$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa File: 1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa (raw, json) Hash identifier: lF6qWK5ursyZQL7yzEo0CvXsedk5LcFqcC4yCZx1q10= Subject key identifier: 89:8C:AE:74:46:A5:4E:5D:11:49:D7:69:37:18:B8:12:A3:84:45:50 Certificate issuer: /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9 Certificate serial: 010D0C9F43285848A29B49D757FDE40D1A5E6500 Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 55140 IP address blocks: 23.138.0.0/24 maxlen: 24 162.220.180.0/22 maxlen: 24 162.245.104.0/21 maxlen: 24 198.1.0.0/21 maxlen: 24 209.177.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:49:d7:57:fd:e4:0d:1a:5e:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=691c2c27-80ff-4c1d-ad76-bcd4b4c746e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:31:7d:08:57:20:aa:08:93:c0:7b:65:c9: 89:9e:d3:b2:c9:7f:d8:70:fc:84:96:19:54:ae:a9: 5b:4a:e5:8c:d5:fd:7f:cc:7e:cc:ff:5f:09:94:f6: ce:84:89:42:f0:c0:43:50:26:34:ee:63:ef:d2:13: cb:18:b0:c2:5c:71:47:c6:e5:d0:25:7e:72:a9:e7: ba:5a:cb:4f:27:cd:bb:bd:9a:27:02:20:80:55:63: a0:cd:51:66:3d:de:b5:b0:36:6b:17:d3:07:6c:1c: 49:26:cb:0d:7e:2f:fe:cd:20:9d:11:6d:91:fa:91: b4:36:5c:ee:48:06:df:21:0c:ef:c6:51:76:23:7e: 42:4a:29:31:e9:d1:46:37:92:cb:73:00:17:6b:58: 0e:df:86:f9:85:7e:5f:20:c0:43:7b:63:14:8c:e0: 8c:46:13:f6:c4:3a:9c:54:f3:63:81:f4:11:45:3d: 11:45:fd:2d:7d:cd:50:44:96:a4:92:51:dc:5e:e3: 62:0e:4d:d7:0b:8b:53:e5:bf:90:88:90:5e:bc:4b: 4f:a5:92:85:90:86:01:dd:86:c3:a8:7c:2a:af:d9: f7:12:d4:fb:b8:54:ae:43:3c:87:46:4b:4e:cb:4d: 5d:08:e7:ee:45:2e:14:1d:35:71:ad:29:69:2c:66: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8C:AE:74:46:A5:4E:5D:11:49:D7:69:37:18:B8:12:A3:84:45:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl X509v3 Authority Key Identifier: keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer sbgp-ipAddrBlock: critical IPv4: 23.138.0.0/24 162.220.180.0/22 162.245.104.0/21 198.1.0.0/21 209.177.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:49:bb:ba:a9:a2:06:79:21:94:0d:d4:af:01:b2:4f:1e:7c: 28:61:5a:fe:12:86:9f:f7:20:e8:2d:b9:96:97:82:8d:87:67: 8f:56:02:f4:86:48:8e:f9:67:89:97:25:dc:01:2c:11:cc:94: b1:ad:e3:12:cb:3c:96:0f:f0:3a:41:c6:15:7e:60:9a:cd:25: ba:a2:c8:6f:ed:6d:3d:70:d5:02:3d:9e:f0:65:6c:18:5e:d2: be:99:b2:af:c4:35:bc:67:23:1a:b7:98:e5:be:10:d3:6b:7e: 4f:69:37:15:8c:9e:d2:4b:df:a5:a4:6e:12:71:84:88:17:d5: 59:9e:c9:8c:0d:f2:b8:fc:07:10:56:16:54:87:a3:a9:da:26: be:ac:a4:6a:23:f7:23:5d:5b:ac:9b:9f:5a:11:a1:18:77:8f: 9d:41:48:62:c7:02:81:49:93:fb:d1:89:81:4e:65:ef:21:20: 8f:59:ca:92:6e:9e:d8:c0:77:86:65:ca:85:d4:11:ef:38:a2: fb:a0:2f:f0:07:a7:de:d0:39:6c:b6:56:f2:17:fa:13:17:53: 64:21:ee:14:91:02:8c:14:d1:9d:24:0d:08:93:68:e3:7b:b4: 59:0c:d6:ed:6b:27:98:47:eb:66:d7:1b:7a:62:16:a2:aa:25: 7d:79:3c:c6 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEiim0nXV/3kDRpeZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcwN2MyZGQtMjY0Ny00MTY0LWI0YjMtOWU3ZGExNDFk NWU5MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NjkxYzJjMjctODBmZi00YzFkLWFkNzYtYmNkNGI0Yzc0NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT0xfQhXIKoIk8B7ZcmJntOyyX/YcPyElhlU rqlbSuWM1f1/zH7M/18JlPbOhIlC8MBDUCY07mPv0hPLGLDCXHFHxuXQJX5yqee6 WstPJ827vZonAiCAVWOgzVFmPd61sDZrF9MHbBxJJssNfi/+zSCdEW2R+pG0Nlzu SAbfIQzvxlF2I35CSikx6dFGN5LLcwAXa1gO34b5hX5fIMBDe2MUjOCMRhP2xDqc VPNjgfQRRT0RRf0tfc1QRJakklHcXuNiDk3XC4tT5b+QiJBevEtPpZKFkIYB3YbD qHwqr9n3EtT7uFSuQzyHRktOy01dCOfuRS4UHTVxrSlpLGac6wIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFImMrnRGpU5dEUnXaTcYuBKjhEVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NzA3 YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdkYTE0MWQ1ZTkvMWM5OTliMWItNzFmZi0z ZGI5LWE5M2EtMDZiNGRlODA2MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTcwN2MyZGQtMjY0Ny00MTY0LWI0 YjMtOWU3ZGExNDFkNWU5Lzk3MDdjMmRkLTI2NDctNDE2NC1iNGIzLTllN2RhMTQx ZDVlOS5jcmwwHwYDVR0jBBgwFoAUk1umtQlGETLURYU61Z0YQwTsBRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85NzA3YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdk YTE0MWQ1ZTkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAF4oAAwQC oty0AwQDovVoAwQDxgEAAwQB0bFKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFBJu7qpogZ5IZQN1K8Bsk8e fChhWv4Shp/3IOgtuZaXgo2HZ49WAvSGSI75Z4mXJdwBLBHMlLGt4xLLPJYP8DpB xhV+YJrNJbqiyG/tbT1w1QI9nvBlbBhe0r6Zsq/ENbxnIxq3mOW+ENNrfk9pNxWM ntJL36WkbhJxhIgX1VmeyYwN8rj8BxBWFlSHo6naJr6spGoj9yNdW6ybn1oRoRh3 j51BSGLHAoFJk/vRiYFOZe8hII9ZypJuntjAd4ZlyoXUEe84ovugL/AHp97QOWy2 VvIX+hMXU2Qh7hSRAowU0Z0kDQiTaON7tFkM1u1rJ5hH62bXG3piFqKqJX15PMY= -----END CERTIFICATE-----Generated at Sat Apr 12 13:56:59 2025 by rpki-client