$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa File: 6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa (raw, json) Hash identifier: +iyFqqKrVNpME9A8yrqPQezGERkKeC0lcodfB1mUMjU= Subject key identifier: B2:01:43:59:8A:CA:4A:A5:46:C3:A8:43:B8:BA:C8:98:7F:AB:3F:11 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F43285848C41B7DA192060576BE430880 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 62553 IP address blocks: 23.129.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7d:a1:92:06:05:76:be:43:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=03ebf7df-4421-4e41-a2c7-55fe11a041ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:2b:8a:c9:bf:09:b5:e4:df:e8:5c:22:65: d6:bf:87:98:52:20:ea:ca:d1:32:a5:ca:81:93:ad: 8a:cf:d8:1f:5c:f0:99:99:d0:84:47:f5:39:45:11: 62:b0:5d:c4:38:c7:19:ad:dd:bc:96:48:1d:61:4f: 14:2b:26:bc:b3:44:96:7d:a6:fe:0a:09:2a:cd:51: 4f:bf:bc:de:9f:9d:5c:40:8b:ed:c7:bc:41:02:69: 53:ef:83:63:0a:7d:ff:ef:1b:e7:87:ac:c3:05:2a: 9b:d6:01:69:fa:d2:7e:fe:e8:bc:77:57:e5:b3:f5: fb:82:60:45:b7:f1:df:1e:7a:43:8d:9e:8e:74:37: 00:9e:71:08:eb:3f:54:b3:6e:b5:74:83:f1:dc:75: 3b:ca:8f:e2:0f:7e:0a:be:2d:0d:cb:61:09:91:43: f4:fc:07:a7:e2:1c:9b:3e:b3:00:37:19:2b:b3:ec: f3:20:82:c7:2a:8e:a1:35:1b:20:2a:d3:1a:84:25: 49:eb:38:3c:28:02:93:22:50:fe:65:2c:dd:77:3a: fa:db:2d:1a:2b:5d:4d:9e:c4:a4:d6:00:fd:f2:22: 7a:0a:6d:81:ba:58:7e:dc:8e:de:29:50:65:ae:05: c8:fe:7d:46:b7:35:72:11:f3:7e:45:8f:c6:f2:99: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:01:43:59:8A:CA:4A:A5:46:C3:A8:43:B8:BA:C8:98:7F:AB:3F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv4: 23.129.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e7:5b:d5:00:ba:fe:4f:03:53:7e:9c:08:8c:a8:a6:ba:3b:f2: 3e:f8:4c:ef:71:27:2f:47:53:b7:1b:d8:39:3f:92:6f:f3:98: 22:7b:20:70:b5:5e:9c:66:e1:fd:97:b0:a8:85:fa:4b:5d:5c: e6:97:ee:5f:51:7a:61:19:e4:e9:ac:5a:8e:f8:37:21:e5:76: 8f:33:a4:f0:73:1a:94:1a:03:ab:7d:c0:9e:7f:d8:a1:88:9d: 95:f4:57:9e:fb:8b:5d:c5:49:76:94:a8:99:18:3d:d4:6d:3e: ec:aa:cc:1d:cc:a5:8d:77:b3:e7:80:b1:d7:5a:b4:34:aa:21: 76:0e:db:8c:51:74:26:bf:08:fe:73:67:05:7b:14:89:ef:9d: 92:92:e6:40:f7:4a:9b:28:01:22:0f:a7:63:10:65:e0:a4:cf: 21:9f:6b:26:00:b6:d3:6f:06:70:a3:93:d3:e4:8a:22:fa:4d: d2:5c:36:71:84:17:22:37:8e:f4:94:df:32:9f:3f:7d:83:df: 2e:3c:f1:e4:2a:5d:b3:1f:aa:79:e2:b2:b6:f7:fa:bb:1c:c0: dc:8c:49:e3:54:14:07:6c:74:d5:65:84:3c:12:25:f3:ea:d0: b4:28:2e:2d:69:7c:9c:33:b4:8d:c0:24:38:b0:04:ed:0e:7a: fb:96:2b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG32hkgYFdr5DCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk MDNlYmY3ZGYtNDQyMS00ZTQxLWEyYzctNTVmZTExYTA0MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWorism/CbXk3+hcImXWv4eYUiDqytEypcqB k62Kz9gfXPCZmdCER/U5RRFisF3EOMcZrd28lkgdYU8UKya8s0SWfab+CgkqzVFP v7zen51cQIvtx7xBAmlT74NjCn3/7xvnh6zDBSqb1gFp+tJ+/ui8d1fls/X7gmBF t/HfHnpDjZ6OdDcAnnEI6z9Us261dIPx3HU7yo/iD34Kvi0Ny2EJkUP0/Aen4hyb PrMANxkrs+zzIILHKo6hNRsgKtMahCVJ6zg8KAKTIlD+ZSzddzr62y0aK11NnsSk 1gD98iJ6Cm2Bulh+3I7eKVBlrgXI/n1GtzVyEfN+RY/G8pnpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIBQ1mKykqlRsOoQ7i6yJh/qz8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvNmEzYjZlNTMtZWUzOS0z ZmU4LTgyMjUtZDBkMWU2MTA2N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOdb1QC6/k8DU36cCIyopro78j74TO9xJy9HU7cb2Dk/km/zmCJ7IHC1 Xpxm4f2XsKiF+ktdXOaX7l9RemEZ5OmsWo74NyHldo8zpPBzGpQaA6t9wJ5/2KGI nZX0V577i13FSXaUqJkYPdRtPuyqzB3MpY13s+eAsddatDSqIXYO24xRdCa/CP5z ZwV7FInvnZKS5kD3SpsoASIPp2MQZeCkzyGfayYAttNvBnCjk9PkiiL6TdJcNnGE FyI3jvSU3zKfP32D3y488eQqXbMfqnnisrb3+rscwNyMSeNUFAdsdNVlhDwSJfPq 0LQoLi1pfJwztI3AJDiwBO0OevuWKzQ= -----END CERTIFICATE-----Generated at Sat Apr 12 05:17:37 2025 by rpki-client