ed:f2:f6:ae:17: 69:8f:41:b2:b2:2f:df:1b:41:de:08:fa:92:b8:98:59:3a:ef: 89:2d:eb:d8:79:62:e3:ac:da:4f:9a:72:63:4c:64:dd:a5:0f: 35:6a:e2:47:92:7e:ae:9b:c1:3b:01:da:bf:5d:d9:26:d8:b4: 06:68:eb:6e:4e:53:9a:0f:1b:d0:33:ce:01:4c:9f:8d:a0:ca: 02:14:84:4b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEksrn6m/SX+85pejuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTgzZDJhNGMtNDE1Ni00NDEwLWI0OWItMmExYjI3NjBlMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDOSpb9J0LSPGiwRpratuW5+FteRZiwOjlUQ Cn6qKS76LzfJ2/LJdo7PLy0YO20R9tX+evYPhR2YwoZDw51yuqc7xSZWAbVHq8D5 XPZMeZN+8zW/8dKJkIOHAHOdUi3KGVvW+d5AsS1V7g8jBikKGmVHk/zr3nllQ/py pS9lObn2+Z5ULLYFXe5ZqsAOvivC8ELd3dwzVbOywRDyl/nwbhJgudIdqZf6gDob tkbTG4Auav4e0rXMXSKxOgcDBpNk0Amx2J8Xg/HtS2ZdhzG/4gBMu3FpYlsoQrEr NmMc/R2m+/mAinxaanN6idXOkyp7p46F+ME13aOtAu7V4YMDowIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKwRMcP2eObgLz4fyIDok9p274aAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvZWIwODljMWItYzVjYi0z Y2FhLWE4NjgtOTUyZmMxMTI0MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6UwMA4E AgACMAgDBgQmAv0cADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyTWtTe0463HsnZ+xDSHr1oVNvA04/VHuI wf7TbhYQa2VYiJU+wCKe22C78Hf0lTqRuRi+9kE6j+6BMA7iYq8v/M1z0oaTny2C 0hfc7A2kbQMC+BS2RApIJxCxqYthRGJrtrDXYqDqv/pxCMBnkUQyAs8gzPIAEFR1 p0u+kP570pktaUE6m5QRAc0OUiRdJ9/wxdwrpMmxw7vO88xm1gTRbKmFndh2RFP2 TD51Mlvk7fL2rhdpj0Gysi/fG0HeCPqSuJhZOu+JLevYeWLjrNpPmnJjTGTdpQ81 auJHkn6um8E7Adq/Xdkm2LQGaOtuTlOaDxvQM84BTJ+NoMoCFIRL -----END CERTIFICATE-----Generated at Sat Apr 12 13:40:20 2025 by rpki-client