$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa File: 0e0fc866-45da-33ff-bcd7-998937e25816.roa (raw, json) Hash identifier: 08uGaDTBj+ODB/4qpmZ3pOInr8rkE3SpnUfx+oP+pcs= Subject key identifier: EA:94:AC:C6:70:DC:4A:CF:53:9F:C7:C3:20:9B:AA:D2:6D:0C:EB:10 Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F432858497279B31A5FF4F7D155E13C80 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 395648 IP address blocks: 23.132.8.0/24 maxlen: 24 2602:fcea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b3:1a:5f:f4:f7:d1:55:e1:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=96dd42a5-1079-4ffb-a4c2-97d27b28d043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4a:6f:1a:43:19:cd:9f:e5:a5:01:21:29:73: e3:47:1a:f4:9f:f4:5d:64:e9:aa:f6:6c:64:0b:15: 73:2d:c3:5f:75:5b:7b:ca:cf:25:15:b0:29:89:40: bc:1d:27:45:f9:be:e3:89:0a:f8:cc:eb:a0:56:cb: 91:83:1a:ba:ad:4a:2b:96:db:fb:10:c1:81:f8:97: b4:44:77:77:4c:32:20:a6:8e:7c:fc:6b:b0:ab:e9: 11:92:a4:1d:51:12:b6:20:ad:d8:4f:b0:92:ea:6e: 41:4c:c6:7d:9e:6c:f2:ac:65:a0:d3:06:8d:0a:db: b9:e6:37:12:bb:b8:5b:9e:e6:57:19:c9:75:3e:ee: 28:69:ff:1b:ed:1a:6c:6e:62:a3:87:e0:ec:0b:46: 1f:14:38:92:ee:79:d5:f2:7c:4c:08:04:c0:15:aa: a8:7e:9b:75:2d:de:09:03:83:cb:29:fa:8c:bb:9a: b7:aa:a7:2a:4f:53:ee:55:d5:17:f6:e1:39:03:d0: 88:9c:35:57:bf:f3:b4:53:46:5f:a4:ec:08:13:34: 32:cf:f8:d2:f5:25:c4:f6:fa:ef:3e:26:bd:0a:ad: b4:13:ec:ef:ed:f9:32:33:81:75:b3:d1:36:46:5c: 19:61:aa:a5:50:36:4f:f0:5e:e7:55:d5:f7:2a:13: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:94:AC:C6:70:DC:4A:CF:53:9F:C7:C3:20:9B:AA:D2:6D:0C:EB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 IPv6: 2602:fcea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ca:b6:58:fd:f9:f8:f3:9b:7c:17:55:60:ba:9e:9a:4f:12: b7:f0:2e:0f:16:34:fd:2d:5f:69:f5:24:7d:01:51:fa:1b:f8: 99:f4:e2:96:89:c8:36:9b:f1:ea:31:27:bf:da:37:d8:50:6b: 79:f3:65:02:6c:fe:bd:07:0b:67:56:60:16:e2:35:53:a8:62: 94:4b:6f:14:43:0e:ee:7a:eb:7e:36:e7:a3:ff:92:0d:36:f0: 11:d1:0b:91:1f:aa:25:eb:4e:8e:fd:10:14:6c:44:d1:a0:d7: eb:c4:83:f3:fd:dd:13:cc:02:2e:79:5d:32:ed:18:85:91:49: b3:0b:4d:11:e3:5a:c7:e3:e0:a4:ce:a2:47:b1:04:d6:9d:a1: 4a:b9:6e:e0:fa:29:14:6d:30:01:ca:17:3d:e3:95:d2:01:9a: 7e:c8:ba:b2:b0:14:0e:af:cb:8e:b1:8a:90:32:fb:49:20:e9: 1a:c3:df:d7:17:43:da:11:05:8b:06:bd:74:dc:55:5a:97:87: 6b:a0:99:d8:39:28:50:11:e0:bb:fb:da:30:48:25:15:a6:aa: a8:af:6a:ef:44:a6:d7:ab:6c:cd:dd:54:22:61:8d:6c:62:b1: b6:9f:af:9a:35:d1:ed:76:a2:9d:83:af:0f:d6:1d:dc:d2:0e: bb:9b:44:77 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElyebMaX/T30VXhPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk OTZkZDQyYTUtMTA3OS00ZmZiLWE0YzItOTdkMjdiMjhkMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUpvGkMZzZ/lpQEhKXPjRxr0n/RdZOmq9mxk CxVzLcNfdVt7ys8lFbApiUC8HSdF+b7jiQr4zOugVsuRgxq6rUorltv7EMGB+Je0 RHd3TDIgpo58/Guwq+kRkqQdURK2IK3YT7CS6m5BTMZ9nmzyrGWg0waNCtu55jcS u7hbnuZXGcl1Pu4oaf8b7RpsbmKjh+DsC0YfFDiS7nnV8nxMCATAFaqofpt1Ld4J A4PLKfqMu5q3qqcqT1PuVdUX9uE5A9CInDVXv/O0U0ZfpOwIEzQyz/jS9SXE9vrv Pia9Cq20E+zv7fkyM4F1s9E2RlwZYaqlUDZP8F7nVdX3KhML6wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOqUrMZw3ErPU5/HwyCbqtJtDOsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvMGUwZmM4NjYtNDVkYS0z M2ZmLWJjZDctOTk4OTM3ZTI1ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4QIMA4E AgACMAgDBgQmAvzqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsyrZY/fn485t8F1Vgup6aTxK38C4PFjT9 LV9p9SR9AVH6G/iZ9OKWicg2m/HqMSe/2jfYUGt582UCbP69BwtnVmAW4jVTqGKU S28UQw7ueut+Nuej/5INNvAR0QuRH6ol606O/RAUbETRoNfrxIPz/d0TzAIueV0y 7RiFkUmzC00R41rH4+CkzqJHsQTWnaFKuW7g+ikUbTAByhc945XSAZp+yLqysBQO r8uOsYqQMvtJIOkaw9/XF0PaEQWLBr103FVal4droJnYOShQEeC7+9owSCUVpqqo r2rvRKbXq2zN3VQiYY1sYrG2n6+aNdHtdqKdg68P1h3c0g67m0R3 -----END CERTIFICATE-----Generated at Tue Apr 29 07:52:49 2025 by rpki-client