$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa File: 06c61722-7a68-3f16-a8ff-eefcf70e5126.roa (raw, json) Hash identifier: WU+1W8yCVQgzS68ODENq7tPoeLZRav9/tYgx9TDWIdI= Subject key identifier: 2E:F8:0E:90:FF:CD:77:E7:29:46:2C:66:6B:D3:79:E8:08:1D:FA:58 Certificate issuer: /CN=9eed61a4-093d-432f-9466-2001995b9535 Certificate serial: 010D0C9F43285848D211421A9D7A1D244EF76580 Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 30307 IP address blocks: 23.168.184.0/24 maxlen: 24 2602:f9b1::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:42:1a:9d:7a:1d:24:4e:f7:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=021bc22c-f871-425c-8e2f-36c86cf6b6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:58:1d:1a:ef:8e:c6:cf:30:0f:52:90:a1:6e: 42:c6:23:ba:87:34:61:8e:13:cb:e3:95:56:51:2b: 9b:83:4a:c1:29:63:6f:be:ba:71:d0:e6:fc:fb:91: e2:f2:3e:9e:c1:94:43:ff:8b:1a:cb:f3:d4:da:63: d1:20:36:7a:0a:46:38:e8:ec:66:68:d5:bf:7d:ab: 08:52:f2:51:b9:ff:6b:30:ae:58:3d:fa:23:c6:a2: dd:ef:05:48:30:8b:87:7b:6b:12:d9:29:45:65:ca: 96:06:af:89:bf:28:4b:67:59:9f:d9:95:e4:3b:29: 77:41:20:31:b3:cb:37:73:f0:88:bd:3e:94:89:b5: d7:17:27:3e:c0:d4:88:bf:b7:af:02:37:5a:e9:6e: 93:c5:59:3a:5f:7f:3c:f7:86:79:4f:b2:3e:fe:18: 77:a7:e3:30:42:92:f0:2b:e2:03:86:6b:14:e2:00: 5a:5b:71:c4:54:f5:49:22:21:60:bf:4a:9e:7b:bd: e1:b8:83:36:61:4b:f0:69:ca:79:77:a2:08:01:9b: e1:89:16:c4:2d:a2:1f:ce:44:ac:24:de:d0:f8:45: 85:e7:f4:e2:1d:62:2e:91:40:e7:38:d4:81:6c:f5: a6:b9:57:2f:38:83:12:29:e0:a0:fd:ab:f2:be:f9: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F8:0E:90:FF:CD:77:E7:29:46:2C:66:6B:D3:79:E8:08:1D:FA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl X509v3 Authority Key Identifier: keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer sbgp-ipAddrBlock: critical IPv4: 23.168.184.0/24 IPv6: 2602:f9b1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:0c:5d:3b:a1:3b:0c:48:2b:a9:c7:41:9c:75:01:60:99: ef:03:93:8c:2d:23:5a:8d:b2:ce:3b:ed:fd:3f:60:db:55:c7: 19:d5:be:ec:a1:bc:d6:19:bd:86:92:ad:84:20:e6:d5:71:be: c6:38:dd:ba:8b:4e:dd:65:80:46:ab:d2:13:02:93:36:e8:a3: 67:4d:6c:ae:b7:c7:5e:82:67:b8:96:e6:46:d0:69:b3:b5:4a: 35:2e:bd:61:80:5f:3a:92:98:e9:54:6d:5a:b5:31:82:0c:1a: 83:4d:c1:53:64:84:65:de:77:33:ef:16:70:ba:1e:8b:3e:fe: cc:4f:45:4d:64:49:8f:e0:42:b6:fc:49:4e:cc:4c:ef:53:4e: 83:89:8c:9a:28:82:94:34:64:cf:8d:54:47:d2:b0:d3:40:da: 4e:11:3c:35:19:69:11:d0:b7:69:b0:e9:24:d3:a3:eb:7a:2f: bb:c5:06:11:15:10:64:96:6d:b8:aa:c6:0a:35:92:57:c3:ac: 56:12:fe:1e:33:1e:61:16:07:ac:a0:de:af:eb:fe:3d:82:a3: 24:b0:73:e8:48:63:33:9e:53:4b:45:5d:13:d6:8f:55:95:2b: ac:69:8a:88:4f:15:79:ed:d4:ac:d7:c1:eb:c1:55:12:b6:4c: 51:32:2f:28 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjSEUIanXodJE73ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZDYxYTQtMDkzZC00MzJmLTk0NjYtMjAwMTk5NWI5 NTM1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDIxYmMyMmMtZjg3MS00MjVjLThlMmYtMzZjODZjZjZiNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61gdGu+Oxs8wD1KQoW5CxiO6hzRhjhPL45VW USubg0rBKWNvvrpx0Ob8+5Hi8j6ewZRD/4say/PU2mPRIDZ6CkY46OxmaNW/fasI UvJRuf9rMK5YPfojxqLd7wVIMIuHe2sS2SlFZcqWBq+JvyhLZ1mf2ZXkOyl3QSAx s8s3c/CIvT6UibXXFyc+wNSIv7evAjda6W6TxVk6X38894Z5T7I+/hh3p+MwQpLw K+IDhmsU4gBaW3HEVPVJIiFgv0qee73huIM2YUvwacp5d6IIAZvhiRbELaIfzkSs JN7Q+EWF5/TiHWIukUDnONSBbPWmuVcvOIMSKeCg/avyvvms2QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC74DpD/zXfnKUYsZmvTeegIHfpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVk NjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAxOTk1Yjk1MzUvMDZjNjE3MjItN2E2OC0z ZjE2LWE4ZmYtZWVmY2Y3MGU1MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWVlZDYxYTQtMDkzZC00MzJmLTk0 NjYtMjAwMTk5NWI5NTM1LzllZWQ2MWE0LTA5M2QtNDMyZi05NDY2LTIwMDE5OTVi OTUzNS5jcmwwHwYDVR0jBBgwFoAUr/3/Su5DhWgen8et4OPoqaDtqJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVkNjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAx OTk1Yjk1MzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6i4MA4E AgACMAgDBgAmAvmxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApZQxdO6E7DEgrqcdBnHUBYJnvA5OMLSNa jbLOO+39P2DbVccZ1b7sobzWGb2Gkq2EIObVcb7GON26i07dZYBGq9ITApM26KNn TWyut8degme4luZG0GmztUo1Lr1hgF86kpjpVG1atTGCDBqDTcFTZIRl3ncz7xZw uh6LPv7MT0VNZEmP4EK2/ElOzEzvU06DiYyaKIKUNGTPjVRH0rDTQNpOETw1GWkR 0LdpsOkk06Prei+7xQYRFRBklm24qsYKNZJXw6xWEv4eMx5hFgesoN6v6/49gqMk sHPoSGMznlNLRV0T1o9VlSusaYqITxV57dSs18HrwVUStkxRMi8o -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:36 2025 by rpki-client