$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa File: 958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa (raw, json) Hash identifier: YZspaalqZQ1f1dA9h+3AVsO+Bi4R0LGw+L9GauPg/TE= Subject key identifier: 28:EF:DC:7E:C4:FC:0E:CA:87:46:A2:21:96:EB:5A:45:DE:3A:3B:37 Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584940395079208FD4C47AA85A80 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 401390 IP address blocks: 23.191.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:50:79:20:8f:d4:c4:7a:a8:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=ec236f03-4cc6-47a0-8a3a-93a1f575d235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:07:07:d6:31:3d:d8:2c:68:5d:1a:38:ec: 90:39:29:91:f4:2f:0f:9e:c7:54:3c:e0:ab:82:52: ff:44:e1:cb:b1:b9:86:81:63:86:da:f1:a6:7a:78: 24:6d:3a:63:21:dc:c1:09:3d:ef:87:da:f1:71:b0: f9:93:6f:55:10:68:96:de:44:ab:aa:3e:0d:0e:29: 33:68:ff:66:ed:8e:b1:19:6c:9d:3f:82:3a:c7:3d: ff:34:d2:84:a6:31:17:3e:e4:1a:e9:cf:f5:da:d0: a3:43:ac:fa:d0:8a:f7:b2:3d:83:a7:85:f9:69:df: 4c:fb:73:e6:76:11:e4:c0:33:09:94:30:84:2e:e8: a2:e5:fc:14:ae:97:c2:2b:f6:2c:40:d9:da:c0:87: c1:c9:16:b7:f8:3f:8f:a4:bc:44:4f:c8:d7:2a:48: 43:6e:14:56:e0:df:33:76:c3:74:71:66:4f:98:05: 3d:8d:19:14:be:90:73:3a:44:55:1a:81:4b:e1:09: 81:31:9e:2e:8a:c6:3a:23:cd:cb:de:68:58:d1:30: d1:06:c9:33:c6:79:30:69:0a:60:f8:cb:b0:60:48: a2:7f:a9:20:a9:bb:01:61:a5:a9:42:03:c3:46:ad: e2:ac:04:54:30:fc:60:ae:54:73:6b:90:63:85:f9: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EF:DC:7E:C4:FC:0E:CA:87:46:A2:21:96:EB:5A:45:DE:3A:3B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv4: 23.191.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:44:ed:f3:26:36:10:b5:70:4c:a0:9f:bf:a6:d6:31:b9:bf: f1:8b:0e:9b:16:a3:f9:d4:e5:bc:45:14:90:a9:81:2e:67:3e: 9a:46:32:9c:71:a9:59:77:22:94:cf:fe:a3:be:69:9a:9d:1c: 44:d3:63:50:2e:5d:24:05:cf:26:3a:57:53:bf:64:d6:42:e5: 03:01:d9:16:0e:d3:8f:e3:30:28:b4:6e:51:8c:2e:e8:66:35: fe:17:91:34:7b:f0:ca:84:8a:cb:93:db:61:e5:ad:06:a8:8d: 5d:ea:be:ff:72:da:93:4c:cb:5d:74:29:16:c4:79:93:d1:97: ef:65:fd:3f:04:33:e6:71:c7:73:36:77:ec:3f:07:bd:ab:50: 28:68:0a:61:78:5e:f7:99:6b:48:9d:4a:39:a7:f0:34:e2:ba: 7b:c9:b4:f1:5f:b5:84:52:06:d6:27:05:31:a5:6e:0f:40:a2: 99:15:36:42:d0:7e:bc:dc:8e:c7:ab:0c:42:90:e2:f0:e5:0a: f5:f2:32:1c:66:df:5a:f2:f3:e0:6d:4c:44:ac:1e:fa:66:95: a7:0f:0f:7a:b0:07:59:df:28:76:b7:37:cd:e2:6d:c2:81:4b: 14:4f:8b:3d:26:e5:02:7f:35:7f:7e:14:d8:fb:a4:1f:b8:e8: 1a:ec:36:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOVB5II/UxHqoWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZWMyMzZmMDMtNGNjNi00N2EwLThhM2EtOTNhMWY1NzVkMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6oHB9YxPdgsaF0aOOyQOSmR9C8PnsdUPOCr glL/ROHLsbmGgWOG2vGmengkbTpjIdzBCT3vh9rxcbD5k29VEGiW3kSrqj4NDikz aP9m7Y6xGWydP4I6xz3/NNKEpjEXPuQa6c/12tCjQ6z60Ir3sj2Dp4X5ad9M+3Pm dhHkwDMJlDCELuii5fwUrpfCK/YsQNnawIfByRa3+D+PpLxET8jXKkhDbhRW4N8z dsN0cWZPmAU9jRkUvpBzOkRVGoFL4QmBMZ4uisY6I83L3mhY0TDRBskzxnkwaQpg +MuwYEiif6kgqbsBYaWpQgPDRq3irARUMPxgrlRza5BjhfmXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjv3H7E/A7Kh0aiIZbrWkXeOjs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvOTU4ZTllNTUtNmRjYi0z NmUwLTk1NDUtOWIyYWQwNDdhMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF794MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5E7fMmNhC1cEygn7+m1jG5v/GLDpsWo/nU5bxFFJCpgS5nPppGMpxx qVl3IpTP/qO+aZqdHETTY1AuXSQFzyY6V1O/ZNZC5QMB2RYO04/jMCi0blGMLuhm Nf4XkTR78MqEisuT22HlrQaojV3qvv9y2pNMy110KRbEeZPRl+9l/T8EM+Zxx3M2 d+w/B72rUChoCmF4XveZa0idSjmn8DTiunvJtPFftYRSBtYnBTGlbg9AopkVNkLQ frzcjserDEKQ4vDlCvXyMhxm31ry8+BtTESsHvpmlacPD3qwB1nfKHa3N83ibcKB SxRPiz0m5QJ/NX9+FNj7pB+46BrsNvw= -----END CERTIFICATE-----Generated at Sat Apr 5 00:35:13 2025 by rpki-client