$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa File: d0e88601-8d43-3d7d-8163-2756a51593f0.roa (raw, json) Hash identifier: EJ/Ac3tjQn4xpTSOePy96S8UkhzXZzVVaswYHmo0WCo= Subject key identifier: A6:E5:A9:58:37:FA:25:9F:4E:4D:8C:F1:1E:24:EE:03:2F:B7:89:AD Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BE963C7961F16F28E0F68 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 396362 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e9:63:c7:96:1f:16:f2:8e:0f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=fedcc7d8-1e22-4e24-b2a8-fdc6380c8c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:f8:4f:fc:54:a2:7e:89:fb:cb:19:42:9f: b3:4f:16:83:36:00:a2:5f:c7:84:eb:f2:17:58:c0: 90:e7:ac:96:80:46:79:c7:91:b3:6b:c7:b4:cb:94: 86:99:f0:66:23:2d:f6:52:6a:33:2a:3d:98:ca:71: 29:b5:48:b8:b6:33:77:6d:a2:3f:7d:25:dc:f9:bb: b5:22:ae:39:18:14:de:cd:62:32:c4:c6:fc:15:c5: 69:37:f4:5c:cb:ea:e2:27:fb:a7:61:ac:ea:aa:40: 92:a8:67:f5:2c:09:b4:a3:45:e7:c7:4e:53:aa:a8: fb:cf:9c:e5:4d:64:88:88:d7:21:c5:6a:15:2e:d9: a6:c4:a8:47:0e:2f:b6:94:34:de:5c:f5:2b:1a:57: d1:31:bf:5e:22:dd:64:e0:cb:3d:24:16:cc:87:f2: 7d:29:d9:58:56:f2:9c:ec:19:43:39:a8:5a:f6:f8: 38:4e:fc:7d:84:e9:4f:ae:d2:3c:1e:10:63:36:63: 17:7a:ad:40:1c:b3:28:0a:b3:70:93:d5:c2:95:da: 95:4f:8a:be:0c:fe:57:3d:30:b4:a6:29:0a:b9:e5: a5:fd:a8:c6:11:a7:72:3b:5a:03:0f:b3:ac:5c:19: 6a:d0:a5:9b:6e:d6:02:a0:9b:2b:d0:ae:f7:fd:eb: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E5:A9:58:37:FA:25:9F:4E:4D:8C:F1:1E:24:EE:03:2F:B7:89:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:15:88:12:95:60:17:05:a1:d4:92:e2:ff:48:f0:5e:34:50: be:75:07:e1:0e:34:47:b1:12:2b:bf:0a:a4:56:26:b3:b4:81: 41:84:d1:41:ec:fa:e1:fb:71:d2:31:dd:05:9c:2f:fa:cb:9b: 71:f5:eb:7a:a8:21:4f:02:d9:1a:2a:13:f6:7a:20:31:39:e1: ba:ff:38:f4:62:e0:84:71:8e:74:f1:54:49:0a:ea:37:31:08: cb:1a:8d:ad:00:ff:09:99:2b:87:cf:f0:fd:02:69:ff:9a:aa: 2a:35:50:5c:1d:c2:df:e2:0b:fc:2c:e2:f9:6e:24:0c:6e:6b: ab:29:b3:0e:33:87:ac:e0:10:e8:c9:d3:08:79:3e:4f:4f:93: 3d:c1:f0:58:bb:c3:95:c7:63:00:25:72:9d:5a:65:b1:2c:77: 1b:02:76:96:31:fe:7e:2d:46:40:60:be:49:1e:93:3c:db:5c: 39:09:20:46:85:17:d9:77:a0:19:ce:1b:b8:a4:3a:bd:1b:5c: 81:ae:69:cb:98:0f:f6:c3:4e:05:5b:bd:1b:58:30:23:20:df: 30:b8:12:9d:fa:de:98:58:47:cd:28:08:55:f4:d1:69:c1:86: 71:7c:8e:03:57:e7:3b:26:b6:b2:0d:3e:fb:b9:9a:5b:74:e4: 99:5e:26:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+ljx5YfFvKOD2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZmVkY2M3ZDgtMWUyMi00ZTI0LWIyYTgtZmRjNjM4MGM4YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugr4T/xUon6J+8sZQp+zTxaDNgCiX8eE6/IX WMCQ56yWgEZ5x5Gza8e0y5SGmfBmIy32UmozKj2YynEptUi4tjN3baI/fSXc+bu1 Iq45GBTezWIyxMb8FcVpN/Rcy+riJ/unYazqqkCSqGf1LAm0o0Xnx05Tqqj7z5zl TWSIiNchxWoVLtmmxKhHDi+2lDTeXPUrGlfRMb9eIt1k4Ms9JBbMh/J9KdlYVvKc 7BlDOaha9vg4Tvx9hOlPrtI8HhBjNmMXeq1AHLMoCrNwk9XCldqVT4q+DP5XPTC0 pikKueWl/ajGEadyO1oDD7OsXBlq0KWbbtYCoJsr0K73/euuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKblqVg3+iWfTk2M8R4k7gMvt4mtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDBlODg2MDEtOGQ0My0z ZDdkLTgxNjMtMjc1NmE1MTU5M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgViBKVYBcFodSS4v9I8F40UL51B+EONEexEiu/CqRWJrO0gUGE0UHs +uH7cdIx3QWcL/rLm3H163qoIU8C2RoqE/Z6IDE54br/OPRi4IRxjnTxVEkK6jcx CMsaja0A/wmZK4fP8P0Caf+aqio1UFwdwt/iC/ws4vluJAxua6spsw4zh6zgEOjJ 0wh5Pk9Pkz3B8Fi7w5XHYwAlcp1aZbEsdxsCdpYx/n4tRkBgvkkekzzbXDkJIEaF F9l3oBnOG7ikOr0bXIGuacuYD/bDTgVbvRtYMCMg3zC4Ep363phYR80oCFX00WnB hnF8jgNX5zsmtrINPvu5mlt05JleJio= -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:34 2025 by rpki-client