$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa File: df024027-651f-3384-b085-499c67c8e5f5.roa (raw, json) Hash identifier: PXvGk7md1GAAjhlLX8Gy3WRGGSVFWN2PxV5twChv6TE= Subject key identifier: 3D:41:F3:83:2F:08:BC:09:57:FE:BA:54:10:D7:D4:01:BE:18:F5:29 Certificate issuer: /CN=0a846bda-a477-4fe0-8f13-997253568b7e Certificate serial: 010D0C9F43285848F22C6B457B8C6E28726637A0 Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 14570 IP address blocks: 23.139.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6b:45:7b:8c:6e:28:72:66:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=fd3726c1-86fc-4247-8616-2c92c656bca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:4a:e7:a0:f9:69:49:54:46:53:69:17:8e: 09:da:cc:1e:29:e4:e6:1b:f3:80:47:80:06:06:9e: 88:6b:0e:31:e7:28:b0:9f:12:42:96:fb:63:83:0d: 64:12:cb:66:42:bc:89:66:b6:5b:2b:10:7c:6f:5a: 09:62:53:f3:70:56:6c:88:7a:5c:45:63:57:08:84: 3b:60:fc:a0:b3:1e:44:5a:2f:de:97:62:68:26:e5: 67:01:a8:26:42:4e:0c:ef:4a:ed:e9:29:2c:81:d3: 31:bc:86:c4:df:e3:ed:d4:58:ad:b8:ee:a7:03:2d: 7c:28:75:ef:7c:9c:1d:6f:5f:62:00:71:3f:9a:87: 29:5d:49:01:77:b4:13:fa:c8:0d:67:3e:81:1e:92: 13:7d:bf:e1:8c:2b:03:fd:5e:6c:ef:e7:6d:64:b2: ef:69:f7:bc:c1:ac:ef:09:7e:6a:80:28:2a:61:0f: 10:48:d8:c8:4d:7f:07:ee:87:d7:25:0c:6a:ac:d9: fa:a3:18:ed:2e:a9:7f:2f:59:07:03:91:1b:28:1f: 5c:26:02:df:fa:a6:ca:cb:20:62:da:f4:e1:25:69: c2:1f:a3:5a:e1:67:a3:28:da:21:c9:4a:dd:d5:cc: a1:b7:17:ed:2b:24:d8:d8:0f:93:be:e8:64:90:ad: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:41:F3:83:2F:08:BC:09:57:FE:BA:54:10:D7:D4:01:BE:18:F5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl X509v3 Authority Key Identifier: keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer sbgp-ipAddrBlock: critical IPv4: 23.139.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2e:7c:d7:94:d3:e3:5b:5a:cf:e7:b9:7c:66:8d:22:2c:49: 8f:c7:85:dd:06:58:7c:53:45:70:11:b9:b0:8e:5b:65:61:f8: ea:40:7d:eb:ad:67:71:16:20:7b:1f:c0:72:9c:ed:83:18:b8: 41:cf:0c:15:23:9b:96:e3:57:db:b1:bc:4e:81:8d:29:86:17: d8:68:89:66:6a:03:66:1f:82:dc:0f:0f:83:b2:51:d0:3d:d1: 7f:e7:ba:86:3f:d0:fb:64:ba:60:06:85:82:98:a7:6a:1f:29: 95:ee:e4:41:78:67:39:d1:e1:f3:fa:98:b8:6e:8f:4e:18:25: 43:e9:92:4b:f3:9d:c6:3a:79:89:11:a2:5f:02:cd:ae:07:53: a7:35:74:5d:fa:7a:42:77:1b:04:05:19:cb:4e:ca:c7:c6:06: b0:04:ce:6f:82:0b:fa:22:29:b7:74:31:d1:4a:84:d8:22:95: 84:60:70:ba:a2:1a:ae:32:5e:8e:a6:eb:57:af:9a:67:07:45: a7:b9:db:d3:de:54:5d:17:cb:64:ea:cd:08:55:bf:20:d8:17: 39:ba:1a:1e:ce:8b:f8:4b:b9:47:d4:85:e8:ff:3b:b2:50:93: ce:94:3f:72:df:a8:f9:64:78:38:96:92:6f:85:8f:4d:2f:e0: 74:6e:36:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGtFe4xuKHJmN6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE4NDZiZGEtYTQ3Ny00ZmUwLThmMTMtOTk3MjUzNTY4 YjdlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmQzNzI2YzEtODZmYy00MjQ3LTg2MTYtMmM5MmM2NTZiY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3RK56D5aUlURlNpF44J2sweKeTmG/OAR4AG Bp6Iaw4x5yiwnxJClvtjgw1kEstmQryJZrZbKxB8b1oJYlPzcFZsiHpcRWNXCIQ7 YPygsx5EWi/el2JoJuVnAagmQk4M70rt6SksgdMxvIbE3+Pt1FituO6nAy18KHXv fJwdb19iAHE/mocpXUkBd7QT+sgNZz6BHpITfb/hjCsD/V5s7+dtZLLvafe8wazv CX5qgCgqYQ8QSNjITX8H7ofXJQxqrNn6oxjtLql/L1kHA5EbKB9cJgLf+qbKyyBi 2vThJWnCH6Na4WejKNohyUrd1cyhtxftKyTY2A+TvuhkkK16bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1B84MvCLwJV/66VBDX1AG+GPUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0 NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1NjhiN2UvZGYwMjQwMjctNjUxZi0z Mzg0LWIwODUtNDk5YzY3YzhlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE4NDZiZGEtYTQ3Ny00ZmUwLThm MTMtOTk3MjUzNTY4YjdlLzBhODQ2YmRhLWE0NzctNGZlMC04ZjEzLTk5NzI1MzU2 OGI3ZS5jcmwwHwYDVR0jBBgwFoAU3LrnlLaBpZJ3YNrck1IDjYXwuGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcy NTM1NjhiN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEufNeU0+NbWs/nuXxmjSIsSY/Hhd0GWHxTRXARubCOW2Vh+OpAfeut Z3EWIHsfwHKc7YMYuEHPDBUjm5bjV9uxvE6BjSmGF9hoiWZqA2YfgtwPD4OyUdA9 0X/nuoY/0PtkumAGhYKYp2ofKZXu5EF4ZznR4fP6mLhuj04YJUPpkkvzncY6eYkR ol8Cza4HU6c1dF36ekJ3GwQFGctOysfGBrAEzm+CC/oiKbd0MdFKhNgilYRgcLqi Gq4yXo6m61evmmcHRae529PeVF0Xy2TqzQhVvyDYFzm6Gh7Oi/hLuUfUhej/O7JQ k86UP3LfqPlkeDiWkm+Fj00v4HRuNv0= -----END CERTIFICATE-----Generated at Mon Apr 28 22:10:36 2025 by rpki-client