$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa File: bb02bbe3-126a-326c-b493-d6ffc832128e.roa (raw, json) Hash identifier: ImMOygMMxt8YPNBNLAvYU+HfTazuUZYmRwyqulnw71Y= Subject key identifier: D3:E6:66:DD:57:82:8A:E5:CF:D5:89:64:5E:01:DD:C3:FE:A2:8E:66 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEB664404A87AE3893B80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 134351 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:eb:66:44:04:a8:7a:e3:89:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=803bae68-0679-463e-b4e0-830abf9cb7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:79:3b:12:5c:4b:25:8e:e5:e0:d2:9a:25: 7d:14:a4:76:4e:b2:08:7f:a7:d4:6b:8a:0f:d4:6c: 4e:85:1c:c3:78:dd:a1:91:bb:8e:86:a9:5b:6f:2e: b4:6d:9d:56:10:e6:5d:f1:a4:cd:f8:31:2e:f2:31: 4c:55:b1:37:16:8d:6d:45:c8:06:ee:2c:c8:8c:3f: 10:bf:94:66:75:88:98:6d:6d:dd:df:59:c3:cf:62: 38:dd:81:4b:bd:af:42:dd:8f:e3:59:61:20:6b:01: cc:8f:b2:0f:c7:d7:06:67:81:9f:2b:f8:11:b4:c3: ce:b4:d2:6a:d5:45:3d:ce:7d:36:1f:b7:9b:79:5d: 71:ed:df:01:33:4f:e8:21:1e:66:2c:f7:3b:0f:f4: 8e:1a:e4:cd:fa:52:8a:a6:bf:85:b9:ae:e1:9a:81: 6f:c0:ab:e1:00:b1:e8:51:d1:e5:d5:e7:e2:ba:d1: dd:10:2c:d9:5c:a7:9e:98:68:c8:15:64:98:a6:b1: 01:34:b8:46:11:0e:ef:19:ec:5e:29:81:d6:58:88: e0:b3:6c:f9:a5:d1:b7:e5:b5:87:f1:ba:01:c7:74: b6:78:bb:75:22:cd:2a:16:2a:1e:5c:99:8f:9e:85: 80:e2:ef:cb:61:11:db:5d:71:99:e4:bb:6e:b1:ec: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E6:66:DD:57:82:8A:E5:CF:D5:89:64:5E:01:DD:C3:FE:A2:8E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:05:ac:f3:2b:83:d7:e2:b1:81:60:08:92:68:35:f2:86:0e: 6d:d8:98:97:1f:8e:63:3b:ac:0e:de:1d:86:60:38:13:53:a0: de:4e:e4:00:ec:67:a6:89:51:3f:17:27:51:85:4e:66:78:49: 97:77:6d:13:97:0f:0b:e6:46:ab:93:1f:8b:b7:2f:6b:9a:09: ed:42:1d:f5:cd:20:c3:a7:8c:4b:82:9f:04:f9:50:fc:38:c2: e8:b3:d9:d3:b6:bc:d4:e9:a3:2e:f9:2f:81:26:40:01:55:9f: ec:fa:6a:40:8e:48:d4:23:df:37:70:b4:fe:c7:71:d5:d4:d6: 8e:69:78:a4:66:ea:e5:fb:63:8f:39:47:9c:dc:57:92:f0:15: 0e:67:61:67:07:f4:73:37:b4:22:45:fc:fd:61:a4:eb:22:50: b7:9b:62:cd:c3:d6:16:04:ef:1f:41:38:38:8f:32:bb:04:4c: cf:0b:07:9b:4c:9d:b8:99:6b:f4:60:e5:c3:4b:e1:bd:77:57: 15:ea:da:0c:18:d8:80:7e:97:d8:cd:fa:84:ef:eb:17:74:95: 9f:b1:aa:a8:67:af:93:84:a2:2f:fe:74:f6:60:d2:2d:ca:a0: f6:62:6f:e7:ec:ab:ff:74:dc:a3:d9:fe:1c:e4:45:74:5e:15: 98:98:57:58 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEj2W+tmRASoeuOJO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODAzYmFlNjgtMDY3OS00NjNlLWI0ZTAtODMwYWJmOWNiN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8V5OxJcSyWO5eDSmiV9FKR2TrIIf6fUa4oP 1GxOhRzDeN2hkbuOhqlbby60bZ1WEOZd8aTN+DEu8jFMVbE3Fo1tRcgG7izIjD8Q v5RmdYiYbW3d31nDz2I43YFLva9C3Y/jWWEgawHMj7IPx9cGZ4GfK/gRtMPOtNJq 1UU9zn02H7ebeV1x7d8BM0/oIR5mLPc7D/SOGuTN+lKKpr+Fua7hmoFvwKvhALHo UdHl1efiutHdECzZXKeemGjIFWSYprEBNLhGEQ7vGexeKYHWWIjgs2z5pdG35bWH 8boBx3S2eLt1Is0qFioeXJmPnoWA4u/LYRHbXXGZ5LtusewKtQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNPmZt1Xgorlz9WJZF4B3cP+oo5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmIwMmJiZTMtMTI2YS0z MjZjLWI0OTMtZDZmZmM4MzIxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZgWs8yuD1+KxgWAIkmg18oYObdiYlx+O YzusDt4dhmA4E1Og3k7kAOxnpolRPxcnUYVOZnhJl3dtE5cPC+ZGq5Mfi7cva5oJ 7UId9c0gw6eMS4KfBPlQ/DjC6LPZ07a81OmjLvkvgSZAAVWf7PpqQI5I1CPfN3C0 /sdx1dTWjml4pGbq5ftjjzlHnNxXkvAVDmdhZwf0cze0IkX8/WGk6yJQt5tizcPW FgTvH0E4OI8yuwRMzwsHm0yduJlr9GDlw0vhvXdXFeraDBjYgH6X2M36hO/rF3SV n7GqqGevk4SiL/509mDSLcqg9mJv5+yr/3Tco9n+HORFdF4VmJhXWA== -----END CERTIFICATE-----Generated at Mon Apr 28 18:40:10 2025 by rpki-client