$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/7a7e9442-e075-30aa-b1eb-dad4a243696c.roa File: 7a7e9442-e075-30aa-b1eb-dad4a243696c.roa (raw, json) Hash identifier: wkBwWvw19zwC0OCTa/kWNwqnYz6ipkq5kuWwvId2SiU= Subject key identifier: 26:35:40:FA:DC:F7:F9:5B:6D:EF:BA:F4:6F:C6:92:F6:3E:D8:35:F0 Certificate issuer: /CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca Certificate serial: 010D0C9F43285848A99626603E1E070F2C752540 Authority key identifier: DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/7a7e9442-e075-30aa-b1eb-dad4a243696c.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20473 IP address blocks: 23.148.120.0/24 maxlen: 24 2602:2a5::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:26:60:3e:1e:07:0f:2c:75:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=110a65d9-ba5e-4f64-9a89-5355883ac7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:b8:eb:2d:a3:d5:ce:d7:28:bc:02:47:84: e8:c8:c9:8c:6f:bf:26:80:5b:e1:9c:90:26:1d:16: 35:60:d5:28:7c:f2:6e:af:98:01:c3:e6:9e:ac:19: ca:fe:c4:c4:b8:89:6e:57:61:ae:7e:c1:59:3b:d6: ae:f1:4c:85:9c:46:f1:94:bb:d6:2e:73:40:a0:bf: bd:c3:ed:3f:94:86:33:fc:45:d2:b1:c6:6b:86:c6: 06:3e:dd:54:d9:8e:04:a0:d5:43:96:c1:05:cd:cd: 95:35:bf:95:7a:bc:3e:00:8d:55:a7:d3:da:ab:6c: 62:67:b7:1c:51:86:90:ce:6e:9c:ea:70:c9:8a:6b: 39:8e:5e:a7:b3:4b:ff:f3:63:46:ba:14:e9:06:93: ba:e2:e7:ad:e0:40:d1:87:6d:42:e4:41:4d:f3:a2: 79:3e:92:af:ac:a4:4e:8a:4f:53:1a:f9:ee:a1:45: e4:93:14:2d:4f:22:7e:1b:76:c7:74:ed:0c:ac:8c: 93:6b:b8:a6:8d:59:85:8a:2a:38:3a:1e:9f:b1:3f: 01:e4:0f:90:35:8b:51:7e:5b:4f:d0:e1:fb:94:42: 83:66:48:48:42:1a:cb:9e:91:a7:a2:13:42:b9:65: 46:0b:09:2f:e2:18:04:98:d3:87:c5:4f:a2:e2:a5: 74:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:35:40:FA:DC:F7:F9:5B:6D:EF:BA:F4:6F:C6:92:F6:3E:D8:35:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/7a7e9442-e075-30aa-b1eb-dad4a243696c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl X509v3 Authority Key Identifier: keyid:DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer sbgp-ipAddrBlock: critical IPv4: 23.148.120.0/24 IPv6: 2602:2a5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:56:7d:00:2d:07:91:26:22:a0:6e:e4:eb:55:da:70:b0:4f: a3:1b:49:2b:ac:6a:26:26:18:e4:7e:73:74:a7:2a:da:3f:5b: 55:4b:45:0b:24:db:a4:9a:ee:d9:4e:3d:a5:10:0e:2b:4a:2b: 7e:24:d4:b6:9f:2e:ff:2f:7a:a6:ac:cc:9a:dc:5e:d1:b0:f5: b7:fe:5a:b6:b0:a5:d3:a3:62:45:71:aa:20:e4:1a:26:7d:5a: b3:e5:06:20:3f:e4:20:17:0d:d5:28:73:10:41:eb:fc:6f:34: eb:05:82:7f:a3:da:1c:c6:37:2c:12:de:a9:c3:4b:6f:95:2c: a8:66:da:99:eb:61:96:9b:20:65:20:c5:22:c3:1e:a4:0d:9a: b9:3e:c5:a1:a9:ac:d1:4b:a3:7a:4f:b8:63:06:64:34:36:ee: d8:32:37:7e:c7:99:1f:42:7e:bf:04:ae:c0:fa:f1:44:a1:2d: ae:d1:aa:99:7f:c7:ce:53:ed:dd:a9:c6:05:0b:bd:e6:89:48: 10:dc:28:08:0f:3e:6d:5c:32:a6:d7:db:67:ca:c4:87:0a:46: 57:10:d4:57:94:3c:be:57:4d:47:d6:2b:5f:ff:d6:ec:f1:a4: eb:ae:f4:d5:bb:3d:df:7f:69:f5:d6:b5:c8:57:96:0e:56:30: 39:62:34:65 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEipliZgPh4HDyx1JUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlZmE2YmYtNmU3NC00NzgwLWE4MGQtY2Y4NWQ4MGM5 N2NhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTEwYTY1ZDktYmE1ZS00ZjY0LTlhODktNTM1NTg4M2FjN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAply46y2j1c7XKLwCR4ToyMmMb78mgFvhnJAm HRY1YNUofPJur5gBw+aerBnK/sTEuIluV2GufsFZO9au8UyFnEbxlLvWLnNAoL+9 w+0/lIYz/EXSscZrhsYGPt1U2Y4EoNVDlsEFzc2VNb+Verw+AI1Vp9Paq2xiZ7cc UYaQzm6c6nDJims5jl6ns0v/82NGuhTpBpO64uet4EDRh21C5EFN86J5PpKvrKRO ik9TGvnuoUXkkxQtTyJ+G3bHdO0MrIyTa7imjVmFiio4Oh6fsT8B5A+QNYtRfltP 0OH7lEKDZkhIQhrLnpGnohNCuWVGCwkv4hgEmNOHxU+i4qV0dQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCY1QPrc9/lbbe+69G/GkvY+2DXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kOGVm YTZiZi02ZTc0LTQ3ODAtYTgwZC1jZjg1ZDgwYzk3Y2EvN2E3ZTk0NDItZTA3NS0z MGFhLWIxZWItZGFkNGEyNDM2OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDhlZmE2YmYtNmU3NC00NzgwLWE4 MGQtY2Y4NWQ4MGM5N2NhL2Q4ZWZhNmJmLTZlNzQtNDc4MC1hODBkLWNmODVkODBj OTdjYS5jcmwwHwYDVR0jBBgwFoAU3/hkpy0c6hVjy6cynKwAM7VxOmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kOGVmYTZiZi02ZTc0LTQ3ODAtYTgwZC1jZjg1 ZDgwYzk3Y2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5R4MA4E AgACMAgDBgAmAgKlADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhVn0ALQeRJiKgbuTrVdpwsE+jG0krrGom JhjkfnN0pyraP1tVS0ULJNukmu7ZTj2lEA4rSit+JNS2ny7/L3qmrMya3F7RsPW3 /lq2sKXTo2JFcaog5BomfVqz5QYgP+QgFw3VKHMQQev8bzTrBYJ/o9ocxjcsEt6p w0tvlSyoZtqZ62GWmyBlIMUiwx6kDZq5PsWhqazRS6N6T7hjBmQ0Nu7YMjd+x5kf Qn6/BK7A+vFEoS2u0aqZf8fOU+3dqcYFC73miUgQ3CgIDz5tXDKm19tnysSHCkZX ENRXlDy+V01H1itf/9bs8aTrrvTVuz3ff2n11rXIV5YOVjA5YjRl -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:23 2025 by rpki-client