$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa File: 436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa (raw, json) Hash identifier: 22w/edQIbwM5Y+nNVHfFVRGqIofJtddc0aNpA4Hb2nQ= Subject key identifier: 3D:2A:CD:0D:C8:63:F7:D7:68:82:5A:F1:A3:6D:A3:51:9A:84:B7:16 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584917DC256B5B82A6C293DEEE80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16815 IP address blocks: 23.239.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:25:6b:5b:82:a6:c2:93:de:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f1b91fad-114d-46d9-8e39-63c4d76e002c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:c4:2a:62:d8:93:24:a6:77:f4:69:eb:e7: f2:1c:8d:06:5d:13:1a:94:a6:7a:4e:a9:4b:b6:ab: ae:9c:97:95:e2:59:04:ff:1b:ae:83:7e:f0:09:29: 11:46:3f:29:2f:11:8f:ed:55:5f:56:ff:f5:3b:50: 77:46:ee:7e:2e:2c:37:96:bf:24:7a:fd:13:78:eb: 28:18:6b:27:35:3f:45:67:b8:a4:9d:92:d0:da:60: 71:24:88:4c:5f:b4:36:8b:f5:98:63:0d:61:c6:34: dd:4a:d9:19:7b:be:b9:8d:f5:46:e0:0f:ef:f6:57: e0:f0:a1:03:cf:50:93:bb:e1:f3:e5:4b:20:4c:73: 24:da:ff:38:19:cd:f6:e5:2d:90:bf:e1:5f:7e:9f: 9e:d6:65:80:4e:07:da:0f:d6:13:f2:88:71:d6:fd: ee:d4:0b:5a:bd:31:0e:cc:39:b7:46:d9:5a:f5:c1: 93:06:c5:31:3b:d9:c1:c5:60:a0:bc:81:ed:74:91: b5:e2:c9:d4:2c:c9:ff:ed:d6:4a:cf:94:2d:34:90: af:6c:3a:4f:06:d7:3f:5e:6f:d7:f5:aa:c2:a0:24: 0b:c6:77:e6:04:73:da:4f:4e:fe:74:47:d6:1f:a7: 23:d1:fe:4f:ef:8c:31:aa:e4:72:88:e8:61:e1:fa: 5f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:CD:0D:C8:63:F7:D7:68:82:5A:F1:A3:6D:A3:51:9A:84:B7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:0f:88:e5:ed:5e:19:cd:b8:0d:4d:e1:dc:ef:1e:e2:da:bb: a8:15:bb:94:45:57:4a:ff:0b:59:fc:9a:61:91:64:0c:13:27: 9e:9e:9b:71:07:38:fc:ee:2c:9c:3b:64:df:2b:3d:c2:3c:85: e6:bd:4c:fd:2e:d5:60:e4:c8:9b:71:77:7a:f3:11:e3:ab:10: 50:35:0d:2a:ec:07:bd:53:4e:f8:5c:b5:2d:4d:d7:07:fd:0b: 3c:4a:8c:c0:4d:a4:7c:07:06:be:f5:03:9e:85:a2:e8:84:1f: c4:ca:3f:f1:9f:4e:64:64:d0:c0:8d:6a:3f:7d:d7:40:84:cf: 83:85:41:d0:28:ef:c7:2c:10:a7:27:64:e8:49:e4:9a:6f:ef: 9c:6f:e0:71:5d:dc:37:d9:f6:63:ae:7d:69:a1:26:46:7d:59: cb:54:7a:9e:75:21:38:7b:34:c4:37:f3:cb:d9:4a:a5:8a:24: 66:eb:30:77:ce:4e:3b:1e:15:02:a0:0f:0d:23:bf:e2:3e:72: d3:43:42:92:d4:ff:2b:d6:fe:0c:2b:ff:8c:87:e6:92:2b:b7: ac:5d:7f:d4:65:43:75:b4:47:64:09:cf:ca:b8:91:2a:60:d9: 08:6d:f7:39:8e:30:4d:09:2e:f2:2c:1f:df:a6:9b:d7:aa:ba: 3c:c0:ca:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CVrW4KmwpPe7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjFiOTFmYWQtMTE0ZC00NmQ5LThlMzktNjNjNGQ3NmUwMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZLEKmLYkySmd/Rp6+fyHI0GXRMalKZ6TqlL tquunJeV4lkE/xuug37wCSkRRj8pLxGP7VVfVv/1O1B3Ru5+Liw3lr8kev0TeOso GGsnNT9FZ7iknZLQ2mBxJIhMX7Q2i/WYYw1hxjTdStkZe765jfVG4A/v9lfg8KED z1CTu+Hz5UsgTHMk2v84Gc325S2Qv+Fffp+e1mWATgfaD9YT8ohx1v3u1AtavTEO zDm3Rtla9cGTBsUxO9nBxWCgvIHtdJG14snULMn/7dZKz5QtNJCvbDpPBtc/Xm/X 9arCoCQLxnfmBHPaT07+dEfWH6cj0f5P74wxquRyiOhh4fpf3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0qzQ3IY/fXaIJa8aNto1GahLcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDM2ZjU5NTktOWZkOS0z NzMzLTljNjUtYmE2ZTE3ZTM1ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOYPiOXtXhnNuA1N4dzvHuLau6gVu5RFV0r/C1n8mmGRZAwTJ56em3EH OPzuLJw7ZN8rPcI8hea9TP0u1WDkyJtxd3rzEeOrEFA1DSrsB71TTvhctS1N1wf9 CzxKjMBNpHwHBr71A56FouiEH8TKP/GfTmRk0MCNaj9910CEz4OFQdAo78csEKcn ZOhJ5Jpv75xv4HFd3DfZ9mOufWmhJkZ9WctUep51ITh7NMQ388vZSqWKJGbrMHfO TjseFQKgDw0jv+I+ctNDQpLU/yvW/gwr/4yH5pIrt6xdf9RlQ3W0R2QJz8q4kSpg 2Qht9zmOME0JLvIsH9+mm9equjzAyuY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:09 2025 by rpki-client