$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa File: 19a3d378-08f4-3987-94a8-a0680096b19f.roa (raw, json) Hash identifier: jKna2VPFQfllLYusMiFQTm0fq0AZyEjGxPvF2P64mvw= Subject key identifier: 82:42:77:92:17:F1:35:85:0C:2C:EC:2A:9D:BB:51:54:13:46:E2:87 Certificate issuer: /CN=fe38e0f9-f100-419a-915a-3e2451a50c5a Certificate serial: 010D0C9F43285848696059BAE47DD4244569AEC0 Authority key identifier: 2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 16635 IP address blocks: 23.149.16.0/24 maxlen: 24 104.250.232.0/22 maxlen: 24 2602:803:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:59:ba:e4:7d:d4:24:45:69:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe38e0f9-f100-419a-915a-3e2451a50c5a Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=c58a1bce-91ab-4876-81c2-d1a6e16b2b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:cc:15:05:3e:41:a3:a5:93:10:5c:d9:8f: 7f:ab:37:5c:0d:c5:9a:b6:c1:06:8e:66:cf:ca:97: 88:78:64:cc:b4:b3:33:39:72:2c:8d:ac:06:92:68: d8:96:05:56:b4:27:59:10:42:8d:32:33:9d:ca:1b: 21:14:02:9c:47:19:dc:6a:a1:21:44:b6:9b:6e:44: 3a:f2:16:44:ea:03:55:4e:05:8a:b4:f2:16:20:8d: 71:c1:6a:bd:a2:b4:4f:ae:6e:6c:d8:40:bd:f3:70: 21:93:f6:8c:d7:8d:ab:48:70:f0:34:b3:2e:31:dc: 20:20:bd:89:32:db:da:87:8a:d2:75:61:d9:c5:ef: a1:cf:56:ad:19:74:10:52:83:36:87:f5:70:35:3c: f9:9f:ee:5f:10:af:81:96:b4:cc:a0:ee:84:b6:26: db:73:ff:6a:c4:c5:54:9e:03:c3:4c:3e:f9:14:71: 9c:fa:cd:f9:51:0f:f3:c0:3b:54:59:3e:a7:c5:af: bb:5b:23:cf:95:97:ce:07:23:6b:cc:e0:04:c6:b6: 16:a3:06:5c:40:b2:a6:69:ba:32:94:f0:3f:13:b0: 71:aa:aa:8f:8b:76:25:8c:28:2b:9b:68:cf:b7:1c: 63:91:5d:ff:6b:df:a1:74:77:c6:5a:b5:6c:79:58: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:42:77:92:17:F1:35:85:0C:2C:EC:2A:9D:BB:51:54:13:46:E2:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.crl X509v3 Authority Key Identifier: keyid:2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer sbgp-ipAddrBlock: critical IPv4: 23.149.16.0/24 104.250.232.0/22 IPv6: 2602:803:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ce:72:41:fb:4b:38:ce:45:07:00:ba:d5:4e:47:54:b8:96: d3:f1:c8:bf:cd:bb:14:e9:b7:38:7e:2e:e4:d0:0f:7b:9e:c2: 1a:6e:31:5b:30:e7:76:b9:42:85:b6:1e:38:0c:86:47:25:45: ef:51:5c:70:04:fe:10:24:4c:2c:cb:7e:5b:c8:07:ec:33:35: 7d:c5:29:e6:f5:26:44:cb:78:00:d6:b9:64:2b:5c:e7:b6:53: 9c:fa:6e:5a:51:df:3d:e9:2d:0c:e9:7e:70:a8:55:81:17:3a: f8:ca:92:29:d1:f5:1e:f4:d7:48:31:03:1e:c0:dd:5b:8e:1a: 57:24:c0:37:07:eb:43:c1:8d:be:2e:27:6f:45:d7:f0:c3:30: c5:15:75:66:60:97:dd:db:bd:44:50:01:48:27:86:14:7c:a9: ca:be:ec:aa:2d:a3:18:b1:38:f7:8e:6f:19:dc:75:6d:59:a8: e1:f1:8a:93:88:82:88:5c:98:ca:91:fb:fb:f8:5a:f4:cf:22: af:6d:6c:fe:5a:3a:4b:f3:52:01:a1:f4:24:ec:d8:f3:ac:5b: ac:cf:55:27:88:e8:ec:8b:4a:74:ab:13:f1:f8:38:ad:c8:64: 15:48:c9:69:75:46:bd:ab:4c:29:20:d1:ad:23:b7:3a:c8:46: 04:a5:7d:72 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEhpYFm65H3UJEVprsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzOGUwZjktZjEwMC00MTlhLTkxNWEtM2UyNDUxYTUw YzVhMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk YzU4YTFiY2UtOTFhYi00ODc2LTgxYzItZDFhNmUxNmIyYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSHMFQU+QaOlkxBc2Y9/qzdcDcWatsEGjmbP ypeIeGTMtLMzOXIsjawGkmjYlgVWtCdZEEKNMjOdyhshFAKcRxncaqEhRLabbkQ6 8hZE6gNVTgWKtPIWII1xwWq9orRPrm5s2EC983Ahk/aM142rSHDwNLMuMdwgIL2J Mtvah4rSdWHZxe+hz1atGXQQUoM2h/VwNTz5n+5fEK+BlrTMoO6Etibbc/9qxMVU ngPDTD75FHGc+s35UQ/zwDtUWT6nxa+7WyPPlZfOByNrzOAExrYWowZcQLKmaboy lPA/E7BxqqqPi3YljCgrm2jPtxxjkV3/a9+hdHfGWrVseVi9yQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFIJCd5IX8TWFDCzsKp27UVQTRuKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZTM4 ZTBmOS1mMTAwLTQxOWEtOTE1YS0zZTI0NTFhNTBjNWEvMTlhM2QzNzgtMDhmNC0z OTg3LTk0YTgtYTA2ODAwOTZiMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmUzOGUwZjktZjEwMC00MTlhLTkx NWEtM2UyNDUxYTUwYzVhL2ZlMzhlMGY5LWYxMDAtNDE5YS05MTVhLTNlMjQ1MWE1 MGM1YS5jcmwwHwYDVR0jBBgwFoAUK7efXx4hReXf55iTUz6iYkItFqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZTM4ZTBmOS1mMTAwLTQxOWEtOTE1YS0zZTI0 NTFhNTBjNWEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5UQAwQC aProMA4EAgACMAgDBgAmAggDQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHznJB+0s4zkUHALrVTkdUuJbT 8ci/zbsU6bc4fi7k0A97nsIabjFbMOd2uUKFth44DIZHJUXvUVxwBP4QJEwsy35b yAfsMzV9xSnm9SZEy3gA1rlkK1zntlOc+m5aUd896S0M6X5wqFWBFzr4ypIp0fUe 9NdIMQMewN1bjhpXJMA3B+tDwY2+LidvRdfwwzDFFXVmYJfd271EUAFIJ4YUfKnK vuyqLaMYsTj3jm8Z3HVtWajh8YqTiIKIXJjKkfv7+Fr0zyKvbWz+WjpL81IBofQk 7NjzrFusz1UniOjsi0p0qxPx+DityGQVSMlpdUa9q0wpINGtI7c6yEYEpX1y -----END CERTIFICATE-----Generated at Fri Mar 14 10:00:31 2025 by rpki-client