$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa File: 51f23690-2c9e-3571-8cfe-0e89c650c651.roa (raw, json) Hash identifier: KayDOkRJ5scpePk32pKm73XSR8fUgm1mNIol1dRqiHE= Subject key identifier: 16:A5:DF:03:7E:6C:D6:64:D5:78:EA:D3:49:8B:A6:87:57:94:79:EE Certificate issuer: /CN=e7f205fa-32db-476e-9815-f418a58479c3 Certificate serial: 010D0C9F43285848E2D11B5DB238C5E1F24D7400 Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 398041 IP address blocks: 23.146.136.0/24 maxlen: 24 2607:20c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1b:5d:b2:38:c5:e1:f2:4d:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=5918535e-6889-4ac5-994c-de3295b19106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7f:43:2c:b6:00:06:e8:9d:cc:13:1a:25:48: 38:e8:79:09:b0:d2:40:89:10:95:a7:1d:f7:1d:18: 91:32:84:04:40:dd:01:43:b3:17:bf:e3:09:da:82: f6:58:b6:92:74:6d:a6:7d:11:b2:09:c9:5f:9a:e3: 20:c2:49:4d:10:65:d5:d0:1b:b7:2b:80:00:db:39: 84:4a:8e:94:7f:3e:53:82:15:2a:9d:4d:16:46:ab: 49:4e:53:0c:f1:4c:18:77:bc:4f:34:12:df:ee:d9: 67:f0:a8:a0:b9:1c:9b:ad:8d:1a:9d:b9:ef:7b:d6: c6:26:ab:9c:6d:c5:c4:25:b6:b3:83:3a:43:44:52: 39:10:b0:d1:7c:e9:73:14:97:e1:9a:93:6e:14:a4: bc:8a:ff:27:02:a6:b1:0e:11:95:18:e0:13:86:cb: a6:ee:b0:16:4f:1b:e7:d3:45:ad:df:c8:d5:79:df: 4b:02:63:fc:be:54:bd:aa:14:32:f9:37:a6:c3:13: f9:35:a9:89:5a:3a:c0:24:0b:04:9d:7b:b7:14:f5: b2:11:a6:a8:47:d2:0a:4c:bf:5a:bf:20:69:2b:5b: c1:d4:92:d5:31:3e:ab:d8:e2:0c:0e:e6:9b:8e:dc: ca:2b:04:bc:09:77:40:ac:de:7d:e4:4d:33:a7:85: 7f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A5:DF:03:7E:6C:D6:64:D5:78:EA:D3:49:8B:A6:87:57:94:79:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl X509v3 Authority Key Identifier: keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer sbgp-ipAddrBlock: critical IPv4: 23.146.136.0/24 IPv6: 2607:20c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ca:a7:90:41:bd:3c:10:cf:a9:a9:e8:73:1e:bf:5d:2e:70: 88:b6:35:75:01:12:e7:2a:39:7c:74:1b:37:8d:e7:f3:31:13: fb:ee:0b:9a:3e:d0:28:c2:f4:52:f6:69:30:67:a6:86:f8:e3: af:97:b6:c7:e1:0b:a4:5d:61:78:9d:2e:ff:27:0d:25:7e:b3: fc:f6:ee:a0:0d:73:f0:80:f9:96:8c:ee:a6:d6:f9:e8:13:fa: 43:4e:2b:b1:cc:0e:6f:2d:81:5e:ab:73:d3:2c:30:14:69:14: d5:8e:4a:c9:f0:61:e3:19:5d:ae:44:5d:c9:71:06:49:79:b2: c2:d8:2c:e7:83:b9:4e:6a:df:8d:13:20:00:0c:a5:88:4b:f0: 3a:c2:08:f7:76:12:09:0d:0e:6f:e2:ba:1d:e6:d2:7d:71:ee: 04:e4:f5:c8:27:dd:c4:3d:86:56:e1:aa:c6:5f:1d:89:96:6b: f3:34:27:7f:1f:d7:6e:9c:fc:08:06:2f:f5:b4:ff:d1:a0:de: ff:2a:ff:fa:22:cd:0c:3e:10:3a:c9:d0:47:d8:ed:0d:ff:e9: 92:12:b8:07:fb:77:a6:a8:c6:8d:83:1f:cf:45:86:ee:b6:55: 78:15:b7:f1:ce:2e:49:a1:12:ef:16:51:60:8d:f3:d7:ed:fe: 7f:e0:ca:c7 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEji0RtdsjjF4fJNdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmMjA1ZmEtMzJkYi00NzZlLTk4MTUtZjQxOGE1ODQ3 OWMzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NTkxODUzNWUtNjg4OS00YWM1LTk5NGMtZGUzMjk1YjE5MTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj39DLLYABuidzBMaJUg46HkJsNJAiRCVpx33 HRiRMoQEQN0BQ7MXv+MJ2oL2WLaSdG2mfRGyCclfmuMgwklNEGXV0Bu3K4AA2zmE So6Ufz5TghUqnU0WRqtJTlMM8UwYd7xPNBLf7tln8KiguRybrY0anbnve9bGJquc bcXEJbazgzpDRFI5ELDRfOlzFJfhmpNuFKS8iv8nAqaxDhGVGOAThsum7rAWTxvn 00Wt38jVed9LAmP8vlS9qhQy+TemwxP5NamJWjrAJAsEnXu3FPWyEaaoR9IKTL9a vyBpK1vB1JLVMT6r2OIMDuabjtzKKwS8CXdArN595E0zp4V/wQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBal3wN+bNZk1Xjq00mLpodXlHnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lN2Yy MDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4YTU4NDc5YzMvNTFmMjM2OTAtMmM5ZS0z NTcxLThjZmUtMGU4OWM2NTBjNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTdmMjA1ZmEtMzJkYi00NzZlLTk4 MTUtZjQxOGE1ODQ3OWMzL2U3ZjIwNWZhLTMyZGItNDc2ZS05ODE1LWY0MThhNTg0 NzljMy5jcmwwHwYDVR0jBBgwFoAUKk3SLv7NUyuTmDmyXraVXh0jwB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lN2YyMDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4 YTU4NDc5YzMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5KIMA0E AgACMAcDBQAmByDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAD7Kp5BBvTwQz6mp6HMev10ucIi2NXUBEucq OXx0GzeN5/MxE/vuC5o+0CjC9FL2aTBnpob446+XtsfhC6RdYXidLv8nDSV+s/z2 7qANc/CA+ZaM7qbW+egT+kNOK7HMDm8tgV6rc9MsMBRpFNWOSsnwYeMZXa5EXclx Bkl5ssLYLOeDuU5q340TIAAMpYhL8DrCCPd2EgkNDm/iuh3m0n1x7gTk9cgn3cQ9 hlbhqsZfHYmWa/M0J38f126c/AgGL/W0/9Gg3v8q//oizQw+EDrJ0EfY7Q3/6ZIS uAf7d6aoxo2DH89Fhu62VXgVt/HOLkmhEu8WUWCN89ft/n/gysc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:21 2025 by rpki-client