$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa File: e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa (raw, json) Hash identifier: rBNaamGD5xodQlcoAFX9xZu+VSsmbBpqIHmnOo8xPac= Subject key identifier: 38:D0:A5:86:AE:23:B9:36:FE:C6:9A:A8:C3:B4:E2:82:93:CC:0F:F8 Certificate issuer: /CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Certificate serial: 010D0C9F4328584964844BDE101A38B52BA59880 Authority key identifier: CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 400458 IP address blocks: 23.148.104.0/24 maxlen: 24 2602:fbc0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:4b:de:10:1a:38:b5:2b:a5:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=c7dd75dc-d45a-480c-a8ab-0abcb6e21480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:60:75:15:71:b4:9a:da:bb:d2:8f:8e:ba: 77:9b:14:51:e7:2c:05:37:2d:61:4f:3e:41:0d:e3: 88:4f:9f:38:37:36:83:a0:de:34:0c:05:f0:98:9f: 6c:d7:a0:26:2f:a2:75:e9:9a:2a:ac:52:c8:b6:58: de:7e:a4:b4:65:70:bc:ee:72:d7:19:b4:a1:b4:60: ac:48:fe:e8:54:c1:bf:29:6e:5c:c2:07:50:9e:67: e1:36:b9:34:26:cb:aa:07:98:be:0a:60:cf:ec:4f: 46:84:f9:79:63:7d:0e:7b:3e:92:1f:36:99:d4:5e: c5:bf:b2:40:18:48:1e:62:11:3c:1e:f3:dd:82:69: bb:47:0a:3c:59:4d:ac:c3:b4:66:b4:7d:3d:93:ca: 69:ec:da:a5:13:55:ca:4c:2c:14:2c:6a:ed:75:d2: 6d:d7:d0:a8:5c:eb:87:21:20:8d:f9:02:4c:17:cf: 4b:02:65:69:3f:31:b9:2b:b6:62:e7:6f:69:a9:f5: 38:76:65:93:72:fa:23:0a:a4:60:d4:f7:f5:60:c1: d6:d2:d5:d1:87:5f:36:9e:47:87:ce:50:17:23:8a: 6a:db:85:36:e8:e4:38:38:57:6b:17:3a:ad:df:b1: 19:cf:1a:28:41:f2:54:b8:fd:48:a6:cc:b0:fe:ba: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:A5:86:AE:23:B9:36:FE:C6:9A:A8:C3:B4:E2:82:93:CC:0F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl X509v3 Authority Key Identifier: keyid:CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer sbgp-ipAddrBlock: critical IPv4: 23.148.104.0/24 IPv6: 2602:fbc0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:26:43:7b:aa:6e:8e:52:a4:66:19:a2:43:3e:b8:6d:c7:bb: f8:3e:fd:12:37:88:90:70:c9:11:a3:fa:f8:35:b8:5e:70:c3: 1d:1f:f2:4d:64:19:64:dc:1c:8d:ed:50:34:b5:a4:a3:30:e1: 87:a0:09:25:3e:f1:19:a1:e6:a0:5e:81:12:44:9c:ed:07:f6: bf:10:b4:8e:1b:02:42:f9:16:f0:b8:6e:0c:9d:ce:00:c5:61: 49:3e:0c:7a:01:32:a8:ae:13:0e:6e:7f:14:6e:7c:d3:27:7d: f8:fa:e5:54:24:e6:aa:0d:27:13:66:60:13:30:70:2b:e9:71: 10:97:c5:ad:78:ac:0f:ff:a1:7a:76:08:02:3e:d2:7c:a9:df: b1:eb:87:d1:09:2a:ed:39:aa:9b:a8:a0:f7:29:4b:a8:94:38: a3:7f:82:07:90:cd:f8:fe:d8:fa:eb:e3:2e:48:40:b3:e0:34: 19:45:1b:91:32:be:d6:ea:36:4d:c8:82:f6:c3:35:d9:3a:5e: df:2c:24:49:b5:00:36:af:00:69:61:cd:2d:93:c2:3a:6d:c0: 25:06:e9:b1:ab:13:65:4e:70:e4:98:10:7e:97:6a:ed:fd:6e: 24:15:b3:e1:3c:41:3b:4c:13:17:ba:cf:f5:f2:d3:d5:ef:a9: 4c:12:24:54 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElkhEveEBo4tSulmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjOGM2ZjMtNGEyMi00YjA5LTkwYjgtNmY3NGVlOTBi ZWI1MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk YzdkZDc1ZGMtZDQ1YS00ODBjLWE4YWItMGFiY2I2ZTIxNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk9gdRVxtJrau9KPjrp3mxRR5ywFNy1hTz5B DeOIT584NzaDoN40DAXwmJ9s16AmL6J16ZoqrFLItljefqS0ZXC87nLXGbShtGCs SP7oVMG/KW5cwgdQnmfhNrk0JsuqB5i+CmDP7E9GhPl5Y30Oez6SHzaZ1F7Fv7JA GEgeYhE8HvPdgmm7Rwo8WU2sw7RmtH09k8pp7NqlE1XKTCwULGrtddJt19CoXOuH ISCN+QJMF89LAmVpPzG5K7Zi529pqfU4dmWTcvojCqRg1Pf1YMHW0tXRh182nkeH zlAXI4pq24U26OQ4OFdrFzqt37EZzxooQfJUuP1Ipsyw/rqxbQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDjQpYauI7k2/saaqMO04oKTzA/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4 YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0ZWU5MGJlYjUvZTVjZmM1NWQtMGZjNS0z YTIwLWFlZDUtMmNiZTJkYzYzYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDJjOGM2ZjMtNGEyMi00YjA5LTkw YjgtNmY3NGVlOTBiZWI1LzQyYzhjNmYzLTRhMjItNGIwOS05MGI4LTZmNzRlZTkw YmViNS5jcmwwHwYDVR0jBBgwFoAUy1hstB/HLAz+J/uXLb8L6wVG+14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0 ZWU5MGJlYjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5RoMA4E AgACMAgDBgAmAvvAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDCJkN7qm6OUqRmGaJDPrhtx7v4Pv0SN4iQ cMkRo/r4NbhecMMdH/JNZBlk3ByN7VA0taSjMOGHoAklPvEZoeagXoESRJztB/a/ ELSOGwJC+RbwuG4Mnc4AxWFJPgx6ATKorhMObn8UbnzTJ334+uVUJOaqDScTZmAT MHAr6XEQl8WteKwP/6F6dggCPtJ8qd+x64fRCSrtOaqbqKD3KUuolDijf4IHkM34 /tj66+MuSECz4DQZRRuRMr7W6jZNyIL2wzXZOl7fLCRJtQA2rwBpYc0tk8I6bcAl BumxqxNlTnDkmBB+l2rt/W4kFbPhPEE7TBMXus/18tPV76lMEiRU -----END CERTIFICATE-----Generated at Fri Apr 4 18:49:42 2025 by rpki-client