$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa File: 5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa (raw, json) Hash identifier: irDKLWCEewlCpm/O94/Xbr5q8dGETJ9bpntUwkmbop0= Subject key identifier: E0:C3:D8:74:13:CF:08:E5:47:37:6A:4B:9C:FF:0D:2D:FF:99:D1:77 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584877A0676B90B35362B4EB7D60 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa Signing time: Tue 07 Jan 2025 16:31:16 +0000 ROA not before: Tue 07 Jan 2025 16:31:16 +0000 ROA not after: Mon 07 Apr 2025 15:31:16 +0000 asID: 31898 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:a0:67:6b:90:b3:53:62:b4:eb:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 7 16:31:16 2025 GMT Not After : Apr 7 15:31:16 2025 GMT Subject: CN=15d8a07f-3c4b-47fd-ac74-d57ad07d9d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:7e:0a:aa:ac:f5:95:a6:60:64:85:f7:ed: f7:2c:b5:db:a4:79:4c:6f:5f:cc:2e:ab:ec:06:b9: 79:df:93:23:b1:e6:6a:bf:d8:21:b2:a6:f4:75:c1: 4b:8c:0a:90:9e:86:09:c0:74:ba:69:51:46:72:9f: d2:ff:69:8f:39:f0:12:b1:d7:cd:95:f2:54:ab:72: 5a:32:bc:38:f9:94:6b:36:7e:23:5c:12:ab:d8:95: f4:db:92:de:ad:71:35:10:3c:02:98:4f:a3:31:f6: 61:66:d9:c0:ae:c1:ac:ec:04:f4:72:ad:b3:f6:1a: 90:67:bb:07:47:bb:93:6f:f5:7d:93:dd:02:88:27: b0:2a:bf:ed:80:e9:49:53:ae:28:78:02:c4:d3:70: 59:cc:e5:d4:ad:16:cb:47:00:93:51:d8:0c:45:7b: 03:46:f3:54:9f:c6:be:77:48:93:5d:f0:e2:a2:d5: 0f:f5:83:97:48:70:b6:7d:00:d1:02:0f:39:da:d9: be:ac:0a:46:e0:84:99:70:aa:f3:4e:eb:84:18:24: ff:7e:ae:92:ea:0c:35:ee:7e:e3:ff:4f:df:d0:39: 67:9a:2b:63:a6:2f:a6:d6:d4:9f:9d:0e:f3:3d:8a: 83:7d:28:ec:af:86:af:1e:01:5f:66:40:fb:f5:1b: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C3:D8:74:13:CF:08:E5:47:37:6A:4B:9C:FF:0D:2D:FF:99:D1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:00:53:88:67:af:68:2f:54:54:ac:aa:e4:4a:cb:02:08:1b: 4d:ba:cd:7d:f4:e8:20:b4:3a:fa:a2:e8:f7:73:fb:04:4e:a2: 5d:54:f0:5a:af:e1:9a:0b:bb:79:c6:d4:ce:22:87:02:89:ff: 45:c4:0d:ba:53:16:a5:3e:f7:99:98:aa:5c:21:06:c5:1c:4f: 0d:51:ab:aa:ab:fa:26:35:28:ff:ce:2c:28:d9:ba:be:22:46: 1e:3e:a9:6f:d1:a8:86:c8:84:96:98:3a:f2:e5:d4:10:a9:1c: 38:a3:e1:af:90:d2:80:9a:29:92:dc:fa:22:ba:2b:52:0c:26: 96:fd:bc:78:26:72:0d:d6:3d:9d:a9:e0:7d:8d:dc:82:12:cd: 2f:53:65:4f:05:56:50:4c:ba:80:be:bb:66:b0:25:87:b0:d7: 18:04:e8:9d:56:59:dc:bb:4c:e7:b1:79:01:17:6d:90:0f:1b: d8:96:b9:d5:0a:2f:5b:39:b4:d4:ac:d6:19:39:78:64:38:3e: f4:c6:5e:4e:2d:80:2c:0d:0f:bb:aa:77:ea:49:10:cd:29:b9: f4:52:44:a8:38:a2:b5:11:a4:f0:63:db:ff:b6:63:4f:01:01: f4:1f:cc:bd:69:56:66:d4:e3:c2:7e:0a:b4:fa:ca:0e:7c:c0: 2a:3f:a4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3oGdrkLNTYrTrfWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDEwNzE2MzExNloXDTI1MDQwNzE1MzExNlowLzEtMCsGA1UEAxMk MTVkOGEwN2YtM2M0Yi00N2ZkLWFjNzQtZDU3YWQwN2Q5ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvd+Cqqs9ZWmYGSF9+33LLXbpHlMb1/MLqvs Brl535MjseZqv9ghsqb0dcFLjAqQnoYJwHS6aVFGcp/S/2mPOfASsdfNlfJUq3Ja Mrw4+ZRrNn4jXBKr2JX025LerXE1EDwCmE+jMfZhZtnArsGs7AT0cq2z9hqQZ7sH R7uTb/V9k90CiCewKr/tgOlJU64oeALE03BZzOXUrRbLRwCTUdgMRXsDRvNUn8a+ d0iTXfDiotUP9YOXSHC2fQDRAg852tm+rApG4ISZcKrzTuuEGCT/fq6S6gw17n7j /0/f0Dlnmitjpi+m1tSfnQ7zPYqDfSjsr4avHgFfZkD79Rv5qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODD2HQTzwjlRzdqS5z/DS3/mdF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNTg0MGZjZGMtNGE5OC0z ZDhiLThmMzUtZWNiM2U3OGU4YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOUAU4hnr2gvVFSsquRKywIIG026zX306CC0Ovqi6Pdz+wROol1U8Fqv 4ZoLu3nG1M4ihwKJ/0XEDbpTFqU+95mYqlwhBsUcTw1Rq6qr+iY1KP/OLCjZur4i Rh4+qW/RqIbIhJaYOvLl1BCpHDij4a+Q0oCaKZLc+iK6K1IMJpb9vHgmcg3WPZ2p 4H2N3IISzS9TZU8FVlBMuoC+u2awJYew1xgE6J1WWdy7TOexeQEXbZAPG9iWudUK L1s5tNSs1hk5eGQ4PvTGXk4tgCwND7uqd+pJEM0pufRSRKg4orURpPBj2/+2Y08B AfQfzL1pVmbU48J+CrT6yg58wCo/pDQ= -----END CERTIFICATE-----Generated at Thu Mar 13 17:16:25 2025 by rpki-client