$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa File: dff5b360-ef8a-3c09-86a2-776b00a5da37.roa (raw, json) Hash identifier: jGaDNh8FsmHLCWwRWkR5iKHjZFbykkiIJfbfR0qU6to= Subject key identifier: 1D:4D:F1:6D:96:05:59:E7:62:4B:69:FA:05:CB:13:A7:14:24:49:8E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848D7A64CB2F31C0723EF5E5380 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 31898 IP address blocks: 23.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4c:b2:f3:1c:07:23:ef:5e:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=a7b2d2e3-4bfe-4381-af5a-e3285751d722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:2d:bf:bd:68:24:7e:bf:fd:cb:f6:8b:ed: 3e:c0:96:aa:4f:b2:4c:15:bc:eb:c1:cb:0e:88:43: bd:ce:e4:7a:29:04:df:d3:99:40:50:e0:4b:a9:4c: 82:10:0f:27:80:0e:ea:3c:6f:a6:a3:a1:93:57:f2: f3:a3:f1:e7:94:b5:41:fb:28:3d:b7:04:91:b8:1f: 65:68:aa:d1:06:5a:5c:d0:36:29:48:33:c6:6f:5e: cb:2a:2b:d6:8e:14:e3:85:af:a3:82:26:32:1b:d6: 7f:65:af:2a:11:76:9b:63:9d:c6:71:ea:2c:62:24: 92:25:70:59:52:0f:75:6a:f6:22:47:a8:bf:4c:52: ce:94:a1:81:6f:fe:c7:43:80:d1:08:a8:e3:2c:cf: 29:7b:ca:63:8c:53:99:b1:a2:f7:6f:ef:68:99:47: ed:9d:6f:2b:19:3f:7a:f3:5a:8e:fa:ef:b7:b3:ae: 36:da:cc:7e:07:28:28:ec:8d:58:44:a2:b1:fa:9f: 07:5f:78:a0:51:6e:70:42:c2:d5:55:bf:57:24:10: cf:08:d6:e2:7d:48:ab:5d:59:8a:82:82:3d:e9:6c: 6d:87:9f:f0:47:44:95:48:12:17:97:40:12:dd:c9: bd:57:55:c8:33:b3:8b:d9:d8:3f:d4:1a:7b:ed:fd: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:F1:6D:96:05:59:E7:62:4B:69:FA:05:CB:13:A7:14:24:49:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:3b:e1:8c:53:ed:2d:4c:6f:13:10:64:4d:ae:c4:16:c5:8f: e8:27:93:08:fd:d7:c1:74:83:63:98:81:5d:cd:ff:50:cd:88: 11:aa:13:e0:c5:9a:41:73:07:6a:04:e6:31:7d:ca:3f:ed:ba: f6:18:b3:1a:4b:ce:e2:2a:5c:e9:9a:be:a6:28:b4:8d:ee:6c: 0d:d5:98:f0:34:c3:7f:1c:f3:e2:9a:87:fa:60:cd:14:4b:81: a4:f2:f8:22:b1:2b:ca:8f:73:03:62:1e:26:62:c8:3d:7b:e6: b9:39:e2:b9:74:8a:d7:eb:81:18:5a:d2:02:f5:af:01:4d:bb: a5:e5:70:61:8e:94:25:9c:31:d5:f9:71:9d:a2:15:96:08:03: 63:a5:c3:bd:f3:f8:ab:ab:dc:4e:6a:c2:ee:2e:71:2e:27:fd: 78:68:a8:26:fa:50:9f:0b:2b:c2:fe:4d:60:af:f4:a5:a2:ae: a2:8c:e1:6d:00:73:d9:52:83:5a:84:26:f7:96:c8:69:b7:dc: 5a:ab:40:98:57:49:16:82:80:29:26:f4:4c:86:66:8e:3d:4f: 21:cf:59:a7:f4:f3:85:e5:66:7c:31:36:48:26:1e:d0:42:de: 5f:b0:a4:5d:87:39:e8:47:59:e3:af:3e:5e:bd:ec:54:64:c3: bc:ea:79:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkyy8xwHI+9eU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk YTdiMmQyZTMtNGJmZS00MzgxLWFmNWEtZTMyODU3NTFkNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndMtv71oJH6//cv2i+0+wJaqT7JMFbzrwcsO iEO9zuR6KQTf05lAUOBLqUyCEA8ngA7qPG+mo6GTV/Lzo/HnlLVB+yg9twSRuB9l aKrRBlpc0DYpSDPGb17LKivWjhTjha+jgiYyG9Z/Za8qEXabY53GceosYiSSJXBZ Ug91avYiR6i/TFLOlKGBb/7HQ4DRCKjjLM8pe8pjjFOZsaL3b+9omUftnW8rGT96 81qO+u+3s6422sx+Bygo7I1YRKKx+p8HX3igUW5wQsLVVb9XJBDPCNbifUirXVmK goI96Wxth5/wR0SVSBIXl0AS3cm9V1XIM7OL2dg/1Bp77f3FlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1N8W2WBVnnYktp+gXLE6cUJEmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGZmNWIzNjAtZWY4YS0z YzA5LTg2YTItNzc2YjAwYTVkYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMM74YxT7S1MbxMQZE2uxBbFj+gnkwj918F0g2OYgV3N/1DNiBGqE+DF mkFzB2oE5jF9yj/tuvYYsxpLzuIqXOmavqYotI3ubA3VmPA0w38c8+Kah/pgzRRL gaTy+CKxK8qPcwNiHiZiyD175rk54rl0itfrgRha0gL1rwFNu6XlcGGOlCWcMdX5 cZ2iFZYIA2Olw73z+Kur3E5qwu4ucS4n/XhoqCb6UJ8LK8L+TWCv9KWirqKM4W0A c9lSg1qEJveWyGm33FqrQJhXSRaCgCkm9EyGZo49TyHPWaf084XlZnwxNkgmHtBC 3l+wpF2HOehHWeOvPl697FRkw7zqeao= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:49 2025 by rpki-client