$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa File: 085d01ba-b69e-30ae-a421-c117de494284.roa (raw, json) Hash identifier: Axd2Zi53/SYg6jgoS3sRD4KDZYLdahlU7lDrD8tbf5g= Subject key identifier: A0:50:03:2D:15:72:7D:96:76:4A:76:27:BE:E5:34:1D:4C:BF:8E:DB Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F432858493C093DE98C902B5D193CC780 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 16823 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3d:e9:8c:90:2b:5d:19:3c:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=18e051df-8af8-4875-83d7-14ad1e26e312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:79:43:fb:df:09:b0:70:bd:ee:9a:ad:01: 2d:43:b5:85:a5:b8:7c:7a:6c:30:0e:c2:06:f5:7e: 72:1e:cc:e5:8a:fc:1b:2b:5d:52:b8:3c:94:68:89: fe:93:0c:e5:40:73:da:a9:44:19:49:89:c5:c3:00: 07:31:c1:e6:03:82:1f:ce:6c:df:a8:ea:cd:df:52: 7d:b1:e1:0a:79:aa:cc:ff:13:63:29:42:12:37:b5: c5:de:ac:45:57:0d:88:07:b7:c6:72:65:65:2a:cc: fe:d9:b2:3b:3c:ca:e5:a5:0f:4e:41:82:f0:e1:1b: d7:08:55:b0:28:e9:99:35:13:d1:b2:2f:eb:aa:e9: 60:85:c9:f0:4f:ca:33:db:db:ff:d2:08:9c:bf:65: f2:e9:48:92:a2:5e:3d:f7:2f:9c:2f:dc:dd:92:8e: 5c:bf:d8:92:64:6d:40:20:75:0c:54:01:a9:07:6b: 80:97:c6:a4:c9:14:c6:84:ac:9c:9c:2b:fb:1c:4d: c5:ac:53:a6:8f:2f:56:c5:3f:9a:14:95:bb:40:98: 06:dd:46:51:df:de:57:94:3b:80:c1:15:7f:24:6b: 45:16:0a:df:15:ea:25:40:8f:ff:a2:1e:44:5b:d6: bc:05:15:43:10:4e:69:3c:9d:12:4c:a8:33:44:cf: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:50:03:2D:15:72:7D:96:76:4A:76:27:BE:E5:34:1D:4C:BF:8E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c9:f4:bb:20:24:f3:b5:7e:03:08:75:85:df:5a:80:3a:12: 2c:e9:88:53:9f:96:ad:5e:ba:2a:af:a9:1e:d3:d2:f8:c2:be: e6:1c:dd:14:3f:c0:c3:0d:77:c8:7e:0c:1e:44:aa:7c:a4:96: 8e:73:33:61:43:00:49:b1:d7:b4:b8:05:d4:82:09:73:33:c5: 91:34:dc:96:84:f4:dd:02:ed:fd:51:0d:a9:ad:a5:63:d0:42: 2c:cd:c1:11:8e:78:c6:2c:eb:0b:59:4f:49:a6:f6:72:c6:c8: 40:4e:1c:08:e6:9a:b5:5f:a3:d3:de:e5:89:ff:5a:be:43:b9: 52:49:64:0f:5d:ea:da:b3:4b:64:40:60:08:f3:5d:22:15:07: e6:2c:64:ce:75:1c:4f:98:8f:d9:73:26:2b:74:bd:7c:d2:fe: 30:f0:36:12:d0:c1:81:d9:5f:8b:48:dd:54:be:92:02:fb:5b: 25:19:d2:40:fb:c3:50:2b:a1:40:bc:5d:a6:e5:29:63:71:4e: 43:db:a7:a3:df:c9:fc:93:3e:ac:70:11:63:b5:76:d5:82:0a: f2:14:61:4f:89:29:c6:16:bb:5a:36:49:ac:06:06:99:c3:9b: a5:63:6a:6a:79:2c:af:89:a5:e3:aa:4d:91:59:33:6e:25:58: c5:45:4e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CT3pjJArXRk8x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MThlMDUxZGYtOGFmOC00ODc1LTgzZDctMTRhZDFlMjZlMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlR5Q/vfCbBwve6arQEtQ7WFpbh8emwwDsIG 9X5yHszlivwbK11SuDyUaIn+kwzlQHPaqUQZSYnFwwAHMcHmA4IfzmzfqOrN31J9 seEKearM/xNjKUISN7XF3qxFVw2IB7fGcmVlKsz+2bI7PMrlpQ9OQYLw4RvXCFWw KOmZNRPRsi/rqulghcnwT8oz29v/0gicv2Xy6UiSol499y+cL9zdko5cv9iSZG1A IHUMVAGpB2uAl8akyRTGhKycnCv7HE3FrFOmjy9WxT+aFJW7QJgG3UZR395XlDuA wRV/JGtFFgrfFeolQI//oh5EW9a8BRVDEE5pPJ0STKgzRM+Z7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBQAy0Vcn2Wdkp2J77lNB1Mv47bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvMDg1ZDAxYmEtYjY5ZS0z MGFlLWE0MjEtYzExN2RlNDk0Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbJ9LsgJPO1fgMIdYXfWoA6EizpiFOflq1euiqvqR7T0vjCvuYc3RQ/ wMMNd8h+DB5Eqnyklo5zM2FDAEmx17S4BdSCCXMzxZE03JaE9N0C7f1RDamtpWPQ QizNwRGOeMYs6wtZT0mm9nLGyEBOHAjmmrVfo9Pe5Yn/Wr5DuVJJZA9d6tqzS2RA YAjzXSIVB+YsZM51HE+Yj9lzJit0vXzS/jDwNhLQwYHZX4tI3VS+kgL7WyUZ0kD7 w1AroUC8XablKWNxTkPbp6PfyfyTPqxwEWO1dtWCCvIUYU+JKcYWu1o2SawGBpnD m6Vjamp5LK+JpeOqTZFZM24lWMVFTqo= -----END CERTIFICATE-----Generated at Tue Apr 29 02:06:13 2025 by rpki-client