$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1a30bd2-21d8-3084-b201-213a380b5aee.roa File: a1a30bd2-21d8-3084-b201-213a380b5aee.roa (raw, json) Hash identifier: dWz+/agsdkYpwjy+rBMxZyZYvUaYpK38pNhqB8FLGuM= Subject key identifier: 0D:AA:32:63:FD:0B:3C:21:F6:7A:66:D2:0A:69:3E:F6:04:63:5D:15 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F432858485B6C4B173A85D469F4ED3100 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1a30bd2-21d8-3084-b201-213a380b5aee.roa Signing time: Sat 28 Dec 2024 14:03:39 +0000 ROA not before: Sat 28 Dec 2024 14:03:39 +0000 ROA not after: Fri 28 Mar 2025 13:03:39 +0000 asID: 14618 IP address blocks: 23.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6c:4b:17:3a:85:d4:69:f4:ed:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Dec 28 14:03:39 2024 GMT Not After : Mar 28 13:03:39 2025 GMT Subject: CN=b155ab08-49f0-4431-9254-daeab1f0b91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:28:1a:f1:a8:04:a1:5d:53:48:ac:f7:7b: bb:cb:84:aa:d6:10:54:c4:0c:80:fe:2e:18:a8:7e: 26:5e:23:c9:07:dd:4e:c8:82:ad:39:c5:bb:d6:f9: df:33:4a:2a:f0:84:21:36:c8:fa:cb:84:1c:f1:9c: b7:35:ca:a2:e4:03:83:ef:2d:b6:2b:fc:75:56:e8: aa:bd:33:c5:c3:7c:52:58:7a:b8:be:7d:23:fa:7f: b7:be:38:b2:a8:16:7d:82:6f:6b:9b:c5:a1:3e:ee: af:f9:69:42:dc:71:aa:cf:1f:82:24:37:b0:47:13: 03:32:51:17:de:3c:65:df:31:eb:30:9b:ed:94:36: b2:15:71:fa:8f:e9:2c:7d:aa:75:03:80:1b:01:58: 02:3f:15:03:ad:f3:e2:41:bc:3d:a5:16:dc:d8:03: 82:a7:0d:ac:0e:b4:83:93:bd:70:11:5c:d5:5c:63: 47:7b:bb:1e:09:3b:8c:23:4a:1d:10:c2:a2:44:4f: 7e:b4:10:1b:d2:ea:0f:17:d5:d9:3d:fa:43:9a:91: 1d:e0:a1:a7:b2:c0:f6:40:c5:8a:10:69:93:19:5a: 2f:79:f3:4f:ed:07:ed:b5:51:64:5b:e1:59:89:39: c3:5d:0b:90:e9:bd:04:da:db:f9:5e:a2:31:1f:4c: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AA:32:63:FD:0B:3C:21:F6:7A:66:D2:0A:69:3E:F6:04:63:5D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1a30bd2-21d8-3084-b201-213a380b5aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 23.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:16:72:af:92:06:53:b5:c2:da:38:00:d9:2a:7f:0e:21:42: eb:0a:82:6a:7c:38:24:6c:28:63:33:2f:bf:34:0c:e2:53:0b: 52:ff:eb:e5:e2:2a:cf:a9:06:fa:3e:1c:a8:e5:0b:a5:31:60: 2d:e8:60:b4:48:e5:7e:cb:6c:c2:9f:f9:38:62:47:7f:75:b9: ac:eb:80:dd:29:55:2d:e7:f3:3c:57:05:f4:12:a6:ad:f5:e2: a3:44:68:2c:5d:9e:62:e6:08:15:36:53:f8:5d:72:94:1c:c5: f9:5b:bb:34:a2:d3:e5:5e:5a:6f:2e:52:1a:17:60:6e:83:e5: fe:9f:b3:5d:92:a9:d6:51:ba:2a:a8:7e:ca:1b:44:a8:d3:d0: a1:68:ea:30:3f:55:4a:72:88:c9:3a:76:56:f3:85:31:d2:09: 5a:d4:8e:a5:5e:08:01:ac:7e:6f:3f:e3:f4:d5:8c:50:bf:23: 89:e5:81:2b:c1:1b:28:12:11:2c:53:10:18:87:cd:5d:0c:3f: 62:b7:c5:d2:00:c6:4d:53:72:a4:9f:a1:b5:da:3b:21:d0:d9: 4f:86:5c:be:0a:64:45:7d:80:1f:31:47:b6:d7:3f:e5:5c:c5: b2:5e:7d:f6:c9:9b:c3:ca:aa:58:f4:be:15:95:54:fe:5c:6e: e8:79:a6:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbbEsXOoXUafTtMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI0MTIyODE0MDMzOVoXDTI1MDMyODEzMDMzOVowLzEtMCsGA1UEAxMk YjE1NWFiMDgtNDlmMC00NDMxLTkyNTQtZGFlYWIxZjBiOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A8oGvGoBKFdU0is93u7y4Sq1hBUxAyA/i4Y qH4mXiPJB91OyIKtOcW71vnfM0oq8IQhNsj6y4Qc8Zy3Ncqi5AOD7y22K/x1Vuiq vTPFw3xSWHq4vn0j+n+3vjiyqBZ9gm9rm8WhPu6v+WlC3HGqzx+CJDewRxMDMlEX 3jxl3zHrMJvtlDayFXH6j+ksfap1A4AbAVgCPxUDrfPiQbw9pRbc2AOCpw2sDrSD k71wEVzVXGNHe7seCTuMI0odEMKiRE9+tBAb0uoPF9XZPfpDmpEd4KGnssD2QMWK EGmTGVovefNP7QfttVFkW+FZiTnDXQuQ6b0E2tv5XqIxH0yhcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2qMmP9Czwh9npm0gppPvYEY10VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvYTFhMzBiZDItMjFkOC0z MDg0LWIyMDEtMjEzYTM4MGI1YWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMWcq+SBlO1wto4ANkqfw4hQusKgmp8OCRsKGMzL780DOJTC1L/6+Xi Ks+pBvo+HKjlC6UxYC3oYLRI5X7LbMKf+ThiR391uazrgN0pVS3n8zxXBfQSpq31 4qNEaCxdnmLmCBU2U/hdcpQcxflbuzSi0+VeWm8uUhoXYG6D5f6fs12SqdZRuiqo fsobRKjT0KFo6jA/VUpyiMk6dlbzhTHSCVrUjqVeCAGsfm8/4/TVjFC/I4nlgSvB GygSESxTEBiHzV0MP2K3xdIAxk1TcqSfobXaOyHQ2U+GXL4KZEV9gB8xR7bXP+Vc xbJeffbJm8PKqlj0vhWVVP5cbuh5pks= -----END CERTIFICATE-----Generated at Wed Feb 5 09:48:16 2025 by rpki-client