$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa File: cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa (raw, json) Hash identifier: VeZ4igKz4ay2Whc2SpY/5u8oeXqiqddcC2YANXzMkc0= Subject key identifier: 3C:C9:AD:D8:04:06:FF:74:76:B9:7E:D8:D0:54:E9:5A:6E:99:9D:6E Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584898D60D7C9B9162EB87F10AE8 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 399805 IP address blocks: 23.179.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0d:7c:9b:91:62:eb:87:f1:0a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=67c6f8f8-cb6b-41eb-b7c2-92ce7650e6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:63:1d:68:f1:a5:9f:e3:fe:8d:f4:d1:d1: c1:08:c3:8d:3c:cb:6d:41:56:09:fc:ab:59:37:18: 2a:09:8d:ad:be:15:e2:f3:e4:6e:0e:af:3a:67:20: ac:8b:7b:93:3c:1b:1f:b5:24:4e:ab:c6:70:5e:07: 74:74:16:f7:92:77:28:99:24:09:7c:9e:47:53:42: 6a:c6:58:13:b4:04:85:11:91:88:2d:d5:6e:90:12: 89:17:44:b5:69:c2:f6:ec:3b:bf:7b:89:56:66:56: c1:b4:f5:d8:95:8e:2b:f1:20:59:6e:46:0a:49:60: 9c:fd:e3:d8:e3:ec:8b:58:c4:c0:1c:b7:49:ee:df: 6a:56:ca:f5:79:38:24:38:8c:81:ce:3e:96:3a:e5: 61:d3:ae:71:46:8c:c9:e6:e5:f6:34:80:36:d6:7f: f8:78:bf:cc:1a:f2:02:da:56:f6:6d:fa:c1:83:d8: ec:d3:a9:7b:f6:73:73:15:8b:18:ea:ec:5b:c3:4f: 87:32:e6:82:7e:6e:98:55:49:fa:28:60:3a:47:2b: 71:47:89:6e:8e:98:7f:5e:d4:b2:cf:c1:ee:4e:83: 43:ca:46:12:84:a8:f9:e9:83:ab:1c:b8:c7:b5:e5: 4a:0e:1d:38:95:15:81:3e:53:b7:38:b5:35:2c:e2: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C9:AD:D8:04:06:FF:74:76:B9:7E:D8:D0:54:E9:5A:6E:99:9D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cc:8c:ed:c8:56:a2:cf:b7:1e:b1:6b:62:26:a2:9f:df:9c: 52:33:08:34:2d:b7:cf:93:80:be:8d:92:9c:43:f1:62:a3:7b: 75:11:5d:15:53:e8:e1:91:4d:70:fb:40:c8:48:d2:5d:e2:6d: 47:71:d1:46:8a:3f:30:a6:ec:b9:b6:26:9f:2a:6d:3b:8b:e6: 4f:16:ce:cd:8a:0d:58:b7:0a:78:1a:42:4d:99:2a:61:a4:d8: 8c:1b:5a:41:e5:8a:df:b5:bc:2f:90:be:55:31:76:93:e2:11: 45:e7:dd:e6:63:cc:88:5b:96:95:a0:ec:6f:bb:6f:37:1f:4d: 60:85:6b:ff:98:8b:1b:84:6a:e4:58:dd:c2:35:8d:f1:00:68: 83:41:22:26:10:c5:71:1b:72:53:9f:f0:82:11:b4:84:d6:de: bf:aa:84:6c:c5:78:b5:3d:de:e2:9a:4a:3e:95:d3:78:0d:d4: 3c:6f:ac:65:31:f8:bd:5d:ec:33:d8:c5:60:86:a4:ef:a9:3d: 04:14:13:e7:01:ce:45:b3:1d:c0:66:6e:fe:44:64:45:26:ca: 40:68:c7:17:f1:f6:f2:b6:33:09:86:91:c7:60:5b:15:da:15: 5f:91:dd:ef:05:21:e3:fd:86:02:9e:48:80:80:c4:a4:93:4f: 6e:81:47:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1g18m5Fi64fxCugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NjdjNmY4ZjgtY2I2Yi00MWViLWI3YzItOTJjZTc2NTBlNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/1jHWjxpZ/j/o300dHBCMONPMttQVYJ/KtZ NxgqCY2tvhXi8+RuDq86ZyCsi3uTPBsftSROq8ZwXgd0dBb3kncomSQJfJ5HU0Jq xlgTtASFEZGILdVukBKJF0S1acL27Du/e4lWZlbBtPXYlY4r8SBZbkYKSWCc/ePY 4+yLWMTAHLdJ7t9qVsr1eTgkOIyBzj6WOuVh065xRozJ5uX2NIA21n/4eL/MGvIC 2lb2bfrBg9js06l79nNzFYsY6uxbw0+HMuaCfm6YVUn6KGA6RytxR4lujph/XtSy z8HuToNDykYShKj56YOrHLjHteVKDh04lRWBPlO3OLU1LOJIlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzJrdgEBv90drl+2NBU6VpumZ1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvY2RkYzBjNjgtNDQ2ZS0z MWZlLTk5YmMtODYxYjVkZmM3YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLMjO3IVqLPtx6xa2Imop/fnFIzCDQtt8+TgL6NkpxD8WKje3URXRVT 6OGRTXD7QMhI0l3ibUdx0UaKPzCm7Lm2Jp8qbTuL5k8Wzs2KDVi3CngaQk2ZKmGk 2IwbWkHlit+1vC+QvlUxdpPiEUXn3eZjzIhblpWg7G+7bzcfTWCFa/+YixuEauRY 3cI1jfEAaINBIiYQxXEbclOf8IIRtITW3r+qhGzFeLU93uKaSj6V03gN1DxvrGUx +L1d7DPYxWCGpO+pPQQUE+cBzkWzHcBmbv5EZEUmykBoxxfx9vK2MwmGkcdgWxXa FV+R3e8FIeP9hgKeSICAxKSTT26BR3A= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:21 2025 by rpki-client