$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa File: c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa (raw, json) Hash identifier: 6L4Yz4e5PB1VbziVGmgZBin9epEOFFRHiT2nwK0wDp0= Subject key identifier: C3:09:17:58:0C:C5:7F:5A:39:F8:AE:71:AD:2C:BE:E2:78:B5:9D:CC Certificate issuer: /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Certificate serial: 010D0C9F432858495C243F68B6ABAE5499F20B40 Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 30036 IP address blocks: 23.159.24.0/24 maxlen: 24 2602:fa53::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3f:68:b6:ab:ae:54:99:f2:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=b57a978d-3bb2-45ce-8d7a-66f124af6c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:9f:31:2b:28:3f:85:23:54:19:16:f0:4f: ea:f1:d1:eb:fb:be:85:8d:11:e4:2c:a3:ca:27:35: 6c:73:7d:14:3d:d6:fb:4e:e5:00:df:5f:ae:2e:f6: 8a:da:9a:64:c9:bf:40:cc:fa:e7:bb:5e:2c:75:f0: 4b:10:f5:32:a0:9b:f1:08:32:1c:29:c8:b4:89:1a: f2:aa:a0:02:b6:d7:06:43:8b:17:b5:17:14:12:a7: 41:1d:aa:9b:91:c8:c1:ec:0d:20:bc:bd:b3:61:3a: 84:e8:f1:b3:6f:54:c5:7e:65:60:bd:92:52:c9:f4: 52:07:93:39:85:b2:ff:1d:6f:11:75:d6:a6:36:ce: 82:22:d9:66:5d:b0:05:de:4c:af:2f:78:bd:cc:20: a1:0d:15:46:0f:4a:c7:b1:cf:b1:99:00:13:7b:35: 31:11:df:d5:c2:b2:62:87:f8:2a:22:f0:b3:0a:97: 06:eb:07:dd:85:5e:93:3f:43:13:ee:fc:9b:53:4e: a3:4f:4a:bf:b7:a5:d1:fc:90:0e:8b:1f:55:e3:cd: a8:f6:4c:d6:f2:4e:59:ee:83:f7:f7:26:e3:49:9c: 13:39:9a:ad:06:d6:1b:a7:9e:13:63:45:45:a9:90: 85:94:30:03:e7:36:49:7b:4a:59:8e:d3:1f:29:16: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:09:17:58:0C:C5:7F:5A:39:F8:AE:71:AD:2C:BE:E2:78:B5:9D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl X509v3 Authority Key Identifier: keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer sbgp-ipAddrBlock: critical IPv4: 23.159.24.0/24 IPv6: 2602:fa53::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:74:5d:97:92:bd:a0:20:05:ef:2c:76:53:1c:a4:65:12:ed: ad:80:3c:04:5b:61:4d:38:db:e3:fc:2c:a1:94:7b:a9:3a:4f: 7e:23:a2:b0:74:d5:05:ab:73:89:bc:06:2f:55:92:8f:4e:2d: b1:55:70:0b:a8:72:36:6d:3c:3d:b2:24:41:b3:cf:17:37:ba: 1b:e4:c1:cd:d5:d4:82:99:ce:ff:d6:d7:03:de:86:d6:0a:79: 76:9f:30:cf:7c:27:5d:dd:fb:c3:66:75:e3:30:eb:a5:52:e1: b8:d1:10:44:e6:d2:3c:15:2a:ec:41:87:37:8d:4e:0f:c4:b4: 10:59:49:6e:b5:76:4e:fa:2e:18:95:f3:22:28:cc:e0:c0:56: af:f7:a6:e9:a7:3b:71:7d:29:c6:f3:4c:e7:25:c6:57:8c:fc: 66:8b:35:af:38:d5:5b:d8:6b:14:bd:40:ae:80:78:3e:55:35: e5:31:fc:5d:e4:e7:af:08:61:33:24:e8:9c:59:a6:a5:65:bf: 56:ec:3c:c4:3a:fc:ae:da:4e:f7:55:84:e6:ce:d8:a6:49:8e: 7e:5f:b2:72:d8:de:19:55:8e:af:91:df:08:35:4f:c2:97:92: f7:41:dd:5e:f5:ac:d0:5e:e5:2d:4f:5e:d1:e6:1e:2f:85:b4: 76:33:8f:40 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElcJD9otquuVJnyC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1OWUwNTAtM2UyOS00MjkzLWJkZjQtY2ZiNWZlMTU0 Yzk4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YjU3YTk3OGQtM2JiMi00NWNlLThkN2EtNjZmMTI0YWY2YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyWfMSsoP4UjVBkW8E/q8dHr+76FjRHkLKPK JzVsc30UPdb7TuUA31+uLvaK2ppkyb9AzPrnu14sdfBLEPUyoJvxCDIcKci0iRry qqACttcGQ4sXtRcUEqdBHaqbkcjB7A0gvL2zYTqE6PGzb1TFfmVgvZJSyfRSB5M5 hbL/HW8RddamNs6CItlmXbAF3kyvL3i9zCChDRVGD0rHsc+xmQATezUxEd/VwrJi h/gqIvCzCpcG6wfdhV6TP0MT7vybU06jT0q/t6XR/JAOix9V482o9kzW8k5Z7oP3 9ybjSZwTOZqtBtYbp54TY0VFqZCFlDAD5zZJe0pZjtMfKRa4rQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMMJF1gMxX9aOfiuca0svuJ4tZ3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5 ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1ZmUxNTRjOTgvYzljOWJkMTYtNWRiMy0z OTFlLTljYjItMzgzN2MxYjExYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWY1OWUwNTAtM2UyOS00MjkzLWJk ZjQtY2ZiNWZlMTU0Yzk4L2VmNTllMDUwLTNlMjktNDI5My1iZGY0LWNmYjVmZTE1 NGM5OC5jcmwwHwYDVR0jBBgwFoAU8Ma+OtC0tMwv/U99IeNuMpHeqvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1 ZmUxNTRjOTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF58YMA4E AgACMAgDBgAmAvpTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGdF2Xkr2gIAXvLHZTHKRlEu2tgDwEW2FN ONvj/CyhlHupOk9+I6KwdNUFq3OJvAYvVZKPTi2xVXALqHI2bTw9siRBs88XN7ob 5MHN1dSCmc7/1tcD3obWCnl2nzDPfCdd3fvDZnXjMOulUuG40RBE5tI8FSrsQYc3 jU4PxLQQWUlutXZO+i4YlfMiKMzgwFav96bppztxfSnG80znJcZXjPxmizWvONVb 2GsUvUCugHg+VTXlMfxd5OevCGEzJOicWaalZb9W7DzEOvyu2k73VYTmztimSY5+ X7Jy2N4ZVY6vkd8INU/Cl5L3Qd1e9azQXuUtT17R5h4vhbR2M49A -----END CERTIFICATE-----Generated at Fri Apr 4 19:56:53 2025 by rpki-client