$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: 1JJ4Q+ZgxyETk7fV7jOks/dakUU86NLpQsWNK1z0kSM= Subject key identifier: 05:38:52:F8:08:BF:DD:80:27:90:16:88:3B:BF:5A:1E:59:73:0B:42 Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F43285848A830A5769A590EB3E36EC060 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a5:76:9a:59:0e:b3:e3:6e:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=954c38c9-faed-4a8e-85ca-a590e818a9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:21:ce:29:46:59:f6:06:f7:d5:cf:72:d1: 91:a9:c1:92:cb:b9:89:a4:ad:7d:6b:bd:d0:e9:6b: 16:fa:c4:99:11:49:2c:15:ea:a6:4b:39:5d:e7:dd: dc:6d:5a:95:3e:3f:fb:08:03:99:69:43:e5:99:84: 69:cf:26:83:e7:ba:2f:28:42:2e:eb:f5:f4:05:85: 0c:a0:d2:c0:2a:a0:f5:03:17:fe:6a:b0:68:19:cc: cc:ba:41:8b:ef:d2:fe:89:ff:4a:6a:3d:a5:02:07: c7:58:bc:07:21:29:24:36:7e:8d:d2:ec:09:4c:5f: 9a:6c:5a:d0:19:eb:27:c2:1e:b4:b2:8c:78:17:78: e9:22:9a:11:80:62:90:6a:ee:20:7d:09:3e:6d:ed: 4c:e1:40:6c:a4:4c:6e:22:d2:39:90:7d:ed:0a:f9: ec:f6:6b:00:7f:e0:74:4f:0e:3f:ec:95:55:20:9a: 02:00:87:97:78:cf:f3:85:b9:2e:7e:a7:d8:69:3e: fa:7f:66:c9:87:3a:df:51:2c:de:ca:8c:65:67:6c: f6:c4:f1:b3:a4:25:dc:5f:da:6e:02:c7:eb:4a:a6: f1:6b:2b:07:ef:a0:5c:07:b1:80:61:11:37:8d:e7: e5:db:62:d3:74:c6:7e:80:7d:da:c7:f3:f4:c5:2d: 6c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:52:F8:08:BF:DD:80:27:90:16:88:3B:BF:5A:1E:59:73:0B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3c:23:f9:7e:f3:bd:bd:84:80:23:a1:3d:93:42:b2:b8:85: 92:8b:b1:4e:fb:cb:73:35:64:86:27:cf:0b:d2:41:ed:5e:c9: 4a:11:54:67:57:54:a3:60:ce:35:ee:2f:5c:cb:1d:67:b2:6b: 72:39:da:be:d5:22:fc:53:ad:3f:07:7e:a3:57:40:59:3f:39: b9:08:33:ed:b5:35:6b:c9:c6:1c:e3:f1:f5:f6:d3:06:ae:d7: 97:a4:41:bf:d4:c8:2a:45:5e:20:b2:3b:6c:c4:95:bb:95:89: d9:b5:96:b1:ed:e9:41:b4:ce:70:6a:e1:61:0d:fb:d1:09:c9: 8f:54:d9:aa:f8:4b:03:df:f2:0e:22:35:4a:ee:a5:3c:3f:c5: 61:de:1c:ff:b6:9f:a7:91:fd:1c:f6:17:3a:3f:67:80:aa:97: 1b:00:d2:28:d9:7d:de:89:7c:aa:67:9f:54:e7:a1:2f:93:bc: 6d:77:16:d5:74:9a:a2:1d:c6:19:c4:05:ae:55:88:f9:45:33: 49:79:b5:a2:cb:f3:13:e6:ca:84:79:d3:8b:50:71:98:ae:90: d9:ec:0a:64:41:76:c7:2d:51:ad:5b:99:ed:30:76:22:05:54: c1:90:14:7f:ab:1b:bb:8b:4f:dd:98:e6:2a:05:6e:7a:02:4c: 90:9d:74:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKV2mlkOs+NuwGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk OTU0YzM4YzktZmFlZC00YThlLTg1Y2EtYTU5MGU4MThhOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0IhzilGWfYG99XPctGRqcGSy7mJpK19a73Q 6WsW+sSZEUksFeqmSzld593cbVqVPj/7CAOZaUPlmYRpzyaD57ovKEIu6/X0BYUM oNLAKqD1Axf+arBoGczMukGL79L+if9Kaj2lAgfHWLwHISkkNn6N0uwJTF+abFrQ Gesnwh60sox4F3jpIpoRgGKQau4gfQk+be1M4UBspExuItI5kH3tCvns9msAf+B0 Tw4/7JVVIJoCAIeXeM/zhbkufqfYaT76f2bJhzrfUSzeyoxlZ2z2xPGzpCXcX9pu AsfrSqbxaysH76BcB7GAYRE3jefl22LTdMZ+gH3ax/P0xS1s6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU4UvgIv92AJ5AWiDu/Wh5ZcwtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI88I/l+8729hIAjoT2TQrK4hZKLsU77y3M1ZIYnzwvSQe1eyUoRVGdX VKNgzjXuL1zLHWeya3I52r7VIvxTrT8HfqNXQFk/ObkIM+21NWvJxhzj8fX20wau 15ekQb/UyCpFXiCyO2zElbuVidm1lrHt6UG0znBq4WEN+9EJyY9U2ar4SwPf8g4i NUrupTw/xWHeHP+2n6eR/Rz2Fzo/Z4CqlxsA0ijZfd6JfKpnn1TnoS+TvG13FtV0 mqIdxhnEBa5ViPlFM0l5taLL8xPmyoR504tQcZiukNnsCmRBdsctUa1bme0wdiIF VMGQFH+rG7uLT92Y5ioFbnoCTJCddDs= -----END CERTIFICATE-----Generated at Sun Apr 6 12:04:46 2025 by rpki-client