$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa File: 3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa (raw, json) Hash identifier: ysp2dxjyEx8aLHe4XAsO59l/Vj28ldTesI2Bz2P7+/Y= Subject key identifier: 69:93:31:27:F5:20:6F:F0:20:29:87:4F:DD:F5:D5:3F:DF:92:BE:06 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F43285848DBD66D577E0FCA6093815200 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 398712 IP address blocks: 23.226.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:6d:57:7e:0f:ca:60:93:81:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=e14c251e-accb-4446-b5a6-686e12c09f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:25:3b:62:1d:94:9f:09:dc:a0:9a:0b:e0: a8:e8:d4:7c:5b:cf:bf:15:46:79:68:99:b9:d2:cf: fc:01:f5:e2:ee:08:7f:66:d1:4d:d8:5a:95:00:87: 16:7e:4d:56:27:ae:78:f8:05:d6:7f:4b:95:6a:d5: 02:40:e2:c8:54:a4:bb:4a:95:a0:b3:5b:4d:15:15: 9d:1b:9d:d1:6f:10:e2:86:55:e5:73:88:d7:dd:a6: 52:18:8a:4e:bf:03:2b:19:e3:8c:3f:36:31:c8:13: f5:2c:83:0a:80:c3:3e:8e:65:3e:29:65:5f:21:34: 51:03:de:ae:b7:11:46:2d:1b:a7:92:f6:de:1e:b9: f9:aa:95:7e:6e:ed:0e:11:a3:0c:9f:22:7e:89:00: 9c:b9:41:60:69:61:66:88:3f:9f:76:ad:48:56:28: 85:09:35:06:c0:92:02:6d:0d:d0:f9:1a:0e:20:5a: d0:cf:32:3d:73:85:86:66:73:38:54:c8:7a:09:dc: e2:5f:07:03:3a:a5:f5:0f:6b:ea:4d:d1:eb:1a:e7: 27:6e:88:15:42:66:15:51:1b:6b:bb:80:f1:8b:5b: 0d:48:a6:78:30:58:6b:27:2f:a1:82:c6:f9:17:9f: 52:8c:3b:24:76:e2:60:e9:4e:a0:8d:fa:5e:96:c2: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:93:31:27:F5:20:6F:F0:20:29:87:4F:DD:F5:D5:3F:DF:92:BE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a0:19:f6:a2:2c:49:f0:cf:65:8e:34:ad:7d:26:52:cc:e9: 70:2e:ed:07:0c:ac:ee:8b:2c:14:e4:de:f8:2e:3c:0f:5f:db: f0:b8:e3:39:ef:37:eb:f2:07:d1:be:0b:50:53:17:2b:fa:af: 27:93:28:3d:2e:85:98:ab:7d:1e:e3:55:58:f5:20:77:af:e7: 1c:0c:08:c1:ac:1e:f0:db:0b:de:1a:32:fd:cd:58:fb:15:e0: be:20:9c:62:80:1b:40:24:fd:0b:88:15:d3:a4:e1:ba:d4:23: 4b:ca:b5:6e:fb:04:eb:af:7c:39:cd:b6:0c:30:da:e7:66:0c: 8b:8f:b4:1a:e7:61:4c:cf:a5:cf:6a:ae:46:89:89:9a:95:88: 15:48:83:a1:c4:fe:a5:0e:1f:0f:eb:3d:16:af:1c:86:59:f9: 37:ef:07:aa:31:c8:5b:f0:15:21:c8:49:c7:0a:ae:18:f1:7f: 04:a5:ea:a0:2c:ac:5c:9d:2c:b5:cc:d5:64:34:bc:da:5b:65: f1:36:99:e1:d1:65:9b:21:9f:16:89:84:53:e5:6a:5a:44:c5: 15:65:a8:c4:bb:51:5c:b1:9b:11:88:b6:b3:69:82:09:d5:4f: 8d:61:b7:36:96:f9:a6:21:7c:5f:c8:b1:25:12:8e:c4:b6:20: 36:0c:82:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1m1Xfg/KYJOBUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk ZTE0YzI1MWUtYWNjYi00NDQ2LWI1YTYtNjg2ZTEyYzA5ZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMclO2IdlJ8J3KCaC+Co6NR8W8+/FUZ5aJm5 0s/8AfXi7gh/ZtFN2FqVAIcWfk1WJ654+AXWf0uVatUCQOLIVKS7SpWgs1tNFRWd G53RbxDihlXlc4jX3aZSGIpOvwMrGeOMPzYxyBP1LIMKgMM+jmU+KWVfITRRA96u txFGLRunkvbeHrn5qpV+bu0OEaMMnyJ+iQCcuUFgaWFmiD+fdq1IViiFCTUGwJIC bQ3Q+RoOIFrQzzI9c4WGZnM4VMh6CdziXwcDOqX1D2vqTdHrGucnbogVQmYVURtr u4Dxi1sNSKZ4MFhrJy+hgsb5F59SjDskduJg6U6gjfpelsK+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmTMSf1IG/wICmHT9311T/fkr4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvM2NlMDcxYTAtYjhkOC0z NzgwLWEzNDAtYjdkYTVlMmVlZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSgGfaiLEnwz2WONK19JlLM6XAu7QcMrO6LLBTk3vguPA9f2/C44znv N+vyB9G+C1BTFyv6ryeTKD0uhZirfR7jVVj1IHev5xwMCMGsHvDbC94aMv3NWPsV 4L4gnGKAG0Ak/QuIFdOk4brUI0vKtW77BOuvfDnNtgww2udmDIuPtBrnYUzPpc9q rkaJiZqViBVIg6HE/qUOHw/rPRavHIZZ+TfvB6oxyFvwFSHISccKrhjxfwSl6qAs rFydLLXM1WQ0vNpbZfE2meHRZZshnxaJhFPlalpExRVlqMS7UVyxmxGItrNpggnV T41htzaW+aYhfF/IsSUSjsS2IDYMgss= -----END CERTIFICATE-----Generated at Tue Apr 29 08:30:52 2025 by rpki-client