$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: ciPhYVukd9a74H2E/3nefp2VDb8W6ceOItURNlGYnoo= Subject key identifier: 60:A7:DA:86:C2:2B:0D:E8:C5:A8:5F:38:3C:EB:95:33:AA:98:3D:B5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEBC2709EAB7E72832780 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:eb:c2:70:9e:ab:7e:72:83:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=9e2c52f9-a977-4ad0-b9bb-fe750c6acdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:bd:c1:37:f3:09:46:eb:a2:77:82:2f:45: 6e:67:e2:e6:a8:c5:19:65:8c:1e:89:e4:e9:e1:c8: 70:e4:06:79:96:2d:59:47:21:86:23:72:93:c9:a9: 33:84:79:fd:4f:3d:7b:29:2c:d0:8c:cb:5a:20:43: 5d:f6:24:cc:51:bf:71:d6:7e:ab:00:6a:05:14:6e: ec:ee:7c:46:c7:4f:20:4f:d7:f3:75:27:5c:62:18: 54:f9:ca:ea:7f:ca:7a:c1:7d:42:12:c5:40:4f:bd: 8e:a1:02:a0:47:ac:be:53:ae:d3:cb:9a:67:fe:c3: fd:22:ad:54:3b:75:18:23:88:4b:90:d2:56:41:22: 7b:11:0c:64:f7:48:c2:de:a1:1d:69:e9:f4:fe:8b: bf:d5:14:03:d3:ae:5d:e3:a6:8c:74:b5:cb:d4:84: 9e:01:1c:36:73:c4:64:0f:0b:1a:93:16:75:4e:53: 7d:b0:73:a1:eb:9d:42:40:af:3a:b7:6b:08:16:c4: d5:d8:70:10:56:83:67:3f:47:a7:4c:a0:11:f7:52: c1:96:91:5b:ab:e1:a6:be:50:49:21:92:72:b5:a2: 14:03:23:fe:27:4c:19:8e:26:0b:e5:85:08:74:a3: 40:a1:50:9d:52:d6:77:6c:e9:78:89:c1:b5:22:50: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:DA:86:C2:2B:0D:E8:C5:A8:5F:38:3C:EB:95:33:AA:98:3D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:15:2f:6f:f1:0d:11:33:eb:bd:2f:a8:43:08:a6:e1:4d:09: 00:6e:b4:48:6f:e3:11:7d:18:7a:49:c4:93:5d:d1:ce:7c:ef: ed:fd:3a:d6:05:1f:30:86:6d:4f:5d:31:94:c9:0f:a4:da:b0: 83:89:9e:4d:df:29:99:26:76:1a:a6:7a:56:24:2c:d7:7e:92: 4f:77:d3:23:db:8e:b3:5a:2f:70:3e:75:ba:ac:f3:9f:28:b9: 5c:4a:b7:46:92:2e:37:87:dd:28:cb:e6:96:80:9c:4d:7d:4d: e9:c5:d2:e0:0f:22:0c:c3:19:99:ca:29:05:a7:c1:d7:c4:04: db:cc:4a:69:c8:82:b5:69:ce:b9:45:49:72:b5:b1:d0:0b:85: 00:88:bf:3b:12:38:87:39:9a:68:ce:ea:aa:21:46:b6:62:dc: f1:5c:77:9c:4e:39:2f:a1:30:86:77:5b:6b:f8:6c:5b:6b:50: 33:47:bb:6a:4d:fb:62:5a:5c:8c:86:cf:06:38:f3:46:a5:ae: aa:26:6a:0d:e3:e0:46:ac:29:45:c0:fb:77:cf:61:e4:da:7b: 8d:e5:5b:f3:3a:81:07:3d:3d:64:65:40:27:32:95:d6:99:00: 36:e5:8b:93:3a:a1:62:02:32:da:4a:08:75:c6:f5:c4:24:5f: ac:1a:b2:0a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+vCcJ6rfnKDJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OWUyYzUyZjktYTk3Ny00YWQwLWI5YmItZmU3NTBjNmFjZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfi9wTfzCUbroneCL0VuZ+LmqMUZZYweieTp 4chw5AZ5li1ZRyGGI3KTyakzhHn9Tz17KSzQjMtaIENd9iTMUb9x1n6rAGoFFG7s 7nxGx08gT9fzdSdcYhhU+crqf8p6wX1CEsVAT72OoQKgR6y+U67Ty5pn/sP9Iq1U O3UYI4hLkNJWQSJ7EQxk90jC3qEdaen0/ou/1RQD065d46aMdLXL1ISeARw2c8Rk DwsakxZ1TlN9sHOh651CQK86t2sIFsTV2HAQVoNnP0enTKAR91LBlpFbq+GmvlBJ IZJytaIUAyP+J0wZjiYL5YUIdKNAoVCdUtZ3bOl4icG1IlDiVQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGCn2obCKw3oxahfODzrlTOqmD21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhBUvb/ENETPrvS+oQwim4U0JAG60SG/j EX0YeknEk13Rznzv7f061gUfMIZtT10xlMkPpNqwg4meTd8pmSZ2GqZ6ViQs136S T3fTI9uOs1ovcD51uqzznyi5XEq3RpIuN4fdKMvmloCcTX1N6cXS4A8iDMMZmcop BafB18QE28xKaciCtWnOuUVJcrWx0AuFAIi/OxI4hzmaaM7qqiFGtmLc8Vx3nE45 L6Ewhndba/hsW2tQM0e7ak37YlpcjIbPBjjzRqWuqiZqDePgRqwpRcD7d89h5Np7 jeVb8zqBBz09ZGVAJzKV1pkANuWLkzqhYgIy2koIdcb1xCRfrBqyCg== -----END CERTIFICATE-----Generated at Fri Apr 4 18:51:57 2025 by rpki-client