$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/b3b789cd-e8c7-36b8-a0d5-23584205f66d.roa File: b3b789cd-e8c7-36b8-a0d5-23584205f66d.roa (raw, json) Hash identifier: +Ig4YpKFlMGquLiIOJw9PwyQZaMYeNKO91sJbS4BuZ4= Subject key identifier: C0:FC:32:44:6D:7B:FD:84:95:FB:10:9D:23:4B:28:7E:D2:EE:7E:F4 Certificate issuer: /CN=e1029eed-2e88-4036-a7d9-ea093001f5cc Certificate serial: 010D0C9F4328584917DC28050B9C5C4D9D1DE080 Authority key identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/b3b789cd-e8c7-36b8-a0d5-23584205f66d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 23.190.16.0/24 maxlen: 24 2602:fc0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:28:05:0b:9c:5c:4d:9d:1d:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1029eed-2e88-4036-a7d9-ea093001f5cc Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=92b0565c-7162-467d-bd0c-9d9b56b3af91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:c8:d9:cc:a2:56:93:a9:cc:1e:bd:1d:ed: f1:1b:a9:66:bb:94:5f:f7:6d:f6:42:8d:c3:51:b3: b3:8b:7e:0b:de:dd:16:e4:6e:95:1c:ba:15:a8:d7: 19:c5:12:67:c3:d4:19:a0:87:ee:11:a6:f9:cb:a6: 58:d5:d7:89:02:f8:a5:e3:ec:59:57:32:72:0b:3a: 55:d1:60:42:1e:b9:20:fd:3c:b2:88:39:1c:d5:1c: f0:34:d6:89:0a:2b:17:ea:20:61:c3:d2:22:e6:89: 25:02:e2:72:cd:f9:5b:e2:bc:80:f9:54:e4:eb:75: 71:cd:10:96:72:f3:d1:50:83:37:29:01:c1:37:f0: b9:37:da:91:18:b3:d8:e3:08:f5:3d:47:4d:72:5e: 8d:7f:ed:07:3e:b5:39:80:b8:61:15:73:46:0a:90: 8f:8e:ed:0f:d9:eb:26:a4:09:35:77:bf:72:bb:80: 31:6f:54:d8:c2:dd:31:e1:70:07:f9:5c:47:ca:4d: e0:c6:0b:6c:38:a1:f2:fb:8e:7b:3f:84:50:6d:29: f5:ad:5d:eb:e4:59:9d:b3:79:f4:88:f0:dc:ed:3c: 71:04:41:e6:ad:05:70:c0:5e:ed:f5:58:0f:4f:b6: c4:31:e0:23:a0:72:90:a8:7b:4c:c9:5b:86:96:10: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FC:32:44:6D:7B:FD:84:95:FB:10:9D:23:4B:28:7E:D2:EE:7E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/b3b789cd-e8c7-36b8-a0d5-23584205f66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl X509v3 Authority Key Identifier: keyid:05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer sbgp-ipAddrBlock: critical IPv4: 23.190.16.0/24 IPv6: 2602:fc0f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bb:5c:d7:95:7e:4d:72:88:3b:ff:2c:09:ac:d6:8d:e3:64: 99:34:e6:1b:f6:eb:95:dc:90:17:3c:90:ed:bf:6b:b5:2c:3c: 0f:a3:d5:b8:46:a6:29:03:a0:30:3e:15:d1:f0:0d:5d:82:33: d8:6c:85:e8:32:76:0e:8f:1b:fc:e2:26:23:e7:83:ea:14:e3: 40:06:2a:6f:62:33:a6:cf:48:d3:c5:60:aa:c8:33:05:2a:dd: 24:f1:a7:30:db:f9:a3:8a:ad:a5:ae:ed:1e:5a:33:bf:a3:bd: 8b:0b:f6:24:06:cd:a3:e4:a5:4d:61:b2:e7:d8:2b:13:cb:59: 23:be:d2:6f:e8:59:81:82:ee:bc:8d:a6:3c:29:98:34:b7:c5: 27:0f:41:77:73:cf:ef:6e:6f:ac:e9:3a:05:83:1c:dc:05:36: 1a:d9:42:53:b4:8d:6d:f8:5c:d5:4f:03:81:c2:9f:5e:56:08: 50:37:f5:cd:7f:03:12:24:af:d8:2a:41:91:c1:36:74:8e:01: a6:4f:7a:19:64:9c:4d:e8:3a:f1:63:fc:4a:d2:a7:41:f3:6b: 22:b4:06:87:c0:41:25:da:42:2c:5f:40:68:57:bd:c9:23:53: 76:8b:8e:a5:74:93:bf:20:ad:2d:fc:52:32:50:a4:78:23:76: 8a:68:72:60 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkX3CgFC5xcTZ0d4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEwMjllZWQtMmU4OC00MDM2LWE3ZDktZWEwOTMwMDFm NWNjMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OTJiMDU2NWMtNzE2Mi00NjdkLWJkMGMtOWQ5YjU2YjNhZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYbI2cyiVpOpzB69He3xG6lmu5Rf9232Qo3D UbOzi34L3t0W5G6VHLoVqNcZxRJnw9QZoIfuEab5y6ZY1deJAvil4+xZVzJyCzpV 0WBCHrkg/TyyiDkc1RzwNNaJCisX6iBhw9Ii5oklAuJyzflb4ryA+VTk63VxzRCW cvPRUIM3KQHBN/C5N9qRGLPY4wj1PUdNcl6Nf+0HPrU5gLhhFXNGCpCPju0P2esm pAk1d79yu4Axb1TYwt0x4XAH+VxHyk3gxgtsOKHy+457P4RQbSn1rV3r5Fmds3n0 iPDc7TxxBEHmrQVwwF7t9VgPT7bEMeAjoHKQqHtMyVuGlhBaRwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMD8MkRte/2ElfsQnSNLKH7S7n70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMTAy OWVlZC0yZTg4LTQwMzYtYTdkOS1lYTA5MzAwMWY1Y2MvYjNiNzg5Y2QtZThjNy0z NmI4LWEwZDUtMjM1ODQyMDVmNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTEwMjllZWQtMmU4OC00MDM2LWE3 ZDktZWEwOTMwMDFmNWNjL2UxMDI5ZWVkLTJlODgtNDAzNi1hN2Q5LWVhMDkzMDAx ZjVjYy5jcmwwHwYDVR0jBBgwFoAUBYQxwMfr3ZNKgpm3BFhLTAb9VG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMTAyOWVlZC0yZTg4LTQwMzYtYTdkOS1lYTA5 MzAwMWY1Y2MuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF74QMA8E AgACMAkDBwAmAvwPAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcbtc15V+TXKIO/8sCazWjeNkmTTmG/br ldyQFzyQ7b9rtSw8D6PVuEamKQOgMD4V0fANXYIz2GyF6DJ2Do8b/OImI+eD6hTj QAYqb2Izps9I08VgqsgzBSrdJPGnMNv5o4qtpa7tHlozv6O9iwv2JAbNo+SlTWGy 59grE8tZI77Sb+hZgYLuvI2mPCmYNLfFJw9Bd3PP725vrOk6BYMc3AU2GtlCU7SN bfhc1U8DgcKfXlYIUDf1zX8DEiSv2CpBkcE2dI4Bpk96GWScTeg68WP8StKnQfNr IrQGh8BBJdpCLF9AaFe9ySNTdouOpXSTvyCtLfxSMlCkeCN2imhyYA== -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:28 2025 by rpki-client