$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa File: 0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa (raw, json) Hash identifier: CMQNfKovZBxcift6Q6peW8EnRycBpm7GNgr2bTkWZ6A= Subject key identifier: AF:2E:50:5C:48:94:F7:1B:38:E4:BF:10:51:6E:0C:CF:1B:F4:18:05 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858492CAE82A9C5D59D39076E4A80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 23.239.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:82:a9:c5:d5:9d:39:07:6e:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b83d933b-275f-429a-9839-b13bc56b79d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:62:4d:e9:74:21:74:02:91:9a:1e:46:4e: 35:d8:9e:43:42:da:87:ec:96:c0:1a:f1:e3:8e:2c: 1c:c9:6d:26:b0:97:1f:59:a3:60:3f:9b:9a:dc:63: b9:62:56:dd:e2:74:08:d4:d2:c5:44:cf:49:19:39: 1a:8d:d6:be:c1:54:6a:aa:7a:ce:25:7b:61:72:bd: 33:2c:49:fe:f5:73:66:75:44:40:c7:38:9d:78:7c: 2a:89:15:36:e9:00:25:5e:cf:9d:d4:c7:15:7c:cf: 64:3a:9a:01:b6:15:27:24:84:a8:95:14:6a:85:e5: 98:83:ab:60:b9:a7:0a:d6:2e:08:cb:38:3f:89:2b: fc:be:67:ab:ed:8c:72:bd:6d:fa:dc:00:af:b5:58: f1:f7:f8:e7:5e:c6:a5:df:af:bb:42:5c:c9:76:f2: aa:68:61:c9:c8:98:5c:83:75:80:51:af:ba:dd:4a: 7a:50:47:f2:8f:43:a0:c3:0b:0e:1b:71:a8:43:7d: 78:f8:67:21:10:21:30:66:04:a5:ec:34:d0:3b:c0: 7e:a3:0a:b1:22:70:bc:52:ed:04:2e:d9:75:17:fb: 0b:dc:f2:13:45:95:e6:ac:bf:4d:d0:76:36:ad:ac: b9:cd:89:b3:27:54:67:ac:f0:54:26:0b:c2:2b:be: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:50:5C:48:94:F7:1B:38:E4:BF:10:51:6E:0C:CF:1B:F4:18:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ed:c1:3b:60:99:ed:fc:d7:43:5f:da:11:2d:cb:4c:ef:c6: 07:31:45:1f:e5:cf:a1:37:c5:ed:33:48:dd:9d:95:c6:35:a9: 5b:60:3c:04:30:8c:3e:99:ea:98:b8:b7:0c:db:af:8d:db:0c: 92:ad:86:35:75:5b:c7:f0:c8:13:da:4a:b3:ba:86:f5:6c:8d: 21:14:c7:9d:fa:1b:d4:f5:c5:9e:55:4f:93:eb:d4:14:28:41: 22:64:79:d4:f8:b6:f8:ec:47:8e:c6:b1:21:81:bb:db:50:c3: 17:47:aa:4c:ad:6d:63:52:e5:3c:57:2b:55:00:54:46:82:52: 04:bd:15:68:f9:c0:80:24:9d:3f:45:dc:4d:90:8a:68:fe:52: 2e:44:0e:84:8f:ff:55:2c:36:aa:9d:a5:b0:2a:ae:b8:ee:a9: ea:c2:da:0b:38:3c:65:ae:46:07:7f:f8:a6:9f:39:70:79:62: c9:c6:c6:ae:4f:82:2e:41:91:95:82:97:d9:d1:89:6f:f0:3f: 31:c7:3c:07:ea:25:da:f5:36:e9:4b:c1:40:8f:6f:2a:f9:9a: 40:22:25:c3:cd:29:85:9e:c0:f8:ed:83:15:ed:70:50:7f:b5: 17:1d:d6:32:04:8c:0a:5e:06:87:6c:78:f0:6b:48:b3:24:96: de:e0:b4:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroKpxdWdOQduSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjgzZDkzM2ItMjc1Zi00MjlhLTk4MzktYjEzYmM1NmI3OWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoZiTel0IXQCkZoeRk412J5DQtqH7JbAGvHj jiwcyW0msJcfWaNgP5ua3GO5Ylbd4nQI1NLFRM9JGTkajda+wVRqqnrOJXthcr0z LEn+9XNmdURAxzideHwqiRU26QAlXs+d1McVfM9kOpoBthUnJISolRRqheWYg6tg uacK1i4Iyzg/iSv8vmer7YxyvW363ACvtVjx9/jnXsal36+7QlzJdvKqaGHJyJhc g3WAUa+63Up6UEfyj0OgwwsOG3GoQ314+GchECEwZgSl7DTQO8B+owqxInC8Uu0E Ltl1F/sL3PITRZXmrL9N0HY2ray5zYmzJ1RnrPBUJgvCK76r2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8uUFxIlPcbOOS/EFFuDM8b9BgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMGY2YzlhYTQtNmU1YS0z NDQxLWIyMmEtOTc1Y2FiYzlmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPtwTtgme3810Nf2hEty0zvxgcxRR/lz6E3xe0zSN2dlcY1qVtgPAQw jD6Z6pi4twzbr43bDJKthjV1W8fwyBPaSrO6hvVsjSEUx536G9T1xZ5VT5Pr1BQo QSJkedT4tvjsR47GsSGBu9tQwxdHqkytbWNS5TxXK1UAVEaCUgS9FWj5wIAknT9F 3E2Qimj+Ui5EDoSP/1UsNqqdpbAqrrjuqerC2gs4PGWuRgd/+KafOXB5YsnGxq5P gi5BkZWCl9nRiW/wPzHHPAfqJdr1NulLwUCPbyr5mkAiJcPNKYWewPjtgxXtcFB/ tRcd1jIEjApeBodsePBrSLMklt7gtKk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:00:35 2025 by rpki-client