$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa File: 288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json) Hash identifier: SpYs2Hv2zxyX4OH86LA/OjoHn/EyB0aMTr984bPlmj4= Subject key identifier: D2:51:24:7E:0C:6D:2F:45:0B:7B:8F:AF:49:31:7E:C2:CF:18:D5:C9 Certificate issuer: /CN=194b4d95-965d-467f-835c-6cdeececce61 Certificate serial: 010D0C9F432858494CC9493813B63A3047049800 Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 1062 IP address blocks: 23.166.216.0/24 maxlen: 24 104.166.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:49:38:13:b6:3a:30:47:04:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=8cb8ab5e-85e6-4785-9b8e-d232e8f885a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:5a:3a:30:ee:44:a5:ff:2b:b9:31:a6:28: b0:18:30:68:74:4f:84:6a:ce:2a:0a:a2:61:da:4f: ab:18:b3:79:20:6f:f2:52:3f:e8:19:45:d9:53:6a: a9:21:c8:71:67:7b:4a:7f:1f:70:8f:55:90:70:f5: b5:27:70:86:28:b0:ac:32:b6:cd:12:ff:ab:2d:77: 67:db:1f:96:0d:2f:24:5d:72:3f:35:26:d3:e5:e0: d4:65:a2:db:2c:2a:fa:01:80:8f:c7:af:e7:0c:84: 78:db:23:f1:3b:37:44:f9:45:8a:5d:cc:5b:e2:c2: 11:92:aa:24:d0:b1:f8:0a:67:ff:32:ea:33:02:63: ea:32:a0:fa:c2:e6:fa:44:4f:3b:5d:56:e4:35:98: c8:53:40:2a:16:36:71:56:aa:89:9f:d8:10:aa:d9: f5:af:9d:7f:74:8c:44:16:13:68:f3:ef:a0:2a:6a: 73:ae:2c:9b:c5:1e:0a:a1:6e:3f:25:09:9f:1e:e3: c2:14:45:14:98:b5:72:b4:b0:61:e3:67:af:ff:65: 88:34:c0:f4:52:8d:e8:a0:1d:d4:cc:fb:78:74:58: 8d:8a:4e:b6:c1:04:ad:92:69:6c:28:9b:24:ec:d3: 1e:e1:74:90:0f:d3:c3:06:19:2f:f0:12:e2:e2:1c: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:51:24:7E:0C:6D:2F:45:0B:7B:8F:AF:49:31:7E:C2:CF:18:D5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl X509v3 Authority Key Identifier: keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer sbgp-ipAddrBlock: critical IPv4: 23.166.216.0/24 104.166.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ea:c2:b8:c6:14:8b:1b:00:ab:2f:21:b0:12:c5:f8:9b:79: 63:3a:2f:d6:cc:c1:cd:06:4d:bb:80:98:3c:78:94:41:3e:3c: f4:6e:c5:f1:3d:9d:6c:0d:3b:78:2a:66:11:29:24:b2:93:8a: 3c:69:f3:cb:39:80:c4:e6:d7:58:d9:2a:13:10:1b:69:0a:20: 3c:b2:0c:42:cf:b7:58:58:e3:49:11:53:ce:3a:fb:f8:b2:51: 4f:c0:02:e0:75:0c:14:06:06:7b:fc:50:e5:8a:12:02:cf:3e: 01:81:95:5b:28:15:50:1c:4c:e3:c7:81:62:27:cf:51:43:c6: e1:69:cc:4c:d8:0a:08:1a:e1:86:84:ec:49:f8:09:23:e5:50: 29:b2:26:e0:8e:80:3d:34:2c:cc:c2:5d:23:ae:28:cf:73:81: 82:b6:d5:d9:bd:84:a2:52:1c:96:e8:09:1a:4f:29:bf:75:f2: ab:f7:a8:d7:87:cd:5f:34:bc:66:97:2a:4c:7e:09:62:dd:c0: d4:78:6c:da:2f:af:84:74:3d:90:3a:e5:ac:e8:4e:22:43:c9: 5c:79:86:95:37:7d:d1:72:52:18:a1:fb:83:b7:f9:c5:ca:60: 3f:cf:76:1a:07:31:be:73:21:5b:4c:4e:d9:1e:d1:69:42:23: 16:ed:44:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElMyUk4E7Y6MEcEmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTk0YjRkOTUtOTY1ZC00NjdmLTgzNWMtNmNkZWVjZWNj ZTYxMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OGNiOGFiNWUtODVlNi00Nzg1LTliOGUtZDIzMmU4Zjg4NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VVaOjDuRKX/K7kxpiiwGDBodE+Eas4qCqJh 2k+rGLN5IG/yUj/oGUXZU2qpIchxZ3tKfx9wj1WQcPW1J3CGKLCsMrbNEv+rLXdn 2x+WDS8kXXI/NSbT5eDUZaLbLCr6AYCPx6/nDIR42yPxOzdE+UWKXcxb4sIRkqok 0LH4Cmf/MuozAmPqMqD6wub6RE87XVbkNZjIU0AqFjZxVqqJn9gQqtn1r51/dIxE FhNo8++gKmpzriybxR4KoW4/JQmfHuPCFEUUmLVytLBh42ev/2WINMD0Uo3ooB3U zPt4dFiNik62wQStkmlsKJsk7NMe4XSQD9PDBhkv8BLi4hyOqQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNJRJH4MbS9FC3uPr0kxfsLPGNXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRi NGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2RlZWNlY2NlNjEvMjg4YzEzNzctZDQ1Yy0z Y2U3LTg4YzktMWViYmZhNDFlNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTk0YjRkOTUtOTY1ZC00NjdmLTgz NWMtNmNkZWVjZWNjZTYxLzE5NGI0ZDk1LTk2NWQtNDY3Zi04MzVjLTZjZGVlY2Vj Y2U2MS5jcmwwHwYDVR0jBBgwFoAUL6PHkmAdD3drpwbu4Z7SNOf4kFcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRiNGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2Rl ZWNlY2NlNjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF6bYAwQA aKZ5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADfqwrjGFIsbAKsvIbASxfibeWM6L9bMwc0GTbuAmDx4lEE+ PPRuxfE9nWwNO3gqZhEpJLKTijxp88s5gMTm11jZKhMQG2kKIDyyDELPt1hY40kR U846+/iyUU/AAuB1DBQGBnv8UOWKEgLPPgGBlVsoFVAcTOPHgWInz1FDxuFpzEzY Cgga4YaE7En4CSPlUCmyJuCOgD00LMzCXSOuKM9zgYK21dm9hKJSHJboCRpPKb91 8qv3qNeHzV80vGaXKkx+CWLdwNR4bNovr4R0PZA65azoTiJDyVx5hpU3fdFyUhih +4O3+cXKYD/PdhoHMb5zIVtMTtke0WlCIxbtRKE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:59 2025 by rpki-client