$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa File: 2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa (raw, json) Hash identifier: xkYpJMwKnx6a0+/62ZXx5hzsCAY8z4t5dCjGi7ZLVV4= Subject key identifier: 02:DB:7F:43:AE:32:96:34:6C:58:70:B0:3E:14:3B:35:3B:8B:D2:53 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F43285848F65BDA583167BE5207BAFC00 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16584 IP address blocks: 23.140.96.0/24 maxlen: 24 23.140.97.0/24 maxlen: 24 204.9.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:da:58:31:67:be:52:07:ba:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=c583ca29-9cfb-4ff3-ae3e-f8811c1c6c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:8c:7d:90:31:f3:59:a3:aa:ae:11:e9:82: b0:38:ae:5f:20:c8:f7:47:f1:dc:13:a3:fd:44:5c: f0:64:2b:e9:84:b2:8e:88:c2:70:24:03:88:b7:87: d1:b7:bc:74:04:a5:70:b2:1d:7d:e4:75:43:3c:3d: 8d:4c:41:40:8d:95:ea:64:28:fb:97:6c:b2:a7:a5: d3:40:d2:20:5f:e3:37:ee:46:fc:87:ed:7f:a5:0a: 1b:fc:cc:46:72:cc:a3:18:83:65:33:20:10:01:a4: cb:09:4b:49:0e:e7:2d:e0:09:e5:7b:10:3a:9f:ef: 71:b9:37:66:ce:a1:7c:90:de:8f:40:6a:2a:ea:11: 23:a5:f9:fd:3a:9c:96:f1:06:83:8a:70:72:df:d1: 54:e0:80:e4:cc:ee:ea:a9:32:66:90:47:ca:73:df: ad:c8:ed:c6:98:78:6c:1e:2b:2c:9a:3f:6e:21:3f: 47:3d:2a:eb:25:8d:5a:a2:e8:b1:46:b2:a4:71:56: a9:ad:33:c1:6c:46:8f:12:5e:fc:24:3c:83:4c:19: 34:20:1f:26:81:ea:c0:7e:8c:8c:89:50:f9:83:cc: 74:f3:17:e1:82:86:51:90:5d:ec:92:6b:3d:f9:80: d8:89:fa:9e:47:5a:b5:ce:33:86:f7:c9:e4:b6:69: 1e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:7F:43:AE:32:96:34:6C:58:70:B0:3E:14:3B:35:3B:8B:D2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.96.0/23 204.9.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c8:5a:a8:83:a9:db:78:91:a3:6d:e8:0d:21:96:5b:07:8c: 40:95:ab:b6:53:23:d7:58:01:49:02:99:01:c6:75:00:64:09: 0c:d9:dc:00:4b:ce:ad:58:be:37:91:19:6f:95:fb:3e:85:16: b0:d9:fe:f6:cb:f6:9e:0b:12:40:da:04:ca:c2:59:73:20:9b: 0d:fa:45:91:a3:05:f8:bb:7c:c6:2d:a8:75:92:cd:63:b7:20: 6c:e4:68:e2:b8:7f:8b:0d:07:57:92:57:a6:6f:cc:46:d3:3d: fb:f5:41:cd:ad:c8:45:b9:db:7c:83:93:0e:77:1b:2f:70:d8: eb:c2:dd:95:02:b3:83:cd:33:2c:35:77:e5:bc:c3:46:58:2f: 5e:34:72:93:46:92:4a:2d:32:4e:17:4b:3f:49:5e:b4:60:57: ef:58:13:43:27:d3:b4:56:2f:f2:23:c8:28:6b:b9:1b:a1:66: 72:70:42:f3:c9:d8:c0:e1:d2:5c:aa:d1:5d:28:c8:09:21:0c: d0:2a:b7:3a:94:c4:77:e7:ef:bb:e3:93:ba:e0:98:0f:fa:ea: 64:77:2c:48:e3:02:95:61:58:46:b2:71:8b:c7:2d:1b:09:cc: ab:e7:7e:b7:62:52:99:55:c1:29:d1:64:5c:f9:cd:87:e3:8a: 17:25:8b:44 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj2W9pYMWe+Uge6/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YzU4M2NhMjktOWNmYi00ZmYzLWFlM2UtZjg4MTFjMWM2YzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI6MfZAx81mjqq4R6YKwOK5fIMj3R/HcE6P9 RFzwZCvphLKOiMJwJAOIt4fRt7x0BKVwsh195HVDPD2NTEFAjZXqZCj7l2yyp6XT QNIgX+M37kb8h+1/pQob/MxGcsyjGINlMyAQAaTLCUtJDuct4AnlexA6n+9xuTdm zqF8kN6PQGoq6hEjpfn9OpyW8QaDinBy39FU4IDkzO7qqTJmkEfKc9+tyO3GmHhs Hissmj9uIT9HPSrrJY1aouixRrKkcVaprTPBbEaPEl78JDyDTBk0IB8mgerAfoyM iVD5g8x08xfhgoZRkF3skms9+YDYifqeR1q1zjOG98nktmkeTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFALbf0OuMpY0bFhwsD4UOzU7i9JTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvMjM4NWRiZDctMmQ3Ny0z M2ZjLThiZGQtZmI1N2IxZWNkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF4xgAwQC zAkkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI3IWqiDqdt4kaNt6A0hllsHjECVq7ZTI9dYAUkCmQHGdQBk CQzZ3ABLzq1YvjeRGW+V+z6FFrDZ/vbL9p4LEkDaBMrCWXMgmw36RZGjBfi7fMYt qHWSzWO3IGzkaOK4f4sNB1eSV6ZvzEbTPfv1Qc2tyEW523yDkw53Gy9w2OvC3ZUC s4PNMyw1d+W8w0ZYL140cpNGkkotMk4XSz9JXrRgV+9YE0Mn07RWL/IjyChruRuh ZnJwQvPJ2MDh0lyq0V0oyAkhDNAqtzqUxHfn77vjk7rgmA/66mR3LEjjApVhWEay cYvHLRsJzKvnfrdiUplVwSnRZFz5zYfjihcli0Q= -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:35 2025 by rpki-client