$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa File: a4248d18-50bd-3de2-869d-110232135253.roa (raw, json) Hash identifier: gpx++H/C7m4j0TADqbHWDeplsH2u6xNUWA3LE5q1Xl0= Subject key identifier: 03:08:62:49:AB:4B:40:AF:94:91:98:AA:DB:6D:37:3F:42:09:DF:B4 Certificate issuer: /CN=bfe6b5ce-b18b-4608-80c9-5651cde85219 Certificate serial: 010D0C9F43285848FD56C48806A3BA41816E3880 Authority key identifier: E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 396100 IP address blocks: 23.164.168.0/24 maxlen: 24 141.193.0.0/23 maxlen: 24 2607:7540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c4:88:06:a3:ba:41:81:6e:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=298fa954-290d-45cb-b484-c1b5b2a309f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:99:54:80:c0:cc:e8:c2:62:27:f1:13:fa: 7a:9a:da:39:83:27:89:bc:fe:cb:58:e1:e2:93:db: 59:6e:5e:ed:e9:2b:f1:dc:be:2d:83:c2:fd:b8:c3: dc:5a:4b:85:ac:9b:66:c3:2f:7a:39:b9:b2:de:40: bd:5f:45:a1:53:9c:56:e5:7c:54:9a:ee:66:ea:aa: 22:db:17:00:6a:18:e6:aa:b5:83:73:53:e4:57:89: 92:ba:8d:b9:30:e9:c7:3e:ec:df:43:b4:04:b9:11: 2a:fb:f4:0e:69:de:a8:a7:3e:60:26:22:d5:70:19: 6d:85:34:62:38:21:96:3b:bc:ed:28:d1:45:0f:19: 78:40:ba:00:ab:0a:c6:c9:3f:59:19:75:6e:bf:76: 6b:38:3b:9a:fd:35:59:a6:78:b1:cd:7d:b5:ff:a2: 65:3d:d2:a4:d5:f6:e1:92:f1:53:fe:eb:a5:d9:d1: d9:c0:b3:97:af:0b:39:e6:1f:3b:ed:41:a2:c1:ab: 8c:ed:88:70:35:8d:49:ef:a8:2e:27:0e:17:63:17: 1a:36:67:33:4b:e0:e9:32:3e:4a:7f:07:a6:43:1e: e1:26:e9:29:7c:83:53:f7:7f:c1:1b:71:0f:9f:0e: 68:52:cb:b3:28:5c:f4:7e:55:99:25:5a:9c:db:de: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:08:62:49:AB:4B:40:AF:94:91:98:AA:DB:6D:37:3F:42:09:DF:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.crl X509v3 Authority Key Identifier: keyid:E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer sbgp-ipAddrBlock: critical IPv4: 23.164.168.0/24 141.193.0.0/23 IPv6: 2607:7540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e1:7b:d7:4b:e9:7d:7a:6e:2c:c9:0f:57:f9:8d:c2:06:09: 93:6c:1c:49:bf:b4:a9:bb:99:c5:a1:a0:eb:e0:69:d5:0b:df: a5:4f:89:95:3a:b2:31:75:ae:da:d5:7a:11:7f:fb:7f:ab:28: ee:3d:76:91:8e:2c:63:4a:0a:d5:29:a2:5c:8d:b4:f9:9a:f3: 0b:a3:4a:25:01:9e:e4:00:6c:f2:ea:df:d5:8a:69:90:14:36: 2b:8c:48:41:9c:42:c0:d5:bb:eb:38:ce:44:84:b0:e6:0f:8e: a1:bd:74:b1:4c:e6:3b:04:1b:7a:d2:e9:d8:4e:cf:f8:da:f0: 55:43:95:05:d4:f1:87:5a:ad:1a:8c:91:26:93:c1:d0:b7:c6: 12:1f:d2:4e:2e:07:67:90:cf:db:4f:fb:59:75:8a:1a:f3:a1: 94:20:a8:e2:70:ce:bc:a7:3c:bf:71:b8:f8:5d:fd:63:ac:d0: aa:31:f6:9b:92:5f:13:e0:6d:52:0c:89:93:0b:15:40:ba:72: f3:ca:6f:77:b7:94:33:89:88:8b:24:d9:89:0f:36:4b:5f:bf: b2:02:7c:90:20:e5:0c:d9:bc:ff:ef:49:bb:be:53:6c:44:f9: 06:78:bd:98:97:9a:1d:86:a9:55:34:a6:e7:ac:3a:5c:77:b9: dd:37:d0:30 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEj9VsSIBqO6QYFuOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZlNmI1Y2UtYjE4Yi00NjA4LTgwYzktNTY1MWNkZTg1 MjE5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjk4ZmE5NTQtMjkwZC00NWNiLWI0ODQtYzFiNWIyYTMwOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBmZVIDAzOjCYifxE/p6mto5gyeJvP7LWOHi k9tZbl7t6Svx3L4tg8L9uMPcWkuFrJtmwy96Obmy3kC9X0WhU5xW5XxUmu5m6qoi 2xcAahjmqrWDc1PkV4mSuo25MOnHPuzfQ7QEuREq+/QOad6opz5gJiLVcBlthTRi OCGWO7ztKNFFDxl4QLoAqwrGyT9ZGXVuv3ZrODua/TVZpnixzX21/6JlPdKk1fbh kvFT/uul2dHZwLOXrws55h877UGiwauM7YhwNY1J76guJw4XYxcaNmczS+DpMj5K fwemQx7hJukpfINT93/BG3EPnw5oUsuzKFz0flWZJVqc297X+QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFAMIYkmrS0CvlJGYqtttNz9CCd+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmU2 YjVjZS1iMThiLTQ2MDgtODBjOS01NjUxY2RlODUyMTkvYTQyNDhkMTgtNTBiZC0z ZGUyLTg2OWQtMTEwMjMyMTM1MjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmZlNmI1Y2UtYjE4Yi00NjA4LTgw YzktNTY1MWNkZTg1MjE5L2JmZTZiNWNlLWIxOGItNDYwOC04MGM5LTU2NTFjZGU4 NTIxOS5jcmwwHwYDVR0jBBgwFoAU4wTV5+RbGcycfWGjqqQcmYtItacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmU2YjVjZS1iMThiLTQ2MDgtODBjOS01NjUx Y2RlODUyMTkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6SoAwQB jcEAMA0EAgACMAcDBQAmB3VAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIbhe9dL6X16bizJD1f5jcIGCZNs HEm/tKm7mcWhoOvgadUL36VPiZU6sjF1rtrVehF/+3+rKO49dpGOLGNKCtUpolyN tPma8wujSiUBnuQAbPLq39WKaZAUNiuMSEGcQsDVu+s4zkSEsOYPjqG9dLFM5jsE G3rS6dhOz/ja8FVDlQXU8YdarRqMkSaTwdC3xhIf0k4uB2eQz9tP+1l1ihrzoZQg qOJwzrynPL9xuPhd/WOs0Kox9puSXxPgbVIMiZMLFUC6cvPKb3e3lDOJiIsk2YkP Nktfv7ICfJAg5QzZvP/vSbu+U2xE+QZ4vZiXmh2GqVU0puesOlx3ud030DA= -----END CERTIFICATE-----Generated at Mon May 12 03:55:39 2025 by rpki-client