$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: x/sgQuhKpeoW0h8FO+szXj9qMxv8yOuUImnmUSMxYBk= Subject key identifier: 2F:DE:12:CF:CF:FD:7C:BC:B5:FF:47:31:2B:70:8A:DB:3A:7B:08:83 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584902EC2715997052ADFD071F40 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:27:15:99:70:52:ad:fd:07:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=7ed7f627-6d68-4d51-8135-3c55d16a9502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:70:93:e3:67:8b:a0:38:8a:19:25:87:34: 84:4f:44:4c:60:a3:0d:c7:8a:a1:21:87:04:a1:8f: 00:1f:c5:8d:d5:5f:4b:d4:90:b3:c9:c4:be:23:e5: 8d:ec:4b:5f:68:7e:8b:9d:bc:53:de:94:c6:fd:d8: 98:27:63:2a:7c:70:04:67:52:18:76:10:11:03:ff: 19:1b:79:00:c5:53:76:73:f0:60:4e:f6:5c:3b:1e: f3:c1:17:72:e5:d1:2e:b3:f1:fb:6d:34:a5:4a:66: 4b:33:8c:57:70:b0:50:cf:94:4d:45:ad:ee:29:29: e8:fe:c4:d3:65:ec:bf:9b:28:99:26:69:75:c1:ae: ac:49:05:4b:a4:ce:e2:ea:bc:4c:56:b3:f9:04:cb: 26:4c:9c:36:e5:70:80:8d:68:04:de:7c:fa:ed:b6: 88:14:ed:d4:0d:93:75:fd:96:b5:ef:55:0a:95:ad: 74:0b:3c:13:91:89:fb:12:40:36:40:af:f7:b4:4d: 99:67:40:1d:e5:e8:7d:60:53:79:53:33:12:17:7d: bb:af:5a:e0:4d:f7:d1:31:67:52:27:dd:d0:7e:e6: df:5c:1c:92:06:c4:85:0a:8e:fc:d3:d9:92:20:16: 3c:05:ed:e6:b8:53:12:a7:64:da:6f:df:9b:5a:3a: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DE:12:CF:CF:FD:7C:BC:B5:FF:47:31:2B:70:8A:DB:3A:7B:08:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3d:5e:ae:ca:ac:08:7b:d3:1b:e1:00:58:b5:aa:02:0f:cc: b2:97:83:40:35:2b:98:76:23:e7:68:41:b3:1d:87:d6:5e:58: 17:a1:c8:e2:90:97:6b:3f:3a:e0:6e:da:4e:fc:60:5b:7b:8b: e8:81:1a:ae:53:e0:73:22:ed:d1:4f:fc:8c:99:06:be:7b:4d: a0:5f:b6:96:6a:62:22:f2:d0:71:b7:48:65:df:21:36:8e:60: 43:6e:63:9b:ca:8b:8c:db:a5:75:2b:a0:3e:9c:08:77:a7:16: 30:6c:8c:cd:29:9c:2b:8d:ab:43:11:56:ec:50:8f:82:a5:84: ba:b5:96:53:2c:f0:e6:38:d1:1e:e1:31:a6:77:b5:e1:e2:75: 7c:b5:2d:ab:39:ef:e6:e8:33:5e:2a:f7:f7:f0:aa:a2:4a:15: c9:ed:fb:c8:7f:fd:fa:e8:01:f9:44:14:6b:e2:31:79:9a:a9: b9:29:1f:f4:14:b7:08:c6:3e:f6:c0:7c:13:5c:0b:21:c8:00: e2:fe:c9:75:24:86:94:bc:11:d7:ea:84:79:9e:b8:1e:1d:a6: 19:1d:06:fe:1e:1a:de:f3:e1:fc:08:e2:6c:52:ec:aa:69:f4: b3:5d:b7:4f:f4:d9:ae:4f:3e:92:35:e9:ab:03:39:25:fb:dd: 43:c1:a7:07 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkC7CcVmXBSrf0HH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk N2VkN2Y2MjctNmQ2OC00ZDUxLTgxMzUtM2M1NWQxNmE5NTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI5wk+Nni6A4ihklhzSET0RMYKMNx4qhIYcE oY8AH8WN1V9L1JCzycS+I+WN7EtfaH6LnbxT3pTG/diYJ2MqfHAEZ1IYdhARA/8Z G3kAxVN2c/BgTvZcOx7zwRdy5dEus/H7bTSlSmZLM4xXcLBQz5RNRa3uKSno/sTT Zey/myiZJml1wa6sSQVLpM7i6rxMVrP5BMsmTJw25XCAjWgE3nz67baIFO3UDZN1 /Za171UKla10CzwTkYn7EkA2QK/3tE2ZZ0Ad5eh9YFN5UzMSF327r1rgTffRMWdS J93QfubfXBySBsSFCo7809mSIBY8Be3muFMSp2Tab9+bWjqvcQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC/eEs/P/Xy8tf9HMStwits6ewiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACg9Xq7KrAh70xvhAFi1qgIPzLKXg0A1K5h2I+doQbMdh9Ze WBehyOKQl2s/OuBu2k78YFt7i+iBGq5T4HMi7dFP/IyZBr57TaBftpZqYiLy0HG3 SGXfITaOYENuY5vKi4zbpXUroD6cCHenFjBsjM0pnCuNq0MRVuxQj4KlhLq1llMs 8OY40R7hMaZ3teHidXy1Las57+boM14q9/fwqqJKFcnt+8h//froAflEFGviMXma qbkpH/QUtwjGPvbAfBNcCyHIAOL+yXUkhpS8EdfqhHmeuB4dphkdBv4eGt7z4fwI 4mxS7Kpp9LNdt0/02a5PPpI16asDOSX73UPBpwc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:09:16 2025 by rpki-client