$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa File: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (raw, json) Hash identifier: sNMZYZlvofQzSlViQHFCoc/QPdIb/2uf/p5Jjjh/iBU= Subject key identifier: 46:2D:12:4D:A9:82:E7:04:7E:FD:C0:D2:14:8E:3C:98:93:1B:FC:32 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584902F4368F7C0B7E8C80B4F380 Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa Signing time: Wed 26 Feb 2025 14:17:30 +0000 ROA not before: Wed 26 Feb 2025 14:17:30 +0000 ROA not after: Tue 27 May 2025 13:17:30 +0000 asID: 2914 IP address blocks: 23.133.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:f4:36:8f:7c:0b:7e:8c:80:b4:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Feb 26 14:17:30 2025 GMT Not After : May 27 13:17:30 2025 GMT Subject: CN=caeb22af-661e-4c5e-87b2-7efc1fe2000a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:28:09:cb:e7:af:6b:15:35:17:37:d7:c7: 50:77:66:f7:51:2a:8a:70:fb:1e:eb:4a:98:81:db: 53:0e:be:1b:91:0e:76:fd:1f:39:86:56:d7:08:42: 6b:dd:83:e1:31:92:cb:96:b5:0e:05:28:59:86:7a: c6:d7:e8:cb:0c:39:55:f1:cf:ca:5a:07:d1:57:e8: b7:94:14:d9:a3:98:bc:52:81:ac:a8:12:f4:48:87: 65:e4:79:03:fb:39:96:92:0d:a5:a5:5e:77:62:10: 69:ae:25:42:d7:92:5c:d7:01:be:7d:1f:0b:e6:8b: a6:a2:11:c5:f3:66:48:08:0e:0a:27:f9:65:a7:54: bc:32:dd:d6:c1:70:f4:95:28:5f:a4:1b:4a:ae:9b: d4:99:ac:88:14:b4:20:ba:f6:11:ee:c5:ca:4d:84: 5d:19:cc:94:21:1f:10:aa:7b:57:2c:00:d1:65:ea: c1:fc:8a:2e:e0:fd:40:e9:10:80:5a:fc:1d:93:9d: f8:1a:31:61:04:4a:73:42:52:7f:59:a9:9d:e7:42: 01:c8:bd:b3:14:57:8e:34:bc:e7:9d:71:34:e9:97: 84:90:89:8f:43:ec:3b:cc:a9:a1:86:79:cd:cc:48: ea:ca:32:57:14:67:24:b9:e5:1e:ec:98:98:39:5a: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2D:12:4D:A9:82:E7:04:7E:FD:C0:D2:14:8E:3C:98:93:1B:FC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: 23.133.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption eb:71:10:52:81:1d:a7:ce:ea:71:c7:33:32:94:13:f4:85:d0: ad:70:bf:ca:8b:a6:a8:c5:41:bc:a7:24:90:d2:6a:98:30:1c: 34:90:c3:09:fa:11:2e:bf:35:e8:54:d4:c9:6c:7b:09:98:73: b2:89:e3:be:3a:8d:5b:d5:5d:bf:2f:08:59:11:c3:a6:ba:9b: b1:99:32:6f:eb:fa:c6:81:fd:68:d5:02:3c:28:cd:fc:c3:43: d9:92:e9:fb:f8:84:9b:e1:58:89:e4:fd:ad:9b:6e:ee:00:e9: 9b:46:c9:b6:4a:10:f2:b8:ac:de:a9:84:a9:60:23:53:9a:96: 55:26:b6:5b:ae:56:23:76:18:96:da:dd:fd:bb:04:5f:cb:cc: 75:8e:b6:c3:de:24:71:0e:00:91:5e:34:ad:fd:35:31:5a:eb: 45:fe:0c:9c:0a:78:b2:30:ea:4b:43:75:a5:be:88:a6:ab:3a: 23:7b:ef:08:ba:d6:35:5f:ca:f9:71:f4:4a:0e:41:f5:ff:c3: 2c:cf:56:9e:41:c1:32:f2:64:b7:ad:1d:00:5f:21:e3:42:2e: fb:69:aa:f3:cd:44:86:a0:2f:b7:49:16:ac:7c:ce:c7:db:69: 57:66:97:10:6d:08:21:ed:5a:f4:9e:8c:7c:f3:4f:f7:6a:6e: bc:73:26:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC9DaPfAt+jIC084AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI1MDIyNjE0MTczMFoXDTI1MDUyNzEzMTczMFowLzEtMCsGA1UEAxMk Y2FlYjIyYWYtNjYxZS00YzVlLTg3YjItN2VmYzFmZTIwMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO8oCcvnr2sVNRc318dQd2b3USqKcPse60qY gdtTDr4bkQ52/R85hlbXCEJr3YPhMZLLlrUOBShZhnrG1+jLDDlV8c/KWgfRV+i3 lBTZo5i8UoGsqBL0SIdl5HkD+zmWkg2lpV53YhBpriVC15Jc1wG+fR8L5oumohHF 82ZICA4KJ/llp1S8Mt3WwXD0lShfpBtKrpvUmayIFLQguvYR7sXKTYRdGcyUIR8Q qntXLADRZerB/Iou4P1A6RCAWvwdk534GjFhBEpzQlJ/Wamd50IByL2zFFeONLzn nXE06ZeEkImPQ+w7zKmhhnnNzEjqyjJXFGckueUe7JiYOVqAyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYtEk2pgucEfv3A0hSOPJiTG/wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvY2I5NGY0MWMtYzg4Ny0z NjNjLWJmNDEtOGRkMDRlMjhkOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOtxEFKBHafO6nHHMzKUE/SF0K1wv8qLpqjFQbynJJDSapgwHDSQwwn6 ES6/NehU1MlsewmYc7KJ4746jVvVXb8vCFkRw6a6m7GZMm/r+saB/WjVAjwozfzD Q9mS6fv4hJvhWInk/a2bbu4A6ZtGybZKEPK4rN6phKlgI1OallUmtluuViN2GJba 3f27BF/LzHWOtsPeJHEOAJFeNK39NTFa60X+DJwKeLIw6ktDdaW+iKarOiN77wi6 1jVfyvlx9EoOQfX/wyzPVp5BwTLyZLetHQBfIeNCLvtpqvPNRIagL7dJFqx8zsfb aVdmlxBtCCHtWvSejHzzT/dqbrxzJqE= -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:50 2025 by rpki-client