$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa File: 9e76a303-95a7-3d3b-a141-5197331f408a.roa (raw, json) Hash identifier: 0VikrvNplxUeNAL35EcIh5GDZUcbgSM5JU+b+PkjqgQ= Subject key identifier: CE:FC:14:14:50:9B:8A:87:A3:91:9F:E6:29:DE:08:6A:C2:59:15:E6 Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Certificate serial: 010D0C9F432858498769BA06DA044CE0748165E0 Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 54686 IP address blocks: 23.128.124.0/24 maxlen: 24 2602:f9a0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ba:06:da:04:4c:e0:74:81:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=e8ad6805-58f6-4622-9602-ab812f86b519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:d9:28:c9:ae:bf:e4:59:a0:13:59:37:2e: 6a:ee:ca:44:1b:8d:ba:65:e3:38:00:c1:01:de:ad: 15:d2:a2:52:55:e3:23:70:df:06:9d:21:12:8c:77: 9b:83:2c:19:08:3c:4a:88:fa:90:8b:ca:cc:0c:5b: c7:9b:e1:b4:66:c8:85:03:ea:47:ed:bc:d8:17:f2: 70:a3:c6:f7:85:ac:e6:4a:b2:fe:7f:06:9a:15:e9: 74:4c:91:40:cd:d6:62:34:14:e6:f9:24:79:02:93: d9:09:19:ce:ed:18:f8:59:ff:9e:44:00:a0:91:b8: 2b:68:f4:eb:b7:0f:11:4b:6a:b9:1d:2d:dd:10:90: 4c:98:23:18:d5:06:2a:ec:ab:05:39:b1:cc:a0:1b: ef:ea:d1:47:c5:f7:51:12:56:db:b9:a2:6d:b5:52: 92:63:1d:8d:e7:81:0e:25:bb:98:f6:c4:9c:b1:0a: f5:45:1b:59:39:54:9d:29:b2:84:09:4e:47:8b:0e: 02:84:97:01:c5:f3:38:d4:24:ff:35:6c:67:96:72: a0:fb:6b:48:68:73:18:59:a0:45:ce:14:28:8e:dd: 73:bd:74:b5:59:d9:5d:6b:55:45:36:b2:2f:03:2b: 19:cd:87:03:57:d6:04:16:5b:6b:75:4b:d3:18:c3: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FC:14:14:50:9B:8A:87:A3:91:9F:E6:29:DE:08:6A:C2:59:15:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl X509v3 Authority Key Identifier: keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer sbgp-ipAddrBlock: critical IPv4: 23.128.124.0/24 IPv6: 2602:f9a0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:64:37:5d:f9:9c:70:e2:4a:b1:3c:16:ba:a1:1c:8c:44:3f: 14:20:18:82:09:b6:f1:1f:c4:db:6e:4d:dc:b4:8f:1d:5d:92: 19:98:93:70:cf:23:bb:0a:04:26:27:86:3f:33:55:90:9f:3b: 8c:5f:55:0b:94:34:60:cd:d7:70:d2:76:27:fa:8a:a1:52:36: a3:0c:29:60:65:6e:e8:ff:1a:ed:eb:7c:05:74:be:7c:ba:fa: da:30:bf:b2:5d:8c:f1:ab:9f:82:95:e2:54:8f:75:93:af:52: 8e:90:cf:bd:53:68:fe:e7:69:69:32:e5:8d:dd:8c:6f:75:0f: d8:74:6a:7d:d5:db:38:00:fb:d6:38:22:46:b9:96:9d:19:ae: 5e:fc:a7:71:de:d7:f2:c3:5b:ea:c8:b1:12:ce:91:79:bf:dc: b9:4b:6b:bf:47:2d:31:f1:64:68:03:f2:1a:e3:d1:34:ee:6a: 49:28:59:00:d2:da:dd:9c:00:da:e7:48:d4:45:6b:2b:d7:26: 0d:d6:57:8a:28:fc:6c:f5:f6:59:38:71:d0:60:ed:2f:ae:04: 28:f7:35:4a:47:98:b0:96:f6:3d:2b:d3:86:1c:b5:c6:bd:1d: 1b:cb:d5:63:10:27:9e:c9:72:7a:c4:e5:80:54:80:25:61:92: 2c:b0:8c:8a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmHaboG2gRM4HSBZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi Njk3MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZThhZDY4MDUtNThmNi00NjIyLTk2MDItYWI4MTJmODZiNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3ZKMmuv+RZoBNZNy5q7spEG426ZeM4AMEB 3q0V0qJSVeMjcN8GnSESjHebgywZCDxKiPqQi8rMDFvHm+G0ZsiFA+pH7bzYF/Jw o8b3hazmSrL+fwaaFel0TJFAzdZiNBTm+SR5ApPZCRnO7Rj4Wf+eRACgkbgraPTr tw8RS2q5HS3dEJBMmCMY1QYq7KsFObHMoBvv6tFHxfdRElbbuaJttVKSYx2N54EO JbuY9sScsQr1RRtZOVSdKbKECU5Hiw4ChJcBxfM41CT/NWxnlnKg+2tIaHMYWaBF zhQojt1zvXS1Wdlda1VFNrIvAysZzYcDV9YEFltrdUvTGMO4+QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFM78FBRQm4qHo5Gf5ineCGrCWRXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvOWU3NmEzMDMtOTVhNy0z ZDNiLWExNDEtNTE5NzMzMWY0MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh MGY5ZGI2OTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4B8MA4E AgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtZDdd+Zxw4kqxPBa6oRyMRD8UIBiCCbbx H8Tbbk3ctI8dXZIZmJNwzyO7CgQmJ4Y/M1WQnzuMX1ULlDRgzddw0nYn+oqhUjaj DClgZW7o/xrt63wFdL58uvraML+yXYzxq5+CleJUj3WTr1KOkM+9U2j+52lpMuWN 3YxvdQ/YdGp91ds4APvWOCJGuZadGa5e/Kdx3tfyw1vqyLESzpF5v9y5S2u/Ry0x 8WRoA/Ia49E07mpJKFkA0trdnADa50jURWsr1yYN1leKKPxs9fZZOHHQYO0vrgQo 9zVKR5iwlvY9K9OGHLXGvR0by9VjECeeyXJ6xOWAVIAlYZIssIyK -----END CERTIFICATE-----Generated at Wed Apr 16 17:02:10 2025 by rpki-client