$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa File: fc1d422d-b307-38b9-a471-8551b35adec8.roa (raw, json) Hash identifier: nuBOGxxX9ugm2RgL6atJuGnMdmz42xQeTqFAAjX5RgI= Subject key identifier: 21:9C:C7:28:53:89:40:A7:2B:70:8C:F7:47:93:1E:A1:7D:44:94:8A Certificate issuer: /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Certificate serial: 010D0C9F43285849535DF41A913CFF2ACE41B580 Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa Signing time: Thu 27 Mar 2025 09:35:13 +0000 ROA not before: Thu 27 Mar 2025 09:35:13 +0000 ROA not after: Wed 25 Jun 2025 09:35:13 +0000 asID: 394106 IP address blocks: 23.136.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:5d:f4:1a:91:3c:ff:2a:ce:41:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Validity Not Before: Mar 27 09:35:13 2025 GMT Not After : Jun 25 09:35:13 2025 GMT Subject: CN=331fb491-74ff-4f3c-9cc7-e92b95416d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:57:2c:10:86:29:8d:0a:ce:ad:12:8b:0b: b4:81:32:b7:70:2b:7d:d9:13:30:50:39:f6:ef:c8: 59:9a:bc:69:3e:65:3b:62:cc:c1:b4:2b:75:00:0e: 6c:6f:0c:6a:15:73:79:f9:76:61:9a:7e:9a:14:6c: df:fd:95:9f:75:e8:57:b2:b7:34:58:91:77:ae:54: c5:54:ef:d1:9b:ce:78:17:9f:9a:e3:f7:84:e9:16: f6:4a:78:ec:bc:c5:03:c3:3d:8a:5f:bf:38:dc:96: 9c:1e:6c:89:ab:5b:27:a8:b7:b6:53:08:72:b6:5b: d4:6b:5d:ed:67:73:99:27:80:21:73:56:22:14:b8: 65:80:4e:70:d1:3e:ec:4a:5b:35:f8:76:6f:c5:28: b1:bb:9a:04:59:12:5f:3c:7f:af:53:bd:69:e8:45: de:9e:b1:e0:85:76:f7:86:91:6b:47:de:f5:76:b9: 10:84:be:5e:f0:89:ff:14:2c:be:37:47:8c:38:03: c9:9b:3d:d1:18:0a:00:e0:a9:93:4f:26:0a:59:df: 18:d2:4e:4a:5c:c2:b3:76:c5:14:70:fe:c1:41:12: db:3d:99:a4:1e:33:33:4a:fc:7d:bb:7d:f0:e2:a8: 8b:ba:f9:85:2d:1e:0d:a0:a3:e7:af:85:56:10:51: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9C:C7:28:53:89:40:A7:2B:70:8C:F7:47:93:1E:A1:7D:44:94:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl X509v3 Authority Key Identifier: keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer sbgp-ipAddrBlock: critical IPv4: 23.136.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4f:d2:f8:a8:ce:fa:8a:04:fa:06:af:1c:5d:23:7a:7e:02: b6:27:48:09:a0:6c:6a:05:c0:f9:d1:38:f3:89:dd:ad:56:40: fe:a9:7d:ab:67:aa:86:04:5a:69:7c:af:9b:45:8d:ee:d2:d9: f8:34:df:88:63:dd:8b:f4:ad:0a:11:58:4a:9b:da:47:19:f1: 99:c9:bc:ea:69:9d:8d:b0:4b:86:74:0b:13:ba:3e:a1:80:7b: 31:be:72:7c:b9:bb:9f:bf:27:6f:22:c8:da:40:17:00:b6:2f: ed:9d:fc:c9:09:05:65:f6:84:48:4e:23:b8:51:75:b1:17:b6: 32:f8:a6:3e:b7:c5:8b:b7:53:50:34:0f:75:b2:29:f4:9a:00: cc:2d:24:58:b6:69:6e:89:2e:2e:a1:33:e5:65:2c:ec:f9:9b: a5:5e:27:7d:2d:12:9a:47:1e:50:33:4d:b8:f4:6f:63:f0:7c: 2d:43:d3:ef:1c:4a:79:89:c4:96:37:f3:8d:34:d5:0a:e8:75: a9:9e:6f:4b:d0:63:c3:3a:3a:a0:75:f7:8e:ec:c9:b8:4a:25: 74:78:87:ce:9b:06:c8:7e:ab:9d:2c:de:cc:00:9b:8c:fa:98: 2d:95:71:cc:58:e6:6f:c5:cc:4e:4e:32:d1:81:94:9e:80:d5: 89:98:1c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTXfQakTz/Ks5BtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZTY2OWUtOGQ1ZC00YjM5LWE2OGYtNGY1MzZjYzJm NTQ2MB4XDTI1MDMyNzA5MzUxM1oXDTI1MDYyNTA5MzUxM1owLzEtMCsGA1UEAxMk MzMxZmI0OTEtNzRmZi00ZjNjLTljYzctZTkyYjk1NDE2ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+BXLBCGKY0Kzq0Siwu0gTK3cCt92RMwUDn2 78hZmrxpPmU7YszBtCt1AA5sbwxqFXN5+XZhmn6aFGzf/ZWfdehXsrc0WJF3rlTF VO/Rm854F5+a4/eE6Rb2SnjsvMUDwz2KX7843JacHmyJq1snqLe2UwhytlvUa13t Z3OZJ4Ahc1YiFLhlgE5w0T7sSls1+HZvxSixu5oEWRJfPH+vU71p6EXenrHghXb3 hpFrR971drkQhL5e8In/FCy+N0eMOAPJmz3RGAoA4KmTTyYKWd8Y0k5KXMKzdsUU cP7BQRLbPZmkHjMzSvx9u33w4qiLuvmFLR4NoKPnr4VWEFH0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGcxyhTiUCnK3CM90eTHqF9RJSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJl NjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNjMmY1NDYvZmMxZDQyMmQtYjMwNy0z OGI5LWE0NzEtODU1MWIzNWFkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWQyZTY2OWUtOGQ1ZC00YjM5LWE2 OGYtNGY1MzZjYzJmNTQ2LzFkMmU2NjllLThkNWQtNGIzOS1hNjhmLTRmNTM2Y2My ZjU0Ni5jcmwwHwYDVR0jBBgwFoAUKz2jHTp9jhffSL1srEpi0l9UvhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUz NmNjMmY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4h8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpP0viozvqKBPoGrxxdI3p+ArYnSAmgbGoFwPnROPOJ3a1WQP6pfatn qoYEWml8r5tFje7S2fg034hj3Yv0rQoRWEqb2kcZ8ZnJvOppnY2wS4Z0CxO6PqGA ezG+cny5u5+/J28iyNpAFwC2L+2d/MkJBWX2hEhOI7hRdbEXtjL4pj63xYu3U1A0 D3WyKfSaAMwtJFi2aW6JLi6hM+VlLOz5m6VeJ30tEppHHlAzTbj0b2PwfC1D0+8c SnmJxJY384001Qrodameb0vQY8M6OqB1947sybhKJXR4h86bBsh+q50s3swAm4z6 mC2VccxY5m/FzE5OMtGBlJ6A1YmYHAo= -----END CERTIFICATE-----Generated at Sun Apr 6 17:46:47 2025 by rpki-client