$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa File: 2680c2a2-cabf-3554-9a13-b69dcab407b9.roa (raw, json) Hash identifier: jno8YKQWN3eTu/WOLBe5W0pE1B8nFgQ7Adup5Ex/WB4= Subject key identifier: C4:69:66:84:E8:5D:22:8B:1E:7F:15:19:B5:8C:D2:88:20:CB:D1:63 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F43285849552958C8AB21EFCE4D351280 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 46962 IP address blocks: 23.133.120.0/24 maxlen: 24 64.93.68.0/24 maxlen: 24 64.93.69.0/24 maxlen: 24 64.93.70.0/24 maxlen: 24 64.93.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:58:c8:ab:21:ef:ce:4d:35:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=989a8f25-b266-4da6-9988-e04a1a31b70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:f3:f0:00:45:29:c3:4e:ac:92:75:77:ba: 62:d4:2f:84:9a:04:0c:7d:9a:b6:a5:cf:d8:40:c2: c4:9c:b1:d6:ea:a5:46:71:fc:bf:3e:93:b5:79:da: d1:e7:73:53:8d:b3:df:ed:f2:78:68:81:72:96:0c: b5:0f:3b:a0:52:f1:44:4a:a4:63:4a:23:6c:0b:9b: 47:51:2c:27:33:c9:52:81:57:94:90:05:48:28:f0: a7:1a:a7:b6:67:72:aa:07:4c:64:43:18:f1:8c:03: 53:bb:86:18:c2:37:04:ee:dc:ab:88:60:d7:8b:91: a8:1b:e2:17:4f:9b:9d:7c:2c:da:55:21:76:1e:de: 8f:7b:7d:73:65:79:fc:c6:ff:fa:e8:37:92:2c:ce: 17:37:a6:0b:78:fc:df:f1:ca:7e:b1:c9:61:4e:8f: f6:ef:fb:77:72:cd:26:93:5c:61:da:3c:36:1b:be: 6b:13:a2:6b:ba:08:5b:b0:ef:c1:0b:b8:0d:06:f2: f5:4a:f3:90:d2:78:ea:1a:7c:c5:6b:4e:6b:8e:5c: d7:c2:9f:af:47:9c:51:03:42:69:b8:67:49:24:3a: d3:3c:17:1a:56:71:8e:d8:32:d8:e4:17:b7:1e:17: b0:f9:8a:7a:f5:f0:b3:35:a3:78:55:f2:73:17:68: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:66:84:E8:5D:22:8B:1E:7F:15:19:B5:8C:D2:88:20:CB:D1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 23.133.120.0/24 64.93.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:8f:5a:f3:26:af:49:66:13:a6:20:47:25:23:d6:d9:40:fd: cb:9e:1f:5f:41:42:31:12:24:cc:18:51:22:2e:3c:54:3c:19: 19:2f:79:da:b0:3d:5f:ef:9f:f3:a7:4e:da:6f:50:de:e2:68: eb:7d:9f:79:0e:c7:70:cd:bf:2c:cc:d9:ac:97:dc:9c:13:d6: 3e:55:41:78:0a:e2:f1:76:63:7a:9f:25:c7:0e:f9:57:39:67: ef:16:6c:ca:80:28:55:d0:05:ac:8f:dc:81:05:2d:2b:1e:d0: c3:24:94:32:96:9a:e5:b4:0d:2a:2a:6d:48:ad:84:d0:36:3f: 02:77:de:ed:a3:f4:91:a9:2d:eb:37:56:80:fa:fa:30:96:6b: 71:9b:f1:84:5d:38:64:91:80:39:26:44:08:58:65:2a:bb:40: fa:a3:77:6c:1f:25:bf:32:85:b2:f8:f9:06:0e:d1:0e:93:7d: e8:d1:5c:8d:b1:94:1e:f9:ce:1a:40:20:2e:b7:96:c6:9e:09: 9d:8e:40:e8:bb:27:50:81:f9:b4:9f:93:26:97:da:fa:b7:4b: 10:2e:13:83:e4:7d:af:00:e8:9a:3f:3f:e8:8f:8d:7b:7e:2a: 9d:bc:29:d4:cc:3b:12:8b:eb:cb:46:c4:da:ae:25:c2:72:a8: a2:dd:aa:ee -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElVKVjIqyHvzk01EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk OTg5YThmMjUtYjI2Ni00ZGE2LTk5ODgtZTA0YTFhMzFiNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnnz8ABFKcNOrJJ1d7pi1C+EmgQMfZq2pc/Y QMLEnLHW6qVGcfy/PpO1edrR53NTjbPf7fJ4aIFylgy1DzugUvFESqRjSiNsC5tH USwnM8lSgVeUkAVIKPCnGqe2Z3KqB0xkQxjxjANTu4YYwjcE7tyriGDXi5GoG+IX T5udfCzaVSF2Ht6Pe31zZXn8xv/66DeSLM4XN6YLePzf8cp+sclhTo/27/t3cs0m k1xh2jw2G75rE6JrughbsO/BC7gNBvL1SvOQ0njqGnzFa05rjlzXwp+vR5xRA0Jp uGdJJDrTPBcaVnGO2DLY5Be3Hhew+Yp69fCzNaN4VfJzF2hEUQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMRpZoToXSKLHn8VGbWM0oggy9FjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjY4MGMyYTItY2FiZi0z NTU0LTlhMTMtYjY5ZGNhYjQwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4V4AwQC QF1EMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGOPWvMmr0lmE6YgRyUj1tlA/cueH19BQjESJMwYUSIuPFQ8 GRkvedqwPV/vn/OnTtpvUN7iaOt9n3kOx3DNvyzM2ayX3JwT1j5VQXgK4vF2Y3qf JccO+Vc5Z+8WbMqAKFXQBayP3IEFLSse0MMklDKWmuW0DSoqbUithNA2PwJ33u2j 9JGpLes3VoD6+jCWa3Gb8YRdOGSRgDkmRAhYZSq7QPqjd2wfJb8yhbL4+QYO0Q6T fejRXI2xlB75zhpAIC63lsaeCZ2OQOi7J1CB+bSfkyaX2vq3SxAuE4Pkfa8A6Jo/ P+iPjXt+Kp28KdTMOxKL68tGxNquJcJyqKLdqu4= -----END CERTIFICATE-----Generated at Sat Apr 12 16:27:01 2025 by rpki-client