$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa File: 98ea8d1f-6d28-3754-8463-218ef6072d68.roa (raw, json) Hash identifier: YmBqM+kw5+rFA7c/HChHGBcQ8Ypk0nKpKFpck2Msea8= Subject key identifier: 1B:53:7C:6A:7C:85:BF:84:0C:47:FB:3B:9A:48:EC:DD:35:F3:C5:27 Certificate issuer: /CN=6205d76d-4f52-4364-a347-5456e5513fc3 Certificate serial: 010D0C9F43285848F22C72FC629A9FBF4B8FC600 Authority key identifier: 51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 23.189.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:fc:62:9a:9f:bf:4b:8f:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6205d76d-4f52-4364-a347-5456e5513fc3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=c877cf4b-faa7-4a57-a514-0036e73e1697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ac:14:70:76:3d:26:dd:63:a8:28:01:75:29: 57:e4:7d:37:21:88:b6:99:44:1b:c7:18:7a:bb:b0: c7:19:a2:8d:8f:d2:fe:aa:7c:65:81:3b:23:7e:d7: 07:4e:7f:e6:5a:ce:ad:86:d2:e5:a7:3c:d3:14:39: b0:71:ea:c6:58:f6:a3:f6:40:60:93:15:56:f9:d7: 27:c6:61:f1:43:7b:8e:64:64:dc:ee:6c:65:89:50: 04:52:76:74:3c:dd:cf:06:c4:2e:c5:fc:7d:f7:59: 5b:d0:81:79:7e:f5:b2:d8:91:ce:9c:57:b6:20:19: d7:94:41:91:17:fc:1c:eb:76:1f:af:63:6b:61:bc: 97:e8:93:42:71:39:4b:26:3b:dc:dc:25:a7:1f:f9: 3c:c2:c9:8c:5b:e3:42:d7:4e:2e:5b:ee:0c:b9:de: 5c:7f:c7:06:5b:1d:76:fc:e3:5a:e7:07:f0:a5:81: 27:d9:63:38:ee:ed:31:56:eb:65:2b:08:1d:3f:e1: 66:8f:69:87:2d:4f:cb:59:2f:34:04:02:eb:1a:c3: b3:a1:52:00:23:1c:25:28:f7:21:1d:b6:ff:3e:55: 81:36:0d:08:66:c0:05:64:85:6a:51:b0:10:3d:bb: b5:b9:3f:e5:cf:29:91:e8:4a:37:17:bd:b2:b8:63: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:53:7C:6A:7C:85:BF:84:0C:47:FB:3B:9A:48:EC:DD:35:F3:C5:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl X509v3 Authority Key Identifier: keyid:51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer sbgp-ipAddrBlock: critical IPv4: 23.189.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c5:fd:50:41:77:90:9a:0f:85:40:fb:fc:d9:ce:6d:ad:90: 9b:fe:58:db:99:e9:6a:58:8f:ba:c2:2b:19:62:bc:47:6b:de: 8c:1e:77:19:49:36:0f:28:5e:63:7a:f6:1e:18:d9:50:15:04: c0:47:42:09:81:f2:3d:78:e2:1a:aa:ea:7a:b2:54:16:c1:a8: fe:1c:37:40:4f:45:94:a2:38:ac:1e:bf:6a:4f:bb:a3:c3:08: 53:6f:4e:02:cc:b2:96:6f:59:b7:5c:28:9f:c4:be:af:c9:5f: 2e:ca:18:31:6e:01:bf:c2:86:74:cb:c2:0f:7c:64:2b:20:f7: f6:41:24:82:ed:72:28:f4:ab:c0:26:ba:20:ad:c2:b0:15:f4: 06:da:a2:94:09:96:a8:d9:ee:45:5d:7a:0d:97:15:23:52:8d: 92:0e:c0:b6:ef:0e:bc:2b:3d:f9:df:e4:71:78:9d:2c:a5:7c: 80:c6:25:d0:07:2f:b8:ef:a0:05:4d:d8:75:47:90:3b:ef:76: cc:1d:cd:bb:b6:be:a0:eb:41:bf:72:ca:5f:16:dc:21:cd:87: 7e:89:ec:82:e9:d9:6b:d6:49:8c:c3:61:6b:9a:26:3e:5e:cc: 77:7b:de:48:67:3a:f1:83:e4:f4:42:8e:c0:38:e8:62:c7:1d: 49:8c:be:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHL8Ypqfv0uPxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIwNWQ3NmQtNGY1Mi00MzY0LWEzNDctNTQ1NmU1NTEz ZmMzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk Yzg3N2NmNGItZmFhNy00YTU3LWE1MTQtMDAzNmU3M2UxNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKwUcHY9Jt1jqCgBdSlX5H03IYi2mUQbxxh6 u7DHGaKNj9L+qnxlgTsjftcHTn/mWs6thtLlpzzTFDmwcerGWPaj9kBgkxVW+dcn xmHxQ3uOZGTc7mxliVAEUnZ0PN3PBsQuxfx991lb0IF5fvWy2JHOnFe2IBnXlEGR F/wc63Yfr2NrYbyX6JNCcTlLJjvc3CWnH/k8wsmMW+NC104uW+4Mud5cf8cGWx12 /ONa5wfwpYEn2WM47u0xVutlKwgdP+Fmj2mHLU/LWS80BALrGsOzoVIAIxwlKPch Hbb/PlWBNg0IZsAFZIVqUbAQPbu1uT/lzymR6Eo3F72yuGMZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtTfGp8hb+EDEf7O5pI7N0188UnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MjA1 ZDc2ZC00ZjUyLTQzNjQtYTM0Ny01NDU2ZTU1MTNmYzMvOThlYThkMWYtNmQyOC0z NzU0LTg0NjMtMjE4ZWY2MDcyZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjIwNWQ3NmQtNGY1Mi00MzY0LWEz NDctNTQ1NmU1NTEzZmMzLzYyMDVkNzZkLTRmNTItNDM2NC1hMzQ3LTU0NTZlNTUx M2ZjMy5jcmwwHwYDVR0jBBgwFoAUUT3ZuhFhekXgSpGo8kmq9aAg8BkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjA1ZDc2ZC00ZjUyLTQzNjQtYTM0Ny01NDU2 ZTU1MTNmYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTF/VBBd5CaD4VA+/zZzm2tkJv+WNuZ6WpYj7rCKxlivEdr3owedxlJ Ng8oXmN69h4Y2VAVBMBHQgmB8j144hqq6nqyVBbBqP4cN0BPRZSiOKwev2pPu6PD CFNvTgLMspZvWbdcKJ/Evq/JXy7KGDFuAb/ChnTLwg98ZCsg9/ZBJILtcij0q8Am uiCtwrAV9AbaopQJlqjZ7kVdeg2XFSNSjZIOwLbvDrwrPfnf5HF4nSylfIDGJdAH L7jvoAVN2HVHkDvvdswdzbu2vqDrQb9yyl8W3CHNh36J7ILp2WvWSYzDYWuaJj5e zHd73khnOvGD5PRCjsA46GLHHUmMvmM= -----END CERTIFICATE-----Generated at Sun Apr 6 06:07:49 2025 by rpki-client