$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa File: 42f8e1d1-c94e-3b17-892c-0a735d44591a.roa (raw, json) Hash identifier: DuZT59e1p9B+Vk88s0DlyACKu79cPS8Wfh0QOna+7XY= Subject key identifier: CF:95:BF:BA:19:E3:D2:75:95:B7:F1:C9:C7:89:09:E4:AB:33:57:2F Certificate issuer: /CN=e7f2d196-f493-41ef-a906-7b0786815678 Certificate serial: 010D0C9F43285848CC7B87F0A94F6E863E0ED980 Authority key identifier: 77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 400545 IP address blocks: 23.136.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:87:f0:a9:4f:6e:86:3e:0e:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f2d196-f493-41ef-a906-7b0786815678 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=d70e2b31-c20a-4add-8757-96057a184077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:52:97:0e:09:0a:df:c4:5f:b7:55:bd:6d: eb:2a:07:48:bf:ba:14:a1:d5:e7:47:d9:2e:67:3e: 18:0f:5f:02:dc:b6:21:8e:0c:10:a8:10:c6:7b:56: ba:56:f8:c2:29:3d:10:50:e2:8b:59:09:8d:b5:c2: 06:2c:32:ec:f0:c9:31:44:44:9f:6e:ef:56:24:03: 0c:21:68:ac:b2:dc:e0:22:00:2e:77:9a:8c:a0:7f: 78:22:97:45:82:15:a7:6e:c8:33:42:a2:28:af:82: ab:0a:f7:49:57:21:dc:a3:04:00:b4:e3:37:8b:bb: 17:54:ea:a9:7b:22:b1:08:a0:b2:6d:c9:04:14:d2: 4e:ec:95:d9:de:ef:c2:c3:27:05:2e:e3:10:33:1a: 09:31:42:25:64:e3:11:91:bf:63:ad:4c:ad:c4:d4: 49:ee:04:0d:e1:7e:a6:ce:69:fb:6d:b5:97:dc:d5: 7c:27:5f:2c:a0:8c:1f:c1:d2:59:53:1b:94:43:ba: 53:c6:35:17:e8:3a:ca:97:d9:49:8b:14:5e:38:af: 73:1f:67:6b:20:c0:d5:4d:08:50:15:91:f8:b3:6c: a0:42:4f:8f:e0:76:68:5d:e5:cf:1f:25:2d:4a:f6: 5d:e9:64:bd:7f:09:ee:f1:79:51:e7:d5:0d:bb:9a: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:95:BF:BA:19:E3:D2:75:95:B7:F1:C9:C7:89:09:E4:AB:33:57:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl X509v3 Authority Key Identifier: keyid:77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer sbgp-ipAddrBlock: critical IPv4: 23.136.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ad:53:c0:7a:1c:19:2b:bc:97:dd:91:0a:58:2f:7c:21:e8: 9b:d8:83:f1:7a:f0:7c:00:14:41:e3:60:c1:17:35:97:e7:26: d3:d2:53:ea:44:1c:4c:5b:bc:15:47:9c:ae:98:3a:e6:0f:39: cd:31:e7:93:30:aa:e3:fe:3b:80:4e:1a:e3:d4:2a:c2:92:31: cd:e3:e1:61:92:58:07:ed:9c:34:40:80:5e:f0:4c:98:79:09: 54:bf:2c:4c:7c:4d:92:ec:fb:1e:36:17:25:ff:72:ad:26:48: b5:28:bb:0c:68:f9:39:8e:71:20:8e:9d:53:ae:17:2a:89:c1: e4:8f:18:dc:2d:ff:d6:40:86:c6:f6:b9:2f:a5:de:64:b3:9e: 20:f7:c4:5a:4e:bb:58:10:62:6c:a0:67:0c:25:4e:cc:19:52: 72:a4:50:8e:70:d9:dd:20:2d:c7:ac:e9:6d:b9:15:14:a2:7a: 47:41:69:d7:9e:4d:4d:08:a6:73:24:1b:be:63:19:c1:fe:04: 37:74:2e:20:41:91:9e:55:ab:93:e7:95:3f:c8:c3:ac:fe:2d: 19:d3:c4:b0:3e:59:ef:2c:31:d5:ec:c0:c7:d7:10:56:fa:2d: b1:ac:b0:b7:e3:fd:5b:c3:05:ef:8a:fe:94:81:ef:7c:ee:c6: 62:7b:bb:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe4fwqU9uhj4O2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmMmQxOTYtZjQ5My00MWVmLWE5MDYtN2IwNzg2ODE1 Njc4MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZDcwZTJiMzEtYzIwYS00YWRkLTg3NTctOTYwNTdhMTg0MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk5Slw4JCt/EX7dVvW3rKgdIv7oUodXnR9ku Zz4YD18C3LYhjgwQqBDGe1a6VvjCKT0QUOKLWQmNtcIGLDLs8MkxRESfbu9WJAMM IWisstzgIgAud5qMoH94IpdFghWnbsgzQqIor4KrCvdJVyHcowQAtOM3i7sXVOqp eyKxCKCybckEFNJO7JXZ3u/CwycFLuMQMxoJMUIlZOMRkb9jrUytxNRJ7gQN4X6m zmn7bbWX3NV8J18soIwfwdJZUxuUQ7pTxjUX6DrKl9lJixReOK9zH2drIMDVTQhQ FZH4s2ygQk+P4HZoXeXPHyUtSvZd6WS9fwnu8XlR59UNu5oIfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+Vv7oZ49J1lbfxyceJCeSrM1cvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lN2Yy ZDE5Ni1mNDkzLTQxZWYtYTkwNi03YjA3ODY4MTU2NzgvNDJmOGUxZDEtYzk0ZS0z YjE3LTg5MmMtMGE3MzVkNDQ1OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTdmMmQxOTYtZjQ5My00MWVmLWE5 MDYtN2IwNzg2ODE1Njc4L2U3ZjJkMTk2LWY0OTMtNDFlZi1hOTA2LTdiMDc4Njgx NTY3OC5jcmwwHwYDVR0jBBgwFoAUd3NjTe0k6LXFTOwZPnbx1vpz+9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lN2YyZDE5Ni1mNDkzLTQxZWYtYTkwNi03YjA3 ODY4MTU2NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHatU8B6HBkrvJfdkQpYL3wh6JvYg/F68HwAFEHjYMEXNZfnJtPSU+pE HExbvBVHnK6YOuYPOc0x55MwquP+O4BOGuPUKsKSMc3j4WGSWAftnDRAgF7wTJh5 CVS/LEx8TZLs+x42FyX/cq0mSLUouwxo+TmOcSCOnVOuFyqJweSPGNwt/9ZAhsb2 uS+l3mSzniD3xFpOu1gQYmygZwwlTswZUnKkUI5w2d0gLces6W25FRSiekdBadee TU0IpnMkG75jGcH+BDd0LiBBkZ5Vq5PnlT/Iw6z+LRnTxLA+We8sMdXswMfXEFb6 LbGssLfj/VvDBe+K/pSB73zuxmJ7u90= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:21 2025 by rpki-client