$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa File: cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json) Hash identifier: 8uRESgpAg6idHt6jjqu63C1bnGo9gSjPrFc32SGzR3o= Subject key identifier: 2D:68:94:B5:15:22:08:C1:81:B8:B9:50:8D:CA:4D:F8:09:EF:7F:F2 Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F43285848BBBB85D7AB59D49482416D00 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 12131 IP address blocks: 23.161.34.0/24 maxlen: 24 23.187.0.0/24 maxlen: 24 23.187.1.0/24 maxlen: 24 2620:1df::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:85:d7:ab:59:d4:94:82:41:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=de7fa1bd-2326-49e6-8381-db1d924102b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:09:75:ab:86:33:d8:0a:f1:a8:05:65:00: 87:88:f6:67:50:15:f8:d6:65:b4:d0:8b:01:db:f2: dc:a6:05:4b:79:3a:d0:93:0b:34:ca:e9:9b:ca:9a: e0:08:2b:5e:69:78:a2:4a:5c:68:4e:e5:eb:fb:7e: 34:0d:21:25:1c:d1:12:d9:b8:b4:c2:39:69:a5:b3: 6a:9a:c1:0e:44:ce:f6:1b:68:da:36:21:b1:51:27: 3b:2b:90:79:ea:7f:22:30:ea:07:a3:85:07:d2:ac: 81:b3:e8:0b:be:4f:0d:73:63:98:cc:6f:64:c0:58: cb:0d:79:e3:2b:f5:7f:21:23:73:17:32:ff:30:75: cf:c8:5b:eb:26:f3:2d:e0:a0:3c:35:67:29:72:b3: 52:ca:31:80:4a:23:4d:b4:c0:04:4d:05:ec:f9:8c: c2:24:45:cc:46:ca:60:59:84:f9:0f:f6:37:5d:ea: a2:42:37:ed:f8:b9:41:a5:e3:5b:a4:c2:ba:45:44: 9e:30:60:f7:34:1a:17:d1:8c:14:e6:64:ab:34:ca: af:14:af:d3:90:e3:56:ef:87:3b:ed:6a:88:b6:c7: 29:00:c6:c7:a4:d5:00:4c:62:a9:31:c5:3a:f3:d4: a7:5a:f2:c4:33:97:4b:7f:e2:9b:e4:14:fa:dc:36: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:94:B5:15:22:08:C1:81:B8:B9:50:8D:CA:4D:F8:09:EF:7F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.34.0/24 23.187.0.0/23 IPv6: 2620:1df::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e4:f0:d4:29:22:0e:09:97:72:bf:e9:e7:26:fb:1a:2d:92: f7:32:16:f1:d0:89:b3:18:a9:0e:ca:3b:0a:c5:43:90:f3:30: 12:ac:3b:86:f3:5a:9e:91:87:53:a3:c3:ae:a7:6a:52:87:df: 62:5e:73:68:6d:25:fc:7b:12:2e:d6:a7:59:a0:97:db:4c:b6: 58:a6:f0:10:f3:63:0f:64:61:4e:a3:e2:10:5b:7f:3f:20:4a: e8:4d:60:3f:85:2e:10:1d:53:44:75:9c:3f:98:3b:95:47:a3: e6:dd:92:29:ef:44:e6:03:46:b7:86:90:1f:86:e6:04:29:a6: 0d:03:d9:7e:51:17:40:ea:3f:a5:e2:99:0f:f8:eb:e2:34:55: c1:98:f4:34:5b:25:f5:16:f6:20:70:e3:f3:a2:8d:73:8b:12: 88:41:f6:9d:18:63:5a:a1:4d:70:e9:2d:e2:64:1f:2e:04:cb: a0:92:86:19:5a:f4:21:ea:f9:f9:c3:ea:25:99:93:bd:f9:b7: 05:c0:64:09:37:74:0b:74:7d:46:d9:c9:67:15:6a:04:45:84: 14:94:fb:fe:a7:ad:c8:22:2d:04:96:ad:8c:e4:d3:5e:5a:2d: 8a:3f:b2:8f:df:b7:0c:ab:18:58:74:80:80:c0:d5:32:3d:9a: a0:ef:d1:8f -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEi7u4XXq1nUlIJBbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZGU3ZmExYmQtMjMyNi00OWU2LTgzODEtZGIxZDkyNDEwMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6kJdauGM9gK8agFZQCHiPZnUBX41mW00IsB 2/LcpgVLeTrQkws0yumbyprgCCteaXiiSlxoTuXr+340DSElHNES2bi0wjlppbNq msEORM72G2jaNiGxUSc7K5B56n8iMOoHo4UH0qyBs+gLvk8Nc2OYzG9kwFjLDXnj K/V/ISNzFzL/MHXPyFvrJvMt4KA8NWcpcrNSyjGASiNNtMAETQXs+YzCJEXMRspg WYT5D/Y3XeqiQjft+LlBpeNbpMK6RUSeMGD3NBoX0YwU5mSrNMqvFK/TkONW74c7 7WqItscpAMbHpNUATGKpMcU689SnWvLEM5dLf+Kb5BT63DZ2PwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFC1olLUVIgjBgbi5UI3KTfgJ73/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2YxZjU1NDItMzgzMi0z ZGQ3LWEyYTItMmM2ODU3MWRkMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6EiAwQB F7sAMA0EAgACMAcDBQAmIAHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACzk8NQpIg4Jl3K/6ecm+xotkvcy FvHQibMYqQ7KOwrFQ5DzMBKsO4bzWp6Rh1Ojw66nalKH32Jec2htJfx7Ei7Wp1mg l9tMtlim8BDzYw9kYU6j4hBbfz8gSuhNYD+FLhAdU0R1nD+YO5VHo+bdkinvROYD RreGkB+G5gQppg0D2X5RF0DqP6XimQ/46+I0VcGY9DRbJfUW9iBw4/OijXOLEohB 9p0YY1qhTXDpLeJkHy4Ey6CShhla9CHq+fnD6iWZk735twXAZAk3dAt0fUbZyWcV agRFhBSU+/6nrcgiLQSWrYzk015aLYo/so/ftwyrGFh0gIDA1TI9mqDv0Y8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:18 2025 by rpki-client