$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json) Hash identifier: F5g1J8XDc1/3uoeyDNhfCIbCDrTzuKcwWlMCDHzjPAY= Subject key identifier: E1:52:82:5E:6E:29:45:8E:F9:1F:63:27:03:96:2E:92:5F:7B:3A:91 Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F432858490E16BD46031A1691F7063C80 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 399717 IP address blocks: 23.179.176.0/24 maxlen: 24 64.112.106.0/24 maxlen: 24 2602:fc7e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bd:46:03:1a:16:91:f7:06:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=e0ea05a7-10f7-45a5-a30b-1e79c592520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:f1:7e:63:65:b4:58:0d:48:34:56:6c:3f: 77:55:e8:74:84:7a:12:d5:d5:c9:51:f1:e6:16:c5: 9d:04:e8:f0:58:37:45:c5:56:c8:f8:b4:5a:1f:6e: 22:d5:7a:ac:46:5f:e8:b8:1a:df:87:2a:86:03:67: 85:8a:b4:a1:3b:0e:77:87:f1:09:65:f3:32:04:e7: 1d:2a:ce:83:d4:c5:90:00:f1:0e:d4:a0:49:80:4e: 88:be:f5:6b:be:5f:ad:9a:48:b5:af:58:e9:83:53: 1b:64:4e:28:0b:2d:a5:c2:11:fb:33:99:5e:91:3b: 63:b0:d4:dc:15:0c:a9:f2:d0:cc:84:c4:5c:f1:66: 74:b3:47:e5:26:9d:21:cd:ee:b9:f0:ed:1d:40:47: ff:41:1c:39:aa:65:3c:e4:bd:be:ad:16:8c:3b:5a: 2b:c0:11:43:d5:31:9a:13:97:20:28:d7:a2:29:98: 81:53:29:85:63:f3:e5:60:bb:7a:05:a6:87:60:aa: 12:11:57:07:52:73:3d:6e:dd:6d:3f:17:94:51:fa: 2f:b2:4e:60:bf:34:71:48:08:ca:7d:d7:f5:dd:76: f9:a3:0e:3a:db:c9:26:64:c7:d9:83:05:20:30:a7: 8b:00:a4:b2:07:79:0d:11:91:2a:18:20:4b:b9:cf: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:52:82:5E:6E:29:45:8E:F9:1F:63:27:03:96:2E:92:5F:7B:3A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: 23.179.176.0/24 64.112.106.0/24 IPv6: 2602:fc7e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8f:60:c7:45:43:ba:ff:fb:0f:2d:02:01:4a:4c:b2:80:5a: 8a:20:74:23:40:56:22:22:82:00:1a:ee:b3:43:b1:4e:e7:e7: 2b:43:f6:c3:19:18:bf:6e:1a:24:10:42:8e:63:9d:28:b5:f4: e5:0e:97:23:1b:f6:5b:48:ba:b1:8a:d0:96:5c:a6:64:aa:ac: 30:4c:5b:e2:91:25:b6:41:dd:eb:65:d5:7d:25:2f:8d:c4:41: f4:2c:86:8f:a8:74:5f:f2:53:48:fb:7c:59:d8:56:c6:6f:d6: fd:26:1c:2a:43:2c:06:ca:3e:79:35:42:b9:78:51:35:35:70: 2d:21:fd:5b:65:44:52:f8:87:5c:e4:6a:50:2a:aa:53:04:ee: dd:6c:73:20:31:19:23:80:c6:cf:d9:d3:3c:25:63:f7:83:2c: 47:5e:ee:5a:f8:27:98:eb:1f:16:d8:f2:78:84:95:9c:aa:0b: 4b:a3:2f:59:88:cf:2a:e2:90:6a:73:64:f0:6c:3f:a0:6e:88: 4a:8a:8c:4c:86:85:e8:4b:c0:2c:af:71:e4:6b:a7:b9:7c:dc: ac:60:96:ac:a3:78:92:7e:1d:94:7d:b8:d6:aa:d5:55:b0:c5: ae:cb:bb:bd:35:37:b4:db:a8:3e:93:9c:cb:7c:c8:21:c7:28: 2c:a7:cc:57 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEkOFr1GAxoWkfcGPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTBlYTA1YTctMTBmNy00NWE1LWEzMGItMWU3OWM1OTI1MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNfxfmNltFgNSDRWbD93Veh0hHoS1dXJUfHm FsWdBOjwWDdFxVbI+LRaH24i1XqsRl/ouBrfhyqGA2eFirShOw53h/EJZfMyBOcd Ks6D1MWQAPEO1KBJgE6IvvVrvl+tmki1r1jpg1MbZE4oCy2lwhH7M5lekTtjsNTc FQyp8tDMhMRc8WZ0s0flJp0hze658O0dQEf/QRw5qmU85L2+rRaMO1orwBFD1TGa E5cgKNeiKZiBUymFY/PlYLt6BaaHYKoSEVcHUnM9bt1tPxeUUfovsk5gvzRxSAjK fdf13Xb5ow4628kmZMfZgwUgMKeLAKSyB3kNEZEqGCBLuc8RdQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFOFSgl5uKUWO+R9jJwOWLpJfezqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMmQ2NDViMWItYzY5NS0z YjJlLWE0NTItMTVjZGJiMzAyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7OwAwQA QHBqMA4EAgACMAgDBgAmAvx+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIj2DHRUO6//sPLQIBSkyygFqK IHQjQFYiIoIAGu6zQ7FO5+crQ/bDGRi/bhokEEKOY50otfTlDpcjG/ZbSLqxitCW XKZkqqwwTFvikSW2Qd3rZdV9JS+NxEH0LIaPqHRf8lNI+3xZ2FbGb9b9JhwqQywG yj55NUK5eFE1NXAtIf1bZURS+Idc5GpQKqpTBO7dbHMgMRkjgMbP2dM8JWP3gyxH Xu5a+CeY6x8W2PJ4hJWcqgtLoy9ZiM8q4pBqc2TwbD+gbohKioxMhoXoS8Asr3Hk a6e5fNysYJaso3iSfh2UfbjWqtVVsMWuy7u9NTe026g+k5zLfMghxygsp8xX -----END CERTIFICATE-----Generated at Mon Apr 28 15:19:48 2025 by rpki-client