$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa File: de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa (raw, json) Hash identifier: sywDQoyXHw5ie0e8/Dwb4/7kp0mPkVKa9opsu+6ypxI= Subject key identifier: 63:EF:87:AB:6A:32:21:86:CB:0E:FB:C7:A5:03:4F:0D:D4:51:19:68 Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F43285848B4C0CEE6281F295E594CBF00 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 7018 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:ce:e6:28:1f:29:5e:59:4c:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=0527b431-7396-493f-8278-03418810b80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:51:fe:3b:b3:54:ce:9a:f7:76:89:54:ab:71: 65:eb:c3:29:f4:c1:aa:3e:00:9c:4d:0f:d3:8c:41: d6:39:ed:55:52:aa:d2:8f:c9:47:89:82:24:97:77: b0:bb:41:31:b2:40:0f:8f:24:16:b6:8a:05:b9:31: db:c8:3e:4d:6f:05:0d:4a:a4:c7:1f:18:f1:44:6b: f6:17:9c:c7:97:d2:06:5e:d7:3f:55:cf:86:05:41: bd:b4:79:f2:61:64:2f:2b:f1:4b:a3:f1:95:37:6c: 89:a2:4b:68:27:31:da:18:cc:96:aa:7b:2c:03:b9: 22:a5:65:5c:e3:35:f0:9e:b5:bb:1f:58:3d:79:0d: 9a:43:39:ed:65:c8:08:db:6a:71:50:f6:36:e3:a7: ef:9f:c1:19:2e:50:e0:17:0d:fd:70:9c:a0:d4:80: 5f:26:8d:98:2f:dd:e9:66:16:1c:65:ca:6d:dd:b9: 20:06:e1:e9:df:5e:55:b6:12:5b:04:f0:d4:f5:54: d5:0b:77:f4:d9:e0:d7:6b:3b:61:b5:df:e7:9f:00: 95:1f:ee:2b:24:27:20:0c:42:80:22:4b:e7:cd:e9: 63:b5:57:00:ef:2c:14:00:86:83:34:07:f0:f7:16: 21:9e:ca:e8:3a:15:16:95:d2:6a:68:57:22:ce:78: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EF:87:AB:6A:32:21:86:CB:0E:FB:C7:A5:03:4F:0D:D4:51:19:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9c:1e:c8:23:8e:81:12:4b:4c:82:0f:ce:b1:35:0e:8a:96: 67:0a:44:2f:27:a1:e3:90:96:91:98:eb:d2:ee:65:ee:af:f5: 92:ee:18:fb:d8:43:8a:9a:dc:d0:b5:36:0d:25:53:ee:fd:f7: 32:be:73:46:91:f3:06:07:7a:00:3f:cd:55:19:8b:26:97:44: cf:14:11:89:79:5f:50:0a:b4:2f:e1:19:e3:f7:55:7a:0d:6c: bc:b4:32:ad:f6:cb:3d:60:96:bf:6f:01:78:3b:ba:44:36:01: c3:a1:4d:84:76:3f:c8:36:84:04:0f:36:5a:4e:8a:5d:54:67: ce:80:eb:0f:e2:69:9c:54:00:ad:da:b1:ae:ec:b4:c3:05:8e: d4:32:92:6c:55:8e:68:6e:9c:3e:e2:72:9b:e1:04:5a:26:be: 99:69:08:64:be:10:dc:ee:e7:72:0f:bf:09:61:7f:1c:74:dd: a6:d8:0d:ca:01:72:d5:db:75:ae:27:54:55:56:27:10:f8:fc: 1a:cd:f5:8e:ad:d7:88:12:0f:f2:b5:ca:3f:2f:50:ab:c5:c9: 43:b4:57:fd:42:18:39:48:31:68:f5:9d:8e:f3:0a:f9:c0:95: f4:1a:3f:c8:2d:f3:20:06:0f:9d:82:0a:96:84:2e:81:28:2a: 13:8f:68:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wM7mKB8pXllMvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MDUyN2I0MzEtNzM5Ni00OTNmLTgyNzgtMDM0MTg4MTBiODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVH+O7NUzpr3dolUq3Fl68Mp9MGqPgCcTQ/T jEHWOe1VUqrSj8lHiYIkl3ewu0ExskAPjyQWtooFuTHbyD5NbwUNSqTHHxjxRGv2 F5zHl9IGXtc/Vc+GBUG9tHnyYWQvK/FLo/GVN2yJoktoJzHaGMyWqnssA7kipWVc 4zXwnrW7H1g9eQ2aQzntZcgI22pxUPY246fvn8EZLlDgFw39cJyg1IBfJo2YL93p ZhYcZcpt3bkgBuHp315VthJbBPDU9VTVC3f02eDXazthtd/nnwCVH+4rJCcgDEKA IkvnzeljtVcA7ywUAIaDNAfw9xYhnsroOhUWldJqaFcizniojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPvh6tqMiGGyw77x6UDTw3UURloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvZGUxMTI4ZjYtMjQ1NC0z N2MyLTllZjItOTQ3MWVmMzZiZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2cHsgjjoESS0yCD86xNQ6KlmcKRC8noeOQlpGY69LuZe6v9ZLuGPvY Q4qa3NC1Ng0lU+799zK+c0aR8wYHegA/zVUZiyaXRM8UEYl5X1AKtC/hGeP3VXoN bLy0Mq32yz1glr9vAXg7ukQ2AcOhTYR2P8g2hAQPNlpOil1UZ86A6w/iaZxUAK3a sa7stMMFjtQykmxVjmhunD7icpvhBFomvplpCGS+ENzu53IPvwlhfxx03abYDcoB ctXbda4nVFVWJxD4/BrN9Y6t14gSD/K1yj8vUKvFyUO0V/1CGDlIMWj1nY7zCvnA lfQaP8gt8yAGD52CCpaELoEoKhOPaLk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:02 2025 by rpki-client