$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa File: 3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json) Hash identifier: pwzyEOXm1Q9MOTABm6JRi+c2kqspzgqh9mfwZu1ilzw= Subject key identifier: 10:AD:73:BF:3F:63:53:89:DE:D0:90:FA:2F:6A:B0:76:03:C9:70:68 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEC3A375714B655983380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 59253 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ec:3a:37:57:14:b6:55:98:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=36983ee4-62d9-4e0c-a8ec-8be6ee1cae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:49:44:0f:93:06:2e:d8:b1:57:0c:43:5f: 9b:bb:3c:6d:6f:0f:60:5b:65:0e:12:c2:08:d9:35: ea:b5:cd:30:c4:3a:87:83:21:0f:eb:ac:60:c6:ee: 0b:d3:a2:8b:9f:3d:07:a6:b5:fe:da:85:44:4c:42: ff:d4:a1:75:c4:65:6e:ea:13:b1:ad:ad:29:78:fc: bc:39:fa:c9:e8:b0:a1:4e:39:75:a3:2a:2f:38:17: 48:40:9d:98:3b:8c:24:b5:88:6d:1e:e6:b7:c2:a3: 98:2b:3f:52:b2:3f:b8:d7:d8:bb:55:49:90:4e:2f: fb:7f:42:1c:e7:33:67:ee:f4:d0:4e:36:65:84:e6: 0f:90:e4:be:d9:5a:29:a6:2c:db:f3:82:cc:17:e3: a7:98:9c:17:1e:a0:5d:b0:4a:18:fc:18:95:47:8b: 11:0b:e9:10:f0:e3:97:3d:6d:33:ae:a3:4c:f8:0e: dd:0e:fc:6c:7f:b1:33:ac:7c:f8:01:98:78:1a:ae: a2:f2:b2:db:91:1a:63:d2:cc:4e:82:9d:e4:c5:88: 9b:04:c0:8c:67:d3:40:9a:35:26:53:d3:4a:ba:d9: 91:92:50:91:4c:5f:2f:92:08:58:38:e8:1d:fd:e8: 0e:4f:ab:cb:91:89:1b:52:e5:4c:a8:c7:81:65:96: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:73:BF:3F:63:53:89:DE:D0:90:FA:2F:6A:B0:76:03:C9:70:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0b:86:6c:2f:fc:55:48:90:19:ea:7c:16:83:52:3a:48:19: 70:81:7f:b8:4d:0b:44:9d:e9:ed:fa:e7:38:18:db:06:1c:23: 1b:3d:a5:4b:3e:0e:1c:7f:b8:e4:e0:18:0c:27:b6:a0:72:38: bc:2f:85:cc:ee:88:df:9d:32:9a:f8:55:1b:57:d2:c4:fa:17: fe:60:2c:ef:d3:63:ae:50:59:d6:0a:8c:50:c7:cf:75:45:23: 4e:3d:14:31:12:cb:6e:d3:cf:0e:47:98:3d:50:64:f7:bf:c5: e8:78:23:34:b6:65:79:5b:db:a3:af:d7:9f:94:c4:f3:a8:68: c1:33:40:44:c9:c9:33:f9:81:83:fc:4e:30:9d:71:87:61:50: c3:46:a7:bb:94:2d:a4:38:5b:0c:e8:4d:48:b8:0b:d4:39:2f: c3:58:36:53:c6:04:3f:fb:7d:27:82:2f:65:83:4f:14:85:a6: 60:ba:9d:11:86:bd:2e:af:d2:86:67:38:2e:88:c1:cc:1d:99: 48:02:c5:84:15:71:55:af:07:76:ea:78:fa:d7:5f:c8:a2:4b: 2c:c7:4a:0e:54:33:31:d3:74:26:fb:6f:47:3a:56:2d:f3:38: f8:74:81:14:b2:c2:ce:a1:78:fa:34:22:42:80:f4:9d:f5:3a: 25:60:df:c5 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+w6N1cUtlWYM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MzY5ODNlZTQtNjJkOS00ZTBjLWE4ZWMtOGJlNmVlMWNhZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+BJRA+TBi7YsVcMQ1+buzxtbw9gW2UOEsII 2TXqtc0wxDqHgyEP66xgxu4L06KLnz0HprX+2oVETEL/1KF1xGVu6hOxra0pePy8 OfrJ6LChTjl1oyovOBdIQJ2YO4wktYhtHua3wqOYKz9Ssj+419i7VUmQTi/7f0Ic 5zNn7vTQTjZlhOYPkOS+2Voppizb84LMF+OnmJwXHqBdsEoY/BiVR4sRC+kQ8OOX PW0zrqNM+A7dDvxsf7EzrHz4AZh4Gq6i8rLbkRpj0sxOgp3kxYibBMCMZ9NAmjUm U9NKutmRklCRTF8vkghYOOgd/egOT6vLkYkbUuVMqMeBZZYbZwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBCtc78/Y1OJ3tCQ+i9qsHYDyXBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2E2MDM0ODUtODExOS0z YmI0LTk0NDktNGViNDQ3ZjU1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUguGbC/8VUiQGep8FoNSOkgZcIF/uE0L RJ3p7frnOBjbBhwjGz2lSz4OHH+45OAYDCe2oHI4vC+FzO6I350ymvhVG1fSxPoX /mAs79NjrlBZ1gqMUMfPdUUjTj0UMRLLbtPPDkeYPVBk97/F6HgjNLZleVvbo6/X n5TE86howTNARMnJM/mBg/xOMJ1xh2FQw0anu5QtpDhbDOhNSLgL1Dkvw1g2U8YE P/t9J4IvZYNPFIWmYLqdEYa9Lq/Shmc4LojBzB2ZSALFhBVxVa8Hdup4+tdfyKJL LMdKDlQzMdN0JvtvRzpWLfM4+HSBFLLCzqF4+jQiQoD0nfU6JWDfxQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:02 2025 by rpki-client