$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa File: a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa (raw, json) Hash identifier: 7IqtRuD1hNx3NYmrggx4l5KCYFl2BXVb7GNOfRZtQtg= Subject key identifier: E0:A9:AC:11:78:B8:E2:C7:8B:F5:93:4D:AF:B1:F3:48:CE:81:80:44 Certificate issuer: /CN=d2799306-5973-45b1-8828-5797abf141e5 Certificate serial: 010D0C9F432858490F7C019F885ABEF1AB6C5F80 Authority key identifier: D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 32281 IP address blocks: 23.159.224.0/24 maxlen: 24 2602:fe31::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:01:9f:88:5a:be:f1:ab:6c:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2799306-5973-45b1-8828-5797abf141e5 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=0ee28f9a-0505-4583-ad26-bfd2df9dc084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:2d:c8:8e:ca:6e:50:cd:b6:41:cf:71:94: 4b:5f:83:dd:76:dc:75:40:8c:31:b9:b3:b6:05:fe: 17:d8:cc:62:83:f8:41:99:75:59:e5:7f:2b:02:94: b9:c8:f4:9e:e0:e5:39:46:d2:a6:90:07:71:a0:e4: cf:5d:22:8e:72:7d:cb:f6:f7:bb:d2:ae:4e:a9:df: 07:b3:79:26:eb:fb:74:16:a7:9d:fd:91:c4:d4:f6: ba:c9:a0:67:49:42:4b:09:d9:7b:de:21:fc:d3:2b: 2c:3f:92:54:28:bb:10:89:c2:12:39:e2:70:2e:2e: 8d:7b:3a:5b:c2:a2:a6:3a:ec:3c:9e:67:22:78:f5: 3e:ca:92:2f:a7:6c:31:1d:93:11:cf:a2:74:4e:28: da:0c:7e:ca:04:f1:66:3c:d3:83:a0:8f:45:6a:53: 63:70:8c:35:97:6a:c2:e5:4e:4d:65:28:b9:9b:9e: 72:6f:5b:b8:18:5d:a7:e8:03:41:61:36:d6:86:80: 2b:22:41:92:47:ee:29:fe:07:a9:07:bb:a2:55:d5: 97:13:05:14:16:87:86:ea:31:e9:a4:46:21:c5:3e: a2:53:9c:0f:14:89:2b:de:87:98:a4:8c:c9:a1:e5: d8:63:80:97:99:d8:8d:bd:c2:d2:aa:28:98:92:df: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A9:AC:11:78:B8:E2:C7:8B:F5:93:4D:AF:B1:F3:48:CE:81:80:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.crl X509v3 Authority Key Identifier: keyid:D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer sbgp-ipAddrBlock: critical IPv4: 23.159.224.0/24 IPv6: 2602:fe31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:dc:98:ff:0f:d9:c4:4c:a1:17:69:e4:b0:b3:4a:88:75:5c: 3a:1c:3c:44:63:25:2c:3a:45:99:de:bf:1c:df:33:af:ec:84: f3:1c:cb:35:7d:5f:aa:65:45:fa:49:bf:4b:e5:c1:44:38:fc: 74:88:34:82:11:9c:ca:19:0e:af:7a:f4:b0:d1:f6:a3:10:77: 95:89:18:33:41:c8:a9:dd:d7:50:5f:7b:91:10:7c:67:70:d2: f5:64:0e:69:dd:f7:4d:84:33:8f:9e:20:3f:c0:b8:52:7f:c4: 44:35:00:e6:14:53:d6:83:1e:03:78:d9:36:f1:e2:c8:93:7a: 8d:1c:ac:ba:d3:c8:44:cc:f6:55:5d:d1:06:3f:ed:c8:f7:10: 58:cb:71:26:95:e5:cc:a2:59:d3:51:90:f8:ae:ce:78:ae:bc: 6e:05:ae:87:6c:d1:1f:f9:1c:55:50:68:39:f8:9a:49:30:46: 0f:51:1e:58:4d:59:ae:fa:0e:08:48:04:50:00:c5:0e:96:d0: e5:04:c7:0f:31:2e:81:3e:e6:bd:5e:b9:fc:85:cb:da:c1:6f: 26:94:33:9e:13:1a:0d:49:58:66:25:8a:ab:04:6f:ac:60:b9: 2b:1b:d1:ee:f8:00:63:cc:a8:d5:aa:94:4c:2e:7f:a3:04:73: 16:54:cb:68 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkPfAGfiFq+8atsX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI3OTkzMDYtNTk3My00NWIxLTg4MjgtNTc5N2FiZjE0 MWU1MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MGVlMjhmOWEtMDUwNS00NTgzLWFkMjYtYmZkMmRmOWRjMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof8tyI7KblDNtkHPcZRLX4Pddtx1QIwxubO2 Bf4X2Mxig/hBmXVZ5X8rApS5yPSe4OU5RtKmkAdxoOTPXSKOcn3L9ve70q5Oqd8H s3km6/t0Fqed/ZHE1Pa6yaBnSUJLCdl73iH80yssP5JUKLsQicISOeJwLi6Nezpb wqKmOuw8nmciePU+ypIvp2wxHZMRz6J0TijaDH7KBPFmPNODoI9FalNjcIw1l2rC 5U5NZSi5m55yb1u4GF2n6ANBYTbWhoArIkGSR+4p/gepB7uiVdWXEwUUFoeG6jHp pEYhxT6iU5wPFIkr3oeYpIzJoeXYY4CXmdiNvcLSqiiYkt+APwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOCprBF4uOLHi/WTTa+x80jOgYBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMjc5 OTMwNi01OTczLTQ1YjEtODgyOC01Nzk3YWJmMTQxZTUvYTBiZDFmY2ItMjdhMi0z OTQ2LThlMTMtMWQxNmYxYjNjNzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDI3OTkzMDYtNTk3My00NWIxLTg4 MjgtNTc5N2FiZjE0MWU1L2QyNzk5MzA2LTU5NzMtNDViMS04ODI4LTU3OTdhYmYx NDFlNS5jcmwwHwYDVR0jBBgwFoAU2epQ9BnagNWxzI/29WbDRtZvZNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMjc5OTMwNi01OTczLTQ1YjEtODgyOC01Nzk3 YWJmMTQxZTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5/gMA4E AgACMAgDBgQmAv4xADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCy3Jj/D9nETKEXaeSws0qIdVw6HDxEYyUs OkWZ3r8c3zOv7ITzHMs1fV+qZUX6Sb9L5cFEOPx0iDSCEZzKGQ6vevSw0fajEHeV iRgzQcip3ddQX3uREHxncNL1ZA5p3fdNhDOPniA/wLhSf8RENQDmFFPWgx4DeNk2 8eLIk3qNHKy608hEzPZVXdEGP+3I9xBYy3EmleXMolnTUZD4rs54rrxuBa6HbNEf +RxVUGg5+JpJMEYPUR5YTVmu+g4ISARQAMUOltDlBMcPMS6BPua9Xrn8hcvawW8m lDOeExoNSVhmJYqrBG+sYLkrG9Hu+ABjzKjVqpRMLn+jBHMWVMto -----END CERTIFICATE-----Generated at Wed Apr 9 06:46:34 2025 by rpki-client