$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa File: e6a5be0c-3342-3531-9d15-9b4cc482f541.roa (raw, json) Hash identifier: dOqpiqdmVb+TKsty63JXjJ5mZp9SabL5jsAjCnZOwYs= Subject key identifier: 8C:7A:87:C6:39:69:2B:3D:C7:1A:06:FF:D2:04:9C:08:0F:0A:87:CB Certificate issuer: /CN=0e527a59-f1c7-4664-a1be-8a0911a07432 Certificate serial: 010D0C9F4328584902EC0923C3E5EB2EF012E300 Authority key identifier: 6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 40864 IP address blocks: 23.159.240.0/24 maxlen: 24 96.125.192.0/20 maxlen: 23 2606:1b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:09:23:c3:e5:eb:2e:f0:12:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e527a59-f1c7-4664-a1be-8a0911a07432 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=fd0ecb05-26d7-4def-8664-b41679c96f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:02:a8:81:ea:66:bd:73:74:bd:15:47:dd: 3d:c4:87:4c:04:4f:4f:cc:40:cb:c7:cb:3e:40:72: 14:bd:df:b1:07:81:91:30:b6:cd:bc:08:b6:87:1a: 43:51:d4:9b:91:68:86:3c:6d:a4:b4:67:c8:27:0a: 40:dc:86:94:1e:b4:09:e1:c3:15:7b:05:7b:f4:0f: a9:45:48:28:a7:e2:f9:1b:fd:1f:01:47:6d:c7:34: 5c:69:2b:06:62:99:e2:d8:ef:51:37:c0:f2:35:f0: b1:06:c5:b7:00:5b:65:29:ea:b2:2e:01:24:6d:60: 0f:0f:4c:58:89:02:08:e3:e0:fe:2e:cb:e3:57:71: a3:ac:72:8d:84:69:7b:d9:cb:ed:93:42:ea:3a:fa: 52:75:2c:90:6b:d8:b8:18:ba:05:44:32:b8:73:f1: c9:88:67:e3:df:73:c4:13:e1:26:b6:d2:62:8e:b3: 14:1c:da:91:16:2c:2d:c1:1e:f9:20:f8:0d:0e:9a: 29:43:ec:ca:d1:b9:cc:9c:62:70:1b:09:1c:36:b5: d6:aa:e3:60:40:87:41:57:5d:04:9d:eb:61:08:56: 6c:d3:93:2f:33:e1:b3:7a:ef:8f:8f:c9:14:24:63: d4:34:2e:4a:eb:f8:da:a5:8b:79:30:a4:e2:24:20: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:87:C6:39:69:2B:3D:C7:1A:06:FF:D2:04:9C:08:0F:0A:87:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl X509v3 Authority Key Identifier: keyid:6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer sbgp-ipAddrBlock: critical IPv4: 23.159.240.0/24 96.125.192.0/20 IPv6: 2606:1b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:a3:1e:1d:e3:91:58:85:2d:72:05:0d:83:12:ca:d7:ef: 88:a8:11:7f:35:54:d8:0e:9a:d1:48:05:30:09:04:ac:75:92: 83:17:0c:c2:7d:44:77:e0:09:3c:cd:08:15:01:09:38:1e:43: 91:eb:a9:2a:35:23:5f:d5:d1:34:57:aa:bd:01:ad:38:a7:e8: 88:0b:03:f0:0f:d2:79:64:f0:3a:2a:43:98:fb:e5:c8:fe:df: 9b:81:5d:55:dd:87:0c:30:37:9a:52:e2:1a:cd:53:ca:77:73: cb:45:a3:41:a5:2e:75:ab:8b:28:cf:62:1f:12:13:d4:06:5a: 42:bb:76:cc:97:fd:a9:9c:78:d6:78:d5:64:a1:7b:f1:c9:02: 2f:ac:72:b9:33:65:2d:1b:46:f7:23:10:94:bf:23:82:f1:e9: 98:91:36:9d:00:f9:db:b6:0c:30:b5:a0:67:8c:33:b5:ad:4e: 3e:3c:51:bf:a6:85:c1:0d:0e:c4:49:f8:88:ce:57:eb:3d:6a: ba:ac:68:be:0f:16:5f:a6:72:0c:11:4e:f2:1d:10:e8:66:a6: fa:d0:98:b7:87:f0:c1:64:c5:3c:3e:3d:f1:0c:92:97:f7:3a: df:17:02:cb:d6:e6:3a:b5:14:aa:04:19:3f:d2:67:e8:d6:f1: 68:ab:ff:15 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEkC7Akjw+XrLvAS4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1MjdhNTktZjFjNy00NjY0LWExYmUtOGEwOTExYTA3 NDMyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZmQwZWNiMDUtMjZkNy00ZGVmLTg2NjQtYjQxNjc5Yzk2ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofkCqIHqZr1zdL0VR909xIdMBE9PzEDLx8s+ QHIUvd+xB4GRMLbNvAi2hxpDUdSbkWiGPG2ktGfIJwpA3IaUHrQJ4cMVewV79A+p RUgop+L5G/0fAUdtxzRcaSsGYpni2O9RN8DyNfCxBsW3AFtlKeqyLgEkbWAPD0xY iQII4+D+LsvjV3GjrHKNhGl72cvtk0LqOvpSdSyQa9i4GLoFRDK4c/HJiGfj33PE E+EmttJijrMUHNqRFiwtwR75IPgNDpopQ+zK0bnMnGJwGwkcNrXWquNgQIdBV10E nethCFZs05MvM+Gzeu+Pj8kUJGPUNC5K6/japYt5MKTiJCCb1wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFIx6h8Y5aSs9xxoG/9IEnAgPCofLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZTUy N2E1OS1mMWM3LTQ2NjQtYTFiZS04YTA5MTFhMDc0MzIvZTZhNWJlMGMtMzM0Mi0z NTMxLTlkMTUtOWI0Y2M0ODJmNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGU1MjdhNTktZjFjNy00NjY0LWEx YmUtOGEwOTExYTA3NDMyLzBlNTI3YTU5LWYxYzctNDY2NC1hMWJlLThhMDkxMWEw NzQzMi5jcmwwHwYDVR0jBBgwFoAUailzhucndVPFfFl2VoGiN+5M3cowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZTUyN2E1OS1mMWM3LTQ2NjQtYTFiZS04YTA5 MTFhMDc0MzIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5/wAwQE YH3AMA0EAgACMAcDBQAmBhuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAESLox4d45FYhS1yBQ2DEsrX74io EX81VNgOmtFIBTAJBKx1koMXDMJ9RHfgCTzNCBUBCTgeQ5HrqSo1I1/V0TRXqr0B rTin6IgLA/AP0nlk8DoqQ5j75cj+35uBXVXdhwwwN5pS4hrNU8p3c8tFo0GlLnWr iyjPYh8SE9QGWkK7dsyX/amceNZ41WShe/HJAi+scrkzZS0bRvcjEJS/I4Lx6ZiR Np0A+du2DDC1oGeMM7WtTj48Ub+mhcENDsRJ+IjOV+s9arqsaL4PFl+mcgwRTvId EOhmpvrQmLeH8MFkxTw+PfEMkpf3Ot8XAsvW5jq1FKoEGT/SZ+jW8Wir/xU= -----END CERTIFICATE-----Generated at Sat Apr 12 14:07:48 2025 by rpki-client