$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa File: 07cd9fc5-1051-39bc-bd56-dadd655c312e.roa (raw, json) Hash identifier: KhuIckRyb++Wkqb9MfgP9usx9U4+o+W8J8/RgaW/cxE= Subject key identifier: B6:7B:5A:FD:70:8A:AC:03:01:6D:19:7B:5B:2E:91:03:A3:DC:93:C7 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285848D6410B246C1F41714D9A28C0 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 400226 IP address blocks: 23.128.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0b:24:6c:1f:41:71:4d:9a:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=695c3d21-b21c-48be-a2d5-b01213d4a6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:75:17:1d:93:8c:6a:33:fe:66:46:a0:60: d3:2c:54:c6:57:95:3b:bc:d4:e3:48:20:c1:3d:6e: d7:dc:f5:ce:54:7f:ff:7d:7d:57:32:59:b6:d4:14: 3c:e4:45:10:b6:55:8f:87:39:8d:05:75:68:46:67: 1a:d5:7d:bc:e5:5c:3f:0a:ea:35:24:30:9d:1c:f7: af:c7:44:55:8a:65:e3:e2:6e:8c:6a:e9:5f:15:28: 24:61:b4:89:a1:6f:85:cf:07:27:76:4c:ed:b0:d2: 62:51:d4:0d:f8:b2:f0:02:de:4d:78:50:72:7a:3d: 6a:f6:07:da:87:0e:ac:ee:42:4a:23:9a:d8:90:93: 6f:37:25:9e:0c:62:dd:a8:89:e3:e1:d8:4d:f4:95: f7:69:c0:b2:26:86:bf:d9:1e:ac:c1:03:52:3a:fe: a2:bc:6f:46:23:46:d8:4b:df:d2:2b:89:40:96:b1: 24:f7:63:01:9b:5d:1d:51:7e:17:24:ec:28:0f:0d: 41:0d:84:d9:4c:29:df:d9:b8:ee:3b:f2:94:bc:c7: 22:4a:5c:31:dc:fc:f2:cd:bf:2e:45:78:97:d1:a8: 37:8f:6f:30:45:e3:c2:84:e8:c7:8f:3c:0c:b9:da: ec:97:be:a1:bc:f7:1b:fd:f8:ef:7f:b5:ed:af:97: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7B:5A:FD:70:8A:AC:03:01:6D:19:7B:5B:2E:91:03:A3:DC:93:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1b:54:39:39:82:27:72:eb:a2:02:be:70:fc:89:93:f0:11: 26:82:7a:8e:b9:0d:cc:83:a1:79:03:06:60:d9:f0:d3:3d:b4: 50:de:02:0c:93:63:6f:26:5f:6d:01:fd:e0:a0:1d:2a:82:f4: 78:4b:9c:c4:e4:45:47:38:61:f2:2c:de:bb:68:52:73:f4:46: 54:08:dd:05:38:33:10:ce:bc:92:9d:59:c0:5c:05:8c:0e:fe: 13:f7:8c:eb:d2:ab:17:d9:64:dc:c1:da:ac:14:80:d0:90:6a: 05:e7:00:42:09:bb:fe:a1:bf:4d:4f:e5:be:5f:63:87:df:1d: cf:59:98:6a:65:7b:17:f3:31:34:00:39:18:be:c4:42:f2:68: 4e:ac:09:5c:b1:cf:75:37:ff:02:5b:d6:cf:60:e1:59:11:6f: 57:ad:a7:43:e7:0f:30:cd:8f:46:82:82:3d:3a:22:bb:8e:76: d7:43:e9:b4:a2:4b:ff:4c:b8:a2:09:53:05:b8:bc:cc:5b:66: 75:29:85:e0:f8:23:7b:3a:54:e9:5f:5e:75:dc:0a:2f:cc:e7: 6f:c4:f4:30:be:e2:8c:8d:f7:52:d2:a6:9f:5a:79:90:fc:51: b9:69:0a:43:9a:8d:40:84:57:67:37:95:54:2c:9f:88:37:32: 6e:89:4a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQskbB9BcU2aKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk Njk1YzNkMjEtYjIxYy00OGJlLWEyZDUtYjAxMjEzZDRhNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn91Fx2TjGoz/mZGoGDTLFTGV5U7vNTjSCDB PW7X3PXOVH//fX1XMlm21BQ85EUQtlWPhzmNBXVoRmca1X285Vw/Cuo1JDCdHPev x0RVimXj4m6MaulfFSgkYbSJoW+FzwcndkztsNJiUdQN+LLwAt5NeFByej1q9gfa hw6s7kJKI5rYkJNvNyWeDGLdqInj4dhN9JX3acCyJoa/2R6swQNSOv6ivG9GI0bY S9/SK4lAlrEk92MBm10dUX4XJOwoDw1BDYTZTCnf2bjuO/KUvMciSlwx3Pzyzb8u RXiX0ag3j28wRePChOjHjzwMudrsl76hvPcb/fjvf7Xtr5fWoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ7Wv1wiqwDAW0Ze1sukQOj3JPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDdjZDlmYzUtMTA1MS0z OWJjLWJkNTYtZGFkZDY1NWMzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkbVDk5gidy66ICvnD8iZPwESaCeo65DcyDoXkDBmDZ8NM9tFDeAgyT Y28mX20B/eCgHSqC9HhLnMTkRUc4YfIs3rtoUnP0RlQI3QU4MxDOvJKdWcBcBYwO /hP3jOvSqxfZZNzB2qwUgNCQagXnAEIJu/6hv01P5b5fY4ffHc9ZmGplexfzMTQA ORi+xELyaE6sCVyxz3U3/wJb1s9g4VkRb1etp0PnDzDNj0aCgj06IruOdtdD6bSi S/9MuKIJUwW4vMxbZnUpheD4I3s6VOlfXnXcCi/M52/E9DC+4oyN91LSpp9aeZD8 UblpCkOajUCEV2c3lVQsn4g3Mm6JSg8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:38 2025 by rpki-client