$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa File: 95e32c24-9724-3044-bbbe-40ccb8806632.roa (raw, json) Hash identifier: COFcNykOb+3cEYk3YAgY5jd1APCLWAT8mqg1Ew8Ys6Y= Subject key identifier: 1A:E2:52:EE:28:19:E7:D9:FF:FC:4F:A9:F7:2F:46:A4:00:1F:74:A6 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584950F969C190D4706EC6CC6B00 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 12083 IP address blocks: 23.28.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:69:c1:90:d4:70:6e:c6:cc:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=ca8a7483-9474-403b-9c4b-44babb39274e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:3e:95:50:cd:4b:24:ca:38:0d:2d:31:79: 67:a8:ee:48:46:d9:dc:f0:73:e2:32:ca:3e:88:77: 2b:2c:a8:64:fd:d0:36:5a:58:f9:22:4e:f9:8d:33: 7a:3c:84:6d:4c:42:30:48:25:c1:86:cf:4e:14:7a: cf:9d:4e:99:50:c6:8a:e9:c1:4d:eb:3a:5c:82:3f: 15:31:a8:c2:50:b2:f2:39:f5:a9:7c:31:3c:7d:af: d2:2f:86:ef:46:0f:c7:64:5e:1c:b5:44:62:44:45: fe:d2:41:26:b5:8b:d2:73:be:9b:80:46:03:fb:68: 22:0b:26:5f:56:9f:24:11:c0:0d:9b:14:d2:b4:d5: 25:8d:68:4a:cb:23:4f:13:e8:4f:bc:b3:80:89:29: 55:d6:0c:47:01:e8:f0:03:08:ae:a1:1d:c5:c7:ae: f4:83:74:f5:c0:c7:1f:a2:fc:3f:b0:ca:43:6e:9e: 35:8a:ea:fc:f6:a9:79:74:b6:78:20:64:33:24:97: e6:e4:d7:a4:53:26:9a:f4:1f:98:10:1e:74:17:d8: ab:2e:74:3c:07:fe:60:06:f1:b5:0f:4d:08:84:cb: 25:38:c8:2e:a5:9b:0a:d3:1d:52:e5:63:dd:16:5a: ca:d7:5c:00:87:c8:73:17:bc:68:37:d7:31:fe:cf: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:52:EE:28:19:E7:D9:FF:FC:4F:A9:F7:2F:46:A4:00:1F:74:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 23.28.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:08:29:59:5b:a8:02:8a:f3:90:d6:0c:54:50:e0:2c:7a:18: 17:0f:a8:66:5d:36:8d:d4:81:0e:87:10:e3:5f:74:76:7f:23: 50:4f:7d:a7:c7:23:a3:90:c9:0e:8f:82:e5:f1:27:d3:28:0d: 11:1b:bb:48:94:c8:a5:13:c0:a7:a3:9b:ec:e6:e6:ec:80:a4: f1:08:0b:07:b2:76:fa:43:55:9c:12:f0:db:ef:4c:7f:1c:71: 59:dc:e6:77:c3:87:22:58:cc:17:76:52:56:ee:1d:de:c3:45: a6:27:ac:f8:df:d1:2c:25:f5:7a:00:b2:e4:36:b5:f9:e8:c7: e3:62:3c:79:bb:1c:61:35:04:f2:af:80:48:b0:b8:08:b7:d8: cf:1c:3d:d8:f9:1f:c7:fd:98:58:91:a5:29:c9:3b:7e:f8:7b: 17:bd:db:4b:2d:31:68:38:c1:0d:c8:f6:c5:6d:9b:c6:5b:96: 15:8d:7f:25:26:53:b5:f3:30:63:17:45:f3:f6:fa:89:ed:3f: f3:5f:e7:52:c1:19:ec:a8:4d:ee:ba:12:9b:32:ee:1c:b4:58: 5d:1e:10:34:2f:f2:44:a1:23:0d:e4:d4:32:4a:9f:7e:1d:f0: f0:cc:8b:d5:91:4b:52:70:21:7b:ee:c4:da:32:54:99:a8:3d: 8c:e3:d1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WnBkNRwbsbMawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk Y2E4YTc0ODMtOTQ3NC00MDNiLTljNGItNDRiYWJiMzkyNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/U+lVDNSyTKOA0tMXlnqO5IRtnc8HPiMso+ iHcrLKhk/dA2Wlj5Ik75jTN6PIRtTEIwSCXBhs9OFHrPnU6ZUMaK6cFN6zpcgj8V MajCULLyOfWpfDE8fa/SL4bvRg/HZF4ctURiREX+0kEmtYvSc76bgEYD+2giCyZf Vp8kEcANmxTStNUljWhKyyNPE+hPvLOAiSlV1gxHAejwAwiuoR3Fx670g3T1wMcf ovw/sMpDbp41iur89ql5dLZ4IGQzJJfm5NekUyaa9B+YEB50F9irLnQ8B/5gBvG1 D00IhMslOMgupZsK0x1S5WPdFlrK11wAh8hzF7xoN9cx/s+IdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBriUu4oGefZ//xPqfcvRqQAH3SmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOTVlMzJjMjQtOTcyNC0z MDQ0LWJiYmUtNDBjY2I4ODA2NjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHFxyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEIKVlbqAKK85DWDFRQ4Cx6GBcPqGZdNo3UgQ6HEONfdHZ/I1BPfafH I6OQyQ6PguXxJ9MoDREbu0iUyKUTwKejm+zm5uyApPEICweydvpDVZwS8NvvTH8c cVnc5nfDhyJYzBd2UlbuHd7DRaYnrPjf0Swl9XoAsuQ2tfnox+NiPHm7HGE1BPKv gEiwuAi32M8cPdj5H8f9mFiRpSnJO374exe920stMWg4wQ3I9sVtm8ZblhWNfyUm U7XzMGMXRfP2+ontP/Nf51LBGeyoTe66Epsy7hy0WF0eEDQv8kShIw3k1DJKn34d 8PDMi9WRS1JwIXvuxNoyVJmoPYzj0f8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:29 2025 by rpki-client