$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa File: 980a16b1-7521-3b19-9838-27c21280ee09.roa (raw, json) Hash identifier: TzcF7eE/lv0d9+C/RSXa5Ccmv3RRHoywwb4Wwll/1rk= Subject key identifier: B6:90:B8:99:27:57:0D:47:42:ED:54:02:A3:04:9E:13:09:CE:F1:88 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEBA1DD71C6BB7902BC58 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 136988 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:eb:a1:dd:71:c6:bb:79:02:bc:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=b82b7a93-c4e2-4ce2-b913-af57e24bcb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:7b:08:2c:a9:42:a8:8e:e5:6e:93:d4:05: dc:40:24:5c:9a:95:81:d4:01:12:64:4a:2b:d8:af: d8:9e:8d:cc:f2:9c:85:c6:b6:c6:34:5e:b3:5c:ed: dc:e1:89:75:78:49:a1:ee:77:1f:3d:10:e0:bf:9f: 7f:e3:1e:1b:c9:8e:4b:46:ec:b0:c0:78:f2:45:a4: 08:22:ed:15:dd:5c:26:3b:38:64:8a:07:ed:6b:c5: bc:d7:ea:92:f2:19:b7:52:b2:7d:7f:18:7e:83:21: 8d:9c:1f:34:bc:70:7b:a4:05:96:f6:67:9a:4c:02: e9:ff:42:b1:92:3d:c2:18:a0:a9:93:ec:ad:4c:26: 65:39:06:ba:d7:60:10:a1:8a:0f:78:d9:f7:e0:d9: 6f:be:3f:3e:de:33:8a:2f:9b:9c:69:f3:97:c3:32: ef:a3:c1:f2:d5:12:08:91:f6:7b:de:6c:63:77:74: 9f:59:57:bd:c1:74:73:23:6f:b8:bb:75:2d:d6:d0: 0a:76:dc:d6:9c:72:b5:d7:09:38:f7:41:29:73:13: ab:31:bc:ed:fa:ed:42:b7:2e:a1:a3:c9:e0:46:39: de:5a:58:0e:f2:88:19:66:f7:6e:73:c6:10:9a:92: f1:0e:d1:d3:ea:51:23:40:68:84:a2:a1:9c:6c:4f: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:B8:99:27:57:0D:47:42:ED:54:02:A3:04:9E:13:09:CE:F1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3c:1a:d5:bc:d7:6a:1f:11:b0:9a:2d:41:e9:22:d1:aa:8c: 45:61:41:ae:03:da:c8:5f:d6:62:03:c7:6e:8e:5e:85:8e:1a: c7:48:9a:c2:34:8e:9f:6a:ea:fb:54:bb:b1:0e:4d:05:91:79: cc:44:f2:cd:04:b2:33:56:fd:62:34:1a:cd:d9:af:28:a5:30: 40:f8:1b:e4:03:e2:8e:a0:3f:be:a7:02:51:2c:17:27:1c:ec: ae:51:c8:6f:8a:00:8d:5a:96:f5:e2:8d:87:f8:1b:24:14:1b: 4b:d6:c5:09:5a:c9:9d:99:ef:1f:20:d1:d5:42:12:cf:da:ff: d9:f4:af:8a:fc:a7:20:94:fb:42:34:c2:16:c9:57:bd:a9:1f: ca:23:20:34:fb:3d:91:18:a2:ff:23:3c:df:a1:97:87:e0:da: 43:05:72:61:52:90:b6:38:c2:de:d7:4f:8c:44:51:08:22:5b: 7f:c5:f3:c0:f4:e7:62:d2:6a:3c:f2:e8:90:39:69:6c:00:38: fc:34:78:c6:58:16:c3:78:f9:3b:5f:ba:76:21:0f:c7:5f:92: 53:d6:5b:b3:8c:c3:aa:20:82:9c:5b:da:7d:5d:1f:2e:fc:40: 2d:5c:2b:ce:77:14:44:8a:c3:0b:91:36:f1:7a:b7:c9:7e:51: a2:ea:db:ab -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+uh3XHGu3kCvFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YjgyYjdhOTMtYzRlMi00Y2UyLWI5MTMtYWY1N2UyNGJjYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsx7CCypQqiO5W6T1AXcQCRcmpWB1AESZEor 2K/Yno3M8pyFxrbGNF6zXO3c4Yl1eEmh7ncfPRDgv59/4x4byY5LRuywwHjyRaQI Iu0V3VwmOzhkigfta8W81+qS8hm3UrJ9fxh+gyGNnB80vHB7pAWW9meaTALp/0Kx kj3CGKCpk+ytTCZlOQa612AQoYoPeNn34Nlvvj8+3jOKL5ucafOXwzLvo8Hy1RII kfZ73mxjd3SfWVe9wXRzI2+4u3Ut1tAKdtzWnHK11wk490EpcxOrMbzt+u1Cty6h o8ngRjneWlgO8ogZZvduc8YQmpLxDtHT6lEjQGiEoqGcbE9qLQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLaQuJknVw1HQu1UAqMEnhMJzvGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTgwYTE2YjEtNzUyMS0z YjE5LTk4MzgtMjdjMjEyODBlZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVTwa1bzXah8RsJotQeki0aqMRWFBrgPa yF/WYgPHbo5ehY4ax0iawjSOn2rq+1S7sQ5NBZF5zETyzQSyM1b9YjQazdmvKKUw QPgb5APijqA/vqcCUSwXJxzsrlHIb4oAjVqW9eKNh/gbJBQbS9bFCVrJnZnvHyDR 1UISz9r/2fSvivynIJT7QjTCFslXvakfyiMgNPs9kRii/yM836GXh+DaQwVyYVKQ tjjC3tdPjERRCCJbf8XzwPTnYtJqPPLokDlpbAA4/DR4xlgWw3j5O1+6diEPx1+S U9Zbs4zDqiCCnFvafV0fLvxALVwrzncURIrDC5E28Xq3yX5Rourbqw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:48 2025 by rpki-client