$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa File: 47d7fcfd-95fd-3503-adb6-67e323a7831f.roa (raw, json) Hash identifier: TiUjCgEyWBydqZE7JDuuEnQajSyJwnpbYE/2BmCSWV4= Subject key identifier: 41:7D:E7:7B:A2:E2:6A:0C:C9:79:95:8C:F9:43:BB:2E:66:73:B8:35 Certificate issuer: /CN=fe90a536-ade0-4ce0-ac99-a1c784d18816 Certificate serial: 010D0C9F43285848E59BC816F3272A32FBA3DD00 Authority key identifier: 0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397554 IP address blocks: 23.134.144.0/24 maxlen: 24 2605:40c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c8:16:f3:27:2a:32:fb:a3:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe90a536-ade0-4ce0-ac99-a1c784d18816 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=13f4478b-3f85-42ea-ab0e-72d8afe8d6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:df:1a:49:42:98:29:77:c6:2d:bc:c7:cb: 3e:d6:8b:b8:12:7a:22:46:e6:0e:79:11:27:e6:fd: 7e:29:f3:23:8c:f9:7b:2b:c4:88:ea:64:fe:59:57: ca:ce:72:74:6f:6b:b6:d8:63:e9:4d:a5:97:77:50: 0a:76:c8:e8:f0:59:47:2b:06:b5:a2:4f:a5:58:0f: a8:67:ff:d6:e9:ee:cf:e6:12:c4:aa:5b:67:c2:1b: 0d:c6:5d:8f:bd:9a:6c:c0:4b:89:02:b3:3c:3b:50: 97:03:e5:2f:e2:26:d2:83:fb:56:a0:19:ff:62:91: b8:73:33:00:4d:9b:81:c4:af:f4:ad:34:89:24:a1: 36:23:0b:70:79:3a:a2:8f:4f:e2:c6:c9:88:1c:69: fd:d1:56:4a:90:d3:c0:02:44:ca:81:74:85:2a:da: 2d:4f:27:be:90:a1:0c:af:b4:ec:16:93:c2:07:f7: e7:95:30:28:62:b6:ac:78:08:b5:07:55:fe:cc:9a: 98:a2:1f:5c:1c:95:4a:7e:7d:60:af:0b:c1:b2:5d: 8e:4a:cc:1a:a0:77:65:9a:a9:13:f2:9a:8e:54:d7: de:3f:29:a8:2e:0f:12:4a:e4:95:4c:cb:63:bd:05: ab:c0:1d:cd:53:5f:a9:53:8a:d5:a7:78:3f:75:ab: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:E7:7B:A2:E2:6A:0C:C9:79:95:8C:F9:43:BB:2E:66:73:B8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl X509v3 Authority Key Identifier: keyid:0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer sbgp-ipAddrBlock: critical IPv4: 23.134.144.0/24 IPv6: 2605:40c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:14:cb:48:e9:08:14:0c:c9:b2:1b:ab:c4:cf:ca:dc:16:4d: 5f:4e:e8:60:9f:d5:e1:40:42:3c:e8:d9:8c:12:91:05:3d:a4: ed:fb:b4:4a:aa:8b:6b:e1:6e:1e:0e:10:4d:0c:c7:da:71:e8: 85:d7:44:41:c3:f8:32:de:a5:88:02:2c:86:b7:65:ab:d4:fa: dc:69:a6:0b:be:9a:af:73:fa:2f:62:f0:c2:a9:ef:21:c6:10: 23:2d:0c:74:00:c7:73:1d:66:e2:31:18:8c:3a:bd:64:1a:6a: ec:a7:92:15:74:37:39:58:9e:d0:cb:1e:5c:b9:53:b8:e4:65: f0:8b:f5:16:8b:4e:43:49:82:a2:7b:be:89:24:1e:e1:f8:c0: 2f:35:93:25:27:9c:ed:f9:32:df:e8:8f:dc:e4:ec:38:4c:a4: 27:70:7c:33:06:f2:ae:e0:5d:4d:ba:36:24:75:96:7e:f7:31: 97:a1:7c:e2:10:ab:63:c1:4b:de:f1:75:50:da:2e:6d:1c:ff: 2e:ec:0c:a8:75:5f:51:57:fe:af:fe:bb:2c:cb:63:db:ad:38: 28:41:5c:c8:26:07:7c:ba:74:9f:72:1b:fd:ed:96:43:5a:a7: cb:bf:35:51:84:e9:1c:4a:54:4e:f1:b0:5e:b5:c3:0b:6f:e7: 2e:1d:df:6d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEjlm8gW8ycqMvuj3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU5MGE1MzYtYWRlMC00Y2UwLWFjOTktYTFjNzg0ZDE4 ODE2MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTNmNDQ3OGItM2Y4NS00MmVhLWFiMGUtNzJkOGFmZThkNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobDfGklCmCl3xi28x8s+1ou4EnoiRuYOeREn 5v1+KfMjjPl7K8SI6mT+WVfKznJ0b2u22GPpTaWXd1AKdsjo8FlHKwa1ok+lWA+o Z//W6e7P5hLEqltnwhsNxl2PvZpswEuJArM8O1CXA+Uv4ibSg/tWoBn/YpG4czMA TZuBxK/0rTSJJKE2IwtweTqij0/ixsmIHGn90VZKkNPAAkTKgXSFKtotTye+kKEM r7TsFpPCB/fnlTAoYraseAi1B1X+zJqYoh9cHJVKfn1grwvBsl2OSswaoHdlmqkT 8pqOVNfePymoLg8SSuSVTMtjvQWrwB3NU1+pU4rVp3g/datBqwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEF953ui4moMyXmVjPlDuy5mc7g1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZTkw YTUzNi1hZGUwLTRjZTAtYWM5OS1hMWM3ODRkMTg4MTYvNDdkN2ZjZmQtOTVmZC0z NTAzLWFkYjYtNjdlMzIzYTc4MzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmU5MGE1MzYtYWRlMC00Y2UwLWFj OTktYTFjNzg0ZDE4ODE2L2ZlOTBhNTM2LWFkZTAtNGNlMC1hYzk5LWExYzc4NGQx ODgxNi5jcmwwHwYDVR0jBBgwFoAUDKe+NW7cG8+Lckspa4vYlb0KBfMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZTkwYTUzNi1hZGUwLTRjZTAtYWM5OS1hMWM3 ODRkMTg4MTYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4aQMA0E AgACMAcDBQAmBUDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAgUy0jpCBQMybIbq8TPytwWTV9O6GCf1eFA Qjzo2YwSkQU9pO37tEqqi2vhbh4OEE0Mx9px6IXXREHD+DLepYgCLIa3ZavU+txp pgu+mq9z+i9i8MKp7yHGECMtDHQAx3MdZuIxGIw6vWQaauynkhV0NzlYntDLHly5 U7jkZfCL9RaLTkNJgqJ7vokkHuH4wC81kyUnnO35Mt/oj9zk7DhMpCdwfDMG8q7g XU26NiR1ln73MZehfOIQq2PBS97xdVDaLm0c/y7sDKh1X1FX/q/+uyzLY9utOChB XMgmB3y6dJ9yG/3tlkNap8u/NVGE6RxKVE7xsF61wwtv5y4d320= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:45 2025 by rpki-client