$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa File: a917fca9-ce27-3640-9fa5-0743e75ecab6.roa (raw, json) Hash identifier: fzcYhufbPaPiLqCWxecljDcDKfiGleKMLevm8BijsdI= Subject key identifier: C8:A0:A9:1F:1E:08:08:AF:64:63:05:67:8F:7E:7B:15:5B:F6:45:85 Certificate issuer: /CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Certificate serial: 010D0C9F4328584981D450B880940A73C9244840 Authority key identifier: AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 395163 IP address blocks: 23.150.192.0/24 maxlen: 24 2604:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:50:b8:80:94:0a:73:c9:24:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=1e837dcd-e0f4-4daa-939a-dd58e71111b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:b9:c7:85:05:de:e7:d6:bf:32:e0:ac:a5: 15:05:e1:73:62:4e:d0:18:9e:17:8e:aa:e0:83:72: ba:d6:c8:1a:f9:9d:c7:ef:24:5a:83:c6:ea:0c:29: 31:9d:bf:24:02:61:05:1c:4d:35:b7:40:71:d7:3a: d4:4d:8a:eb:1c:35:cc:94:20:13:32:e8:93:4b:25: d1:cf:53:47:fe:02:37:b4:08:f3:75:24:a9:27:35: df:ce:12:ed:64:ba:15:9a:3f:78:38:41:b5:2c:75: 7f:27:a2:6f:d7:12:7f:cd:81:55:01:25:31:ff:95: 7d:2c:ee:71:73:18:3e:e2:15:a9:22:7d:6b:d3:67: 6a:75:0f:64:e4:1a:4b:92:15:0b:8d:d1:8d:5e:f2: 9f:dd:c1:c2:b1:cb:81:4d:12:b5:c1:03:c5:44:80: af:22:9d:95:34:55:42:12:45:b0:b2:6f:43:cd:ee: 56:cc:17:7b:f9:a6:0f:20:39:52:06:db:36:c9:f3: e3:e7:e2:64:60:e6:99:4f:36:28:e5:51:81:69:c9: c5:cf:37:f8:5d:de:1c:c0:1b:48:d4:30:55:4c:42: 4f:c7:5b:4d:13:11:4c:a3:ee:0f:eb:45:5c:2c:bf: 6e:54:e3:f0:df:73:d9:b8:15:db:81:b2:51:2d:97: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:A9:1F:1E:08:08:AF:64:63:05:67:8F:7E:7B:15:5B:F6:45:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl X509v3 Authority Key Identifier: keyid:AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer sbgp-ipAddrBlock: critical IPv4: 23.150.192.0/24 IPv6: 2604:70c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6d:e9:dd:37:75:6a:eb:17:84:88:ff:98:42:3e:e1:43:12: 7e:39:54:9e:cb:e5:44:b4:15:a0:82:15:d8:08:88:a9:d9:df: 7a:71:57:39:87:a8:ef:b2:a2:f2:e5:15:b7:33:92:57:63:93: bb:df:0f:a6:92:d9:5a:bc:b9:b6:fa:ff:21:97:e2:df:48:be: 33:77:aa:c5:37:e9:93:ad:3d:7c:30:83:e2:16:e0:4c:8d:46: 39:d7:a2:63:0e:43:08:48:d3:73:86:11:c5:52:a3:e6:1a:56: 74:d9:a5:4e:16:15:0e:3e:bd:b6:5b:d2:9d:a4:7b:9f:11:2b: da:13:38:c4:2a:94:fc:ce:99:9b:56:9f:57:e1:70:db:66:3c: 16:b7:1e:b7:cb:76:44:40:89:87:96:a5:29:62:28:58:f0:e2: a3:db:fe:41:a4:a7:26:16:a8:57:51:af:0a:92:04:46:74:de: 3e:3e:54:e3:83:19:57:1a:89:c9:73:ed:2d:65:12:18:b1:46: 4a:69:35:8f:35:5c:91:17:6a:9f:46:2c:76:38:70:3c:50:59: c0:24:0d:b5:a1:5c:5f:63:6f:4a:12:c5:34:e9:e7:1d:17:30: 95:32:ba:82:aa:a5:e8:64:3b:06:e2:bd:95:b8:aa:d4:6a:d8: b1:02:33:d3 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEmB1FC4gJQKc8kkSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjZWM3N2ItM2Q1YS00ODk2LWI5ZWQtYjViNDdiMWJi YWRiMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk MWU4MzdkY2QtZTBmNC00ZGFhLTkzOWEtZGQ1OGU3MTExMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq25x4UF3ufWvzLgrKUVBeFzYk7QGJ4Xjqrg g3K61sga+Z3H7yRag8bqDCkxnb8kAmEFHE01t0Bx1zrUTYrrHDXMlCATMuiTSyXR z1NH/gI3tAjzdSSpJzXfzhLtZLoVmj94OEG1LHV/J6Jv1xJ/zYFVASUx/5V9LO5x cxg+4hWpIn1r02dqdQ9k5BpLkhULjdGNXvKf3cHCscuBTRK1wQPFRICvIp2VNFVC EkWwsm9Dze5WzBd7+aYPIDlSBts2yfPj5+JkYOaZTzYo5VGBacnFzzf4Xd4cwBtI 1DBVTEJPx1tNExFMo+4P60VcLL9uVOPw33PZuBXbgbJRLZeqnwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMigqR8eCAivZGMFZ49+exVb9kWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmNl Yzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0N2IxYmJhZGIvYTkxN2ZjYTktY2UyNy0z NjQwLTlmYTUtMDc0M2U3NWVjYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjZWM3N2ItM2Q1YS00ODk2LWI5 ZWQtYjViNDdiMWJiYWRiL2FmY2VjNzdiLTNkNWEtNDg5Ni1iOWVkLWI1YjQ3YjFi YmFkYi5jcmwwHwYDVR0jBBgwFoAUr1xSMdWXONfwyewybIHwh/P+XfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmNlYzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0 N2IxYmJhZGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5bAMA0E AgACMAcDBQAmBHDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHdt6d03dWrrF4SI/5hCPuFDEn45VJ7L5US0 FaCCFdgIiKnZ33pxVzmHqO+yovLlFbczkldjk7vfD6aS2Vq8ubb6/yGX4t9IvjN3 qsU36ZOtPXwwg+IW4EyNRjnXomMOQwhI03OGEcVSo+YaVnTZpU4WFQ4+vbZb0p2k e58RK9oTOMQqlPzOmZtWn1fhcNtmPBa3HrfLdkRAiYeWpSliKFjw4qPb/kGkpyYW qFdRrwqSBEZ03j4+VOODGVcaiclz7S1lEhixRkppNY81XJEXap9GLHY4cDxQWcAk DbWhXF9jb0oSxTTp5x0XMJUyuoKqpehkOwbivZW4qtRq2LECM9M= -----END CERTIFICATE-----Generated at Wed Apr 30 05:34:29 2025 by rpki-client