$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa File: ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa (raw, json) Hash identifier: 3ZJclV8AH4KGLsQTldPy4hFxEup/Mx+ucFoihd4Tm+s= Subject key identifier: BF:EF:D7:B0:6D:28:91:20:63:CF:7C:B0:65:93:4C:13:5C:61:01:E4 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F43285848B35B6A9B048BCF165E6F4600 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 7029 IP address blocks: 23.143.104.0/24 maxlen: 24 2607:340::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6a:9b:04:8b:cf:16:5e:6f:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=a0f46fa8-179f-42e5-9087-b8c2f7f2c168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:34:a4:d9:c4:2d:e7:03:8f:bd:af:18:3f: ad:ce:91:f8:a5:6e:d9:c6:69:c2:7a:d4:65:e7:db: 54:09:e2:8a:5b:4f:97:46:a0:71:00:95:c5:0f:7f: 08:83:14:15:65:ad:95:01:c4:4a:2c:79:c4:c4:8c: 49:43:5f:9c:f5:82:6b:94:e2:d7:cf:3e:11:d6:7d: 34:07:8a:14:6c:60:9c:56:9f:02:f5:28:e0:10:ce: 59:ab:5a:2e:dd:35:39:b3:6d:28:cf:b9:0c:5a:88: 26:ac:12:04:03:cf:05:69:20:ce:d7:91:8a:a0:22: b7:c2:00:46:06:17:2e:30:4d:d2:00:a6:01:ca:dc: 49:a8:e8:92:9e:25:f0:6f:3d:bb:e5:7b:6f:0c:22: 8e:db:e9:70:5a:f9:3f:d1:f3:0f:12:24:d5:27:8a: ac:c8:03:6e:8b:af:b1:ce:97:e9:e9:79:ab:c7:92: d3:3e:03:9b:d9:d9:fb:34:11:a5:88:7f:c6:fc:9a: 6b:f2:31:1b:33:73:ee:2e:f4:07:d6:ec:75:05:0c: 15:ca:65:00:77:ba:ac:96:fb:69:73:f0:af:23:dc: 67:8b:bd:04:fd:fb:df:f2:55:79:b3:0b:80:d7:23: 96:cd:b7:63:8b:f4:69:8e:3c:8d:c1:16:91:c3:b9: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EF:D7:B0:6D:28:91:20:63:CF:7C:B0:65:93:4C:13:5C:61:01:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.104.0/24 IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:72:c7:b8:8a:f5:60:f9:b0:d2:f8:41:a2:bf:dc:2a:4c:78: 48:19:87:ca:b5:5c:7b:97:a2:fa:5f:42:5f:05:9a:ac:f4:de: fd:dd:3e:85:a9:54:21:ac:9e:ad:4d:28:4f:16:0b:dc:f4:e3: 89:8a:27:5b:05:94:9b:b5:19:bd:72:cc:84:6f:2f:19:1d:01: 57:db:dc:3e:f6:fd:d3:2f:bf:d7:c6:fa:4c:ff:9c:d8:4d:1b: 22:59:69:fd:56:a8:21:25:b4:82:48:f8:0c:3c:9a:8c:8c:84: 43:17:83:05:94:ae:43:9a:a7:e8:9a:c5:37:ab:23:cd:7a:c1: 95:bb:3f:19:ee:64:89:2f:96:4a:ac:a5:c8:e0:ee:1b:9b:eb: 72:d4:8a:b8:69:18:37:e7:64:fe:f2:06:c2:11:db:5f:ca:7c: b7:da:c0:d8:c7:51:7c:0d:5a:76:6c:7a:50:44:91:9c:fa:14: 21:af:86:38:10:c8:84:70:20:53:1b:40:08:74:4b:81:64:af: 24:f7:38:30:db:62:cc:80:a3:d1:28:55:64:db:5d:00:85:77: be:7d:4a:4b:dd:05:21:9a:e0:54:b0:4b:46:11:87:1c:c8:e0: ac:e7:9b:46:a9:e4:f2:6f:8d:63:94:0f:9b:70:97:d8:89:f7: bd:01:c2:b2 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEizW2qbBIvPFl5vRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YTBmNDZmYTgtMTc5Zi00MmU1LTkwODctYjhjMmY3ZjJjMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF40pNnELecDj72vGD+tzpH4pW7ZxmnCetRl 59tUCeKKW0+XRqBxAJXFD38IgxQVZa2VAcRKLHnExIxJQ1+c9YJrlOLXzz4R1n00 B4oUbGCcVp8C9SjgEM5Zq1ou3TU5s20oz7kMWogmrBIEA88FaSDO15GKoCK3wgBG BhcuME3SAKYBytxJqOiSniXwbz275XtvDCKO2+lwWvk/0fMPEiTVJ4qsyANui6+x zpfp6Xmrx5LTPgOb2dn7NBGliH/G/Jpr8jEbM3PuLvQH1ux1BQwVymUAd7qslvtp c/CvI9xni70E/fvf8lV5swuA1yOWzbdji/RpjjyNwRaRw7l3TwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFL/v17BtKJEgY898sGWTTBNcYQHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvYWQ0YTFlMDItMWU3NS0z YjVmLWEzYTQtNWQ1NjgzYjU3MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF49oMA0E AgACMAcDBQQmBwNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAENyx7iK9WD5sNL4QaK/3CpMeEgZh8q1XHuX ovpfQl8Fmqz03v3dPoWpVCGsnq1NKE8WC9z044mKJ1sFlJu1Gb1yzIRvLxkdAVfb 3D72/dMvv9fG+kz/nNhNGyJZaf1WqCEltIJI+Aw8moyMhEMXgwWUrkOap+iaxTer I816wZW7PxnuZIkvlkqspcjg7hub63LUirhpGDfnZP7yBsIR21/KfLfawNjHUXwN WnZselBEkZz6FCGvhjgQyIRwIFMbQAh0S4FkryT3ODDbYsyAo9EoVWTbXQCFd759 SkvdBSGa4FSwS0YRhxzI4Kznm0ap5PJvjWOUD5twl9iJ970BwrI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:39 2025 by rpki-client