$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa File: cf670401-9d4b-3637-856f-5c947821a74c.roa (raw, json) Hash identifier: r1laKyw8xKjc5vnWASHf4UtLRelOdIxpzZAcM9EUo60= Subject key identifier: D1:C0:55:B8:B0:30:2E:A1:BE:60:1D:27:D4:70:D3:91:E2:C7:E0:F1 Certificate issuer: /CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Certificate serial: 010D0C9F43285848F22BE53DC78318D160E57E00 Authority key identifier: F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 15333 IP address blocks: 23.189.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e5:3d:c7:83:18:d1:60:e5:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=7c0f41d2-6dc7-47d9-83ca-21c23ad3f10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:c9:53:0d:57:e6:0e:c8:67:b7:48:18:b7: 48:42:5f:9c:f3:f4:ac:12:1d:c0:ee:3c:8e:13:54: 45:b4:3c:7c:fc:e7:32:6b:c3:5e:0c:ad:89:56:13: 00:9c:9f:54:e9:fc:45:0d:67:de:e6:05:46:a8:12: 00:be:fd:da:a9:2f:7b:dd:d2:13:83:a5:9e:b4:8a: 13:71:dd:10:f9:b0:fe:e7:8e:b0:91:c6:28:b4:65: b1:9a:ef:5b:10:0a:8a:a8:02:18:26:65:b3:aa:36: 49:bd:73:87:82:4c:92:55:e7:1b:d3:22:1c:81:21: fb:88:e7:61:9a:51:7c:bd:d8:32:2f:a8:71:33:bb: e6:21:dc:62:a5:ad:48:81:31:17:4b:11:86:e1:ef: 4b:2e:a9:07:91:fd:1b:f7:f8:9f:cb:3c:c7:b9:c7: 0e:cb:42:13:ef:00:02:33:3c:74:92:f6:24:03:57: b6:fd:11:87:32:1a:ab:7a:09:a1:27:d3:4d:d9:06: a0:c7:dc:39:a6:85:c7:ae:46:6a:63:38:90:9f:f7: 0e:2e:df:16:f1:77:48:10:a9:25:9a:62:cc:89:95: c4:ca:4a:4c:61:0b:12:68:7d:4f:bf:75:b1:0c:ee: 73:fb:f6:ef:f2:3c:d0:0f:ae:77:7f:8c:68:0b:c7: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C0:55:B8:B0:30:2E:A1:BE:60:1D:27:D4:70:D3:91:E2:C7:E0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl X509v3 Authority Key Identifier: keyid:F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer sbgp-ipAddrBlock: critical IPv4: 23.189.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:80:ef:98:55:72:78:f9:2b:1e:d8:9b:fb:5d:e6:69:34:f9: 43:d3:e4:72:f4:b9:74:e3:bd:37:58:0a:be:57:de:85:12:81: 50:30:8a:31:7e:65:08:e7:4b:eb:75:2c:36:8a:b3:70:c7:51: 15:86:aa:9d:3c:a3:c2:ad:57:df:80:ef:7e:20:1d:e7:7c:5d: e9:30:65:b9:0f:2e:e4:38:72:b9:9e:fa:39:7f:67:48:f9:48: 0c:2d:45:92:cf:0a:02:82:a6:07:3f:81:83:12:c6:38:7c:41: d8:f0:2d:59:64:eb:eb:a6:6b:85:b5:d4:8b:1b:2a:97:8c:99: 6f:7c:97:2b:7e:0f:b7:54:e7:ec:50:56:bd:6c:e0:56:67:f0: 5e:b2:83:70:2d:08:6d:a7:5a:2d:b1:d5:96:ab:18:e3:2c:71: 63:d3:dd:a2:e2:e1:97:be:3a:4e:5c:72:d1:f5:91:a7:45:4d: b8:8a:7c:06:27:cf:ca:13:d0:94:fd:4f:f4:56:13:c0:a3:e9: 58:9c:5d:a0:4e:80:f1:cb:c1:9d:90:8c:98:99:fc:bf:7a:1a: 0a:d6:05:47:92:bc:10:1c:4d:e0:93:c7:0f:2e:b4:ae:63:a4: fc:b8:3e:8a:5e:6d:ce:b2:ba:2c:8a:06:ba:6a:ba:89:b5:9d: 4b:79:5e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+U9x4MY0WDlfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzYWZjYjYtMDhmYi00YmEyLTlkOTYtYTRlMGMzYzFl Mjk5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk N2MwZjQxZDItNmRjNy00N2Q5LTgzY2EtMjFjMjNhZDNmMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5fJUw1X5g7IZ7dIGLdIQl+c8/SsEh3A7jyO E1RFtDx8/Ocya8NeDK2JVhMAnJ9U6fxFDWfe5gVGqBIAvv3aqS973dITg6WetIoT cd0Q+bD+546wkcYotGWxmu9bEAqKqAIYJmWzqjZJvXOHgkySVecb0yIcgSH7iOdh mlF8vdgyL6hxM7vmIdxipa1IgTEXSxGG4e9LLqkHkf0b9/ifyzzHuccOy0IT7wAC Mzx0kvYkA1e2/RGHMhqregmhJ9NN2Qagx9w5poXHrkZqYziQn/cOLt8W8XdIEKkl mmLMiZXEykpMYQsSaH1Pv3WxDO5z+/bv8jzQD653f4xoC8d5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHAVbiwMC6hvmAdJ9Rw05Hix+DxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNh ZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUwYzNjMWUyOTkvY2Y2NzA0MDEtOWQ0Yi0z NjM3LTg1NmYtNWM5NDc4MjFhNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWIzYWZjYjYtMDhmYi00YmEyLTlk OTYtYTRlMGMzYzFlMjk5L2ViM2FmY2I2LTA4ZmItNGJhMi05ZDk2LWE0ZTBjM2Mx ZTI5OS5jcmwwHwYDVR0jBBgwFoAU8a57D7k/Lwnk1YXpfkaIRDqFZa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNhZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUw YzNjMWUyOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuA75hVcnj5Kx7Ym/td5mk0+UPT5HL0uXTjvTdYCr5X3oUSgVAwijF+ ZQjnS+t1LDaKs3DHURWGqp08o8KtV9+A734gHed8XekwZbkPLuQ4crme+jl/Z0j5 SAwtRZLPCgKCpgc/gYMSxjh8QdjwLVlk6+uma4W11IsbKpeMmW98lyt+D7dU5+xQ Vr1s4FZn8F6yg3AtCG2nWi2x1ZarGOMscWPT3aLi4Ze+Ok5cctH1kadFTbiKfAYn z8oT0JT9T/RWE8Cj6VicXaBOgPHLwZ2QjJiZ/L96GgrWBUeSvBAcTeCTxw8utK5j pPy4Popebc6yuiyKBrpquom1nUt5Xsw= -----END CERTIFICATE-----Generated at Sat Apr 12 00:23:29 2025 by rpki-client