$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa File: 38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa (raw, json) Hash identifier: DShP6HgXfOf/YkrNNarV6xGyAF3xkU0N0N9uXrjrIo4= Subject key identifier: E6:A0:FE:34:7E:D7:2D:B7:E7:2E:13:2F:05:26:41:D4:A7:00:74:3E Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Certificate serial: 010D0C9F4328584909E6964718BBB7B1CC583CA0 Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 63008 IP address blocks: 23.169.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:96:47:18:bb:b7:b1:cc:58:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=2580801d-78ff-43f9-9f66-eb420b1f1426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:92:dc:d3:6a:e6:14:6e:c5:e4:30:58:0d: 7d:82:de:56:c5:34:05:31:a5:ca:d2:40:13:99:4b: e5:ff:f5:5f:25:11:38:09:96:61:99:a9:dc:d6:3f: e5:7c:2a:a2:56:e9:b4:8e:69:a1:91:25:1c:4e:98: b8:a7:7f:76:2a:3e:8c:a5:72:48:9e:9b:a3:ed:06: a3:4e:03:0d:de:a0:23:87:ad:cf:30:a2:4f:f2:2e: c2:2f:30:e8:69:90:66:2d:3b:38:a1:56:09:f7:55: 45:d0:2f:fd:09:d0:3f:f9:9b:36:99:d2:8d:08:7c: 84:ac:6f:ad:13:6b:19:ff:2e:da:d6:11:10:fc:2a: f8:dd:e9:38:38:10:da:b1:08:fb:08:a3:13:96:9f: 66:b9:06:48:17:e4:a0:44:44:80:80:4c:ef:e2:f9: d6:23:2f:ad:ad:64:61:ef:73:9d:d1:cd:82:c8:0a: c0:a3:98:a7:a7:6a:ba:ed:0b:76:3c:3c:f5:80:f5: c7:46:80:c4:43:61:be:69:ed:15:0d:43:f9:c0:e2: 65:60:65:e6:78:e5:e5:d6:cb:32:d6:00:66:57:80: ad:30:87:90:bd:4b:e2:b2:1b:ab:1a:2e:1d:37:59: bd:9c:95:2f:f5:69:5f:6c:7f:27:26:3f:3d:a5:e3: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A0:FE:34:7E:D7:2D:B7:E7:2E:13:2F:05:26:41:D4:A7:00:74:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl X509v3 Authority Key Identifier: keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fe:52:d7:e0:8b:1f:cc:5f:8a:7b:a4:18:9d:2e:2b:3d:b2: 31:db:74:3b:6d:fd:40:48:72:00:02:55:3e:70:a8:59:ee:23: 6e:10:3d:f9:d8:48:c6:16:0c:ea:19:82:b4:99:18:6f:f4:b4: fa:96:3a:46:f0:9e:4f:4f:1f:90:27:53:02:17:c5:44:78:08: f0:e7:b3:c2:e1:f4:22:b7:cb:52:96:59:1e:6e:27:73:ed:ee: 7c:ec:d4:1d:55:db:b1:ff:b3:e6:f0:b1:cd:c6:e0:4d:39:9c: d3:da:ac:37:27:8f:a1:c6:ed:6d:18:c5:53:94:81:88:b1:77: 1b:a0:38:46:b0:d6:64:45:43:1a:6a:3e:99:94:77:f1:52:05: 00:ae:10:c7:e8:3f:27:50:e6:d2:28:4f:e1:86:d6:79:fe:b0: 9d:b6:72:1a:d4:b9:48:6a:a9:4e:b4:e2:d6:5c:ac:10:fb:6b: f8:00:62:9b:a2:d6:80:c9:56:63:38:c9:fb:ea:ca:22:14:f1: dd:40:6a:16:12:27:ad:c0:08:47:4d:98:36:82:9e:77:df:6e: f9:14:46:9a:20:bb:22:58:7d:f1:bf:b8:87:3e:c7:c0:9e:d1: e5:57:72:c6:5a:07:88:f6:b9:3e:c4:d1:96:2f:90:1e:8f:89: 03:29:cf:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pZHGLu3scxYPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi MWEyMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MjU4MDgwMWQtNzhmZi00M2Y5LTlmNjYtZWI0MjBiMWYxNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18aS3NNq5hRuxeQwWA19gt5WxTQFMaXK0kAT mUvl//VfJRE4CZZhmanc1j/lfCqiVum0jmmhkSUcTpi4p392Kj6MpXJInpuj7Qaj TgMN3qAjh63PMKJP8i7CLzDoaZBmLTs4oVYJ91VF0C/9CdA/+Zs2mdKNCHyErG+t E2sZ/y7a1hEQ/Cr43ek4OBDasQj7CKMTlp9muQZIF+SgRESAgEzv4vnWIy+trWRh 73Od0c2CyArAo5inp2q67Qt2PDz1gPXHRoDEQ2G+ae0VDUP5wOJlYGXmeOXl1ssy 1gBmV4CtMIeQvUvishurGi4dN1m9nJUv9WlfbH8nJj89peP4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOag/jR+1y235y4TLwUmQdSnAHQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvMzhjZTVlOWYtMDEzNi0z YzJlLWEzMDEtYjNmMjkxMjZmNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk MTBiYmIxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6mpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH+Utfgix/MX4p7pBidLis9sjHbdDtt/UBIcgACVT5wqFnuI24QPfnY SMYWDOoZgrSZGG/0tPqWOkbwnk9PH5AnUwIXxUR4CPDns8Lh9CK3y1KWWR5uJ3Pt 7nzs1B1V27H/s+bwsc3G4E05nNParDcnj6HG7W0YxVOUgYixdxugOEaw1mRFQxpq PpmUd/FSBQCuEMfoPydQ5tIoT+GG1nn+sJ22chrUuUhqqU604tZcrBD7a/gAYpui 1oDJVmM4yfvqyiIU8d1AahYSJ63ACEdNmDaCnnffbvkURpoguyJYffG/uIc+x8Ce 0eVXcsZaB4j2uT7E0ZYvkB6PiQMpz7U= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:45 2025 by rpki-client