$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/309a5caa-046a-3bc2-989c-7828235320bf.roa File: 309a5caa-046a-3bc2-989c-7828235320bf.roa (raw, json) Hash identifier: sbtVf4taAGsoeQlTxSVE12njoOIL3SkzwmAFktEMeSs= Subject key identifier: AF:7B:F1:FC:4A:70:3B:AD:8B:6D:42:A8:3A:57:F9:73:A8:79:5A:8D Certificate issuer: /CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d Certificate serial: 010D0C9F43285848E59BBF533BE9198D04046E80 Authority key identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/309a5caa-046a-3bc2-989c-7828235320bf.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396507 IP address blocks: 23.129.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:bf:53:3b:e9:19:8d:04:04:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=e0293a7b-aff3-45bc-b134-bdf6f22e6348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:76:71:ea:65:59:ca:57:fe:88:04:af:01: 81:a2:23:37:55:14:29:c1:a0:f5:b1:de:1f:48:fc: a1:b0:51:8d:f0:9a:58:4c:ea:96:88:1e:12:49:c6: 81:c1:22:22:fe:41:90:04:c8:79:1b:99:ce:88:fa: 8a:26:df:e9:82:10:f0:0c:b6:d4:3f:ca:50:95:7b: 22:43:8f:f8:94:4a:1a:22:27:5f:bf:63:46:89:02: ca:4b:98:c6:89:fd:ad:5b:86:01:b7:da:44:e1:75: 69:5d:bd:ca:17:ca:07:e9:bf:a0:79:5c:90:58:91: 23:57:4a:c2:b6:18:da:e6:6c:59:ab:05:9f:2a:c4: 23:9c:82:00:57:9d:d2:3d:11:c3:08:4f:23:c6:08: e5:48:e0:6a:2e:6e:c0:d2:af:a2:86:57:20:e6:36: 60:b0:0a:8d:3c:b4:42:26:e7:f0:e5:09:6e:f9:c1: fc:76:fa:6e:a3:2c:18:5b:91:89:c3:59:e7:c7:d2: 21:87:c2:25:30:a5:c5:ef:fa:5f:5c:84:1e:1d:15: 85:f6:62:d7:c6:5d:90:03:9a:02:c5:ca:69:ca:21: b9:64:98:fd:ef:c8:e3:7a:74:e7:1f:00:86:0a:dc: 1d:cb:cb:24:a2:49:6d:09:bc:df:a2:e8:3e:e5:6f: 02:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7B:F1:FC:4A:70:3B:AD:8B:6D:42:A8:3A:57:F9:73:A8:79:5A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/309a5caa-046a-3bc2-989c-7828235320bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.crl X509v3 Authority Key Identifier: keyid:72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer sbgp-ipAddrBlock: critical IPv4: 23.129.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b2:bc:c3:ec:56:74:31:ec:48:4c:8c:33:60:11:61:d4:05: a5:e1:20:17:7e:4b:54:5c:60:af:de:67:15:a8:23:c5:47:84: 70:25:71:ba:81:f8:ae:b9:36:f0:36:c7:98:c0:b8:44:5d:b7: 30:77:12:7f:6f:27:f0:c0:e2:cc:66:d1:d0:f8:23:49:0f:73: 99:d6:57:94:58:21:d4:df:27:72:67:50:ef:4a:e6:13:b8:20: 11:2d:fa:e9:a2:f9:88:07:74:42:9f:5d:4a:e0:09:ac:ce:cf: c0:c7:01:ab:30:5c:71:64:30:c4:31:23:6b:02:5b:89:10:67: 94:fa:ed:79:fc:7f:9e:d1:0e:dd:e8:bb:9b:a8:57:d7:d1:26: ec:a2:42:11:ad:f1:3c:a1:8e:bb:a3:41:a4:e9:74:f9:18:7c: 89:8e:df:42:69:24:fc:30:62:8c:c1:f3:e3:ab:a3:b6:d3:5a: 06:b7:32:6e:c5:d8:cf:04:94:e3:79:81:8f:ab:4d:4a:fd:52: d6:f1:73:9d:12:98:42:ed:45:a0:2a:50:47:2b:c3:1b:c7:74: 05:ac:91:51:c8:71:f8:ad:3c:cf:44:ad:81:92:2a:9b:e6:f5: 2b:ab:06:e5:37:81:a6:e6:6f:57:da:ea:8f:4d:5f:55:6f:8d: 3b:46:2e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm79TO+kZjQQEboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU2YjdhM2YtYjIwNS00YzZiLWEwMGYtN2RmYzIwODNi NzhkMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTAyOTNhN2ItYWZmMy00NWJjLWIxMzQtYmRmNmYyMmU2MzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj852ceplWcpX/ogErwGBoiM3VRQpwaD1sd4f SPyhsFGN8JpYTOqWiB4SScaBwSIi/kGQBMh5G5nOiPqKJt/pghDwDLbUP8pQlXsi Q4/4lEoaIidfv2NGiQLKS5jGif2tW4YBt9pE4XVpXb3KF8oH6b+geVyQWJEjV0rC thja5mxZqwWfKsQjnIIAV53SPRHDCE8jxgjlSOBqLm7A0q+ihlcg5jZgsAqNPLRC Jufw5Qlu+cH8dvpuoywYW5GJw1nnx9Ihh8IlMKXF7/pfXIQeHRWF9mLXxl2QA5oC xcppyiG5ZJj978jjenTnHwCGCtwdy8skokltCbzfoug+5W8C5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK978fxKcDuti21CqDpX+XOoeVqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZTZi N2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4M2I3OGQvMzA5YTVjYWEtMDQ2YS0z YmMyLTk4OWMtNzgyODIzNTMyMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGU2YjdhM2YtYjIwNS00YzZiLWEw MGYtN2RmYzIwODNiNzhkLzBlNmI3YTNmLWIyMDUtNGM2Yi1hMDBmLTdkZmMyMDgz Yjc4ZC5jcmwwHwYDVR0jBBgwFoAUcgaukRceTtagOl7WkmPzz3GNRL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZj MjA4M2I3OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeyvMPsVnQx7EhMjDNgEWHUBaXhIBd+S1RcYK/eZxWoI8VHhHAlcbqB +K65NvA2x5jAuERdtzB3En9vJ/DA4sxm0dD4I0kPc5nWV5RYIdTfJ3JnUO9K5hO4 IBEt+umi+YgHdEKfXUrgCazOz8DHAaswXHFkMMQxI2sCW4kQZ5T67Xn8f57RDt3o u5uoV9fRJuyiQhGt8TyhjrujQaTpdPkYfImO30JpJPwwYozB8+Oro7bTWga3Mm7F 2M8ElON5gY+rTUr9Utbxc50SmELtRaAqUEcrwxvHdAWskVHIcfitPM9ErYGSKpvm 9SurBuU3gabmb1fa6o9NX1VvjTtGLrA= -----END CERTIFICATE-----Generated at Fri Apr 11 21:38:18 2025 by rpki-client