$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa File: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (raw, json) Hash identifier: gfSXQFHTgq90j4LXbCGJfpLVSlymf8Kh/P9V0qBZmO8= Subject key identifier: 5B:F6:28:0D:BE:1C:9D:94:FD:45:8C:69:81:D3:CC:B7:55:92:88:DB Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F43285848F4F6A63FCF2B4FA373663CC0 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 40205 IP address blocks: 23.189.216.0/24 maxlen: 24 2620:cd:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a6:3f:cf:2b:4f:a3:73:66:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b09b9b95-57f7-445d-83a0-b5e16ed5000b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:59:d6:b1:30:66:60:89:94:60:f0:c9:37: b4:36:3c:42:24:7f:92:52:57:52:c4:97:b1:a7:76: d9:c2:34:f3:d2:f0:a2:60:fb:23:09:22:6f:1f:58: a6:85:26:b7:89:ab:b7:bd:07:00:57:bd:07:64:33: be:58:d3:f9:e2:5c:1a:ef:0d:b5:dd:2e:13:d7:9e: b7:09:5e:7d:49:18:af:fb:87:ea:c6:2a:09:26:c4: e7:d8:25:9b:89:92:e1:ab:fd:91:2b:5f:5d:84:0c: 0d:0d:71:09:c3:46:22:5a:ce:2c:36:89:d3:24:74: 01:a2:70:93:6b:df:2a:45:71:f5:10:e8:d8:5c:64: a8:02:9f:8e:27:c9:e4:24:45:5c:32:f4:aa:52:b6: 62:07:a7:77:e4:12:a4:6a:2d:a7:7e:2e:cb:13:a4: 50:39:a9:c1:7d:5c:19:76:b1:cb:3b:19:5a:f4:2b: d8:2a:95:38:68:8d:d9:1c:34:7f:27:f1:23:36:e4: 22:4b:00:e5:e9:c5:23:03:1b:33:59:24:31:73:b8: 1b:12:ec:da:d5:ed:e9:65:74:8c:66:6a:3b:05:0f: a2:03:8c:8e:cc:b4:63:e4:46:f1:0e:56:88:58:30: 04:fd:7b:6d:69:d7:34:14:6e:1b:16:f9:93:63:6b: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:28:0D:BE:1C:9D:94:FD:45:8C:69:81:D3:CC:B7:55:92:88:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: 23.189.216.0/24 IPv6: 2620:cd:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:08:2a:51:95:ea:03:a5:57:c1:b4:ac:8a:77:81:cc:25:7d: 7b:66:57:bc:f3:cc:1c:84:5d:19:17:1c:1d:1f:d3:93:12:f4: 9b:da:93:a9:12:ff:43:60:f3:79:a5:3a:be:5d:9c:ee:3f:e8: 44:8a:73:8c:12:90:cc:e1:5e:7d:5e:68:c3:6e:e8:5c:52:21: fd:c7:03:db:fd:16:c0:73:a5:fc:d0:31:fd:e6:8d:40:3d:40: d5:de:48:7d:33:6b:69:53:18:7d:09:0b:10:33:30:f6:f8:47: b9:24:fa:ed:67:20:4f:3a:d9:58:f1:db:ac:73:3a:b8:02:b1: 98:4e:b3:20:98:23:34:b1:6a:62:c2:43:1b:a2:7e:69:a8:43: ae:aa:f4:a4:02:12:6c:74:d1:15:76:8f:4d:25:ea:4a:20:73: a6:4a:d4:1b:fd:54:e9:7d:bb:3f:9c:5f:be:1c:83:05:65:20: 10:96:e3:27:8f:43:3d:a0:a1:f9:ad:42:c2:c1:89:6e:9d:65: c2:72:09:a8:75:fb:f7:2f:a1:bb:d4:af:00:3d:b8:78:fe:fd: 22:b1:6c:54:46:cd:36:e1:62:7d:56:34:e8:f2:c9:1d:a1:42: 73:e9:a1:c2:14:73:4b:14:7c:cf:7b:b0:c4:74:b6:01:1b:6d: 0e:fa:76:d3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj09qY/zytPo3NmPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjA5YjliOTUtNTdmNy00NDVkLTgzYTAtYjVlMTZlZDUwMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntZ1rEwZmCJlGDwyTe0NjxCJH+SUldSxJex p3bZwjTz0vCiYPsjCSJvH1imhSa3iau3vQcAV70HZDO+WNP54lwa7w213S4T1563 CV59SRiv+4fqxioJJsTn2CWbiZLhq/2RK19dhAwNDXEJw0YiWs4sNonTJHQBonCT a98qRXH1EOjYXGSoAp+OJ8nkJEVcMvSqUrZiB6d35BKkai2nfi7LE6RQOanBfVwZ drHLOxla9CvYKpU4aI3ZHDR/J/EjNuQiSwDl6cUjAxszWSQxc7gbEuza1e3pZXSM Zmo7BQ+iA4yOzLRj5EbxDlaIWDAE/Xttadc0FG4bFvmTY2v2zQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFv2KA2+HJ2U/UWMaYHTzLdVkojbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMDU0NWM4ZDgtMmJlNS0z ODcyLThmYTEtNTU2NjhkMWYxOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF73YMA8E AgACMAkDBwAmIADNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUQgqUZXqA6VXwbSsineBzCV9e2ZXvPPM HIRdGRccHR/TkxL0m9qTqRL/Q2DzeaU6vl2c7j/oRIpzjBKQzOFefV5ow27oXFIh /ccD2/0WwHOl/NAx/eaNQD1A1d5IfTNraVMYfQkLEDMw9vhHuST67WcgTzrZWPHb rHM6uAKxmE6zIJgjNLFqYsJDG6J+aahDrqr0pAISbHTRFXaPTSXqSiBzpkrUG/1U 6X27P5xfvhyDBWUgEJbjJ49DPaCh+a1CwsGJbp1lwnIJqHX79y+hu9SvAD24eP79 IrFsVEbNNuFifVY06PLJHaFCc+mhwhRzSxR8z3uwxHS2ARttDvp20w== -----END CERTIFICATE-----Generated at Sun Apr 6 07:11:10 2025 by rpki-client