$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa File: 3a59a8dd-9438-357b-9270-804aa380967c.roa (raw, json) Hash identifier: ZHa3tm7CM55VVtxrbEA/tLUTL8bL40a3E8YJw4eMty4= Subject key identifier: 20:DC:74:75:F4:70:2E:E8:5D:CB:20:C9:45:47:D8:BF:A7:C2:FE:57 Certificate issuer: /CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Certificate serial: 010D0C9F43285848E9CBEAE8484B965FEC02DB00 Authority key identifier: 9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 395549 IP address blocks: 23.129.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:ea:e8:48:4b:96:5f:ec:02:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=77c5554a-5220-4f80-9a41-bc2ca641db2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:46:2b:fe:fe:34:80:f3:eb:2c:31:07:7f: ac:dd:b5:1c:d7:80:49:c8:c6:9a:39:99:1a:45:f3: 89:6c:88:f6:2d:78:d7:af:81:c0:cb:52:52:6e:3f: ce:40:e8:52:65:b7:5e:c1:11:22:2d:5c:70:05:0a: 26:b4:d6:3b:d7:0e:23:5f:55:0e:50:31:cb:cf:e5: 0c:57:db:e3:8e:4b:8d:39:5d:b6:67:c3:b1:a8:7c: c2:9d:58:a0:60:3d:aa:f5:fd:a5:f5:ca:f8:b1:3d: 4a:33:e9:85:2e:fd:4e:24:f6:02:9c:58:54:eb:8c: a5:0b:73:c4:4c:59:7f:a7:03:14:4c:78:27:79:5a: 76:85:82:37:5e:11:69:4a:d7:dc:8c:c1:9d:21:42: 31:7c:19:e2:f7:69:6d:fb:6a:24:f4:f3:ed:59:59: 95:13:91:5c:c4:c0:d1:1d:42:fa:39:4f:ad:fd:69: 95:72:49:ec:49:70:af:d9:b9:d4:bb:72:0b:a8:9b: 9f:49:d1:cc:da:8a:55:76:b9:12:9e:5e:0b:30:b9: d4:3b:ff:b9:ee:6c:46:3d:45:64:cf:c1:2c:96:cb: c0:ff:71:48:79:ad:50:0b:6e:d0:9c:10:77:a7:4b: b3:0b:65:54:55:03:e2:9f:93:83:3c:51:e4:66:02: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:74:75:F4:70:2E:E8:5D:CB:20:C9:45:47:D8:BF:A7:C2:FE:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl X509v3 Authority Key Identifier: keyid:9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer sbgp-ipAddrBlock: critical IPv4: 23.129.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6a:15:d9:e0:ea:8a:d6:2b:a7:a7:fe:42:75:70:2d:6e:2a: 70:2b:99:31:bb:33:c9:be:3b:b6:41:1d:1e:ab:69:b6:c4:e9: b2:03:9b:01:cb:af:c7:42:47:06:9e:a3:0e:72:68:f1:c5:af: c1:8c:56:e4:a2:db:1f:53:29:c4:dc:38:87:b4:77:14:00:7a: 1a:bd:1a:b0:0f:d8:62:44:74:b1:76:13:bb:ce:0a:19:52:6e: 37:37:08:8a:9e:6b:6d:da:89:d2:4f:1e:11:7c:b1:92:4b:29: dc:4b:a1:a7:06:b0:2b:ea:6c:93:80:1a:8a:31:67:2f:76:e9: 8d:f9:9a:6b:17:22:73:4f:85:07:df:54:08:e1:46:8e:60:5c: b9:1e:d7:a1:87:d8:c3:d0:10:19:a4:78:8a:0b:03:02:c6:c4: 85:e4:f4:11:05:cb:61:41:cd:d0:02:f7:53:03:f4:02:42:d8: f0:99:f8:f3:d0:6c:0d:f4:f3:10:ea:97:84:a4:93:c4:81:27: 2f:d8:61:2c:cb:b6:91:61:19:e0:cd:bb:85:60:ca:80:d3:bb: 60:6c:3d:b3:0d:8b:50:a9:8f:76:71:83:ef:49:c5:3b:e3:c3: a1:88:3f:8d:80:fc:67:f2:67:4c:02:12:b6:34:0e:6c:17:37: ab:aa:e4:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+roSEuWX+wC2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZjViMDQtOTk4Yy00ZThhLWJmM2UtZmQ5YWI5NmEy ZDI4MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NzdjNTU1NGEtNTIyMC00ZjgwLTlhNDEtYmMyY2E2NDFkYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YlGK/7+NIDz6ywxB3+s3bUc14BJyMaaOZka RfOJbIj2LXjXr4HAy1JSbj/OQOhSZbdewREiLVxwBQomtNY71w4jX1UOUDHLz+UM V9vjjkuNOV22Z8OxqHzCnVigYD2q9f2l9cr4sT1KM+mFLv1OJPYCnFhU64ylC3PE TFl/pwMUTHgneVp2hYI3XhFpStfcjMGdIUIxfBni92lt+2ok9PPtWVmVE5FcxMDR HUL6OU+t/WmVcknsSXCv2bnUu3ILqJufSdHM2opVdrkSnl4LMLnUO/+57mxGPUVk z8EslsvA/3FIea1QC27QnBB3p0uzC2VUVQPin5ODPFHkZgJeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDcdHX0cC7oXcsgyUVH2L+nwv5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTdm NWIwNC05OThjLTRlOGEtYmYzZS1mZDlhYjk2YTJkMjgvM2E1OWE4ZGQtOTQzOC0z NTdiLTkyNzAtODA0YWEzODA5NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk3ZjViMDQtOTk4Yy00ZThhLWJm M2UtZmQ5YWI5NmEyZDI4Lzk5N2Y1YjA0LTk5OGMtNGU4YS1iZjNlLWZkOWFiOTZh MmQyOC5jcmwwHwYDVR0jBBgwFoAUmxMtCHZIK14G6wbEdyIg8AnNPtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTdmNWIwNC05OThjLTRlOGEtYmYzZS1mZDlh Yjk2YTJkMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBqFdng6orWK6en/kJ1cC1uKnArmTG7M8m+O7ZBHR6rabbE6bIDmwHL r8dCRwaeow5yaPHFr8GMVuSi2x9TKcTcOIe0dxQAehq9GrAP2GJEdLF2E7vOChlS bjc3CIqea23aidJPHhF8sZJLKdxLoacGsCvqbJOAGooxZy926Y35mmsXInNPhQff VAjhRo5gXLke16GH2MPQEBmkeIoLAwLGxIXk9BEFy2FBzdAC91MD9AJC2PCZ+PPQ bA308xDql4Skk8SBJy/YYSzLtpFhGeDNu4VgyoDTu2BsPbMNi1Cpj3Zxg+9JxTvj w6GIP42A/GfyZ0wCErY0DmwXN6uq5Og= -----END CERTIFICATE-----Generated at Fri Apr 4 18:58:10 2025 by rpki-client