$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa File: 61d1f620-1d7b-3891-85a6-9459d770a042.roa (raw, json) Hash identifier: gZQs9uIuXzItab7WgT0bHc+FACSVrZwurqDygQyhfH4= Subject key identifier: 99:43:91:C2:98:30:DA:A1:A0:8C:AD:56:2F:32:74:1D:80:2B:AA:B1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BE9EFA612ECD0DFD460C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 393886 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e9:ef:a6:12:ec:d0:df:d4:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=03d3f2d2-0bff-42a1-9c14-72eac8c9ea45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:cd:bb:45:42:4f:51:69:6b:08:92:cd:b5: 7a:3f:d5:51:32:36:c7:a6:b1:ea:9a:ab:7e:18:37: ec:bd:83:7e:0d:71:18:1f:d3:5d:c0:e5:33:14:29: c6:da:06:d6:ca:11:35:29:56:2a:78:a2:85:80:0c: e7:98:db:18:0d:b9:e8:d2:ba:12:9f:f7:a9:80:f3: fe:ad:f3:b8:56:2b:b0:c4:87:06:5c:1d:b2:bd:aa: 00:45:fd:72:0b:64:82:31:70:58:71:b7:9f:97:76: ea:9b:03:ae:28:c3:f6:8d:8d:05:b5:c8:74:12:8c: 98:06:ee:ee:d5:a4:f6:9d:27:b0:bc:4d:cb:8d:72: 25:06:9e:34:f6:85:82:52:ca:40:f7:ae:1a:0a:e6: 7f:d8:f2:f8:e3:71:85:e0:d7:5e:ec:f5:15:91:63: ae:8e:85:61:95:5d:a3:85:a0:09:15:3b:e3:68:c1: 86:4c:7f:7d:94:c1:95:e2:2c:a9:a8:d2:df:a2:e1: 12:56:19:b9:28:c1:4b:17:98:14:cb:2f:25:30:f2: ce:53:6d:78:b4:5f:08:1e:78:d4:f0:43:2d:10:bf: 33:d5:49:a7:d5:e5:43:81:31:e0:be:48:87:95:5a: de:f2:ee:9d:1c:14:c7:53:62:ca:6a:e5:16:aa:4c: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:43:91:C2:98:30:DA:A1:A0:8C:AD:56:2F:32:74:1D:80:2B:AA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:07:fb:e4:6a:e0:8f:d2:5e:6a:1e:18:ba:b6:61:e5:20:23: 75:4e:d8:fe:08:24:d0:38:f7:8f:5c:a4:0b:fb:23:3d:b7:08: 36:f6:0f:05:36:e7:c7:27:bb:ef:0a:13:cd:ff:db:7b:fb:0a: 65:9a:42:ed:89:12:bb:1d:c1:bb:b7:c0:e5:9e:3d:77:36:c0: c5:14:8b:70:36:d4:44:8a:00:dc:11:88:35:d6:49:f8:b1:e7: 79:d7:d0:71:c3:06:3b:92:02:ed:1c:c4:90:cc:b1:1f:31:f9: bd:75:30:ba:3e:25:a4:c8:89:f5:85:a8:36:2f:37:a1:5e:fa: 7f:fe:24:c0:0a:4e:8c:31:3a:be:a5:ed:7a:e1:73:f4:f4:5c: c9:d4:a9:53:a8:08:f4:c6:dd:41:17:59:3c:86:93:2e:9b:bf: a9:5b:99:f4:c1:93:58:ec:86:cb:69:bc:e4:cd:f7:33:86:06: 6e:4e:8a:98:cf:9e:6d:3d:98:2d:be:8d:4c:74:3a:f7:af:63: 68:f7:30:d1:85:d2:98:32:6a:5f:d1:f8:4e:bd:54:ab:b2:49: f5:6e:63:44:b8:3f:8b:10:b6:6f:90:38:bb:1e:a0:db:75:e2: d6:f3:d6:08:53:fc:af:78:f9:3c:59:02:40:f3:02:13:47:2b: e5:88:83:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+nvphLs0N/UYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MDNkM2YyZDItMGJmZi00MmExLTljMTQtNzJlYWM4YzllYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAHNu0VCT1FpawiSzbV6P9VRMjbHprHqmqt+ GDfsvYN+DXEYH9NdwOUzFCnG2gbWyhE1KVYqeKKFgAznmNsYDbno0roSn/epgPP+ rfO4ViuwxIcGXB2yvaoARf1yC2SCMXBYcbefl3bqmwOuKMP2jY0Ftch0EoyYBu7u 1aT2nSewvE3LjXIlBp409oWCUspA964aCuZ/2PL443GF4Nde7PUVkWOujoVhlV2j haAJFTvjaMGGTH99lMGV4iypqNLfouESVhm5KMFLF5gUyy8lMPLOU214tF8IHnjU 8EMtEL8z1Umn1eVDgTHgvkiHlVre8u6dHBTHU2LKauUWqky6EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlDkcKYMNqhoIytVi8ydB2AK6qxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjFkMWY2MjAtMWQ3Yi0z ODkxLTg1YTYtOTQ1OWQ3NzBhMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgH++Rq4I/SXmoeGLq2YeUgI3VO2P4IJNA4949cpAv7Iz23CDb2DwU2 58cnu+8KE83/23v7CmWaQu2JErsdwbu3wOWePXc2wMUUi3A21ESKANwRiDXWSfix 53nX0HHDBjuSAu0cxJDMsR8x+b11MLo+JaTIifWFqDYvN6Fe+n/+JMAKTowxOr6l 7Xrhc/T0XMnUqVOoCPTG3UEXWTyGky6bv6lbmfTBk1jshstpvOTN9zOGBm5OipjP nm09mC2+jUx0OvevY2j3MNGF0pgyal/R+E69VKuySfVuY0S4P4sQtm+QOLseoNt1 4tbz1ghT/K94+TxZAkDzAhNHK+WIgwg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:19 2025 by rpki-client