$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa File: 7017deb8-bb92-3642-93d0-67e0704f3ba3.roa (raw, json) Hash identifier: ghEpviaGw8dzRHD/0nJVflbQW5ps5qZX4uvGDBwoiHc= Subject key identifier: 39:7C:18:BB:D7:32:ED:06:90:AA:85:7C:FF:52:78:C5:A1:43:6D:DC Certificate issuer: /CN=ef944392-b528-43c2-9abf-e4543229ae2d Certificate serial: 010D0C9F43285848E86663C08C7671C8AA4E8600 Authority key identifier: D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 7029 IP address blocks: 23.188.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:63:c0:8c:76:71:c8:aa:4e:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef944392-b528-43c2-9abf-e4543229ae2d Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=4946504d-474b-4941-aaaa-caa55e797b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:fa:02:cf:6f:2a:49:14:b2:b0:58:45:c9: af:be:5f:6b:c9:a5:de:59:2c:cc:8d:5a:2e:a8:02: cd:c9:ea:ff:1a:07:b5:aa:ab:dc:70:51:9b:ee:48: e0:86:67:1c:35:58:18:46:84:1a:b3:44:2c:65:5c: e4:f4:0c:51:69:53:67:af:a8:dc:be:c9:ce:81:25: 6b:7e:80:7d:b4:ee:0c:61:20:f3:e6:38:6b:92:f7: d1:61:b7:85:6f:66:17:c6:53:87:91:12:21:93:94: 11:b3:a4:3f:d9:38:5b:bf:02:f8:7d:73:52:94:9d: c2:8f:88:b7:73:d8:81:88:9b:a7:9b:b8:fb:41:78: 02:a9:e5:51:a7:8d:13:e1:ec:19:5b:06:32:90:24: fc:69:32:ff:a8:18:46:34:31:73:be:3b:d8:ed:de: 27:ec:c0:75:23:ab:6d:e1:63:5b:3b:93:41:01:93: 23:76:57:16:d7:d7:38:d2:ce:8d:f8:0a:96:56:0e: 3f:51:ad:cd:66:14:31:fe:d5:ee:a4:31:e3:91:70: 83:65:ae:26:7c:71:a4:09:a3:b6:8b:0e:7d:bc:10: 01:80:e4:9c:9e:21:8b:4f:a9:05:c6:b0:c5:ee:8a: 52:71:cc:da:e3:32:93:a1:94:6e:a2:e9:36:89:f6: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:18:BB:D7:32:ED:06:90:AA:85:7C:FF:52:78:C5:A1:43:6D:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl X509v3 Authority Key Identifier: keyid:D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer sbgp-ipAddrBlock: critical IPv4: 23.188.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1c:50:c7:5b:a8:9c:a2:8b:82:8f:d5:69:4e:35:c3:fb:72: 7d:ba:65:17:b0:46:00:d9:34:b7:98:bf:84:b0:d1:c6:53:24: 27:fe:fc:0a:f4:1b:f0:72:58:ea:a5:47:75:41:77:dd:0a:75: 90:6b:fe:3c:cf:79:bf:4d:be:87:90:f2:4a:78:27:40:5b:7d: a0:42:a6:7c:83:4b:c6:c6:d1:7a:a0:b5:81:bd:9a:cf:a5:b7: 74:e1:3d:ab:8f:18:ef:9e:ff:e9:ce:3f:8b:38:d7:d7:a9:47: b3:04:66:50:85:03:42:2b:8f:9d:a1:64:ae:c7:cc:af:6d:4f: cc:bd:b4:a0:4e:8c:76:bb:9e:55:a9:fe:69:be:0f:55:64:f2: 29:ed:63:4d:50:74:73:27:81:1b:13:d8:24:f1:b4:b0:6d:37: c1:c2:51:81:5d:b4:b1:4e:ae:d1:98:67:75:7b:b3:6f:9b:42: cc:81:d8:01:c5:28:6a:30:1e:b7:4d:a2:6d:a0:78:50:94:32: 76:1c:02:0e:30:2b:b2:b8:0d:be:02:cf:9c:1c:c1:7e:4b:bb: d5:42:f6:40:48:63:b5:3a:06:08:27:e6:3e:29:1d:68:64:da: 82:f1:69:db:fa:15:4b:6a:0c:03:f6:7c:de:8d:7d:26:33:7b: 25:8d:d9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmPAjHZxyKpOhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY5NDQzOTItYjUyOC00M2MyLTlhYmYtZTQ1NDMyMjlh ZTJkMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk NDk0NjUwNGQtNDc0Yi00OTQxLWFhYWEtY2FhNTVlNzk3YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsH6As9vKkkUsrBYRcmvvl9ryaXeWSzMjVou qALNyer/Gge1qqvccFGb7kjghmccNVgYRoQas0QsZVzk9AxRaVNnr6jcvsnOgSVr foB9tO4MYSDz5jhrkvfRYbeFb2YXxlOHkRIhk5QRs6Q/2ThbvwL4fXNSlJ3Cj4i3 c9iBiJunm7j7QXgCqeVRp40T4ewZWwYykCT8aTL/qBhGNDFzvjvY7d4n7MB1I6tt 4WNbO5NBAZMjdlcW19c40s6N+AqWVg4/Ua3NZhQx/tXupDHjkXCDZa4mfHGkCaO2 iw59vBABgOScniGLT6kFxrDF7opSccza4zKToZRuouk2ifYnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDl8GLvXMu0GkKqFfP9SeMWhQ23cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0 NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0MzIyOWFlMmQvNzAxN2RlYjgtYmI5Mi0z NjQyLTkzZDAtNjdlMDcwNGYzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWY5NDQzOTItYjUyOC00M2MyLTlh YmYtZTQ1NDMyMjlhZTJkL2VmOTQ0MzkyLWI1MjgtNDNjMi05YWJmLWU0NTQzMjI5 YWUyZC5jcmwwHwYDVR0jBBgwFoAU1ELYop+RoTkRo9YC5PTkP0bN6fQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0 MzIyOWFlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFccUMdbqJyii4KP1WlONcP7cn26ZRewRgDZNLeYv4Sw0cZTJCf+/Ar0 G/ByWOqlR3VBd90KdZBr/jzPeb9NvoeQ8kp4J0BbfaBCpnyDS8bG0XqgtYG9ms+l t3ThPauPGO+e/+nOP4s419epR7MEZlCFA0Irj52hZK7HzK9tT8y9tKBOjHa7nlWp /mm+D1Vk8intY01QdHMngRsT2CTxtLBtN8HCUYFdtLFOrtGYZ3V7s2+bQsyB2AHF KGowHrdNom2geFCUMnYcAg4wK7K4Db4Cz5wcwX5Lu9VC9kBIY7U6Bggn5j4pHWhk 2oLxadv6FUtqDAP2fN6NfSYzeyWN2cA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:39 2025 by rpki-client