$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa File: 1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa (raw, json) Hash identifier: rctlbAAgsxj+W+U0v3N1ORqL2RZheJ0tFRZsp/tKCXI= Subject key identifier: BB:89:5D:D8:56:8D:3F:8C:D8:DB:B8:D0:2A:C3:01:C9:5A:2C:24:95 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEBE1DFCABAD2A8F64A00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 30633 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:eb:e1:df:ca:ba:d2:a8:f6:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=681d2aaf-3d87-4f4f-b986-a1e3a2e594ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:0c:e1:3e:0b:3f:e9:39:b8:96:9e:54:78: c3:95:31:09:d7:af:ff:01:ef:f6:c3:92:30:bc:b5: b8:5b:96:0d:80:c6:79:98:84:3d:40:18:af:06:77: b3:7a:d2:7d:d4:0c:fa:dd:13:7c:3c:38:5f:34:76: ab:1f:1e:a5:9d:f8:c0:03:5a:2a:d5:82:91:a6:ff: d3:8a:64:8b:ed:c4:a0:f1:5b:88:13:c1:8b:49:03: 03:f3:90:e2:96:2d:61:96:00:8f:1f:73:c4:84:32: ee:7d:dd:eb:e5:8e:67:1a:80:da:76:47:7d:31:2e: 11:13:d9:e0:23:98:11:0f:1e:7c:06:3a:f8:bf:e3: 57:94:7a:8c:14:b6:93:12:54:0e:4f:d0:2c:ad:09: 86:4c:f8:9a:20:2c:77:26:4c:55:4e:d6:cb:96:ee: 00:d6:f7:d2:d9:f5:3c:f5:6e:d8:44:13:df:c2:ba: f0:d9:f1:a4:bb:40:e6:54:0f:8f:36:13:a5:99:d6: 0f:e7:a6:20:02:5b:cf:6d:46:e1:95:bf:00:17:83: 7e:32:b8:f5:a0:37:7e:c6:41:c3:f0:58:cc:8f:10: d5:92:bd:64:f1:6b:7e:30:a8:d1:ed:4e:64:2f:ab: c3:b2:d2:7d:76:d1:b3:e2:ce:5c:36:34:41:6e:f5: e7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:5D:D8:56:8D:3F:8C:D8:DB:B8:D0:2A:C3:01:C9:5A:2C:24:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ca:28:35:7b:0d:07:ec:65:54:fd:64:da:29:61:2b:f1:28: 02:30:38:1b:1a:73:23:a3:d9:dc:cd:57:bb:5a:40:3b:7c:02: 02:ea:08:1b:3f:7f:e2:08:9a:e0:98:3a:f4:bc:4d:d8:47:21: 70:00:aa:16:b0:e5:ac:35:b4:bf:16:94:5f:ac:99:79:57:6f: ff:5c:54:0b:97:c5:6b:42:83:50:cf:fa:81:4f:50:5f:c6:79: 57:ec:cd:d9:6e:70:a3:e1:c4:e6:bd:24:de:c9:8c:34:af:4a: 2d:a1:92:42:5f:c3:e0:02:82:9e:05:e9:ab:34:33:10:e0:f8: ce:8b:8a:7c:4c:40:11:1d:73:62:a2:83:ed:1c:21:cb:d0:d8: ff:1a:cb:a0:dd:76:8c:59:02:45:8c:18:e2:3e:aa:57:11:0e: 5e:da:31:0e:35:87:b6:4b:6e:83:33:87:73:41:2d:62:f6:25: 3a:9f:40:22:7c:cb:2a:7e:b0:b3:53:d4:42:c8:57:be:d2:f9: 48:43:78:37:a6:e3:0b:60:f9:1b:ae:3c:d2:ff:7f:4e:d8:4f: db:fb:4d:99:00:c3:36:cb:9a:bf:3e:6c:35:fc:29:cc:4e:83: f6:60:78:02:f4:3d:8f:1e:d9:61:a1:d7:a3:98:d6:ff:9e:42: 7c:60:3f:f6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+vh38q60qj2SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NjgxZDJhYWYtM2Q4Ny00ZjRmLWI5ODYtYTFlM2EyZTU5NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnMM4T4LP+k5uJaeVHjDlTEJ16//Ae/2w5Iw vLW4W5YNgMZ5mIQ9QBivBnezetJ91Az63RN8PDhfNHarHx6lnfjAA1oq1YKRpv/T imSL7cSg8VuIE8GLSQMD85Dili1hlgCPH3PEhDLufd3r5Y5nGoDadkd9MS4RE9ng I5gRDx58Bjr4v+NXlHqMFLaTElQOT9AsrQmGTPiaICx3JkxVTtbLlu4A1vfS2fU8 9W7YRBPfwrrw2fGku0DmVA+PNhOlmdYP56YgAlvPbUbhlb8AF4N+Mrj1oDd+xkHD 8FjMjxDVkr1k8Wt+MKjR7U5kL6vDstJ9dtGz4s5cNjRBbvXnIQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLuJXdhWjT+M2Nu40CrDAclaLCSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWNhNWYwZTItNzc0OC0z NzJlLWI3ZWUtYTJjZDQ2ODk4YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkcooNXsNB+xlVP1k2ilhK/EoAjA4Gxpz I6PZ3M1Xu1pAO3wCAuoIGz9/4gia4Jg69LxN2EchcACqFrDlrDW0vxaUX6yZeVdv /1xUC5fFa0KDUM/6gU9QX8Z5V+zN2W5wo+HE5r0k3smMNK9KLaGSQl/D4AKCngXp qzQzEOD4zouKfExAER1zYqKD7Rwhy9DY/xrLoN12jFkCRYwY4j6qVxEOXtoxDjWH tktugzOHc0EtYvYlOp9AInzLKn6ws1PUQshXvtL5SEN4N6bjC2D5G6480v9/TthP 2/tNmQDDNsuavz5sNfwpzE6D9mB4AvQ9jx7ZYaHXo5jW/55CfGA/9g== -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:47 2025 by rpki-client