$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: 0AlbcmZbBiIU5YH9MyHo2MVjYizNI5bLlQsmUvBW1zA= Subject key identifier: EA:EC:56:D0:38:C8:9B:D9:C6:B5:E0:FA:EF:4A:BB:89:EB:53:39:A3 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584900215E37C7B0DA14EFE5BEE0 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5e:37:c7:b0:da:14:ef:e5:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=85df69a0-ecc5-442b-9219-62eebd22c61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:fd:e7:de:62:19:8a:5d:f7:b7:a6:0e:03: 3d:99:4c:40:f7:49:29:31:c9:bc:7d:4c:9c:8b:b7: c0:e2:98:5c:53:75:93:6b:12:77:3f:e1:7e:4a:24: e6:85:7f:45:8d:29:56:11:74:8a:dc:b3:19:d5:3e: a6:66:1e:1b:75:1c:89:e7:b8:ce:c4:23:5e:9a:db: 9a:52:66:ac:42:ce:73:38:c4:f7:aa:a3:3c:08:43: 3f:3f:2c:ab:3a:12:38:d0:39:e8:8b:3c:56:48:3d: 45:b1:8b:f1:9d:c2:e1:06:f9:e0:91:fb:20:38:93: 58:bc:d6:df:e7:0d:d1:a0:5c:37:cd:3d:5f:1f:00: d6:bb:73:e4:3c:16:3d:08:88:26:93:b9:66:83:32: c8:d0:d3:59:3f:61:71:48:82:69:79:ed:34:b2:c2: 50:2a:e7:0a:82:57:56:d2:be:43:49:7c:6c:f2:71: 70:30:65:26:c4:e1:31:df:97:0c:b2:ca:cf:a3:cd: 97:e4:5d:84:02:68:49:3a:29:71:95:3b:43:50:6f: 52:8e:d0:3f:2a:6c:b8:9a:83:8f:10:5e:a5:59:65: 75:57:41:63:02:9b:28:58:65:24:f8:32:7f:3f:01: 20:49:6a:c9:5d:fd:e3:8b:55:6d:37:ac:4b:3b:ee: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:56:D0:38:C8:9B:D9:C6:B5:E0:FA:EF:4A:BB:89:EB:53:39:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c0:03:03:32:ad:cf:30:fc:15:e5:b1:5b:41:8a:cf:00:fb: 1b:8f:e3:dd:41:2d:b7:a1:64:94:7f:f4:10:a2:d2:81:ef:34: b2:f6:c2:1d:2f:b5:35:4c:1d:12:3a:d2:bd:ba:7b:1d:43:1e: fa:21:ce:dc:47:72:d3:05:b8:e3:63:e1:51:aa:2d:13:93:b0: 47:88:85:ff:65:92:e3:2e:e0:07:f0:9b:a4:0b:01:dc:8d:e5: db:8b:e8:59:81:b1:f4:77:ed:19:75:a1:ef:9b:af:48:24:95: dc:3a:80:1d:97:52:dd:78:a2:e9:9c:4d:d2:9c:67:ce:cc:31: 8c:c5:60:71:95:5d:1a:4b:ee:c9:02:61:e1:81:55:db:d9:f3: 79:c3:68:fb:04:56:d5:d7:4f:4f:cb:cb:f8:f1:d4:81:4a:b6: bb:32:49:8e:47:5a:9d:10:72:c4:4f:1d:ae:8c:1c:c0:a8:d0: c0:2d:a8:c8:54:d3:a9:ac:66:b3:c4:89:02:e9:ab:ac:71:b0: cb:5a:e3:09:74:ad:a9:95:c6:ea:92:6d:bb:a3:d3:1e:b6:96: b8:6a:1e:61:13:f9:1c:a8:c2:3a:6c:34:21:20:d4:3c:17:ab: a9:70:d9:df:d1:45:70:e4:df:dc:4b:38:3a:0d:bb:f0:c1:93: ac:cb:07:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV43x7DaFO/lvuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ODVkZjY5YTAtZWNjNS00NDJiLTkyMTktNjJlZWJkMjJjNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraj9595iGYpd97emDgM9mUxA90kpMcm8fUyc i7fA4phcU3WTaxJ3P+F+SiTmhX9FjSlWEXSK3LMZ1T6mZh4bdRyJ57jOxCNemtua UmasQs5zOMT3qqM8CEM/PyyrOhI40DnoizxWSD1FsYvxncLhBvngkfsgOJNYvNbf 5w3RoFw3zT1fHwDWu3PkPBY9CIgmk7lmgzLI0NNZP2FxSIJpee00ssJQKucKgldW 0r5DSXxs8nFwMGUmxOEx35cMssrPo82X5F2EAmhJOilxlTtDUG9SjtA/Kmy4moOP EF6lWWV1V0FjApsoWGUk+DJ/PwEgSWrJXf3ji1VtN6xLO+7BkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrsVtA4yJvZxrXg+u9Ku4nrUzmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnAAwMyrc8w/BXlsVtBis8A+xuP491BLbehZJR/9BCi0oHvNLL2wh0v tTVMHRI60r26ex1DHvohztxHctMFuONj4VGqLROTsEeIhf9lkuMu4Afwm6QLAdyN 5duL6FmBsfR37Rl1oe+br0gkldw6gB2XUt14oumcTdKcZ87MMYzFYHGVXRpL7skC YeGBVdvZ83nDaPsEVtXXT0/Ly/jx1IFKtrsySY5HWp0QcsRPHa6MHMCo0MAtqMhU 06msZrPEiQLpq6xxsMta4wl0ramVxuqSbbuj0x62lrhqHmET+RyowjpsNCEg1DwX q6lw2d/RRXDk39xLODoNu/DBk6zLBzw= -----END CERTIFICATE-----Generated at Sat Apr 12 15:25:15 2025 by rpki-client