$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/0d02db7d-7b00-39dd-80c9-0a52725245ae.roa File: 0d02db7d-7b00-39dd-80c9-0a52725245ae.roa (raw, json) Hash identifier: DM1i5BlLpyrW7x5VbnlE+vh4zr7t9YC7e5zIaQmASoY= Subject key identifier: 28:E4:ED:E1:15:5C:39:B4:47:5F:31:E2:64:2B:85:41:3C:02:EB:F2 Certificate issuer: /CN=2085ad50-174f-4646-80aa-6de9c61a11a4 Certificate serial: 010D0C9F43285848F22C67A3C62923D9C19DA450 Authority key identifier: 37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/0d02db7d-7b00-39dd-80c9-0a52725245ae.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 208188 IP address blocks: 23.142.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:67:a3:c6:29:23:d9:c1:9d:a4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2085ad50-174f-4646-80aa-6de9c61a11a4 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=60498136-8bdb-4cae-ace5-a92629063c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:aa:f6:0c:e7:ae:b5:ed:86:f1:a0:35:6b:04: 0e:fd:50:13:db:73:35:38:70:ba:39:e4:aa:3a:c4: e5:3c:61:5b:68:15:a6:95:5d:93:c4:d3:33:a4:bd: 1d:34:6e:10:dc:71:4b:0f:af:5b:c0:e2:e0:18:04: e0:22:4b:2e:1b:74:7f:99:73:4e:99:74:81:08:d0: 76:d3:06:71:9c:07:33:92:f6:ca:f4:1f:14:4d:c5: 42:12:65:5d:79:07:d4:88:70:e3:5a:b0:5e:47:c3: d0:e2:98:bf:06:d5:4d:a4:b3:df:70:54:4a:97:97: 5b:9c:64:21:b3:d2:2c:fb:2a:29:b3:8e:b9:77:6b: 3d:af:90:34:c9:b2:17:45:89:25:3b:08:50:04:81: ce:f2:28:30:96:96:17:d1:11:ac:39:01:6c:0c:d1: cd:da:49:56:7b:2f:f8:1b:e9:ae:61:ee:b2:6a:51: cb:04:cf:3c:ca:74:f1:8f:39:1a:ad:04:ef:3f:18: 50:dc:62:81:e9:03:7a:4a:85:e8:eb:ee:f2:af:80: 25:95:aa:12:9a:02:1a:82:44:4e:26:a2:5c:42:e8: 7c:45:b9:ce:5e:32:ce:6d:c8:68:d9:57:a9:4b:a8: c4:c4:d0:af:0c:6e:15:d0:3b:42:13:8d:eb:7c:a7: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E4:ED:E1:15:5C:39:B4:47:5F:31:E2:64:2B:85:41:3C:02:EB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/0d02db7d-7b00-39dd-80c9-0a52725245ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl X509v3 Authority Key Identifier: keyid:37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer sbgp-ipAddrBlock: critical IPv4: 23.142.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:07:04:e5:bf:e8:bb:9c:ea:90:d0:0c:e8:85:5e:f1:4e:c2: dd:2e:ae:b0:5e:01:b9:e0:4b:cb:ee:54:8c:e5:5d:38:4c:25: 39:aa:95:cb:cd:2d:6b:33:00:38:92:88:47:09:c7:31:bd:65: 99:cb:03:cc:40:0a:18:5d:ff:ca:32:c6:af:03:a2:1c:e6:3e: 4d:e2:4b:92:db:18:1f:d1:9b:e3:0b:09:50:09:a7:bf:4c:aa: 09:1b:5f:32:5c:75:b8:6f:5f:90:34:e8:ff:2d:1a:20:58:c6: 12:1c:fe:2f:f7:99:d7:7b:7a:e9:c5:15:48:b3:32:13:1b:bc: 40:d3:d3:7c:b8:29:95:51:44:3c:6e:e6:8e:9a:3c:11:9b:e8: f3:a8:9c:14:3d:f9:1f:4f:a9:a4:4d:54:91:56:5b:36:46:a3: 42:a2:72:d1:0a:37:cb:cc:e0:69:4a:c9:b8:db:51:1d:f0:58: 32:a0:dd:ec:3f:0a:8f:e6:56:a6:b1:2f:c0:7f:17:12:5c:05: 5d:ee:56:c2:9c:51:b1:b2:1a:87:a6:85:2c:95:41:cb:48:dd: 76:ce:c8:76:96:f8:06:c0:53:d4:28:99:c2:5c:62:47:5a:6d: 2a:b9:1e:73:85:67:58:53:ff:81:a2:12:3e:96:25:e6:a4:5b: 7a:54:03:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGejxikj2cGdpFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4NWFkNTAtMTc0Zi00NjQ2LTgwYWEtNmRlOWM2MWEx MWE0MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NjA0OTgxMzYtOGJkYi00Y2FlLWFjZTUtYTkyNjI5MDYzYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgar2DOeute2G8aA1awQO/VAT23M1OHC6OeSq OsTlPGFbaBWmlV2TxNMzpL0dNG4Q3HFLD69bwOLgGATgIksuG3R/mXNOmXSBCNB2 0wZxnAczkvbK9B8UTcVCEmVdeQfUiHDjWrBeR8PQ4pi/BtVNpLPfcFRKl5dbnGQh s9Is+yops465d2s9r5A0ybIXRYklOwhQBIHO8igwlpYX0RGsOQFsDNHN2klWey/4 G+muYe6yalHLBM88ynTxjzkarQTvPxhQ3GKB6QN6SoXo6+7yr4AllaoSmgIagkRO JqJcQuh8RbnOXjLObcho2VepS6jExNCvDG4V0DtCE43rfKe+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjk7eEVXDm0R18x4mQrhUE8AuvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDg1 YWQ1MC0xNzRmLTQ2NDYtODBhYS02ZGU5YzYxYTExYTQvMGQwMmRiN2QtN2IwMC0z OWRkLTgwYzktMGE1MjcyNTI0NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA4NWFkNTAtMTc0Zi00NjQ2LTgw YWEtNmRlOWM2MWExMWE0LzIwODVhZDUwLTE3NGYtNDY0Ni04MGFhLTZkZTljNjFh MTFhNC5jcmwwHwYDVR0jBBgwFoAUN4YZYDth06LzQ9pCD7MyLo4pL0wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDg1YWQ1MC0xNzRmLTQ2NDYtODBhYS02ZGU5 YzYxYTExYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIHBOW/6Luc6pDQDOiFXvFOwt0urrBeAbngS8vuVIzlXThMJTmqlcvN LWszADiSiEcJxzG9ZZnLA8xAChhd/8oyxq8DohzmPk3iS5LbGB/Rm+MLCVAJp79M qgkbXzJcdbhvX5A06P8tGiBYxhIc/i/3mdd7eunFFUizMhMbvEDT03y4KZVRRDxu 5o6aPBGb6POonBQ9+R9PqaRNVJFWWzZGo0KictEKN8vM4GlKybjbUR3wWDKg3ew/ Co/mVqaxL8B/FxJcBV3uVsKcUbGyGoemhSyVQctI3XbOyHaW+AbAU9QomcJcYkda bSq5HnOFZ1hT/4GiEj6WJeakW3pUAyo= -----END CERTIFICATE-----Generated at Sat Apr 12 12:33:57 2025 by rpki-client