$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa File: 5dc499aa-c043-3278-a65b-3d3431bf08c7.roa (raw, json) Hash identifier: nQW+W8zJdj/4aEzKSdr6W3a00MIg8h1Um+Qx8Ju7Xbc= Subject key identifier: F7:53:BF:00:BF:C8:62:30:99:C1:AE:5C:27:BC:8D:46:2A:02:44:8B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEB81E1435692700D5A00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 27411 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:eb:81:e1:43:56:92:70:0d:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=b8d2abef-2a2f-4887-b3ec-2e393c238609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:53:f9:8e:fa:de:f3:8c:47:bc:6d:30:21: 3b:c8:5f:06:be:aa:e5:0d:bb:2b:83:0a:96:14:68: fe:8c:91:42:af:84:12:be:48:73:08:19:e6:eb:81: 32:3f:94:41:f5:87:c7:30:64:d2:13:dd:93:1d:35: 54:25:b7:2b:dc:c3:82:36:e0:55:aa:a8:25:d1:95: 34:14:e1:8a:6d:51:14:10:dc:75:60:43:6b:57:2e: aa:59:77:73:dc:82:9a:84:65:6d:43:e6:87:21:f8: 29:0e:f0:55:e7:d4:9a:ac:ae:16:ba:43:3f:bd:29: 42:56:7d:52:62:82:e7:ac:48:93:9e:57:a9:9d:94: cd:11:e4:24:21:94:5e:52:97:5b:c1:08:d5:ae:24: 4f:ce:8d:19:99:56:71:cb:fa:33:e0:7d:07:b8:b8: da:55:94:ee:d4:d2:3c:dc:61:ee:74:76:e9:89:a0: 4f:53:97:12:df:78:2e:98:a1:d8:ea:20:d2:36:8c: b8:43:4e:02:5c:ad:00:52:e7:c3:3c:d6:b4:12:41: 9a:45:42:c2:cb:d8:4e:22:df:79:44:54:33:da:d5: 23:73:f1:ea:5e:04:5a:65:03:8e:b1:b2:7f:78:e0: 84:18:ad:7d:3f:f4:eb:43:ca:7b:dd:42:4a:6b:85: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:53:BF:00:BF:C8:62:30:99:C1:AE:5C:27:BC:8D:46:2A:02:44:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:53:b8:08:ac:02:1d:4c:bd:cb:49:cd:00:4c:14:86:79:2a: 43:86:42:c4:81:6e:41:0d:72:a4:29:da:b9:18:8a:17:19:f0: 9d:a5:d0:64:ef:7f:41:56:e2:99:67:a9:21:99:ed:ba:83:6d: 73:0b:2a:41:2d:d3:8c:ea:e2:12:7a:fb:27:8e:99:20:35:4d: dd:8a:6c:9d:54:ec:66:8d:aa:52:18:83:3e:11:3d:9c:8e:ab: 3b:61:38:8f:fd:bc:a8:34:20:88:f6:d0:ee:95:9f:49:a9:1c: c3:6a:e5:07:06:2b:4b:44:8f:13:da:8e:cb:c4:8a:26:d4:70: 78:6d:63:e1:b5:19:1c:34:a4:ca:a3:8f:f3:ea:b8:8c:9a:65: dc:74:1f:4f:63:98:70:bb:b2:46:70:ea:f7:d4:27:ea:85:59: da:e1:db:ef:da:0a:07:af:2a:fc:95:be:26:ff:c8:08:33:ef: ac:1d:0c:99:7f:23:99:e2:1c:37:a7:7b:77:e1:7f:43:f1:f6: f9:93:ad:c3:33:94:a5:3a:51:33:3e:b0:40:2d:ee:70:26:35: be:b5:5e:05:d4:17:50:bc:6c:f9:2c:30:c2:8b:f6:ba:86:87: bf:54:f4:74:e7:53:54:9f:f7:a2:dc:31:20:34:43:20:6b:0b: d4:72:dc:ba -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+uB4UNWknANWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YjhkMmFiZWYtMmEyZi00ODg3LWIzZWMtMmUzOTNjMjM4NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OFT+Y763vOMR7xtMCE7yF8GvqrlDbsrgwqW FGj+jJFCr4QSvkhzCBnm64EyP5RB9YfHMGTSE92THTVUJbcr3MOCNuBVqqgl0ZU0 FOGKbVEUENx1YENrVy6qWXdz3IKahGVtQ+aHIfgpDvBV59SarK4WukM/vSlCVn1S YoLnrEiTnlepnZTNEeQkIZReUpdbwQjVriRPzo0ZmVZxy/oz4H0HuLjaVZTu1NI8 3GHudHbpiaBPU5cS33gumKHY6iDSNoy4Q04CXK0AUufDPNa0EkGaRULCy9hOIt95 RFQz2tUjc/HqXgRaZQOOsbJ/eOCEGK19P/TrQ8p73UJKa4Uh6wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPdTvwC/yGIwmcGuXCe8jUYqAkSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWRjNDk5YWEtYzA0My0z Mjc4LWE2NWItM2QzNDMxYmYwOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeFO4CKwCHUy9y0nNAEwUhnkqQ4ZCxIFu QQ1ypCnauRiKFxnwnaXQZO9/QVbimWepIZntuoNtcwsqQS3TjOriEnr7J46ZIDVN 3YpsnVTsZo2qUhiDPhE9nI6rO2E4j/28qDQgiPbQ7pWfSakcw2rlBwYrS0SPE9qO y8SKJtRweG1j4bUZHDSkyqOP8+q4jJpl3HQfT2OYcLuyRnDq99Qn6oVZ2uHb79oK B68q/JW+Jv/ICDPvrB0MmX8jmeIcN6d7d+F/Q/H2+ZOtwzOUpTpRMz6wQC3ucCY1 vrVeBdQXULxs+Swwwov2uoaHv1T0dOdTVJ/3otwxIDRDIGsL1HLcug== -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:51 2025 by rpki-client