$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa File: ec69835c-0929-34da-8360-1c7309443e7a.roa (raw, json) Hash identifier: +y/2qb9FVZT+NxSeWMyycIFA0sgfLyiASEqwjnBg0Q0= Subject key identifier: 20:8B:99:10:79:5A:A9:0D:33:14:3B:E9:72:B8:E6:C4:0D:63:2B:53 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F43285848B35B68B6F0C0534363D24800 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 55134 IP address blocks: 23.173.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:68:b6:f0:c0:53:43:63:d2:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=12bbcb80-f05a-4834-a5a8-8e91fe810ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:98:16:60:8e:e8:29:11:43:fd:60:17:aa: 83:49:e5:49:bf:d6:90:e7:27:1a:50:6d:fb:7b:41: 7d:1c:e7:d5:25:57:be:e1:ab:72:32:7d:b9:e9:4b: 0f:04:80:57:3c:a6:f0:f8:35:97:47:cc:2e:df:95: 0a:a4:03:95:a6:1f:03:db:d1:e6:cb:d9:75:c9:ed: b9:a9:5d:41:1f:09:d9:95:75:1b:44:54:64:40:57: cd:f8:a5:8b:f9:28:9c:a5:67:7c:21:8d:2a:94:32: 3b:da:8f:f1:7c:ff:11:1e:a5:a0:32:ca:86:a5:bc: fa:0c:25:a0:69:f8:5d:d9:bf:a5:3b:c8:9c:2d:cb: a8:05:55:fc:f8:52:fe:9e:d9:03:fe:5a:de:d4:eb: 3d:a4:32:ac:3d:29:45:82:ba:12:3a:a5:b3:cc:8f: dc:f4:e5:5a:9e:82:53:56:20:86:94:ee:d1:a2:ae: 05:e9:bf:cc:6e:b0:14:da:b8:8a:4e:05:46:ca:d9: 64:fa:07:c0:4f:87:98:b4:2a:e7:1c:99:10:ab:3d: 01:98:a4:4f:43:b6:1f:8c:fa:5a:7c:99:94:b1:c8: 18:0d:ca:bd:d3:66:3b:98:4c:37:ec:88:d2:88:68: a8:ef:f4:d2:3e:de:be:ac:e1:c3:26:60:d1:f4:70: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8B:99:10:79:5A:A9:0D:33:14:3B:E9:72:B8:E6:C4:0D:63:2B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:36:95:d5:8b:a1:3c:4a:a1:24:fa:84:5c:86:05:21:b9:b3: 7b:40:cf:cb:ee:ee:df:ef:65:dd:28:83:0b:cd:5b:9c:34:36: d4:68:de:a5:44:a9:a8:d2:21:30:fa:0f:3b:18:2c:bc:01:0e: 28:d4:8c:2b:3e:d9:22:8c:d0:28:8e:d4:1f:1b:a1:15:ce:bb: 86:80:d5:4d:85:70:e8:2e:5d:37:59:ac:d2:8e:4e:cc:a7:70: 61:ca:7c:b6:6a:a2:99:10:23:67:be:e8:3b:2d:67:28:5e:ab: 1a:f7:1e:ea:7b:22:3f:2c:17:8a:fc:4c:a9:14:1c:c3:ef:8b: 28:4b:9c:7c:c5:50:42:be:5a:a7:34:af:28:3e:2f:41:a6:5e: 75:85:c5:26:15:20:33:ff:78:76:5a:f7:f7:20:2a:ec:f3:34: 76:10:c6:ee:d0:25:85:40:96:0e:63:4c:5a:fc:68:bd:2c:21: f0:15:0c:99:11:67:cd:78:57:b4:fc:15:53:27:fa:d9:57:36: df:87:49:f5:8c:ef:5b:3f:0c:26:f2:3d:db:9b:7e:8c:fb:cc: 49:90:f2:c1:1c:5d:78:51:31:fd:0a:cc:cc:34:9e:7a:c1:88: ae:2d:fe:76:d7:55:07:f9:98:67:80:c1:a1:64:36:fb:cc:f9: 7d:58:06:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2i28MBTQ2PSSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MTJiYmNiODAtZjA1YS00ODM0LWE1YTgtOGU5MWZlODEwZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveyYFmCO6CkRQ/1gF6qDSeVJv9aQ5ycaUG37 e0F9HOfVJVe+4atyMn256UsPBIBXPKbw+DWXR8wu35UKpAOVph8D29Hmy9l1ye25 qV1BHwnZlXUbRFRkQFfN+KWL+SicpWd8IY0qlDI72o/xfP8RHqWgMsqGpbz6DCWg afhd2b+lO8icLcuoBVX8+FL+ntkD/lre1Os9pDKsPSlFgroSOqWzzI/c9OVanoJT ViCGlO7Roq4F6b/MbrAU2riKTgVGytlk+gfAT4eYtCrnHJkQqz0BmKRPQ7YfjPpa fJmUscgYDcq902Y7mEw37IjSiGio7/TSPt6+rOHDJmDR9HCgwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCLmRB5WqkNMxQ76XK45sQNYytTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvZWM2OTgzNWMtMDkyOS0z NGRhLTgzNjAtMWM3MzA5NDQzZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk2ldWLoTxKoST6hFyGBSG5s3tAz8vu7t/vZd0ogwvNW5w0NtRo3qVE qajSITD6DzsYLLwBDijUjCs+2SKM0CiO1B8boRXOu4aA1U2FcOguXTdZrNKOTsyn cGHKfLZqopkQI2e+6DstZyheqxr3Hup7Ij8sF4r8TKkUHMPviyhLnHzFUEK+Wqc0 ryg+L0GmXnWFxSYVIDP/eHZa9/cgKuzzNHYQxu7QJYVAlg5jTFr8aL0sIfAVDJkR Z814V7T8FVMn+tlXNt+HSfWM71s/DCbyPdubfoz7zEmQ8sEcXXhRMf0KzMw0nnrB iK4t/nbXVQf5mGeAwaFkNvvM+X1YBlw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:45 2025 by rpki-client