$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa File: 252c79ea-8e09-336a-a0e3-096a0586430b.roa (raw, json) Hash identifier: J8OM0E5x2jVXkONiFU9lWLSg+uAjMmzddcntwjbl/hs= Subject key identifier: AF:06:66:AA:D0:4A:65:4D:1C:BF:58:4A:29:0C:C9:2C:CD:05:7C:9E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584917DC2A6B414AB8A414F72880 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 31898 IP address blocks: 23.239.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2a:6b:41:4a:b8:a4:14:f7:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f43e246e-ab36-45fc-a5ec-0e844e98d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:43:3e:f9:24:27:d7:74:81:51:0b:1a:94: 85:72:6a:12:c4:92:d2:28:7f:ee:39:60:c2:eb:7a: 38:28:2e:0a:63:48:21:b8:58:dc:d6:32:cf:a3:30: 74:9b:44:03:15:86:f1:45:dd:ef:d2:67:e7:32:4b: 17:bf:9f:c7:6d:b0:1c:93:32:f5:fb:ad:96:a3:98: 66:6f:ea:0b:5d:70:09:1d:33:24:8f:59:4f:ba:15: 4d:19:cc:04:88:e0:08:5e:2d:b4:f5:ec:b8:2e:3a: 7d:0f:df:2d:b1:f1:e9:27:58:98:fd:65:83:0e:91: d9:66:a5:6f:dc:2e:fb:df:e8:ae:f7:d3:20:16:97: 4b:0a:36:1e:3b:cb:38:5e:4b:d7:e2:06:81:87:b2: 8e:32:df:4d:f2:e0:55:9f:c2:15:b3:e8:61:9d:0d: df:b9:4a:bc:78:7b:9b:c8:bd:f8:d5:e3:1f:c3:14: 20:43:64:2b:9c:3d:6a:23:40:5b:c6:70:db:5a:11: 51:a5:b6:51:90:4a:b9:1d:7b:95:3f:91:b7:46:11: d5:04:b7:8d:99:be:41:30:dc:2b:3c:0d:82:e9:7e: 74:18:10:2d:09:ac:fe:cd:16:5d:13:ab:8f:f0:aa: a6:69:08:f4:45:a9:d2:90:4b:8b:59:86:91:ca:f7: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:06:66:AA:D0:4A:65:4D:1C:BF:58:4A:29:0C:C9:2C:CD:05:7C:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:03:f7:0d:c0:af:58:29:2c:44:4f:96:37:7e:61:c9:f6:5c: 2c:0f:df:fd:33:9b:3c:e4:fa:c1:84:33:e2:60:c5:ff:4e:2a: 47:e2:2b:7b:ce:47:62:e1:eb:53:f8:3d:a0:f9:1b:ee:37:4b: 8a:dc:e4:b4:88:e6:b1:cd:00:6d:43:b5:14:7d:0f:6e:e2:de: 96:cd:ba:b8:f7:c9:85:e5:50:af:f4:77:69:52:ba:55:0b:2b: f3:d5:a7:bb:b6:8a:8c:6e:77:a9:81:c5:db:5f:1c:54:fa:d4: 81:60:c1:0e:42:c1:3f:f5:bf:1f:a7:a9:67:cb:07:ec:78:51: 4f:f2:d8:03:ef:67:26:b6:dd:aa:b5:13:62:c1:60:74:0f:df: 48:89:95:ca:f1:8a:8b:e2:c2:6e:c1:ca:06:6e:68:88:11:0f: 77:4c:a3:d8:85:0c:33:43:5e:2d:bf:30:18:e7:3f:e6:2d:65: 5e:4a:a3:43:18:aa:70:46:09:70:f7:af:f6:45:a8:1f:67:40: 86:04:f4:72:bf:0d:cc:5d:83:63:7d:27:60:ca:13:a8:46:0b: 99:8a:7d:8a:75:67:fb:4a:c3:20:95:e1:7e:72:b2:92:e1:93: b9:35:4f:74:85:f7:a7:7c:85:06:e4:43:17:94:71:af:fb:c4: 42:f9:e9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CprQUq4pBT3KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjQzZTI0NmUtYWIzNi00NWZjLWE1ZWMtMGU4NDRlOThkNGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLtDPvkkJ9d0gVELGpSFcmoSxJLSKH/uOWDC 63o4KC4KY0ghuFjc1jLPozB0m0QDFYbxRd3v0mfnMksXv5/HbbAckzL1+62Wo5hm b+oLXXAJHTMkj1lPuhVNGcwEiOAIXi209ey4Ljp9D98tsfHpJ1iY/WWDDpHZZqVv 3C773+iu99MgFpdLCjYeO8s4XkvX4gaBh7KOMt9N8uBVn8IVs+hhnQ3fuUq8eHub yL341eMfwxQgQ2QrnD1qI0BbxnDbWhFRpbZRkEq5HXuVP5G3RhHVBLeNmb5BMNwr PA2C6X50GBAtCaz+zRZdE6uP8KqmaQj0RanSkEuLWYaRyvf3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8GZqrQSmVNHL9YSikMySzNBXyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjUyYzc5ZWEtOGUwOS0z MzZhLWEwZTMtMDk2YTA1ODY0MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN4D9w3Ar1gpLERPljd+Ycn2XCwP3/0zmzzk+sGEM+Jgxf9OKkfiK3vO R2Lh61P4PaD5G+43S4rc5LSI5rHNAG1DtRR9D27i3pbNurj3yYXlUK/0d2lSulUL K/PVp7u2ioxud6mBxdtfHFT61IFgwQ5CwT/1vx+nqWfLB+x4UU/y2APvZya23aq1 E2LBYHQP30iJlcrxioviwm7BygZuaIgRD3dMo9iFDDNDXi2/MBjnP+YtZV5Ko0MY qnBGCXD3r/ZFqB9nQIYE9HK/Dcxdg2N9J2DKE6hGC5mKfYp1Z/tKwyCV4X5yspLh k7k1T3SF96d8hQbkQxeUca/7xEL56WI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:24 2025 by rpki-client