$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/43d9c709-1869-3602-ba60-82f81826def9.roa File: 43d9c709-1869-3602-ba60-82f81826def9.roa (raw, json) Hash identifier: 2CoeQ33jgK+8seDICFbh10mFvEo+8cYXrJe+fMODRKw= Subject key identifier: 5C:1A:5A:75:E6:BF:82:44:57:45:F8:91:B4:8B:AA:8B:AA:E4:DE:11 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F432858488DAB3D44837F5F1C0B636280 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/43d9c709-1869-3602-ba60-82f81826def9.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 54041 IP address blocks: 23.142.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:3d:44:83:7f:5f:1c:0b:63:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=a4dde11c-0c00-43cc-9447-54326f972076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:33:9f:c3:fc:64:b8:22:75:ce:b1:a2:a7: 31:a6:f8:b1:86:f1:77:1d:c9:97:7f:db:bf:f8:bb: c8:37:1f:2b:5e:ad:d3:bd:92:a4:ac:08:f3:3b:48: 2d:5c:4d:7d:71:97:be:91:e5:51:46:94:ae:d7:2d: a8:1a:e5:2b:78:83:7b:86:21:c0:d9:6c:1f:8c:8e: be:90:10:6e:9e:88:15:4f:a8:22:69:ab:ba:13:b8: 65:ed:23:31:02:28:c5:f2:77:44:84:0c:30:11:35: 02:80:5b:df:89:02:e7:78:13:fc:7d:70:1f:82:27: 1f:e1:d2:89:57:55:f0:ec:f4:42:31:72:98:e3:01: b8:b6:ab:4a:6a:50:15:20:79:f3:34:fd:66:59:79: 4e:50:fb:71:16:ea:da:bb:88:8c:d7:2d:57:e3:47: e3:2f:af:e3:95:e2:c9:53:50:e4:4b:76:53:34:43: 53:d7:6e:41:6e:e7:cd:0f:a5:1f:f1:63:9e:53:4c: db:18:c2:07:63:4a:07:69:9f:41:30:a6:43:f3:55: b3:5a:d1:19:96:cd:40:35:9b:5e:e1:c3:14:ff:36: fc:97:1f:fd:55:28:16:89:6d:a4:4e:2f:45:a4:17: b0:18:cb:b5:cf:e0:22:cc:4b:22:81:ff:26:70:ca: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1A:5A:75:E6:BF:82:44:57:45:F8:91:B4:8B:AA:8B:AA:E4:DE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/43d9c709-1869-3602-ba60-82f81826def9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:38:15:05:30:83:bb:ae:a1:3f:ba:47:80:d4:aa:4d:e2:37: 16:df:ad:5a:a8:54:f6:24:4c:30:8e:e5:d6:eb:4a:66:13:bc: 3c:f6:ac:88:d5:9a:65:0f:cc:a3:c1:02:4f:6e:9b:f4:19:6d: 49:4c:aa:96:6e:22:87:18:bf:2b:76:87:6e:dd:53:07:b2:a5: 98:ec:13:0c:24:b9:56:d1:39:39:22:44:c7:55:f3:68:ba:6d: f4:59:34:b0:17:29:59:70:a1:78:7c:38:4c:3f:fa:06:97:13: 6f:40:d4:9e:8a:d4:b0:cd:23:b7:f9:38:2e:77:93:4b:4b:37: e3:ba:05:e9:1b:d5:51:19:d6:bf:7c:65:4e:8e:27:28:8f:04: 6b:00:83:ee:5a:7f:be:0a:ef:35:aa:95:5b:44:09:ec:3b:95: a2:96:fc:a7:33:ce:7b:db:51:4a:36:5b:d9:df:a3:83:25:10: 91:e9:b0:f8:68:84:1a:74:eb:9c:54:48:b5:00:2e:89:cb:74: 00:69:9d:18:a0:bd:46:46:15:5f:8e:4d:11:cd:a1:ef:eb:88: 16:e8:a1:6c:75:72:87:f5:e2:48:7f:96:26:ca:67:81:ac:84: f0:a5:0d:12:eb:2b:0a:25:4b:cf:e4:b4:60:f1:3e:b5:ea:5b: b6:c1:b5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNqz1Eg39fHAtjYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk YTRkZGUxMWMtMGMwMC00M2NjLTk0NDctNTQzMjZmOTcyMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmykzn8P8ZLgidc6xoqcxpvixhvF3HcmXf9u/ +LvINx8rXq3TvZKkrAjzO0gtXE19cZe+keVRRpSu1y2oGuUreIN7hiHA2WwfjI6+ kBBunogVT6giaau6E7hl7SMxAijF8ndEhAwwETUCgFvfiQLneBP8fXAfgicf4dKJ V1Xw7PRCMXKY4wG4tqtKalAVIHnzNP1mWXlOUPtxFurau4iM1y1X40fjL6/jleLJ U1DkS3ZTNENT125BbufND6Uf8WOeU0zbGMIHY0oHaZ9BMKZD81WzWtEZls1ANZte 4cMU/zb8lx/9VSgWiW2kTi9FpBewGMu1z+AizEsigf8mcMrTRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwaWnXmv4JEV0X4kbSLqouq5N4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvNDNkOWM3MDktMTg2OS0z NjAyLWJhNjAtODJmODE4MjZkZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo4FQUwg7uuoT+6R4DUqk3iNxbfrVqoVPYkTDCO5dbrSmYTvDz2rIjV mmUPzKPBAk9um/QZbUlMqpZuIocYvyt2h27dUweypZjsEwwkuVbROTkiRMdV82i6 bfRZNLAXKVlwoXh8OEw/+gaXE29A1J6K1LDNI7f5OC53k0tLN+O6Bekb1VEZ1r98 ZU6OJyiPBGsAg+5af74K7zWqlVtECew7laKW/KczznvbUUo2W9nfo4MlEJHpsPho hBp065xUSLUALonLdABpnRigvUZGFV+OTRHNoe/riBbooWx1cof14kh/libKZ4Gs hPClDRLrKwolS8/ktGDxPrXqW7bBta4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:24 2025 by rpki-client