$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa File: beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa (raw, json) Hash identifier: KMuUSs6xlEdwjpU9yG0mgQnWM88MQGugYY7E3QdJNeE= Subject key identifier: 5F:9F:85:1F:68:F0:F4:E0:79:63:8B:47:EE:15:0A:89:1B:69:4B:CC Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEB33486D929C23D6B380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 396362 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:eb:33:48:6d:92:9c:23:d6:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=71f73af2-b31a-49b0-a409-8f6746a6478a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:1e:d8:e3:d2:90:01:92:c1:0e:72:d1:1e: a7:d0:53:5a:0c:ec:52:fe:8c:fe:91:24:b8:01:d8: 48:0f:a7:81:b3:da:d8:59:2e:b7:46:98:8e:74:33: c8:e0:91:0d:ae:77:5d:c8:39:63:95:aa:00:79:68: 8f:c0:3c:6f:82:fa:98:3f:78:44:b9:1a:eb:35:14: e2:c7:d5:51:15:47:13:04:46:db:6d:cb:03:94:3a: bc:f4:22:c7:7a:a8:e7:e6:5f:f5:08:28:f2:32:26: f4:0a:76:a8:62:e5:e4:39:2a:f5:b4:4e:6f:15:e2: 8a:7a:5d:5d:7a:4b:d1:31:6f:06:c5:de:3a:7a:73: 73:48:ee:72:95:b8:73:55:3d:86:f9:5a:b8:e5:56: 38:4c:79:3e:f6:bc:30:05:35:1e:97:c0:95:2f:00: af:4c:66:1a:85:53:e9:8a:cb:b9:1c:af:c9:48:ee: 8c:48:2b:5d:db:a1:66:e1:03:71:c5:4b:4f:be:75: b0:57:ea:bb:ca:25:6d:d0:ff:8b:c4:f8:19:f5:54: 29:94:8a:93:50:a6:9b:25:0b:66:e3:1b:98:12:21: 70:5c:9a:cb:70:28:c0:ac:2d:25:c1:4e:04:cb:54: 1c:2a:63:3b:30:84:f8:c7:3e:d8:4d:14:27:77:78: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9F:85:1F:68:F0:F4:E0:79:63:8B:47:EE:15:0A:89:1B:69:4B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:db:24:0c:48:a1:bd:30:5e:d3:5d:c5:bc:54:c1:bf:6d:5f: 7c:c3:f3:ca:ea:bb:7f:30:73:55:31:4f:cc:1c:49:f9:44:33: 7d:eb:29:d8:0b:c5:86:06:26:66:cc:a4:52:e5:cd:7e:f2:a9: 17:46:ae:68:81:7d:b8:71:dd:fa:86:d6:33:61:fd:0f:48:cc: 59:1d:d9:b4:04:85:9b:a8:fa:42:ce:b2:7b:3b:df:f5:c1:d1: fd:aa:2c:3f:86:28:d3:4c:91:88:47:a8:7f:d0:b1:ca:62:45: 07:37:e4:e1:0b:5e:e2:7b:6d:8b:18:41:0e:05:45:ee:5d:24: 43:69:f0:d7:3f:cd:af:2b:ad:0a:b0:b4:a1:7f:dc:02:b0:82: e7:86:ca:8a:0f:3f:3a:ed:03:e0:73:51:6e:8f:49:14:97:4a: f4:29:b5:c2:43:24:89:6e:46:bd:76:3d:ec:eb:88:83:ea:02: c5:60:66:50:d1:44:9e:08:60:ff:41:4f:c7:27:02:95:5b:da: 6e:f3:10:c0:e2:4f:1d:bb:58:ab:26:13:e1:3a:4c:ae:f3:36: 5e:e5:9d:b1:f4:96:e6:00:a0:3c:a3:c1:e0:99:3c:7f:fb:f1: e4:53:94:4a:7f:5c:d0:be:6d:39:37:b2:99:91:22:eb:e9:7f: a1:22:64:c3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+szSG2SnCPWs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NzFmNzNhZjItYjMxYS00OWIwLWE0MDktOGY2NzQ2YTY0NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPwe2OPSkAGSwQ5y0R6n0FNaDOxS/oz+kSS4 AdhID6eBs9rYWS63RpiOdDPI4JENrnddyDljlaoAeWiPwDxvgvqYP3hEuRrrNRTi x9VRFUcTBEbbbcsDlDq89CLHeqjn5l/1CCjyMib0CnaoYuXkOSr1tE5vFeKKel1d ekvRMW8Gxd46enNzSO5ylbhzVT2G+Vq45VY4THk+9rwwBTUel8CVLwCvTGYahVPp isu5HK/JSO6MSCtd26Fm4QNxxUtPvnWwV+q7yiVt0P+LxPgZ9VQplIqTUKabJQtm 4xuYEiFwXJrLcCjArC0lwU4Ey1QcKmM7MIT4xz7YTRQnd3jrmQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFF+fhR9o8PTgeWOLR+4VCokbaUvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhYTVjZmQtMmNhNS0z MDZlLTlkOTQtMDg4ZDdjOWY3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALNskDEihvTBe013FvFTBv21ffMPzyuq7 fzBzVTFPzBxJ+UQzfesp2AvFhgYmZsykUuXNfvKpF0auaIF9uHHd+obWM2H9D0jM WR3ZtASFm6j6Qs6yezvf9cHR/aosP4Yo00yRiEeof9CxymJFBzfk4Qte4nttixhB DgVF7l0kQ2nw1z/NryutCrC0oX/cArCC54bKig8/Ou0D4HNRbo9JFJdK9Cm1wkMk iW5GvXY97OuIg+oCxWBmUNFEnghg/0FPxycClVvabvMQwOJPHbtYqyYT4TpMrvM2 XuWdsfSW5gCgPKPB4Jk8f/vx5FOUSn9c0L5tOTeymZEi6+l/oSJkww== -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:37 2025 by rpki-client