$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa File: a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa (raw, json) Hash identifier: flcqWKZuc07UCADokd9dj2EtO/jzsb5zizXIHAzmjv4= Subject key identifier: E0:5C:11:EC:6A:65:B8:A5:55:F2:4A:BC:DD:42:74:5C:C7:9A:75:16 Certificate issuer: /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Certificate serial: 010D0C9F43285848ADC607ECE30CCE416D0F6BE0 Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 401473 IP address blocks: 23.128.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:07:ec:e3:0c:ce:41:6d:0f:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=905207b5-4b90-45ba-aa94-e25f2f01e90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:a2:8c:de:ce:a8:e2:e7:5d:b3:ee:0f:92: d0:4b:c5:83:69:6e:f9:22:5e:ee:95:6b:1d:1c:99: 20:79:91:1a:88:92:8a:e6:b8:72:53:2e:1d:f6:b6: 24:b5:9d:dd:98:33:f2:e1:28:b0:da:fa:65:49:8f: d2:b1:35:09:c9:ef:05:05:b4:14:2e:45:b1:ac:9a: 4b:30:c1:2d:6e:a1:0b:5a:da:e1:9e:43:8f:7c:ec: 3d:ce:48:3a:78:43:ff:2a:49:67:0e:81:1d:b8:08: 98:91:fa:cf:18:65:03:24:3f:9c:25:2e:4a:5f:3d: 18:9a:c9:e8:a7:0f:a0:1c:19:79:84:aa:aa:0e:43: 55:08:93:71:59:0d:8b:01:a5:88:87:33:bf:66:a4: b1:8b:85:69:34:7a:d7:b9:c9:ba:1f:b1:3e:e7:e4: 3b:64:08:e8:3e:ca:89:90:58:19:d3:94:f6:b7:7e: c7:ae:01:19:d3:b7:55:8e:60:cb:b1:09:d0:c9:80: c6:11:ba:62:58:2a:36:3d:4c:df:a1:a0:c0:9c:52: 8a:e1:59:52:13:e1:ea:69:e0:8a:03:5b:07:5b:8b: fc:b6:55:82:65:67:5a:fc:85:86:87:37:97:aa:4d: e2:1e:88:84:b6:2a:85:08:f4:55:8c:2b:94:e4:da: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5C:11:EC:6A:65:B8:A5:55:F2:4A:BC:DD:42:74:5C:C7:9A:75:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl X509v3 Authority Key Identifier: keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer sbgp-ipAddrBlock: critical IPv4: 23.128.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c0:92:88:3a:77:01:cf:68:fd:5f:5c:2c:3b:94:90:d8:b4: df:1f:23:a7:cf:e8:37:7b:29:55:e6:b3:ed:3b:76:4b:aa:e7: bb:6a:90:95:e6:f2:29:6a:5e:ab:fa:98:20:b0:1b:10:9e:99: a2:6d:6f:4f:3f:81:ce:a0:cc:05:67:67:67:a5:18:d7:5f:4f: df:50:b6:8a:f3:4d:06:46:f7:8e:a1:40:54:f1:93:92:bd:4c: ce:f6:a4:0d:9e:9a:0e:f5:c5:1b:f8:37:ec:ab:8e:02:d2:da: 83:2d:96:2b:cf:de:fc:3e:f3:68:ca:08:5e:0e:da:d0:87:9c: 8f:2b:1c:50:d8:fd:e7:8a:6f:0b:62:d9:7b:eb:14:7e:14:c6: 31:76:6d:5e:0d:69:20:63:2d:94:bf:1a:74:27:37:5e:df:7f: e6:b7:bb:6b:fa:a7:0f:38:23:54:4f:35:31:1c:3d:b6:61:4e: 76:bd:ec:35:62:ac:50:fe:a4:4b:dd:b5:3b:a0:c5:82:8f:3c: 12:aa:03:88:b3:11:73:3e:c2:1e:bf:4f:72:38:bc:ea:6c:52: a8:33:f8:4d:74:6f:99:1b:4a:dd:c6:d1:90:e4:0e:9c:2e:9d: 50:28:10:61:77:6a:52:f9:1e:5a:cf:93:9f:80:27:53:f1:a9: af:07:1e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgfs4wzOQW0Pa+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0 NjgzMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk OTA1MjA3YjUtNGI5MC00NWJhLWFhOTQtZTI1ZjJmMDFlOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWyijN7OqOLnXbPuD5LQS8WDaW75Il7ulWsd HJkgeZEaiJKK5rhyUy4d9rYktZ3dmDPy4Siw2vplSY/SsTUJye8FBbQULkWxrJpL MMEtbqELWtrhnkOPfOw9zkg6eEP/KklnDoEduAiYkfrPGGUDJD+cJS5KXz0Ymsno pw+gHBl5hKqqDkNVCJNxWQ2LAaWIhzO/ZqSxi4VpNHrXucm6H7E+5+Q7ZAjoPsqJ kFgZ05T2t37HrgEZ07dVjmDLsQnQyYDGEbpiWCo2PUzfoaDAnFKK4VlSE+HqaeCK A1sHW4v8tlWCZWda/IWGhzeXqk3iHoiEtiqFCPRVjCuU5NoNhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBcEexqZbilVfJKvN1CdFzHmnUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFj NDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvYTM1MDhhY2YtNmFjZi0z MGY3LWI4YzAtYThkODFiMGU0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QxYzQwNmMtZmNhZS00ZDgzLTlj MWEtNWM5MzBlODE0NjgzLzNkMWM0MDZjLWZjYWUtNGQ4My05YzFhLTVjOTMwZTgx NDY4My5jcmwwHwYDVR0jBBgwFoAUmuQWvmKOqdLt6p/XSIGytTENoVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01Yzkz MGU4MTQ2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLAkog6dwHPaP1fXCw7lJDYtN8fI6fP6Dd7KVXms+07dkuq57tqkJXm 8ilqXqv6mCCwGxCemaJtb08/gc6gzAVnZ2elGNdfT99QtorzTQZG946hQFTxk5K9 TM72pA2emg71xRv4N+yrjgLS2oMtlivP3vw+82jKCF4O2tCHnI8rHFDY/eeKbwti 2XvrFH4UxjF2bV4NaSBjLZS/GnQnN17ff+a3u2v6pw84I1RPNTEcPbZhTna97DVi rFD+pEvdtTugxYKPPBKqA4izEXM+wh6/T3I4vOpsUqgz+E10b5kbSt3G0ZDkDpwu nVAoEGF3alL5HlrPk5+AJ1Pxqa8HHj8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:23 2025 by rpki-client