$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa File: bef29b0a-887f-3563-acf6-0a6587af29f2.roa (raw, json) Hash identifier: 0ncFBItz2LnnVAc2hldWRmYFyU3l4OkjOM7XgDQ3pTo= Subject key identifier: 3F:16:B0:60:AA:A1:44:DF:EC:C3:13:1B:99:E2:15:B9:F4:92:F0:0E Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F432858490F7BF2D23C64D956B4708580 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 18914 IP address blocks: 23.147.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:f2:d2:3c:64:d9:56:b4:70:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=27efddd5-50b0-4af6-9ea6-fdd74e54d9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ce:fb:a6:09:bb:26:ee:89:3a:c0:9a:e7:73: e7:2a:23:b2:ed:71:bd:fb:21:e8:95:39:b8:98:fb: 9a:05:3a:a1:d6:38:87:ff:56:6e:ec:17:66:6f:52: cc:1d:0f:42:18:5f:e3:ab:21:e6:9d:4c:60:ec:16: fb:e4:ea:ef:7c:70:51:45:d7:a3:7d:c9:6c:0a:a7: a3:5c:10:22:4f:9f:7e:a2:ed:bd:29:1b:bc:8d:36: 88:2a:38:af:01:47:92:4d:2c:5e:ca:fe:08:ca:f3: e2:16:ff:7e:c4:f3:73:0f:6e:d5:ee:e1:a2:a6:ac: af:e7:de:e7:a7:f9:33:f9:95:81:03:f8:5b:37:23: b1:6e:0e:21:41:1d:0d:2a:8c:e2:ad:d3:3c:bc:41: ac:a9:0f:a7:0f:bd:3c:19:7c:00:89:0d:46:e2:81: 5f:0a:31:92:c4:f1:84:35:f8:2e:60:c8:ed:9c:f9: 46:ce:2d:2f:1f:b9:5b:e1:9b:22:7b:c5:fe:c7:6a: 43:9f:61:bf:ff:8c:2e:7d:4b:e3:50:6f:91:14:fd: c8:54:98:86:eb:16:5f:b0:01:ab:e1:d6:26:ad:fe: c3:52:58:7b:b0:6c:53:98:b1:ab:94:16:fe:88:17: 74:ee:54:cd:5f:c2:3c:fd:3a:26:8a:fe:b2:31:d6: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:16:B0:60:AA:A1:44:DF:EC:C3:13:1B:99:E2:15:B9:F4:92:F0:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 23.147.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:47:69:e5:82:bf:e3:3a:7b:7d:fd:a1:a9:22:ff:40:59:b7: 69:16:af:e8:df:2a:31:26:1f:26:bb:b0:3a:fc:54:a4:60:8f: 32:bc:3c:ad:83:80:bb:d9:23:08:61:9a:aa:fc:50:6b:e7:4e: 3e:5e:27:1c:2c:96:67:f5:24:e4:79:7d:29:42:e8:40:df:41: ab:b8:75:6b:23:1d:b2:a5:4a:87:8b:5a:5e:da:1d:2e:5d:bc: 01:7e:a5:64:b2:d9:18:a3:73:de:54:78:8a:ed:db:d6:20:d7: 8d:f0:60:a2:b8:c2:a5:18:0b:51:eb:c2:2c:12:14:3e:0a:b4: 03:c4:6b:76:4e:4b:c7:f0:82:82:e0:0b:0c:c9:34:20:b4:86: 8b:16:33:16:fc:01:c4:5a:7c:37:44:f9:d7:68:4d:e0:ce:16: eb:77:5d:06:2d:17:71:d5:2f:be:8e:30:2f:ee:2e:5a:a0:65: da:7e:44:20:19:3b:a7:e0:b5:86:1e:0a:75:ed:76:04:44:97: f5:cb:54:e4:0a:d5:13:72:a4:bc:a6:46:ba:12:e6:84:ea:04: 20:9f:2a:33:5a:b8:0d:b5:4b:67:bb:94:d5:66:94:aa:fc:83: 3b:d1:7f:7d:a3:7d:c3:8f:d7:62:b5:73:7d:15:81:2b:8d:0e: 23:26:fa:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/LSPGTZVrRwhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MjdlZmRkZDUtNTBiMC00YWY2LTllYTYtZmRkNzRlNTRkOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc77pgm7Ju6JOsCa53PnKiOy7XG9+yHolTm4 mPuaBTqh1jiH/1Zu7Bdmb1LMHQ9CGF/jqyHmnUxg7Bb75OrvfHBRRdejfclsCqej XBAiT59+ou29KRu8jTaIKjivAUeSTSxeyv4IyvPiFv9+xPNzD27V7uGipqyv597n p/kz+ZWBA/hbNyOxbg4hQR0NKozirdM8vEGsqQ+nD708GXwAiQ1G4oFfCjGSxPGE NfguYMjtnPlGzi0vH7lb4Zsie8X+x2pDn2G//4wufUvjUG+RFP3IVJiG6xZfsAGr 4dYmrf7DUlh7sGxTmLGrlBb+iBd07lTNX8I8/Tomiv6yMdacwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8WsGCqoUTf7MMTG5niFbn0kvAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvYmVmMjliMGEtODg3Zi0z NTYzLWFjZjYtMGE2NTg3YWYyOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVHaeWCv+M6e339oaki/0BZt2kWr+jfKjEmHya7sDr8VKRgjzK8PK2D gLvZIwhhmqr8UGvnTj5eJxwslmf1JOR5fSlC6EDfQau4dWsjHbKlSoeLWl7aHS5d vAF+pWSy2Rijc95UeIrt29Yg143wYKK4wqUYC1HrwiwSFD4KtAPEa3ZOS8fwgoLg CwzJNCC0hosWMxb8AcRafDdE+ddoTeDOFut3XQYtF3HVL76OMC/uLlqgZdp+RCAZ O6fgtYYeCnXtdgREl/XLVOQK1RNypLymRroS5oTqBCCfKjNauA21S2e7lNVmlKr8 gzvRf32jfcOP12K1c30VgSuNDiMm+jY= -----END CERTIFICATE-----Generated at Sat Apr 12 00:42:04 2025 by rpki-client