$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa File: 59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json) Hash identifier: FHq2iwVA3tzkmPj+FF97GdGNYDKYFAikiubF6wPlcS4= Subject key identifier: D7:BA:6F:89:02:25:20:68:A3:FD:70:00:69:67:68:4D:53:AF:24:AD Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F43285848EF6155ADBA6BF62E8ABC9B80 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 397131 IP address blocks: 23.170.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:55:ad:ba:6b:f6:2e:8a:bc:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=738f3575-9509-448d-8367-cca59e2e506c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:00:14:99:09:ac:e5:a0:ca:63:c7:ff:b8:34: 56:66:ce:48:ec:2c:33:76:8e:48:53:63:3d:b8:a9: 5f:cd:7f:4c:eb:a1:cc:f8:d2:80:4f:75:3f:43:46: 97:52:16:97:be:9f:a9:6b:82:f1:5e:07:d8:3b:03: 9a:94:bb:97:c3:5b:00:20:a8:7b:86:f4:27:55:0e: d5:95:8f:ce:85:35:fc:97:80:ed:99:31:c5:37:24: 02:75:e2:86:ed:0f:86:41:c6:8b:74:d4:1a:35:75: 1e:bc:7d:d2:05:4e:ff:6a:3a:d6:1e:a3:c1:43:f7: 1d:79:51:3d:fd:29:55:4a:4d:0c:29:e6:4b:39:58: 6a:31:10:d4:ed:48:2b:81:db:99:de:e6:3e:51:ba: 55:ff:b8:be:8d:fe:28:b7:08:a6:e2:2f:09:7c:fe: 9c:5d:ee:a9:9d:86:a0:27:94:bd:0f:aa:91:20:cc: a7:ee:78:f7:f7:fc:bf:41:98:94:a4:5e:b9:ca:fd: 68:01:02:8b:81:92:0c:6d:cb:3d:86:7a:21:01:0f: 40:d8:65:ca:ef:60:ee:fc:4b:9f:2e:ff:22:32:73: 9c:18:bf:d1:92:85:13:f7:5e:ab:97:e0:86:ea:67: f3:7d:c3:4b:a0:63:8a:1d:a4:4f:72:2f:b3:1a:eb: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:6F:89:02:25:20:68:A3:FD:70:00:69:67:68:4D:53:AF:24:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.170.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:22:22:35:de:5f:ab:5a:8c:08:b6:fc:bd:04:54:cd:40:f6: fd:80:3b:aa:6f:bd:5c:f3:20:d0:b8:4d:92:df:53:25:4d:f4: f8:61:fe:b2:1c:58:f0:02:a1:26:f6:2f:05:97:24:be:67:3d: 20:9a:35:a8:f7:42:eb:c3:e5:c2:40:fe:cd:b7:1d:6f:2e:b5: 73:8a:6c:89:f6:08:96:13:eb:68:25:b1:27:09:8c:ec:60:1e: 49:02:37:83:14:89:a3:d6:4d:a6:2d:41:bb:6d:0e:ad:4c:04: 1d:6c:30:22:89:3b:e3:ec:e9:d1:ee:9b:65:88:50:61:6d:0e: 73:cc:96:85:b7:09:96:be:06:c1:f1:7f:f9:f1:ca:3c:ce:2d: 85:b0:4e:51:e4:53:5c:b3:52:5c:33:e8:e0:44:09:ea:4b:12: 70:b8:50:26:5f:6e:59:d3:a7:88:f2:c7:3a:96:4e:fb:05:75: ba:dd:e9:6b:e4:9a:3a:4b:ea:b6:7f:6c:91:24:fa:e9:32:e6: b5:53:95:0a:af:9a:fe:76:bb:bf:82:9b:ce:3d:68:cb:d1:ca: 2e:58:22:06:f7:a6:c5:77:f0:1f:87:ee:1c:2f:64:8d:ce:b9: 80:69:72:b5:59:76:eb:71:86:8f:29:49:c8:77:4c:37:97:99: 37:ba:92:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVWtumv2Loq8m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NzM4ZjM1NzUtOTUwOS00NDhkLTgzNjctY2NhNTllMmU1MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAAUmQms5aDKY8f/uDRWZs5I7Cwzdo5IU2M9 uKlfzX9M66HM+NKAT3U/Q0aXUhaXvp+pa4LxXgfYOwOalLuXw1sAIKh7hvQnVQ7V lY/OhTX8l4DtmTHFNyQCdeKG7Q+GQcaLdNQaNXUevH3SBU7/ajrWHqPBQ/cdeVE9 /SlVSk0MKeZLOVhqMRDU7UgrgduZ3uY+UbpV/7i+jf4otwim4i8JfP6cXe6pnYag J5S9D6qRIMyn7nj39/y/QZiUpF65yv1oAQKLgZIMbcs9hnohAQ9A2GXK72Du/Euf Lv8iMnOcGL/RkoUT916rl+CG6mfzfcNLoGOKHaRPci+zGusegwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNe6b4kCJSBoo/1wAGlnaE1TryStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvNTk5MDllNjUtNWEwNS0z MjNjLTg3OWYtYmNmYjNhNjRkNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIiIjXeX6tajAi2/L0EVM1A9v2AO6pvvVzzINC4TZLfUyVN9Phh/rIc WPACoSb2LwWXJL5nPSCaNaj3QuvD5cJA/s23HW8utXOKbIn2CJYT62glsScJjOxg HkkCN4MUiaPWTaYtQbttDq1MBB1sMCKJO+Ps6dHum2WIUGFtDnPMloW3CZa+BsHx f/nxyjzOLYWwTlHkU1yzUlwz6OBECepLEnC4UCZfblnTp4jyxzqWTvsFdbrd6Wvk mjpL6rZ/bJEk+uky5rVTlQqvmv52u7+Cm849aMvRyi5YIgb3psV38B+H7hwvZI3O uYBpcrVZdutxho8pSch3TDeXmTe6kmQ= -----END CERTIFICATE-----Generated at Sat Apr 12 10:14:47 2025 by rpki-client