$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa File: 22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa (raw, json) Hash identifier: O8H588i2NYgwDosNVILEingLZd2m6RDn+iSwOxYQPzc= Subject key identifier: 56:20:4F:1B:4C:2C:7A:AC:CB:D4:74:2A:96:52:37:3D:9A:6F:F9:EC Certificate issuer: /CN=7c534b20-f6a2-45cc-b3f2-861233813f8e Certificate serial: 010D0C9F43285848EF61541AF1FD86780EF74010 Authority key identifier: 42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36140 IP address blocks: 23.161.64.0/24 maxlen: 24 2620:58:c400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:54:1a:f1:fd:86:78:0e:f7:40:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c534b20-f6a2-45cc-b3f2-861233813f8e Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=4795a48b-076b-4a94-91bb-40bdcb15d4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:0e:04:a2:1d:37:df:e1:8c:41:44:b9:f4: 72:79:23:74:5b:79:c1:d5:29:4f:86:9f:e8:35:5c: 3f:08:16:46:91:f6:06:66:1e:3d:7b:dd:4c:3a:cc: 3a:bb:03:7a:d4:62:58:5a:9c:1a:65:44:e9:05:5f: 69:a3:a8:0b:d1:be:43:ed:0f:9e:cc:56:e7:41:86: 28:76:96:f6:8a:ee:78:0f:51:9b:95:41:65:0b:82: ae:12:6b:9f:1a:71:9a:be:ee:a8:fb:d4:ea:4f:0c: 61:ec:ab:3f:71:75:af:c7:df:fc:1d:42:17:16:37: 85:22:93:b4:f2:b0:1c:a2:7a:02:ef:f9:0b:e9:a9: 5f:48:77:ba:a2:41:cb:df:3a:9d:df:2e:5a:27:52: 82:ba:3a:cc:8d:d1:22:f6:ca:8c:3f:b4:45:e7:97: 63:40:a9:ea:7a:d6:71:a5:e0:36:86:02:b0:19:31: fe:0f:21:55:fa:f8:9b:f9:7f:f8:e2:f6:c3:fe:6b: 42:c7:70:96:80:d9:03:00:18:d4:6e:e3:d3:ac:09: ff:e3:c0:f8:74:44:0d:77:48:65:74:8f:57:ff:5e: 0f:39:be:52:cc:25:02:3a:69:20:45:0c:6b:9e:21: 71:dd:4e:2f:11:f2:03:54:3c:b5:f8:18:f7:45:ff: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:20:4F:1B:4C:2C:7A:AC:CB:D4:74:2A:96:52:37:3D:9A:6F:F9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl X509v3 Authority Key Identifier: keyid:42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer sbgp-ipAddrBlock: critical IPv4: 23.161.64.0/24 IPv6: 2620:58:c400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:d3:df:14:39:2d:ff:8c:64:88:5a:fd:fe:e7:c3:1d:04:5f: 71:77:0a:23:83:73:cd:b7:6c:52:63:e8:65:c8:df:fe:e4:2d: ab:19:98:6b:14:24:6d:93:8f:77:f0:f6:4b:8a:65:f4:42:71: 95:d0:45:62:40:f0:90:1d:c6:e6:54:9e:f3:1b:0f:bc:fd:8e: 4a:c5:07:69:04:b6:21:c7:d8:5d:f0:97:6c:bc:34:b0:7a:99: cd:65:7b:33:75:70:d1:e0:8f:d0:cc:11:e6:d6:23:8e:99:38: 49:f3:dd:e7:d4:65:e7:ef:26:a9:74:23:d2:53:32:15:e6:15: ea:af:99:1a:fe:23:45:ea:49:a2:4e:62:45:50:71:55:8d:be: a9:a6:f7:e6:24:37:9d:4c:19:9c:b7:e3:b5:90:d8:6c:d9:25: e3:a1:e2:57:ef:c5:e6:47:73:ca:48:d5:63:5c:62:af:c7:ec: 0a:0c:a8:42:ad:41:ff:71:2a:2b:1c:5c:43:72:ff:9a:10:00: a3:81:51:2e:43:ac:b7:1c:78:b7:db:5d:a2:2d:b4:6e:0d:52: a4:2d:e4:99:c7:d3:b6:76:de:13:7c:9b:39:d1:04:6f:4f:e2: bd:54:bd:cf:64:a1:c4:75:e5:50:5e:2d:33:45:86:9f:bf:44: da:da:cb:a2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjvYVQa8f2GeA73QBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M1MzRiMjAtZjZhMi00NWNjLWIzZjItODYxMjMzODEz ZjhlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDc5NWE0OGItMDc2Yi00YTk0LTkxYmItNDBiZGNiMTVkNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRMOBKIdN9/hjEFEufRyeSN0W3nB1SlPhp/o NVw/CBZGkfYGZh49e91MOsw6uwN61GJYWpwaZUTpBV9po6gL0b5D7Q+ezFbnQYYo dpb2iu54D1GblUFlC4KuEmufGnGavu6o+9TqTwxh7Ks/cXWvx9/8HUIXFjeFIpO0 8rAconoC7/kL6alfSHe6okHL3zqd3y5aJ1KCujrMjdEi9sqMP7RF55djQKnqetZx peA2hgKwGTH+DyFV+vib+X/44vbD/mtCx3CWgNkDABjUbuPTrAn/48D4dEQNd0hl dI9X/14POb5SzCUCOmkgRQxrniFx3U4vEfIDVDy1+Bj3Rf90IQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFYgTxtMLHqsy9R0KpZSNz2ab/nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YzUz NGIyMC1mNmEyLTQ1Y2MtYjNmMi04NjEyMzM4MTNmOGUvMjJjMDJjZmItNjI4MS0z YmNjLThhYzctYmI3OWM4OWU5MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2M1MzRiMjAtZjZhMi00NWNjLWIz ZjItODYxMjMzODEzZjhlLzdjNTM0YjIwLWY2YTItNDVjYy1iM2YyLTg2MTIzMzgx M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUQh2S2nl6H+jxSByhRrZwPv3j7bkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YzUzNGIyMC1mNmEyLTQ1Y2MtYjNmMi04NjEy MzM4MTNmOGUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6FAMA8E AgACMAkDBwAmIABYxAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAydPfFDkt/4xkiFr9/ufDHQRfcXcKI4Nz zbdsUmPoZcjf/uQtqxmYaxQkbZOPd/D2S4pl9EJxldBFYkDwkB3G5lSe8xsPvP2O SsUHaQS2IcfYXfCXbLw0sHqZzWV7M3Vw0eCP0MwR5tYjjpk4SfPd59Rl5+8mqXQj 0lMyFeYV6q+ZGv4jRepJok5iRVBxVY2+qab35iQ3nUwZnLfjtZDYbNkl46HiV+/F 5kdzykjVY1xir8fsCgyoQq1B/3EqKxxcQ3L/mhAAo4FRLkOstxx4t9tdoi20bg1S pC3kmcfTtnbeE3ybOdEEb0/ivVS9z2ShxHXlUF4tM0WGn79E2trLog== -----END CERTIFICATE-----Generated at Sat Apr 12 14:53:06 2025 by rpki-client