$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa File: 0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json) Hash identifier: a/awPOw70QBGUiPazGW+OGHoW+qnC0lfcPRR5x2D6HI= Subject key identifier: 19:08:68:3B:D7:F1:A2:AE:56:B1:5A:30:A9:F9:96:79:42:97:28:01 Certificate issuer: /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Certificate serial: 010D0C9F43285848D0ABB8189F01EC7ED452F8A8 Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 32673 IP address blocks: 23.170.104.0/24 maxlen: 24 2607:7c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b8:18:9f:01:ec:7e:d4:52:f8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=ecc35887-5c69-47a1-b6d6-55877b0b4895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:23:33:d6:ce:69:e7:d7:8f:13:51:cd:8d: 2f:ce:0e:c6:c3:5a:22:ed:3a:52:f7:f4:a2:fa:7f: d8:43:d9:50:93:fd:fa:89:44:99:e7:3b:1a:18:72: 72:c0:a9:00:06:1e:16:ce:38:cd:35:35:0f:f9:bf: 8a:34:2c:74:08:94:a8:36:a5:15:4e:e8:a2:44:9c: d3:9a:20:22:a4:bf:79:64:a4:5a:45:22:f0:a4:41: 21:9f:07:a8:2d:5f:a4:1c:6e:fc:a2:7e:76:c8:6f: 97:27:ef:1e:ae:0e:27:3d:69:c6:40:21:fd:b5:f4: d6:37:5a:2c:a7:77:02:f5:2d:32:37:81:ff:03:e2: db:49:9e:6a:11:63:f0:ba:16:a9:9f:24:0e:ce:24: 30:ad:f3:78:cc:ec:37:21:09:6e:e9:64:c4:8a:54: d8:8d:e7:f9:11:0c:c3:37:8f:a3:df:cb:ac:3e:40: 4f:af:40:27:01:0d:4d:57:55:d4:42:f7:13:0a:a2: 4b:ce:5e:b0:46:69:94:52:1d:6a:d0:16:62:12:1d: 65:91:dd:8d:2e:43:3f:df:9b:8f:9b:d8:a3:b1:2e: e7:3f:be:5e:ff:9e:3d:fa:0c:8d:40:03:67:fa:20: 54:f9:04:1e:a4:dc:46:b7:a5:99:72:0c:73:6b:23: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:08:68:3B:D7:F1:A2:AE:56:B1:5A:30:A9:F9:96:79:42:97:28:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl X509v3 Authority Key Identifier: keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer sbgp-ipAddrBlock: critical IPv4: 23.170.104.0/24 IPv6: 2607:7c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:04:23:1b:27:93:fd:f6:1c:34:74:87:8e:a2:8d:27:c1:46: 0a:ab:65:1e:c5:c5:38:e1:bb:f6:1a:5f:58:9c:cb:e8:24:fd: 2c:ae:9a:8c:8a:eb:68:53:70:22:bd:a3:5e:ff:60:bc:25:66: bd:03:a0:36:93:bc:29:b9:be:5c:53:4e:da:0f:72:f1:e3:0d: cb:5f:8d:2b:79:c5:a7:3b:8b:be:54:f0:cb:1b:df:4f:79:ce: 3f:11:fe:94:0d:ff:74:8e:97:09:4e:46:43:01:dd:68:18:66: 70:56:2f:8e:8a:1d:f7:27:44:0e:ca:88:23:49:e9:cf:1a:21: dc:86:7d:03:df:b5:77:bd:40:bd:ea:8d:a6:be:80:a1:30:5d: 69:90:6c:e8:7a:15:8b:16:f7:20:ac:4e:ca:68:06:a5:a1:da: ae:7f:b8:50:5f:70:65:fe:f1:92:af:fe:58:8b:a4:f3:7d:dd: 69:31:99:81:a6:ed:fe:75:df:1f:de:3d:b9:44:c6:fa:37:f4: 0c:89:1b:95:74:b6:14:6d:96:37:65:7a:17:e0:bc:94:ce:87: 60:2d:56:03:9e:dd:10:35:3d:1a:9d:5d:3d:d0:6a:c3:34:36: 94:63:76:21:6e:5b:d0:f6:e7:50:12:3d:06:7c:c8:07:b9:a6: 0a:38:1c:b3 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEjQq7gYnwHsftRS+KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRmYWFmZGMtMGVmMi00Y2EyLWFiMTEtNjNjODM5ZTdh YTcyMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWNjMzU4ODctNWM2OS00N2ExLWI2ZDYtNTU4NzdiMGI0ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JQjM9bOaefXjxNRzY0vzg7Gw1oi7TpS9/Si +n/YQ9lQk/36iUSZ5zsaGHJywKkABh4WzjjNNTUP+b+KNCx0CJSoNqUVTuiiRJzT miAipL95ZKRaRSLwpEEhnweoLV+kHG78on52yG+XJ+8erg4nPWnGQCH9tfTWN1os p3cC9S0yN4H/A+LbSZ5qEWPwuhapnyQOziQwrfN4zOw3IQlu6WTEilTYjef5EQzD N4+j38usPkBPr0AnAQ1NV1XUQvcTCqJLzl6wRmmUUh1q0BZiEh1lkd2NLkM/35uP m9ijsS7nP75e/549+gyNQANn+iBU+QQepNxGt6WZcgxzayPi/QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBkIaDvX8aKuVrFaMKn5lnlClygBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZh YWZkYy0wZWYyLTRjYTItYWIxMS02M2M4MzllN2FhNzIvMGNhMTBmMzktM2RiMy0z MzllLWExOTktMzU0YTBkYzJhNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjRmYWFmZGMtMGVmMi00Y2EyLWFi MTEtNjNjODM5ZTdhYTcyLzY0ZmFhZmRjLTBlZjItNGNhMi1hYjExLTYzYzgzOWU3 YWE3Mi5jcmwwHwYDVR0jBBgwFoAU0CxwYhADTTQBTumPPl+8Urcni9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4 MzllN2FhNzIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6poMA0E AgACMAcDBQAmB3xAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADUEIxsnk/32HDR0h46ijSfBRgqrZR7FxTjh u/YaX1icy+gk/SyumoyK62hTcCK9o17/YLwlZr0DoDaTvCm5vlxTTtoPcvHjDctf jSt5xac7i75U8Msb3095zj8R/pQN/3SOlwlORkMB3WgYZnBWL46KHfcnRA7KiCNJ 6c8aIdyGfQPftXe9QL3qjaa+gKEwXWmQbOh6FYsW9yCsTspoBqWh2q5/uFBfcGX+ 8ZKv/liLpPN93WkxmYGm7f513x/ePblExvo39AyJG5V0thRtljdlehfgvJTOh2At VgOe3RA1PRqdXT3QasM0NpRjdiFuW9D251ASPQZ8yAe5pgo4HLM= -----END CERTIFICATE-----Generated at Fri Apr 4 19:02:05 2025 by rpki-client