$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa File: a49b889f-76a4-3203-9129-fe4a745eeb7c.roa (raw, json) Hash identifier: OglWWO/039nwFmSB9T0r+N5c5y5bnbaJ3OLtnZua7Qg= Subject key identifier: D3:29:4B:90:9C:7D:43:B8:6C:8C:7E:20:BE:6A:C7:ED:13:53:02:6E Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F432858493C093E38ACDFF3AB3D565C80 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 19905 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3e:38:ac:df:f3:ab:3d:56:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=2c3abe43-73b3-4016-a901-bf2c15b04a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:a5:c1:a8:69:7e:0b:ea:cb:f0:12:9e:01: 12:e5:bd:7a:0a:c4:5d:1e:ee:10:1c:b0:54:9a:a5: aa:c4:3f:6b:83:b1:07:d8:40:4f:11:f2:f2:d0:46: 6c:fd:4b:2d:46:5c:bc:be:c6:aa:ed:38:52:13:fc: 70:a0:74:87:5a:2a:23:82:0b:70:59:7d:17:02:7c: b0:63:64:97:8d:50:7c:4d:dd:c3:75:32:8e:2f:04: d6:d6:00:ed:37:b5:10:83:88:48:81:3c:e3:42:29: 63:a6:47:16:cb:cd:02:69:e3:a5:f1:eb:01:2b:4c: 7b:ba:66:e2:4d:2a:1b:7a:4d:66:e6:69:3b:f3:95: fe:23:46:84:9d:e7:93:21:73:13:6f:3d:15:c7:65: df:36:2c:88:87:e8:ea:7b:38:15:63:9f:79:24:4e: 02:e9:43:ce:bd:e1:ff:f0:11:09:f4:e7:4e:1d:f9: 2b:f6:33:dc:83:a8:30:40:ce:a6:14:83:c0:06:34: 57:7f:85:1d:02:45:5b:d5:e0:e5:14:33:3a:42:73: b2:7b:4d:c3:d3:87:59:78:1e:d0:d7:93:6a:2c:3c: 98:63:b1:e8:2f:00:dd:0b:82:3c:79:ac:71:d3:b4: 55:73:13:99:cc:6e:ec:5f:c9:99:27:68:13:46:d1: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:29:4B:90:9C:7D:43:B8:6C:8C:7E:20:BE:6A:C7:ED:13:53:02:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1f:8b:06:9f:7f:3f:fc:e3:80:4c:3d:46:74:7d:65:3d:25: 9a:c0:4b:61:2e:34:19:fb:c9:ee:bb:25:b7:0f:89:39:98:aa: 6c:48:1a:23:af:a3:f0:cc:ca:c5:82:94:6d:69:7c:c5:8a:c7: 6e:a0:62:02:7f:d8:22:d4:97:67:4c:11:9a:39:73:c3:c2:8a: b4:3f:80:43:b2:e3:d0:7a:82:3d:c7:a5:1f:f8:6c:f6:51:df: 0f:d1:a2:bf:c9:30:8c:f2:c7:d1:f4:8c:7a:8e:c0:ee:0b:15: 2e:4a:32:46:d9:2f:e3:bb:74:fc:62:db:99:e1:cf:76:24:f1: bb:70:8f:82:53:2a:4e:0f:f5:53:8a:79:9e:d9:34:a4:90:81: 21:44:64:7a:05:b6:e3:5f:a4:ba:d4:9e:6f:77:44:8f:e8:97: a7:43:69:b3:47:a5:d0:21:2b:99:bf:c5:aa:46:8b:16:15:60: c9:50:46:71:02:dc:14:64:56:82:51:7d:55:fc:c5:cc:91:f7: ef:11:35:81:07:b9:69:15:64:3c:35:29:72:a8:52:9e:ac:4c: 9a:37:c6:4d:fa:5b:06:ff:e9:88:8d:7c:63:d6:ab:64:10:4a: 5d:d9:3e:8a:91:e0:58:05:25:66:d9:1b:9c:99:a7:bc:be:12: b8:b1:7a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CT44rN/zqz1WXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MmMzYWJlNDMtNzNiMy00MDE2LWE5MDEtYmYyYzE1YjA0YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBWlwahpfgvqy/ASngES5b16CsRdHu4QHLBU mqWqxD9rg7EH2EBPEfLy0EZs/UstRly8vsaq7ThSE/xwoHSHWiojggtwWX0XAnyw Y2SXjVB8Td3DdTKOLwTW1gDtN7UQg4hIgTzjQiljpkcWy80CaeOl8esBK0x7umbi TSobek1m5mk785X+I0aEneeTIXMTbz0Vx2XfNiyIh+jqezgVY595JE4C6UPOveH/ 8BEJ9OdOHfkr9jPcg6gwQM6mFIPABjRXf4UdAkVb1eDlFDM6QnOye03D04dZeB7Q 15NqLDyYY7HoLwDdC4I8eaxx07RVcxOZzG7sX8mZJ2gTRtEH6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMpS5CcfUO4bIx+IL5qx+0TUwJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvYTQ5Yjg4OWYtNzZhNC0z MjAzLTkxMjktZmU0YTc0NWVlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0fiwaffz/844BMPUZ0fWU9JZrAS2EuNBn7ye67JbcPiTmYqmxIGiOv o/DMysWClG1pfMWKx26gYgJ/2CLUl2dMEZo5c8PCirQ/gEOy49B6gj3HpR/4bPZR 3w/Ror/JMIzyx9H0jHqOwO4LFS5KMkbZL+O7dPxi25nhz3Yk8btwj4JTKk4P9VOK eZ7ZNKSQgSFEZHoFtuNfpLrUnm93RI/ol6dDabNHpdAhK5m/xapGixYVYMlQRnEC 3BRkVoJRfVX8xcyR9+8RNYEHuWkVZDw1KXKoUp6sTJo3xk36Wwb/6YiNfGPWq2QQ Sl3ZPoqR4FgFJWbZG5yZp7y+ErixeiY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:52 2025 by rpki-client