$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa File: a9d6e5c9-bec2-395f-af08-83ce47190965.roa (raw, json) Hash identifier: W3OGNzkaU3tkajBIqyIw7uRcm7viO8ejdrEfL++U6wk= Subject key identifier: 5A:A0:8A:E9:AA:AE:4A:A8:9E:80:EC:8D:5C:05:5B:18:3A:64:79:77 Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa Certificate serial: 010D0C9F432858489FD09B303280904E5870BB40 Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 398759 IP address blocks: 23.165.120.0/24 maxlen: 24 2602:f9eb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:9b:30:32:80:90:4e:58:70:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=fd0e330c-7334-4b4b-a853-31981e3a10cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:3d:17:69:e1:92:c2:24:71:2b:ba:e4:19: 6b:6d:bb:60:9c:1d:c8:91:56:80:08:06:48:45:d9: c1:b6:2e:02:7b:80:48:b1:2b:b7:f2:8a:6c:6b:99: d3:92:c8:c1:01:22:c6:5e:3f:38:ff:80:e0:8b:59: 4f:f8:9e:86:a6:4c:4e:f2:37:45:7a:71:c2:13:32: e6:67:20:06:e5:20:0d:4c:7d:d0:f4:63:00:43:5e: e7:a1:2d:e9:6b:3d:93:1a:ef:b3:b0:e7:8b:dc:e7: b6:29:e2:38:86:4a:a6:6c:81:ae:35:26:30:07:62: b3:5a:d4:75:c8:b8:cf:f7:34:21:64:5d:04:e3:92: 9f:e2:16:6d:36:79:44:34:11:00:13:76:e9:e1:9d: bf:97:51:11:1a:02:9d:6d:c8:79:c5:c5:88:c7:af: 29:c0:1b:89:8c:a2:f3:61:1c:a5:79:0b:ca:23:1f: 70:8f:ec:e2:c0:3e:cd:8c:27:79:31:68:8e:35:7b: 7d:fa:c8:b2:35:0e:2f:c9:aa:b9:60:58:8c:bc:6c: cb:c5:1e:84:2a:6a:7c:02:41:6d:61:6b:5b:3c:af: 14:0f:4d:ae:28:c3:41:b5:8b:b6:54:11:b9:5b:d1: 42:d8:85:61:03:1f:14:c7:09:6c:1f:af:cd:4a:03: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:8A:E9:AA:AE:4A:A8:9E:80:EC:8D:5C:05:5B:18:3A:64:79:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl X509v3 Authority Key Identifier: keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 IPv6: 2602:f9eb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7d:ed:32:90:cc:cd:0b:da:bd:39:fe:dd:af:8e:27:c8:c9: 72:56:a1:36:b2:3f:80:e3:91:54:22:b4:74:f8:fb:ad:5a:12: da:de:46:0b:0b:45:38:9f:ed:c4:6d:3d:3e:b6:f7:1d:1b:de: 3d:30:54:25:e1:af:c3:ab:2e:4e:70:f9:28:c0:22:53:9a:1c: 81:25:11:5c:14:f8:97:50:9e:7c:a1:40:be:78:4e:a8:f3:e9: 98:24:a0:03:bc:6f:77:83:98:c8:07:cb:2f:44:95:c0:54:5d: ba:ca:4c:3c:b7:55:9a:65:99:b9:7b:30:27:79:ed:e4:34:97: df:66:6f:05:50:6e:f4:e2:99:53:3d:dd:fe:ba:6e:58:60:f7: bc:d6:1c:1f:f3:07:a1:2f:ca:b5:86:03:dd:51:e5:4a:53:f4: 8b:cf:ac:e0:1f:5a:a2:12:d1:4d:d6:64:bd:fd:0e:33:3e:ec: 93:12:44:c2:7c:89:eb:8f:40:f3:4c:ff:4f:56:29:3e:73:cb: 69:7e:b1:70:a2:86:37:5b:69:f1:1c:39:3b:74:a4:f4:98:91: 5a:e7:ca:47:09:51:1b:ab:d4:ce:07:38:27:76:6a:0b:d6:ac: 7f:04:20:b5:3d:60:27:9a:2d:c6:0b:77:1e:9a:11:37:6b:2b: 84:c3:f6:79 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEif0JswMoCQTlhwu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0 Y2ZhMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk ZmQwZTMzMGMtNzMzNC00YjRiLWE4NTMtMzE5ODFlM2ExMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqo9F2nhksIkcSu65BlrbbtgnB3IkVaACAZI RdnBti4Ce4BIsSu38opsa5nTksjBASLGXj84/4Dgi1lP+J6GpkxO8jdFenHCEzLm ZyAG5SANTH3Q9GMAQ17noS3paz2TGu+zsOeL3Oe2KeI4hkqmbIGuNSYwB2KzWtR1 yLjP9zQhZF0E45Kf4hZtNnlENBEAE3bp4Z2/l1ERGgKdbch5xcWIx68pwBuJjKLz YRyleQvKIx9wj+ziwD7NjCd5MWiONXt9+siyNQ4vyaq5YFiMvGzLxR6EKmp8AkFt YWtbPK8UD02uKMNBtYu2VBG5W9FC2IVhAx8UxwlsH6/NSgOqFwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFqgiumqrkqonoDsjVwFWxg6ZHl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3 NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvYTlkNmU1YzktYmVjMi0z OTVmLWFmMDgtODNjZTQ3MTkwOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDAzNzY0MWQtYWE5MC00ZWFiLTg2 NGUtYTczZTAzZTI0Y2ZhL2QwMzc2NDFkLWFhOTAtNGVhYi04NjRlLWE3M2UwM2Uy NGNmYS5jcmwwHwYDVR0jBBgwFoAUt7tDftH++/QIZeum6I89OeWGSBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNl MDNlMjRjZmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6V4MA4E AgACMAgDBgQmAvnrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAafe0ykMzNC9q9Of7dr44nyMlyVqE2sj+A 45FUIrR0+PutWhLa3kYLC0U4n+3EbT0+tvcdG949MFQl4a/Dqy5OcPkowCJTmhyB JRFcFPiXUJ58oUC+eE6o8+mYJKADvG93g5jIB8svRJXAVF26ykw8t1WaZZm5ezAn ee3kNJffZm8FUG704plTPd3+um5YYPe81hwf8wehL8q1hgPdUeVKU/SLz6zgH1qi EtFN1mS9/Q4zPuyTEkTCfInrj0DzTP9PVik+c8tpfrFwooY3W2nxHDk7dKT0mJFa 58pHCVEbq9TOBzgndmoL1qx/BCC1PWAnmi3GC3cemhE3ayuEw/Z5 -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:45 2025 by rpki-client