$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa File: 86f1f5e4-b111-38ca-aa96-1f31a096aded.roa (raw, json) Hash identifier: SZynkRMVW60QwoXYEZ4Fq9MhZngsoF6T5+f1pfOmRAk= Subject key identifier: 74:6E:AC:61:C0:84:D4:CF:91:66:15:1B:5A:5B:F2:3E:81:A7:57:6F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BE9D37E01B67356EC4400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 396190 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e9:d3:7e:01:b6:73:56:ec:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=870e68e7-ffbf-46eb-8c4c-73e26f396ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b7:37:fc:27:37:90:3c:a3:26:0c:8e:e2:f3: 4d:e4:9a:ba:81:8f:1a:9c:70:89:1e:36:08:80:f7: 1f:ff:83:72:ec:14:5e:db:51:15:0f:ad:16:ed:4f: b3:57:63:ac:3f:2a:0e:ae:8c:94:96:4a:eb:a5:2e: bf:7a:c9:b6:e5:9b:65:38:35:2c:c7:82:59:51:09: 5c:4a:b5:ec:e9:ce:18:ab:37:00:3a:00:90:16:c1: 31:56:30:b1:ec:d1:0b:0d:cd:61:3a:fc:02:79:6e: 35:82:f7:fe:3f:71:12:44:a8:f1:b9:ea:3d:d8:10: 64:d9:39:7f:a4:21:16:79:a1:70:4e:ae:68:d6:69: 4c:6f:26:cf:0b:a1:16:9d:9d:a1:4b:c7:8e:b6:41: a3:05:0e:05:9f:99:d0:f1:ee:e5:3a:97:18:4d:e9: 9c:a1:41:a5:f7:fa:29:6e:43:26:bc:94:13:ab:a1: 0d:92:a3:0d:a2:89:fd:a4:30:b4:b4:d8:40:df:c7: 56:04:b2:60:fd:3f:b8:a4:89:53:c6:5a:4f:e3:55: df:08:84:dc:dc:99:0c:fe:e1:77:19:a7:84:1d:98: 69:46:17:a2:f9:0c:05:97:66:66:9f:f7:aa:ac:cd: ea:1b:e0:f4:fa:f9:c3:34:c3:3d:c1:b7:e5:e1:f6: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6E:AC:61:C0:84:D4:CF:91:66:15:1B:5A:5B:F2:3E:81:A7:57:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:73:b7:f2:09:0b:e6:81:4f:0e:12:d3:93:d5:57:50:4b:56: 63:24:cd:ef:d2:3a:9d:93:47:a7:f8:4c:46:7c:c7:85:4a:55: c5:30:86:8e:06:c1:85:75:e1:ff:bf:d7:3d:34:49:68:c1:76: 50:21:81:70:fa:91:52:1e:bd:e0:73:26:81:7b:7e:a2:42:49: 07:fd:31:f2:ba:8e:ea:54:c8:0a:b0:8f:2d:11:79:aa:f7:48: 39:f1:22:fb:ee:1e:6c:40:d7:bb:16:b1:5f:a2:f3:2a:9d:ef: c0:db:20:cb:b0:ca:7d:2e:9b:ce:9a:40:66:d8:1b:ae:b2:5a: b6:90:c5:5f:2a:55:aa:d3:4c:86:4d:34:8b:be:fe:4d:ec:d9: 6a:ce:de:52:43:30:6c:27:b4:32:af:14:c1:24:fb:a8:81:6e: 35:69:22:be:41:d1:ad:8b:ed:a2:0c:51:94:57:1f:e7:a8:e1: 10:a7:8d:e1:b3:a9:7b:77:60:e6:44:24:45:f5:dc:ea:06:19: b8:78:9a:cb:1f:f1:5e:b5:af:8b:96:87:c9:57:aa:a9:37:c1: a5:c6:95:eb:d2:49:fb:f0:ac:ed:b9:85:c7:04:96:a7:62:4c: cc:e8:43:8a:61:6c:d7:0b:18:bb:d6:bd:95:51:2a:28:04:f6: 41:e0:7e:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+nTfgG2c1bsRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODcwZTY4ZTctZmZiZi00NmViLThjNGMtNzNlMjZmMzk2YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLc3/Cc3kDyjJgyO4vNN5Jq6gY8anHCJHjYI gPcf/4Ny7BRe21EVD60W7U+zV2OsPyoOroyUlkrrpS6/esm25ZtlODUsx4JZUQlc SrXs6c4YqzcAOgCQFsExVjCx7NELDc1hOvwCeW41gvf+P3ESRKjxueo92BBk2Tl/ pCEWeaFwTq5o1mlMbybPC6EWnZ2hS8eOtkGjBQ4Fn5nQ8e7lOpcYTemcoUGl9/op bkMmvJQTq6ENkqMNoon9pDC0tNhA38dWBLJg/T+4pIlTxlpP41XfCITc3JkM/uF3 GaeEHZhpRhei+QwFl2Zmn/eqrM3qG+D0+vnDNMM9wbfl4fbqowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRurGHAhNTPkWYVG1pb8j6Bp1dvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODZmMWY1ZTQtYjExMS0z OGNhLWFhOTYtMWYzMWEwOTZhZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdzt/IJC+aBTw4S05PVV1BLVmMkze/SOp2TR6f4TEZ8x4VKVcUwho4G wYV14f+/1z00SWjBdlAhgXD6kVIeveBzJoF7fqJCSQf9MfK6jupUyAqwjy0Rear3 SDnxIvvuHmxA17sWsV+i8yqd78DbIMuwyn0um86aQGbYG66yWraQxV8qVarTTIZN NIu+/k3s2WrO3lJDMGwntDKvFMEk+6iBbjVpIr5B0a2L7aIMUZRXH+eo4RCnjeGz qXt3YOZEJEX13OoGGbh4mssf8V61r4uWh8lXqqk3waXGlevSSfvwrO25hccElqdi TMzoQ4phbNcLGLvWvZVRKigE9kHgfsU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:19:28 2025 by rpki-client