$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa File: ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa (raw, json) Hash identifier: fa3QNg1W33tR3vi4RcOolRzGB/NfaZ8Whdvo3OPa6d0= Subject key identifier: 2F:E4:F8:0E:F3:93:56:28:12:C2:DC:74:22:25:2C:D2:7E:DE:0C:E9 Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F43285848BBBB85C87E3C74C49040D1C0 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 12131 IP address blocks: 23.161.32.0/24 maxlen: 24 23.161.33.0/24 maxlen: 24 2604:d2c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:85:c8:7e:3c:74:c4:90:40:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=eedb12a4-caf2-48e4-bf56-459ea410745f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:00:65:dd:e7:b2:fa:9f:29:67:89:ec:23: 3a:80:49:97:6d:37:74:4c:d3:8e:8a:92:13:df:7f: cf:7a:75:34:20:79:ed:7f:70:5a:01:16:82:b2:20: da:ad:1b:73:8c:3a:84:c0:3b:93:26:a4:a4:e2:8e: a2:3d:25:d5:70:61:7d:f9:21:11:d9:95:db:c5:3b: d5:bf:f0:3f:1d:5c:82:42:44:72:af:52:4e:f1:10: 98:5f:e4:c6:a5:f9:90:57:6c:d8:29:7a:f8:9f:7a: b0:83:ea:09:ae:b2:b2:d0:a4:ec:bb:86:48:56:e3: 83:5d:54:bd:ac:d7:86:dd:32:39:1c:1b:c6:c9:de: b6:92:bb:e9:2b:1f:59:2e:96:dc:99:55:d3:6a:01: ce:27:f0:a6:04:9f:1c:af:b3:20:c3:09:68:1f:8e: 55:1e:ad:30:01:12:81:96:21:d3:60:d4:3c:e9:66: d7:69:e4:41:02:a7:e4:87:4c:69:0d:5c:c0:1c:a8: c7:9c:4f:9b:95:68:f6:b6:8c:e7:85:a7:6f:22:70: 4c:00:e4:e6:4a:58:d6:53:d6:e5:ca:b9:42:67:8c: 66:83:67:fd:5e:71:65:c7:c2:04:78:f4:62:d7:5d: ae:cc:cc:9f:fe:2e:c6:d2:21:0b:23:b9:b7:d2:24: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E4:F8:0E:F3:93:56:28:12:C2:DC:74:22:25:2C:D2:7E:DE:0C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.32.0/23 IPv6: 2604:d2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:4e:6f:06:a5:b7:43:5f:2f:13:38:84:f5:13:04:26:6d:98: 67:77:34:d7:30:4c:c5:52:8f:3c:0e:07:94:70:85:b4:aa:e3: 4d:d6:75:59:ad:6a:e5:c6:87:98:46:9e:27:c2:cb:3a:b9:10: 35:50:bc:84:74:fd:0f:d1:a6:c1:b9:13:03:e4:a4:15:dd:07: 94:46:aa:70:f1:33:59:57:ac:1d:8e:72:3c:e8:96:68:f0:eb: d9:0b:eb:1f:42:e4:90:cc:1c:1f:5f:91:18:89:d4:31:c7:21: b9:f3:16:73:b8:94:b5:e4:28:87:80:a3:86:3e:46:2b:a9:1a: d8:cc:d8:da:8b:e9:f5:ab:59:3f:84:80:25:d8:25:25:46:ea: dc:5b:b4:ee:56:9c:8a:f6:a9:da:08:6f:f5:4d:5d:fa:58:86: cd:39:56:14:20:27:1f:4a:03:74:ae:e0:b0:46:e2:99:38:c2: 16:b2:b9:36:aa:8c:df:33:05:ee:a6:26:0c:ae:f7:4a:a0:a4: fa:6f:1d:84:57:d5:f3:f2:ef:e4:64:dc:b9:f9:ca:b0:a8:e3: 95:53:d5:f7:96:e6:12:20:9e:95:fe:80:f3:db:26:45:42:e2: 57:53:8f:86:a5:26:42:37:d0:b5:6b:35:2f:ff:5b:4e:69:da: 98:28:6a:be -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEi7u4XIfjx0xJBA0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZWVkYjEyYTQtY2FmMi00OGU0LWJmNTYtNDU5ZWE0MTA3NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspUAZd3nsvqfKWeJ7CM6gEmXbTd0TNOOipIT 33/PenU0IHntf3BaARaCsiDarRtzjDqEwDuTJqSk4o6iPSXVcGF9+SER2ZXbxTvV v/A/HVyCQkRyr1JO8RCYX+TGpfmQV2zYKXr4n3qwg+oJrrKy0KTsu4ZIVuODXVS9 rNeG3TI5HBvGyd62krvpKx9ZLpbcmVXTagHOJ/CmBJ8cr7MgwwloH45VHq0wARKB liHTYNQ86WbXaeRBAqfkh0xpDVzAHKjHnE+blWj2toznhadvInBMAOTmSljWU9bl yrlCZ4xmg2f9XnFlx8IEePRi112uzMyf/i7G0iELI7m30iTInwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFC/k+A7zk1YoEsLcdCIlLNJ+3gzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2UxMWUzNmQtNzJjOS0z ZTQwLWFkYTEtNmM2ZGQwMWJjZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF6EgMA0E AgACMAcDBQAmBNLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAANObwalt0NfLxM4hPUTBCZtmGd3NNcwTMVS jzwOB5RwhbSq403WdVmtauXGh5hGnifCyzq5EDVQvIR0/Q/RpsG5EwPkpBXdB5RG qnDxM1lXrB2Ocjzolmjw69kL6x9C5JDMHB9fkRiJ1DHHIbnzFnO4lLXkKIeAo4Y+ RiupGtjM2NqL6fWrWT+EgCXYJSVG6txbtO5WnIr2qdoIb/VNXfpYhs05VhQgJx9K A3Su4LBG4pk4whayuTaqjN8zBe6mJgyu90qgpPpvHYRX1fPy7+Rk3Ln5yrCo45VT 1feW5hIgnpX+gPPbJkVC4ldTj4alJkI30LVrNS//W05p2pgoar4= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:10 2025 by rpki-client