$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa File: 7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa (raw, json) Hash identifier: 3nK9cqU7BiXi0X37b2VO5oszDcwGEliFOVN679GdJ2Q= Subject key identifier: 28:44:73:EB:0D:21:EA:CE:5D:9D:72:ED:A3:9C:52:80:88:64:4D:A9 Certificate issuer: /CN=6d54b36a-c725-4c18-93e1-825afc645e2c Certificate serial: 010D0C9F4328584902EC14DE725ABA291F038840 Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 23.227.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:14:de:72:5a:ba:29:1f:03:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=fcac079b-a909-4a56-98c2-0caa99a3fb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:ae:b9:d2:ff:3e:11:37:09:8e:ec:e1:7c: 5f:da:7b:b4:dd:c2:cd:c0:44:1d:9c:18:fa:0d:a7: f0:64:62:1c:a5:3c:4b:8e:e1:5c:51:88:c5:44:54: ce:64:69:88:de:75:14:ce:1f:78:65:80:3d:14:b9: 40:05:52:8f:da:66:06:b3:70:eb:fb:b8:3c:a0:bd: 1e:1f:48:7a:8a:e9:4c:ea:3f:9a:09:6d:ef:c6:64: c2:6f:9f:a2:de:ee:55:f7:e9:53:ab:88:cb:ed:47: 0c:c8:f2:1c:2f:3d:b3:58:70:50:10:9e:23:eb:02: 65:38:12:25:80:c4:6f:a0:d8:c7:b3:fe:31:47:21: be:91:dd:6f:1b:f6:c0:b9:11:52:03:d0:6f:7c:d1: b0:db:72:25:7c:79:34:7e:db:95:46:8c:46:e8:97: 41:66:1f:ef:16:00:89:b0:39:4f:e2:3e:db:2b:36: 52:54:9c:c4:43:26:d6:7d:12:85:f4:36:2b:c2:af: 44:9c:c3:70:29:8c:9e:d0:47:6f:aa:7d:34:e1:66: 4b:11:48:c8:1f:86:fb:9e:8f:63:a0:d3:c0:fa:a6: 3d:12:5b:1e:ed:95:5e:0f:d0:f6:39:23:8b:ad:d2: 4a:11:e0:1b:88:f6:4b:d7:81:47:6a:ad:7c:b2:c7: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:73:EB:0D:21:EA:CE:5D:9D:72:ED:A3:9C:52:80:88:64:4D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl X509v3 Authority Key Identifier: keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer sbgp-ipAddrBlock: critical IPv4: 23.227.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:70:83:fd:fc:f9:1f:76:4d:d3:c2:e8:20:d4:cc:da:56:f2: 17:95:b3:ea:b2:6b:0d:d2:2d:76:4e:96:7b:60:11:ea:f0:82: a1:ca:f5:d7:61:d2:37:76:99:34:f3:82:7f:6d:6a:d8:65:b7: 51:62:05:39:26:03:46:22:a8:97:3d:05:3c:0b:8e:51:e1:58: d1:c4:6c:98:70:6e:06:8e:9e:0a:17:4e:ec:42:2e:2f:88:11: 0d:9d:f8:81:50:71:40:3f:c0:ff:28:46:cc:f0:ef:06:7f:6d: 5f:5c:b2:c6:50:6f:4c:c8:ae:af:f4:9f:90:a4:58:8f:e6:32: 84:ce:bb:10:28:8a:99:70:b7:e4:79:56:7e:91:b8:ab:92:ec: 62:93:a2:b5:ac:88:1f:94:be:17:76:30:f3:4a:68:79:96:aa: 44:b9:85:df:0c:a2:c6:8f:d0:ee:ec:ce:ac:73:cc:4c:46:34: f3:d6:62:99:0b:f3:fb:80:a4:78:90:00:55:ff:04:e7:0a:70: 3b:3c:67:60:4c:b7:c0:cc:44:c0:6e:18:fd:7e:f4:a8:9f:7b: 03:d1:e6:a3:fa:d3:42:75:53:87:ca:a0:da:eb:0b:ea:9c:9d: 75:27:57:10:3a:fa:3b:9d:54:91:18:4c:e7:7e:76:11:6f:6b: ab:5f:19:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BTeclq6KR8DiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1 ZTJjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZmNhYzA3OWItYTkwOS00YTU2LTk4YzItMGNhYTk5YTNmYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXiuudL/PhE3CY7s4Xxf2nu03cLNwEQdnBj6 DafwZGIcpTxLjuFcUYjFRFTOZGmI3nUUzh94ZYA9FLlABVKP2mYGs3Dr+7g8oL0e H0h6iulM6j+aCW3vxmTCb5+i3u5V9+lTq4jL7UcMyPIcLz2zWHBQEJ4j6wJlOBIl gMRvoNjHs/4xRyG+kd1vG/bAuRFSA9BvfNGw23IlfHk0ftuVRoxG6JdBZh/vFgCJ sDlP4j7bKzZSVJzEQybWfRKF9DYrwq9EnMNwKYye0Edvqn004WZLEUjIH4b7no9j oNPA+qY9Else7ZVeD9D2OSOLrdJKEeAbiPZL14FHaq18ssd1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChEc+sNIerOXZ1y7aOcUoCIZE2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0 YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvN2RkOTdmYjgtOTEzZi0z ZTk1LTlhZWUtOWQzOWM1ODE5YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0 NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh ZmM2NDVlMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+MqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtwg/38+R92TdPC6CDUzNpW8heVs+qyaw3SLXZOlntgEerwgqHK9ddh 0jd2mTTzgn9tathlt1FiBTkmA0YiqJc9BTwLjlHhWNHEbJhwbgaOngoXTuxCLi+I EQ2d+IFQcUA/wP8oRszw7wZ/bV9cssZQb0zIrq/0n5CkWI/mMoTOuxAoiplwt+R5 Vn6RuKuS7GKTorWsiB+Uvhd2MPNKaHmWqkS5hd8MosaP0O7szqxzzExGNPPWYpkL 8/uApHiQAFX/BOcKcDs8Z2BMt8DMRMBuGP1+9KifewPR5qP600J1U4fKoNrrC+qc nXUnVxA6+judVJEYTOd+dhFva6tfGTk= -----END CERTIFICATE-----Generated at Fri Apr 4 20:55:08 2025 by rpki-client