$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa File: 44a7008f-8c8e-3393-bd69-b78e24b4387a.roa (raw, json) Hash identifier: MK347OS0hqMErmVdVCBej0eew+dG1geHr3l+gSmGL48= Subject key identifier: F4:7C:76:A0:AB:DB:78:66:CF:90:84:87:C3:AE:19:B2:67:0F:22:F6 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEC00314A41838723B5B0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 7203 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ec:00:31:4a:41:83:87:23:b5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=e526e5ee-20e3-4497-adbd-7661e0737d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:9b:49:74:b3:ec:e1:28:e4:f2:07:71:ba: 5e:02:ec:52:e4:06:e2:e5:1f:b9:b4:30:dc:46:8c: 37:76:6a:d9:d0:fb:c5:0d:51:6b:1d:60:e1:c5:d8: e3:1b:ab:6a:18:ed:26:97:59:92:1b:7d:e2:f1:62: da:fe:f8:a1:8b:76:4d:4a:4f:41:35:77:1c:88:e8: 20:93:46:0f:d5:80:06:c2:17:a0:25:fc:7a:ae:52: 22:02:3e:64:81:36:13:08:be:88:84:08:67:6c:33: c3:4b:a3:6e:fb:67:22:a8:9b:b9:44:24:27:fc:97: 17:9d:2a:aa:d5:11:d4:ed:fc:ad:2c:91:ef:6d:24: 47:80:ca:a8:a3:e4:82:86:e6:d5:fc:3b:33:87:3f: fe:54:9e:c0:95:e8:c0:26:2d:de:30:e5:5f:dd:a4: 66:4a:0e:1e:c8:ab:ae:53:a1:f3:87:3a:40:08:ca: f5:d4:22:00:28:15:30:e1:0a:21:ae:62:fd:96:7d: 2f:b9:e8:0e:ba:39:34:a0:a1:bc:ff:97:cf:09:ca: 5a:ce:d1:69:bf:7b:de:02:cd:7d:fd:bd:46:c3:30: a0:49:1b:65:17:a1:34:0c:8d:13:f6:cb:2d:b8:99: b2:aa:24:72:88:70:f7:90:49:a2:4a:20:8c:72:10: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7C:76:A0:AB:DB:78:66:CF:90:84:87:C3:AE:19:B2:67:0F:22:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:82:d1:14:f4:8f:01:7a:8e:79:c4:fb:ee:08:44:a1:29:07: 4d:1d:4c:65:df:8b:a5:e1:90:ed:76:1d:b8:93:0a:6d:48:84: 18:d0:c0:de:52:8f:1e:35:cd:88:b2:e0:cc:d9:a3:50:5f:dc: 72:ef:2a:41:4c:90:32:ea:cf:67:56:44:ae:6e:8a:a8:3a:f3: 17:32:52:9d:79:dd:d9:38:ee:09:f1:19:de:be:ad:ce:ee:cc: 5e:f7:37:37:d6:11:53:e9:4e:3b:59:38:58:a3:54:9b:c9:c3: 1a:8c:19:43:f2:73:12:67:ae:64:16:8b:4f:07:86:e5:58:98: b4:7d:9a:a1:a0:96:24:45:15:83:41:c0:10:a9:f2:70:d0:4f: 41:5a:70:d9:af:a8:b6:a3:d9:76:26:1f:cc:53:d3:9b:51:1d: 44:c7:45:b8:dd:a2:23:aa:6d:37:49:de:f5:8a:67:19:43:f7: d1:8f:94:8a:43:e5:d7:53:94:22:f2:38:5d:47:1c:a7:d8:aa: 6c:67:6b:7d:1b:a1:ec:b8:71:4f:a7:f3:46:ce:22:fc:b9:18: e5:60:57:ad:4c:46:04:f8:92:60:2f:4b:44:51:3f:66:52:1e: 45:ab:5f:d7:f7:b0:8b:53:3d:8c:19:ce:1e:09:d0:33:49:13: 89:64:1e:0f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+wAMUpBg4cjtbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZTUyNmU1ZWUtMjBlMy00NDk3LWFkYmQtNzY2MWUwNzM3ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ybSXSz7OEo5PIHcbpeAuxS5Abi5R+5tDDc Row3dmrZ0PvFDVFrHWDhxdjjG6tqGO0ml1mSG33i8WLa/vihi3ZNSk9BNXcciOgg k0YP1YAGwhegJfx6rlIiAj5kgTYTCL6IhAhnbDPDS6Nu+2ciqJu5RCQn/JcXnSqq 1RHU7fytLJHvbSRHgMqoo+SChubV/Dszhz/+VJ7AlejAJi3eMOVf3aRmSg4eyKuu U6HzhzpACMr11CIAKBUw4QohrmL9ln0vuegOujk0oKG8/5fPCcpaztFpv3veAs19 /b1GwzCgSRtlF6E0DI0T9sstuJmyqiRyiHD3kEmiSiCMchC+kwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPR8dqCr23hmz5CEh8OuGbJnDyL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDRhNzAwOGYtOGM4ZS0z MzkzLWJkNjktYjc4ZTI0YjQzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsILRFPSPAXqOecT77ghEoSkHTR1MZd+L peGQ7XYduJMKbUiEGNDA3lKPHjXNiLLgzNmjUF/ccu8qQUyQMurPZ1ZErm6KqDrz FzJSnXnd2TjuCfEZ3r6tzu7MXvc3N9YRU+lOO1k4WKNUm8nDGowZQ/JzEmeuZBaL TweG5ViYtH2aoaCWJEUVg0HAEKnycNBPQVpw2a+otqPZdiYfzFPTm1EdRMdFuN2i I6ptN0ne9YpnGUP30Y+UikPl11OUIvI4XUccp9iqbGdrfRuh7LhxT6fzRs4i/LkY 5WBXrUxGBPiSYC9LRFE/ZlIeRatf1/ewi1M9jBnOHgnQM0kTiWQeDw== -----END CERTIFICATE-----Generated at Fri Apr 4 19:12:34 2025 by rpki-client