$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa File: de537886-8589-3acb-bce9-e8d5e7561ee1.roa (raw, json) Hash identifier: WegiNyX8n+k8+P0IvUbzrYwQoFRkFfkNwYqYhmZWW00= Subject key identifier: 8D:86:68:87:A4:8B:BF:82:58:6D:56:43:E9:FC:56:6B:68:7C:9C:5D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BE905761D71A44D62C160 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 60781 IP address blocks: 23.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e9:05:76:1d:71:a4:4d:62:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d0537b8e-797b-4c91-a8b0-ce597973cb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:94:28:b0:45:b2:cf:ba:a6:88:82:9d:9c: 4b:3d:f5:02:8d:69:29:3b:dc:81:f2:d7:51:7a:96: c6:3c:f1:e8:61:a3:cc:87:71:2c:88:93:70:13:f0: f0:8e:33:de:d1:a4:55:b4:ab:db:2d:06:36:76:d8: 86:91:3d:74:09:26:44:d9:a6:37:9b:8d:a4:f9:6f: 44:1c:eb:2c:f8:19:1b:e6:82:c9:38:f8:bb:68:30: 02:1c:8a:33:90:dc:56:19:17:cc:83:f6:05:45:3d: d6:1b:3b:51:14:af:11:af:c1:c4:75:69:44:dd:7a: b5:a8:5b:ff:7b:55:46:73:e0:94:50:3e:50:b5:3f: b8:84:5f:1a:cb:74:d0:19:b6:8b:81:d8:6d:81:84: b3:81:a9:e7:7a:59:81:e4:09:c4:01:b1:fa:99:9f: 4c:dc:61:45:fb:e1:27:e8:7b:14:c2:dc:f5:71:d8: 03:14:7a:55:f6:e8:d3:c3:94:33:e0:37:1c:b7:91: 5e:e1:9e:81:e0:02:dc:82:2c:16:ce:77:3f:f8:41: 6c:03:35:60:6f:8d:85:70:97:df:09:88:9a:fe:2f: 1c:20:e3:0e:b0:8d:5f:e9:1c:de:5b:f7:60:c4:03: b0:e9:3d:76:85:fe:e3:86:ba:dd:50:22:28:c7:bb: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:68:87:A4:8B:BF:82:58:6D:56:43:E9:FC:56:6B:68:7C:9C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8b:5e:35:52:87:fe:af:c3:b0:90:35:53:31:8d:24:07:bb: f6:fd:01:01:68:f7:42:3c:b1:09:4a:4b:b1:a7:65:d4:1b:b3: e3:a7:a6:22:0e:08:41:cb:5a:dd:3e:a1:b3:b5:cf:70:97:89: 38:00:65:31:ce:5e:3d:83:c2:8e:00:99:9b:aa:d8:45:b1:b7: 34:a2:af:70:38:d6:19:2b:5c:0b:4d:73:65:ea:44:64:02:b9: a9:c7:cc:f9:19:f5:83:7b:0c:8a:5d:53:be:29:eb:9e:91:26: a2:12:12:85:89:c3:fc:69:5f:53:91:f4:12:73:66:55:03:03: 5c:61:96:c6:9c:ba:ed:0b:37:2d:64:9c:85:cb:bd:7b:9a:2e: cb:26:ed:34:4a:16:15:ce:ca:1a:b2:90:c7:40:4e:18:e5:04: 75:43:5b:58:8f:38:a6:42:12:b1:57:4d:c1:6e:0e:df:b3:9d: 29:0e:29:36:7c:cd:cc:06:5f:86:e1:07:71:31:e5:71:05:30: 12:ce:3c:54:0d:f8:3d:03:d4:d2:37:21:22:d3:05:d0:0f:1b: 26:4d:4c:a5:31:a4:b5:16:fa:b2:5c:f0:e1:71:14:e9:02:85: 8f:83:dd:67:65:27:d8:cf:5a:2e:98:a1:61:5f:e5:0d:52:1b: 7b:74:0c:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+kFdh1xpE1iwWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDA1MzdiOGUtNzk3Yi00YzkxLWE4YjAtY2U1OTc5NzNjYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+UKLBFss+6poiCnZxLPfUCjWkpO9yB8tdR epbGPPHoYaPMh3EsiJNwE/DwjjPe0aRVtKvbLQY2dtiGkT10CSZE2aY3m42k+W9E HOss+Bkb5oLJOPi7aDACHIozkNxWGRfMg/YFRT3WGztRFK8Rr8HEdWlE3Xq1qFv/ e1VGc+CUUD5QtT+4hF8ay3TQGbaLgdhtgYSzgannelmB5AnEAbH6mZ9M3GFF++En 6HsUwtz1cdgDFHpV9ujTw5Qz4Dcct5Fe4Z6B4ALcgiwWznc/+EFsAzVgb42FcJff CYia/i8cIOMOsI1f6RzeW/dgxAOw6T12hf7jhrrdUCIox7togwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2GaIeki7+CWG1WQ+n8VmtofJxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGU1Mzc4ODYtODU4OS0z YWNiLWJjZTktZThkNWU3NTYxZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqLXjVSh/6vw7CQNVMxjSQHu/b9AQFo90I8sQlKS7GnZdQbs+OnpiIO CEHLWt0+obO1z3CXiTgAZTHOXj2Dwo4AmZuq2EWxtzSir3A41hkrXAtNc2XqRGQC uanHzPkZ9YN7DIpdU74p656RJqISEoWJw/xpX1OR9BJzZlUDA1xhlsacuu0LNy1k nIXLvXuaLssm7TRKFhXOyhqykMdAThjlBHVDW1iPOKZCErFXTcFuDt+znSkOKTZ8 zcwGX4bhB3Ex5XEFMBLOPFQN+D0D1NI3ISLTBdAPGyZNTKUxpLUW+rJc8OFxFOkC hY+D3WdlJ9jPWi6YoWFf5Q1SG3t0DGE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:00 2025 by rpki-client