$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa File: aa578848-2b75-3b39-9243-d445c17b3680.roa (raw, json) Hash identifier: SFUgxfxHGpTYKRaxfK07DYDpLahZZFuxRC3c+qJEKVs= Subject key identifier: 53:82:B8:2A:B4:50:AA:9A:61:9E:DF:B7:16:1B:68:35:6A:E0:8A:4E Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584909E6A635E7E8D1F6CAE3E900 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 395400 IP address blocks: 168.123.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a6:35:e7:e8:d1:f6:ca:e3:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=788258d3-fe08-45e2-8d59-683e26a13852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:ca:28:01:88:06:82:cd:f2:be:bf:04:11: 9f:e7:ff:19:fe:e8:7b:91:08:1a:02:d2:0a:e3:fe: ea:85:84:a5:09:18:8f:74:f6:94:d5:ee:31:75:c2: 29:db:0d:96:f3:4a:9d:18:4f:c5:55:05:2f:4f:79: 1f:c7:87:44:2b:7a:d4:87:8a:65:06:4f:d7:4e:e3: 15:7c:93:6b:09:8a:8e:f6:28:0b:52:5c:e1:eb:b3: af:b0:ef:94:13:99:17:dd:48:7f:d8:39:54:f6:f8: d3:49:c5:13:74:ab:49:a1:92:41:c2:02:7b:05:11: 05:5f:af:e3:62:38:47:62:7c:a0:c6:78:55:db:9c: 13:eb:a4:db:6f:e1:44:77:3e:4e:92:9f:68:9f:ee: 0e:db:68:6a:e8:53:3c:cb:09:2a:7b:0c:c9:5e:9f: a5:d8:b3:6a:ea:1c:65:28:f5:23:60:85:7a:b0:17: 3e:a3:a1:a6:df:2f:96:ad:38:1e:1c:5d:79:b4:9d: 1a:e0:f2:6a:c1:39:8c:cc:11:4c:19:44:04:3a:1f: 5d:ae:31:7a:5a:fa:68:2f:7b:d5:db:fd:23:ed:90: ca:1c:e4:34:8a:22:f9:54:30:d6:90:30:c5:65:4f: b9:b4:fb:62:50:49:31:71:fb:5f:45:e9:0a:5e:43: 26:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:B8:2A:B4:50:AA:9A:61:9E:DF:B7:16:1B:68:35:6A:E0:8A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:82:6c:b1:c9:a6:23:d0:8e:c0:b5:22:d1:35:eb:e1:c5:c7: 42:c4:a3:36:b2:5f:7f:09:d9:09:49:22:81:73:f5:50:49:dc: b6:dc:a8:b3:37:60:6c:43:c2:2b:c1:c9:31:97:27:06:2e:aa: 6e:82:9a:85:82:01:56:ff:df:d1:7b:c9:9b:27:e4:59:ec:6d: a8:93:93:d5:49:fc:0d:cf:3f:57:6a:b5:4d:0f:32:a7:42:e8: 82:56:97:fb:44:a1:4d:d8:62:27:f9:cb:22:27:79:75:84:81: d8:3d:59:70:7c:5c:3b:43:8e:4b:eb:cc:ac:d4:49:65:b3:f1: 1b:70:c0:24:1a:9e:43:94:6e:61:e9:8b:06:28:cc:2e:18:7b: 31:b5:99:d2:23:ca:a6:c7:3b:c2:4c:8b:47:20:0c:92:4c:24: ef:e1:e5:68:29:b9:62:77:e0:9f:48:c4:90:6a:82:18:5e:2b: 09:84:a2:89:5f:ac:0b:f3:b2:e1:bb:74:1d:03:83:a2:76:0c: d1:82:73:a0:14:2a:2c:5e:f2:3c:9f:eb:c2:99:f0:b1:67:38: 85:fe:38:c0:71:f2:02:c4:08:ee:e6:3c:da:21:bd:1c:92:a4: ce:db:59:82:99:2d:db:12:8e:fb:f7:7f:d9:62:62:6a:90:e5: 82:44:b0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qY15+jR9srj6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk Nzg4MjU4ZDMtZmUwOC00NWUyLThkNTktNjgzZTI2YTEzODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnDKKAGIBoLN8r6/BBGf5/8Z/uh7kQgaAtIK 4/7qhYSlCRiPdPaU1e4xdcIp2w2W80qdGE/FVQUvT3kfx4dEK3rUh4plBk/XTuMV fJNrCYqO9igLUlzh67OvsO+UE5kX3Uh/2DlU9vjTScUTdKtJoZJBwgJ7BREFX6/j YjhHYnygxnhV25wT66Tbb+FEdz5Okp9on+4O22hq6FM8ywkqewzJXp+l2LNq6hxl KPUjYIV6sBc+o6Gm3y+WrTgeHF15tJ0a4PJqwTmMzBFMGUQEOh9drjF6WvpoL3vV 2/0j7ZDKHOQ0iiL5VDDWkDDFZU+5tPtiUEkxcftfRekKXkMmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOCuCq0UKqaYZ7ftxYbaDVq4IpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvYWE1Nzg4NDgtMmI3NS0z YjM5LTkyNDMtZDQ0NWMxN2IzNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqHuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGCbLHJpiPQjsC1ItE16+HFx0LEozayX38J2QlJIoFz9VBJ3LbcqLM3 YGxDwivByTGXJwYuqm6CmoWCAVb/39F7yZsn5FnsbaiTk9VJ/A3PP1dqtU0PMqdC 6IJWl/tEoU3YYif5yyIneXWEgdg9WXB8XDtDjkvrzKzUSWWz8RtwwCQankOUbmHp iwYozC4YezG1mdIjyqbHO8JMi0cgDJJMJO/h5WgpuWJ34J9IxJBqghheKwmEoolf rAvzsuG7dB0Dg6J2DNGCc6AUKixe8jyf68KZ8LFnOIX+OMBx8gLECO7mPNohvRyS pM7bWYKZLdsSjvv3f9liYmqQ5YJEsDE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:36 2025 by rpki-client