$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json) Hash identifier: SftXbNgEXfQ/GN5dULOgQhsSGq8Tlf2ifwcqDHDRuww= Subject key identifier: 1C:0E:E8:BA:AA:DC:4F:E6:21:93:32:B6:F3:3B:E7:F8:72:72:61:16 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584908817B19ABCFE344B1BED480 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 396500 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7b:19:ab:cf:e3:44:b1:be:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=fe6351aa-1768-49d4-a5d4-aa0c5bec442b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:41:5a:d5:2c:3e:5b:22:f4:1d:25:38:54: e8:7a:7d:80:62:d0:c8:4f:91:81:a5:30:01:10:dc: 0b:6e:e4:87:81:7b:c9:72:93:b4:8b:e4:c1:85:65: 9a:cb:d1:73:98:02:dc:fb:a4:84:24:12:cb:7c:7e: 3f:f0:e4:3d:8a:cc:53:f9:2d:f0:17:96:e6:8e:4f: 3b:31:4a:83:f9:4a:e8:91:93:c3:ac:0f:b5:68:50: 94:65:b4:2c:a7:df:e0:77:1f:a4:96:14:4f:38:56: 20:d0:1c:30:95:82:a8:81:17:99:2f:90:f2:02:25: 78:43:e7:fb:62:d0:9d:df:f3:9c:bb:a1:32:fa:51: 09:f2:e4:22:b4:26:33:e1:7d:e4:3c:21:7c:d9:3b: a3:88:c8:58:2c:08:02:74:cf:91:b5:04:5e:74:37: d0:db:3e:fb:0c:b2:1c:d6:3a:43:e1:3c:5d:dc:7e: 54:77:ce:36:78:60:3c:c5:59:b8:1f:58:b9:75:9b: 5f:4d:5d:b4:43:93:fe:57:ef:c2:0e:05:41:eb:ee: 77:3e:ae:e3:99:d7:e9:d7:37:67:46:29:8e:70:9e: e4:ae:ab:98:39:11:b2:84:94:2a:30:b6:51:71:a2: 59:90:f7:71:15:c8:d6:7c:c0:00:8f:77:48:27:a8: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0E:E8:BA:AA:DC:4F:E6:21:93:32:B6:F3:3B:E7:F8:72:72:61:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:87:0d:ca:ab:91:a8:b1:aa:a5:c4:c2:80:c2:07:36:b4:f1: e8:20:86:20:f9:4f:b4:ca:f9:5f:09:db:61:f3:24:5a:23:42: 1e:7f:18:33:fc:0a:ac:3a:be:70:5f:8a:b5:15:e3:29:3a:9b: 56:6b:d0:26:b6:58:e7:b3:c9:64:d4:44:fa:02:9e:5e:25:64: 0f:0d:44:04:a2:56:ed:5a:64:e4:50:a0:60:85:80:b5:a9:3c: 82:6d:ef:ec:ae:20:d2:1f:ab:21:93:fb:28:64:50:33:d5:7c: b8:3f:73:b8:b0:08:fe:b4:67:c0:89:93:d1:ee:15:2e:87:0f: 5f:87:9f:32:fc:6f:8b:cd:f1:2c:5a:cc:99:03:f0:08:32:f5: 16:14:24:43:3c:ba:3c:e6:32:7a:f2:23:72:c3:7e:93:8a:ca: 20:f0:8c:ad:89:97:81:da:63:cf:57:5d:00:3f:0f:57:c3:0d: 0f:ea:7c:ef:96:d9:16:c4:76:b6:30:a8:2a:ee:07:6b:dc:83: c8:61:53:c1:fe:cb:1f:15:d7:95:92:c2:ac:39:37:fd:15:ca: 07:ef:0e:fa:14:76:fb:37:c1:9b:b1:3f:61:a7:50:cd:61:d6: c2:95:99:e9:5b:67:c1:10:15:03:42:69:1d:f7:09:49:eb:bf: fe:dc:0a:82 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkIgXsZq8/jRLG+1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmU2MzUxYWEtMTc2OC00OWQ0LWE1ZDQtYWEwYzViZWM0NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdhBWtUsPlsi9B0lOFToen2AYtDIT5GBpTAB ENwLbuSHgXvJcpO0i+TBhWWay9FzmALc+6SEJBLLfH4/8OQ9isxT+S3wF5bmjk87 MUqD+UrokZPDrA+1aFCUZbQsp9/gdx+klhRPOFYg0BwwlYKogReZL5DyAiV4Q+f7 YtCd3/Ocu6Ey+lEJ8uQitCYz4X3kPCF82TujiMhYLAgCdM+RtQRedDfQ2z77DLIc 1jpD4Txd3H5Ud842eGA8xVm4H1i5dZtfTV20Q5P+V+/CDgVB6+53Pq7jmdfp1zdn RimOcJ7krquYORGyhJQqMLZRcaJZkPdxFcjWfMAAj3dIJ6iDYQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBwO6Lqq3E/mIZMytvM75/hycmEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvYTk4MWMxMTEtMzM0MS0z ZjczLTg1ZWMtM2U5ZjViOGQyNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBhw3Kq5GosaqlxMKAwgc2tPHoIIYg+U+0 yvlfCdth8yRaI0Iefxgz/AqsOr5wX4q1FeMpOptWa9Amtljns8lk1ET6Ap5eJWQP DUQEolbtWmTkUKBghYC1qTyCbe/sriDSH6shk/soZFAz1Xy4P3O4sAj+tGfAiZPR 7hUuhw9fh58y/G+LzfEsWsyZA/AIMvUWFCRDPLo85jJ68iNyw36Tisog8IytiZeB 2mPPV10APw9Xww0P6nzvltkWxHa2MKgq7gdr3IPIYVPB/ssfFdeVksKsOTf9FcoH 7w76FHb7N8GbsT9hp1DNYdbClZnpW2fBEBUDQmkd9wlJ67/+3AqC -----END CERTIFICATE-----Generated at Sun May 11 06:21:49 2025 by rpki-client