$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa File: 43870171-fec9-3adf-a047-9532779804f9.roa (raw, json) Hash identifier: HCfM+OlStcu2FUyjWdP3WhjQcM7E8023u7QD3RwxGt4= Subject key identifier: A0:E0:DD:07:83:8E:F0:20:45:04:84:28:D3:34:13:AF:5E:30:CB:23 Certificate issuer: /CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Certificate serial: 010D0C9F4328584949FE978D8F99439B08372C80 Authority key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 40924 IP address blocks: 23.165.24.0/24 maxlen: 24 2602:816:7000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:97:8d:8f:99:43:9b:08:37:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=7cac57d0-0279-4bbd-87f0-6518692e0d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:27:bc:41:dd:44:e9:f0:96:fb:5a:33:e4: 94:1a:7c:1b:a1:79:39:c5:6b:a1:ac:23:40:75:9e: 7c:f4:97:8b:46:a1:4b:3a:08:5d:af:64:9c:06:79: 60:38:f6:15:3c:3d:06:e8:15:70:4c:49:14:09:17: 0e:f6:9e:2a:b6:8c:92:25:4d:ac:f1:0b:58:a8:ea: 85:a7:09:85:c6:25:c0:3d:b6:8c:49:7a:e0:f0:94: f6:c0:b3:ea:8b:cb:70:a9:11:ad:c7:9a:5d:03:fe: 5c:07:94:34:8d:a8:0b:7f:fc:12:4d:23:88:60:83: 09:23:73:a6:90:8d:2b:bd:47:3b:36:c8:77:13:f0: 1d:92:2a:2f:cb:b3:e9:70:b9:12:fa:2c:fc:b2:a4: 49:35:4c:55:e2:55:8b:de:1e:6e:65:6a:0f:4a:0f: 91:cb:6b:a7:08:cd:cd:5b:58:61:4a:89:8b:b5:f3: 44:8e:51:05:ac:1d:61:38:49:82:99:41:6f:39:8c: 64:69:94:41:a0:b5:2a:37:d0:9c:43:63:3a:11:e8: c6:97:c2:99:8e:45:75:54:3e:b7:ae:a9:de:d2:a0: e0:30:52:0b:24:82:73:99:dd:89:2a:0c:6d:f5:cc: 81:ed:f6:e2:56:67:e4:87:06:22:78:ad:4a:82:bf: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E0:DD:07:83:8E:F0:20:45:04:84:28:D3:34:13:AF:5E:30:CB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl X509v3 Authority Key Identifier: keyid:C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer sbgp-ipAddrBlock: critical IPv4: 23.165.24.0/24 IPv6: 2602:816:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:82:30:66:4b:6c:f3:2c:e7:b7:00:c6:80:62:6b:60:b7:0d: bb:66:e3:ac:4b:ce:a5:18:b4:65:2f:10:7d:4b:1f:4e:2a:72: 59:1c:7c:bd:a3:aa:7b:d5:0e:22:40:d6:01:5c:dc:e7:0e:bc: e0:f1:02:80:fb:c3:59:05:6f:5d:1e:47:cb:cf:04:3e:93:ce: 71:d2:13:98:bb:99:1d:7a:3a:95:a0:89:07:b4:9e:81:bd:1c: 0b:4f:54:4b:01:b0:5c:b4:6c:98:ae:58:e6:52:47:0c:e7:18: 11:ec:61:62:7d:f7:88:3e:a6:7c:f0:ef:f2:1d:43:99:4e:32: 4d:10:c9:0e:c9:f5:49:bd:60:d5:8f:ef:04:7e:aa:22:9c:a6: 1b:74:a7:04:65:d4:75:1e:8f:40:27:cc:cc:0f:72:fe:72:a3: 4e:ee:3c:64:e7:a9:0c:f1:da:53:4c:fd:6f:e5:18:f9:2b:ed: 6f:dd:49:54:09:3f:5b:35:28:27:89:62:1e:ce:a5:16:8d:cd: 0b:ff:18:ad:ae:95:53:ed:20:ea:eb:ce:3b:9f:c9:ce:e5:4e: 30:ad:7b:74:09:c4:9c:f4:26:10:84:43:98:9a:9b:61:bd:04: 32:f5:75:96:e7:2c:e6:02:f0:79:76:c9:56:5f:b4:43:88:1c: 6f:0d:c4:f7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWElJ/peNj5lDmwg3LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAxZjdlMGItMDBjYi00N2EyLThlMjAtMDMzYjM1Njdj YzZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk N2NhYzU3ZDAtMDI3OS00YmJkLTg3ZjAtNjUxODY5MmUwZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwknvEHdROnwlvtaM+SUGnwboXk5xWuhrCNA dZ589JeLRqFLOghdr2ScBnlgOPYVPD0G6BVwTEkUCRcO9p4qtoySJU2s8QtYqOqF pwmFxiXAPbaMSXrg8JT2wLPqi8twqRGtx5pdA/5cB5Q0jagLf/wSTSOIYIMJI3Om kI0rvUc7Nsh3E/Adkiovy7PpcLkS+iz8sqRJNUxV4lWL3h5uZWoPSg+Ry2unCM3N W1hhSomLtfNEjlEFrB1hOEmCmUFvOYxkaZRBoLUqN9CcQ2M6EejGl8KZjkV1VD63 rqne0qDgMFILJIJzmd2JKgxt9cyB7fbiVmfkhwYieK1Kgr+u/wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKDg3QeDjvAgRQSEKNM0E69eMMsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFm N2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2N2NjNmQvNDM4NzAxNzEtZmVjOS0z YWRmLWEwNDctOTUzMjc3OTgwNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjAxZjdlMGItMDBjYi00N2EyLThl MjAtMDMzYjM1NjdjYzZkL2YwMWY3ZTBiLTAwY2ItNDdhMi04ZTIwLTAzM2IzNTY3 Y2M2ZC5jcmwwHwYDVR0jBBgwFoAUxBCwz+7PLW5YneCYZYFXgiGkKEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNi MzU2N2NjNmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6UYMA8E AgACMAkDBwQmAggWcAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARIIwZkts8yzntwDGgGJrYLcNu2bjrEvO pRi0ZS8QfUsfTipyWRx8vaOqe9UOIkDWAVzc5w684PECgPvDWQVvXR5Hy88EPpPO cdITmLuZHXo6laCJB7Segb0cC09USwGwXLRsmK5Y5lJHDOcYEexhYn33iD6mfPDv 8h1DmU4yTRDJDsn1Sb1g1Y/vBH6qIpymG3SnBGXUdR6PQCfMzA9y/nKjTu48ZOep DPHaU0z9b+UY+Svtb91JVAk/WzUoJ4liHs6lFo3NC/8Yra6VU+0g6uvOO5/JzuVO MK17dAnEnPQmEIRDmJqbYb0EMvV1lucs5gLweXbJVl+0Q4gcbw3E9w== -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:36 2025 by rpki-client