$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json) Hash identifier: mV7PImvFYXDC1EypdBSmvF6j8cX8alIlGWrw3LJfLwo= Subject key identifier: DA:31:58:25:BE:4E:A8:11:33:8F:7B:A8:86:9D:CA:F4:34:0A:99:44 Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F432858492CAE7F39679804D77FEE8900 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 400312 IP address blocks: 23.131.168.0/24 maxlen: 24 2602:fbf0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7f:39:67:98:04:d7:7f:ee:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=02c3a6d0-271f-48cd-843c-ea55d8e0a54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:97:ef:4a:d9:6a:cd:59:c9:1c:15:04:44: ad:4f:04:54:9c:a4:68:de:29:4f:0c:a7:18:c5:ec: 67:74:b7:72:9d:f6:ce:25:32:09:d6:70:39:8e:cb: 71:5c:f4:d1:08:98:7f:9d:d0:02:82:3d:31:eb:de: 60:cc:ff:07:f1:1f:14:ff:ca:36:03:aa:73:ec:eb: 71:aa:8f:14:2d:9c:32:5b:43:96:16:8e:35:7e:3d: af:07:6f:35:d3:04:77:ec:bf:ef:d3:44:c9:b3:76: 2a:dc:e5:e1:d0:b0:d5:50:35:5e:c0:f7:92:68:ac: fa:60:a7:62:60:f4:6e:34:cc:67:9f:0e:83:0f:dd: bc:a8:0c:5c:75:ce:74:b4:0b:80:2b:b0:b3:a0:3a: 61:88:ae:0c:08:29:b7:22:80:2d:bf:44:73:56:82: c4:7b:d3:f2:74:13:0a:b0:ed:2c:4a:a4:22:88:e6: 36:3f:ee:9c:fa:91:47:0a:28:17:d8:bf:85:62:85: b2:47:e5:0b:04:09:ca:15:98:2a:5b:c4:95:3b:8e: 51:73:14:0f:61:3e:b5:22:98:66:eb:23:ba:3f:9e: 72:d8:bb:83:e2:2e:f6:a1:19:20:e1:04:24:7e:3f: 2d:84:6e:78:b7:77:9d:3f:b0:ed:d6:36:92:3a:09: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:31:58:25:BE:4E:A8:11:33:8F:7B:A8:86:9D:CA:F4:34:0A:99:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.168.0/24 IPv6: 2602:fbf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b9:7e:d1:d1:bd:03:1b:f6:c5:a4:fb:90:54:ce:0c:c6:dc: 33:51:9a:9b:f6:d1:cb:0a:a0:fc:7b:a7:d1:74:52:74:0a:c6: a6:89:a2:35:bc:e2:22:7c:36:46:c7:31:58:4b:3f:30:d7:0c: 98:75:cf:d4:7b:d8:2d:15:2f:8e:af:3a:b9:db:20:91:56:d8: 21:8f:67:80:96:01:c7:96:47:66:77:f7:04:0c:e9:43:5a:9c: f1:01:e0:df:c4:bd:79:50:3c:83:0b:65:a5:45:66:05:cf:72: 59:22:f2:4d:a0:45:df:a0:ad:a9:88:d5:8a:7b:59:50:c6:28: 34:81:64:e6:70:99:9c:45:3d:b6:8b:1a:97:d6:9d:3c:38:0d: ae:a4:10:14:32:b4:5b:6d:1f:a3:8f:2f:db:88:6f:0c:96:a5: 17:e1:c0:ec:99:b4:fe:3e:8d:18:d2:fa:b6:89:ef:d3:a0:1e: d5:d7:29:82:a5:fa:e0:d2:8b:2b:a6:dd:30:f8:8c:ca:6e:92: d9:a5:fd:88:12:ce:8c:4c:bb:77:d4:c5:7d:c1:f8:72:28:24: 99:b5:fd:0e:8e:3e:8b:6f:e4:a7:ef:28:04:b1:8f:25:43:86: 33:19:56:8c:fd:d1:50:df:45:79:dc:b6:8f:2c:b8:55:55:17: 07:bf:79:fa -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEksrn85Z5gE13/uiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDJjM2E2ZDAtMjcxZi00OGNkLTg0M2MtZWE1NWQ4ZTBhNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLmX70rZas1ZyRwVBEStTwRUnKRo3ilPDKcY xexndLdynfbOJTIJ1nA5jstxXPTRCJh/ndACgj0x695gzP8H8R8U/8o2A6pz7Otx qo8ULZwyW0OWFo41fj2vB2810wR37L/v00TJs3Yq3OXh0LDVUDVewPeSaKz6YKdi YPRuNMxnnw6DD928qAxcdc50tAuAK7CzoDphiK4MCCm3IoAtv0RzVoLEe9PydBMK sO0sSqQiiOY2P+6c+pFHCigX2L+FYoWyR+ULBAnKFZgqW8SVO45RcxQPYT61Iphm 6yO6P55y2LuD4i72oRkg4QQkfj8thG54t3edP7Dt1jaSOgnGzwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNoxWCW+TqgRM497qIadyvQ0CplEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYTA1ZWRjYjEtY2Q1My0z MzYxLTlhNGEtZjkyODEyYzUwMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OoMA0E AgACMAcDBQAmAvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBALi5ftHRvQMb9sWk+5BUzgzG3DNRmpv20csK oPx7p9F0UnQKxqaJojW84iJ8NkbHMVhLPzDXDJh1z9R72C0VL46vOrnbIJFW2CGP Z4CWAceWR2Z39wQM6UNanPEB4N/EvXlQPIMLZaVFZgXPclki8k2gRd+gramI1Yp7 WVDGKDSBZOZwmZxFPbaLGpfWnTw4Da6kEBQytFttH6OPL9uIbwyWpRfhwOyZtP4+ jRjS+raJ79OgHtXXKYKl+uDSiyum3TD4jMpuktml/YgSzoxMu3fUxX3B+HIoJJm1 /Q6OPotv5KfvKASxjyVDhjMZVoz90VDfRXncto8suFVVFwe/efo= -----END CERTIFICATE-----Generated at Tue Apr 29 21:42:26 2025 by rpki-client