$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa File: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (raw, json) Hash identifier: LCCVbj8eQKKddGNcMExitlSfELSRP1FCmhQyhERf0j8= Subject key identifier: AD:05:A1:FA:0C:5D:B4:8D:1B:5E:AA:17:A6:17:82:A4:58:A9:0A:35 Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F43285848A565F9A6FA6EC0A146F27A80 Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 400586 IP address blocks: 23.134.104.0/24 maxlen: 24 2602:fb98::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f9:a6:fa:6e:c0:a1:46:f2:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=1ffea34b-e3a1-4427-9922-89484b302c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f6:25:56:0c:83:7d:30:49:39:9f:73:a7:c8: c6:da:d6:81:3a:c5:47:b3:90:2a:4b:83:5d:bd:4d: 7f:70:de:8b:a5:1b:58:44:73:e0:4a:92:fc:5e:f1: 5e:da:02:e9:e0:1d:7c:33:07:ff:a0:b1:26:2f:e3: 65:12:71:20:00:68:9e:8d:bf:b0:79:48:d2:08:95: c8:55:2d:56:32:d0:7b:d1:51:69:14:f0:44:90:a4: 9c:ad:75:eb:05:b4:a6:5f:d9:da:2f:19:21:fc:df: dd:c7:ba:46:15:07:9c:c4:b1:99:e3:12:93:a6:d1: 36:b0:b4:67:16:d9:7b:e0:38:a2:30:3f:72:f2:9f: 3e:0e:d8:c4:d3:1f:d8:b9:6e:56:71:38:4b:8a:21: c4:56:56:8d:2c:70:a9:40:dc:98:77:5f:0f:7c:26: 1f:f2:70:d8:52:7d:8f:1a:9e:e8:47:68:b0:86:42: 27:89:67:a4:45:6a:ee:e0:a4:15:fa:9b:5a:f6:9e: 6d:50:b8:37:ec:84:35:41:b1:ca:ee:aa:89:68:83: 43:77:d7:8c:67:51:90:78:8d:de:f7:95:ba:ff:d2: eb:01:5c:54:84:94:32:64:a9:58:00:1a:74:2b:5c: fe:11:8a:2d:d9:69:76:53:97:83:fa:5d:96:9d:d7: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:05:A1:FA:0C:5D:B4:8D:1B:5E:AA:17:A6:17:82:A4:58:A9:0A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: 23.134.104.0/24 IPv6: 2602:fb98::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c2:8e:21:09:88:ed:ce:1d:d3:8c:40:bd:f2:cb:52:aa:d1: 40:98:27:4c:4e:0a:b7:3d:ee:d2:11:a9:2d:9e:ed:8f:92:b2: b6:8c:74:5f:1b:26:46:ad:0e:59:f6:a1:7a:c0:5a:aa:e5:81: 16:3a:55:4d:75:a9:d5:c3:6e:ba:c1:0a:67:3c:a5:23:6e:d0: 75:09:35:aa:d6:d5:88:24:9e:b8:67:c7:36:51:9d:71:c1:98: ee:cf:58:51:18:34:ac:ba:ba:69:55:9f:6f:68:9f:be:0f:5e: b5:39:ba:2c:f1:0f:9d:24:4b:8f:5c:09:ef:42:d7:7f:23:b9: 02:1e:82:e6:cf:cc:91:2b:2e:15:8a:d0:c9:28:bd:5d:14:13: b8:a9:6c:f3:db:fd:76:b8:09:1f:8d:07:93:96:b9:21:cb:a9: 08:ea:63:c9:e8:16:f6:21:86:23:f8:73:44:a1:e7:80:b0:3e: 05:e1:9c:cd:2e:8f:5a:e5:58:bf:c1:5f:fe:ad:d9:a1:16:31: bf:ae:79:a9:ac:df:35:02:30:af:65:0b:c9:c6:ee:f1:f5:82: 2f:ef:a4:f4:00:df:e1:81:83:65:eb:2f:73:d6:14:75:2a:07: f4:15:71:88:a4:3e:81:26:3f:8f:7d:b2:3b:f1:43:39:d9:a9: cd:f4:89:2b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEilZfmm+m7AoUbyeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk MWZmZWEzNGItZTNhMS00NDI3LTk5MjItODk0ODRiMzAyYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvYlVgyDfTBJOZ9zp8jG2taBOsVHs5AqS4Nd vU1/cN6LpRtYRHPgSpL8XvFe2gLp4B18Mwf/oLEmL+NlEnEgAGiejb+weUjSCJXI VS1WMtB70VFpFPBEkKScrXXrBbSmX9naLxkh/N/dx7pGFQecxLGZ4xKTptE2sLRn Ftl74DiiMD9y8p8+DtjE0x/YuW5WcThLiiHEVlaNLHCpQNyYd18PfCYf8nDYUn2P Gp7oR2iwhkIniWekRWru4KQV+pta9p5tULg37IQ1QbHK7qqJaINDd9eMZ1GQeI3e 95W6/9LrAVxUhJQyZKlYABp0K1z+EYot2Wl2U5eD+l2WndfwDwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFK0FofoMXbSNG16qF6YXgqRYqQo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvZDUwNWY2ODAtZGRkOS0z NjFkLTgyNDAtOTUxOGQxN2Y2YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZoMA4E AgACMAgDBgAmAvuYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGwo4hCYjtzh3TjEC98stSqtFAmCdMTgq3 Pe7SEaktnu2PkrK2jHRfGyZGrQ5Z9qF6wFqq5YEWOlVNdanVw266wQpnPKUjbtB1 CTWq1tWIJJ64Z8c2UZ1xwZjuz1hRGDSsurppVZ9vaJ++D161Obos8Q+dJEuPXAnv Qtd/I7kCHoLmz8yRKy4VitDJKL1dFBO4qWzz2/12uAkfjQeTlrkhy6kI6mPJ6Bb2 IYYj+HNEoeeAsD4F4ZzNLo9a5Vi/wV/+rdmhFjG/rnmprN81AjCvZQvJxu7x9YIv 76T0AN/hgYNl6y9z1hR1Kgf0FXGIpD6BJj+PfbI78UM52anN9Ikr -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:30 2025 by rpki-client