$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa File: 23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa (raw, json) Hash identifier: S9k5Pe310URAQMBT2XdTG9Hyd2p68dHluF/jIDoNG0k= Subject key identifier: F7:96:3B:39:99:98:2C:5C:E1:74:F7:0D:1E:2E:3E:FE:0C:74:EE:46 Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Certificate serial: 010D0C9F43285849393E6C9462E3B474895B0CE0 Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 394161 IP address blocks: 199.120.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:6c:94:62:e3:b4:74:89:5b:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=18578b69-bc23-4212-89a8-049b6ae46980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:37:ba:5b:30:be:a6:03:bc:f7:35:7a:62: 4d:62:5b:c7:43:79:ea:53:6c:8c:c2:43:78:d8:6b: 5b:54:1f:19:8b:17:23:1c:15:4e:57:4d:67:7e:32: 1f:88:4b:17:b0:01:2e:0a:b6:8a:2a:9b:e7:ce:c6: c1:e8:2b:f8:78:10:5d:cd:49:6f:bd:08:25:46:2e: ae:d4:3f:d8:99:07:20:14:3a:81:b1:2a:3b:4b:56: 29:c3:42:37:ef:94:c0:db:e7:1c:d0:f6:f7:a8:71: cf:d2:13:ad:e1:17:08:22:9e:4d:e5:bd:c7:55:ac: f2:af:34:67:0d:13:8e:aa:40:ee:3b:4e:b4:ea:1d: 2d:59:6b:49:38:71:7d:a2:ef:76:07:49:5f:34:f0: 51:ca:17:a3:57:d1:1b:27:df:a2:8c:02:36:d7:5e: ed:df:53:87:37:2d:c6:45:6d:0d:b3:1a:4e:bc:6c: f4:62:95:03:b0:75:2c:ab:d7:1a:b1:44:64:79:02: 94:14:45:40:99:e4:c8:01:fd:f0:4f:ea:38:72:00: da:5d:11:75:63:ab:ba:13:99:e0:96:2f:dc:4f:3d: ef:18:9d:79:04:c3:dd:a4:8b:ce:64:0f:dd:2c:36: 9c:b0:0b:68:18:04:2c:08:bd:3f:ad:5f:4d:d2:dd: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:96:3B:39:99:98:2C:5C:E1:74:F7:0D:1E:2E:3E:FE:0C:74:EE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl X509v3 Authority Key Identifier: keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer sbgp-ipAddrBlock: critical IPv4: 199.120.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3b:85:b5:29:45:7d:28:ef:0c:d2:87:4e:65:1a:c4:42:60: 3a:a1:1b:02:89:2a:c0:17:1d:54:8e:c0:4f:5a:db:f2:ff:44: f9:1d:79:d6:63:91:84:37:8b:51:98:ff:eb:7b:96:c4:b6:a4: ee:d6:8b:9c:df:c4:d3:38:07:27:ba:23:68:91:f6:fd:d1:27: 3b:32:d9:0a:ee:32:f5:95:89:cf:49:68:91:72:ff:48:91:68: bd:79:1e:1a:de:e9:36:5d:27:27:c0:c9:ef:23:f0:e7:18:79: 27:7e:a5:23:69:38:8b:67:3c:ec:6a:da:4c:03:74:54:7d:b5: 90:ce:81:5b:bd:de:da:05:ed:25:c4:d4:dd:4c:b8:f6:dd:eb: 83:04:25:63:6c:42:ac:3a:2f:ef:40:77:07:4d:18:4d:02:b9: ba:f6:3c:ef:54:49:dd:58:65:31:17:ea:53:b9:a2:aa:d2:64: 7b:73:c8:c3:76:50:14:84:ad:dd:d4:63:35:cd:0f:80:2a:91: 15:7e:bd:fe:d1:2b:10:aa:2a:39:a7:2e:a8:5b:09:78:58:d2: 95:b7:c4:06:6e:c5:8d:d8:b2:97:d2:19:6d:a7:8b:c1:68:d2: d6:b4:96:65:1b:5b:2e:14:ae:f3:8e:d5:b5:fd:44:f7:d7:62: 10:94:9c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PmyUYuO0dIlbDOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm MmY5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MTg1NzhiNjktYmMyMy00MjEyLTg5YTgtMDQ5YjZhZTQ2OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVI3ulswvqYDvPc1emJNYlvHQ3nqU2yMwkN4 2GtbVB8ZixcjHBVOV01nfjIfiEsXsAEuCraKKpvnzsbB6Cv4eBBdzUlvvQglRi6u 1D/YmQcgFDqBsSo7S1Ypw0I375TA2+cc0Pb3qHHP0hOt4RcIIp5N5b3HVazyrzRn DROOqkDuO0606h0tWWtJOHF9ou92B0lfNPBRyhejV9EbJ9+ijAI2117t31OHNy3G RW0NsxpOvGz0YpUDsHUsq9casURkeQKUFEVAmeTIAf3wT+o4cgDaXRF1Y6u6E5ng li/cTz3vGJ15BMPdpIvOZA/dLDacsAtoGAQsCL0/rV9N0t0P6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeWOzmZmCxc4XT3DR4uPv4MdO5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3 ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvMjNjYzllNzAtZWI0Yi0z ZGEwLTlkMTctZGQ0YmU4Y2U0MjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0 ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3 MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3g4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC87hbUpRX0o7wzSh05lGsRCYDqhGwKJKsAXHVSOwE9a2/L/RPkdedZj kYQ3i1GY/+t7lsS2pO7Wi5zfxNM4Bye6I2iR9v3RJzsy2QruMvWVic9JaJFy/0iR aL15Hhre6TZdJyfAye8j8OcYeSd+pSNpOItnPOxq2kwDdFR9tZDOgVu93toF7SXE 1N1MuPbd64MEJWNsQqw6L+9AdwdNGE0Cubr2PO9USd1YZTEX6lO5oqrSZHtzyMN2 UBSErd3UYzXND4AqkRV+vf7RKxCqKjmnLqhbCXhY0pW3xAZuxY3YspfSGW2ni8Fo 0ta0lmUbWy4UrvOO1bX9RPfXYhCUnHg= -----END CERTIFICATE-----Generated at Wed Apr 9 16:41:04 2025 by rpki-client