$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5df638c2-edc0-3e97-b07e-c3c7ece13ab4.roa File: 5df638c2-edc0-3e97-b07e-c3c7ece13ab4.roa (raw, json) Hash identifier: INLeQllZnFb7vW4pA0s5k2oN6NMtd0IEmPXXgQ4fSD0= Subject key identifier: 05:1E:A0:77:2D:12:F0:52:82:F5:77:77:A8:45:73:2F:28:4D:C1:6E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BE9B97358FE5DB1C7CB40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5df638c2-edc0-3e97-b07e-c3c7ece13ab4.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 59253 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e9:b9:73:58:fe:5d:b1:c7:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=b76482a8-ca00-45f5-a054-93ad13253739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:e5:b6:35:13:54:f2:af:3d:60:36:d6:3e: 5e:5d:06:e0:fe:cd:29:cc:8f:d4:5c:8a:45:ad:97: a6:8d:47:bd:1b:6a:cf:3d:f0:aa:51:d1:74:af:10: d2:94:5e:6e:12:3f:86:44:98:91:a0:bd:f6:2d:34: 20:06:18:61:b5:a5:2f:ce:a7:b7:79:6e:d4:7a:dd: 2b:7d:4c:e1:01:bc:c1:1e:f0:d7:95:f6:03:18:3b: 0e:ee:53:63:f5:5c:99:1a:9d:38:02:fd:11:41:94: 89:5e:4d:5e:cf:17:d5:23:97:af:d4:3a:93:97:36: 99:0b:74:02:fa:f5:be:02:89:0f:0c:bf:15:03:63: a9:2c:e9:94:a7:09:8e:c8:04:df:db:ce:3d:f2:1e: 82:6f:39:71:0b:3b:dd:1d:79:42:02:1b:29:e5:9c: 71:14:3c:ac:1c:77:d0:cb:ba:c5:24:4c:e0:6c:26: a0:5e:d5:3c:39:de:e9:08:36:ec:4c:b7:99:64:8b: a8:1e:77:c3:71:3f:2b:14:d1:29:35:18:d0:9d:a6: 33:ec:65:d9:98:ce:28:3b:3e:76:db:c7:47:e4:b8: 89:93:95:7c:e8:6e:e5:7d:4a:f9:e6:64:ee:c5:54: 05:06:1d:ec:75:92:7e:74:4b:b0:3f:c5:d8:a6:10: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:A0:77:2D:12:F0:52:82:F5:77:77:A8:45:73:2F:28:4D:C1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5df638c2-edc0-3e97-b07e-c3c7ece13ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b2:93:30:b6:53:f0:98:3d:66:b8:83:4c:ec:a6:c7:9a:78: b7:9d:68:1f:6e:e7:5b:06:d2:c6:e7:b4:eb:f4:b3:46:54:92: 92:4a:ef:52:a5:11:7b:3b:74:6a:93:d0:5b:f6:f4:f0:c4:97: 87:88:03:21:d2:e4:29:0c:db:58:41:f9:be:da:76:94:46:fa: 16:77:5f:41:1a:3d:d3:98:4b:6b:38:e9:bf:e7:61:84:39:0c: ac:5b:de:47:41:09:0a:35:d5:d5:ba:5d:4f:29:3e:f9:b8:24: ff:ee:67:c6:4b:b4:f4:07:25:86:c8:56:99:4f:b6:33:5a:80: 2f:3e:b5:64:6c:6b:53:6d:0e:f1:16:40:0d:43:39:ef:af:51: 11:f9:e3:e0:01:03:b6:8c:9e:28:bd:44:22:ac:03:23:be:86: 92:7e:9d:35:4d:a5:c8:8d:f3:e0:0b:4c:69:88:cc:3c:87:1d: 42:51:b8:ad:75:e1:b7:13:d2:5d:98:2c:c7:55:3e:2d:90:77: 56:96:d2:cc:2e:ff:f8:91:f8:50:32:f0:c7:9c:2e:81:65:93: 72:ff:d1:f4:7a:2b:00:a9:14:1f:40:d5:69:07:33:8e:cb:c5: 7b:8b:2d:e3:47:36:ed:48:2d:2b:1e:ad:af:6f:cc:25:49:d0: 5e:17:38:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+m5c1j+XbHHy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Yjc2NDgyYTgtY2EwMC00NWY1LWEwNTQtOTNhZDEzMjUzNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuDltjUTVPKvPWA21j5eXQbg/s0pzI/UXIpF rZemjUe9G2rPPfCqUdF0rxDSlF5uEj+GRJiRoL32LTQgBhhhtaUvzqe3eW7Uet0r fUzhAbzBHvDXlfYDGDsO7lNj9VyZGp04Av0RQZSJXk1ezxfVI5ev1DqTlzaZC3QC +vW+AokPDL8VA2OpLOmUpwmOyATf28498h6CbzlxCzvdHXlCAhsp5ZxxFDysHHfQ y7rFJEzgbCagXtU8Od7pCDbsTLeZZIuoHnfDcT8rFNEpNRjQnaYz7GXZmM4oOz52 28dH5LiJk5V86G7lfUr55mTuxVQFBh3sdZJ+dEuwP8XYphArUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUeoHctEvBSgvV3d6hFcy8oTcFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWRmNjM4YzItZWRjMC0z ZTk3LWIwN2UtYzNjN2VjZTEzYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyykzC2U/CYPWa4g0zspseaeLedaB9u51sG0sbntOv0s0ZUkpJK71Kl EXs7dGqT0Fv29PDEl4eIAyHS5CkM21hB+b7adpRG+hZ3X0EaPdOYS2s46b/nYYQ5 DKxb3kdBCQo11dW6XU8pPvm4JP/uZ8ZLtPQHJYbIVplPtjNagC8+tWRsa1NtDvEW QA1DOe+vURH54+ABA7aMnii9RCKsAyO+hpJ+nTVNpciN8+ALTGmIzDyHHUJRuK11 4bcT0l2YLMdVPi2Qd1aW0swu//iR+FAy8MecLoFlk3L/0fR6KwCpFB9A1WkHM47L xXuLLeNHNu1ILSsera9vzCVJ0F4XOKQ= -----END CERTIFICATE-----Generated at Fri Apr 4 19:03:30 2025 by rpki-client