$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/2e353404-ccec-38a2-9e7a-bb5c36278a61.roa File: 2e353404-ccec-38a2-9e7a-bb5c36278a61.roa (raw, json) Hash identifier: whGcx5JwFNsCkfBe2QWPSWOsyOlFKEBv7eqdMzuGoxM= Subject key identifier: 8C:88:50:5B:6B:DA:0F:EA:1D:43:D1:83:17:D3:0D:6C:43:C5:3B:C0 Certificate issuer: /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Certificate serial: 010D0C9F4328584894A5E1FDC9A8E977862AE420 Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/2e353404-ccec-38a2-9e7a-bb5c36278a61.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 395261 IP address blocks: 23.155.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e1:fd:c9:a8:e9:77:86:2a:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=19241ca8-8e2e-4fe2-9143-258521a26293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:fb:7c:db:fb:de:b7:98:9a:9c:90:ca:f1: 2c:a7:9a:f0:c4:94:c3:97:78:d9:c0:15:47:ec:01: 87:71:63:a5:9c:82:20:ee:98:2d:56:40:c1:ba:b9: 81:7d:85:e3:a6:fe:38:9b:88:cb:04:16:4b:f6:c8: 0b:4b:47:bd:c5:1a:56:d3:a0:d5:9e:87:84:cf:bc: 28:fa:d3:3a:b3:7d:f9:9b:27:3e:b6:56:70:f8:f2: c8:6a:e7:c3:f2:ac:20:87:5b:00:44:d3:ae:2c:50: 29:8c:90:cd:f3:09:88:83:89:c2:ea:59:55:82:5d: 00:bb:33:75:1c:8e:88:82:4a:23:c5:5e:ca:24:8a: 88:ce:e9:66:97:9d:c9:f0:ba:ec:8c:fe:42:64:b4: 1d:4f:cb:b9:aa:7d:87:66:9c:2f:76:cc:f2:45:7b: 06:9c:30:d3:dc:d5:e9:c4:27:b8:c7:23:2f:1f:16: d2:00:a4:99:7d:05:ff:af:63:e2:37:1d:9a:cd:b2: 83:a6:2f:77:5b:99:26:f3:26:73:d1:4f:ab:da:2c: 41:01:e4:a8:95:fc:2f:0b:ad:8d:80:b2:60:6a:5b: af:a0:8d:e4:60:42:88:bd:23:46:50:0b:52:74:fa: 7f:20:e2:c1:cd:05:87:79:18:d6:a5:53:5c:6b:9c: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:88:50:5B:6B:DA:0F:EA:1D:43:D1:83:17:D3:0D:6C:43:C5:3B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/2e353404-ccec-38a2-9e7a-bb5c36278a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl X509v3 Authority Key Identifier: keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer sbgp-ipAddrBlock: critical IPv4: 23.155.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:71:d3:f3:85:c0:eb:08:26:64:c7:04:3d:e5:d2:39:02:98: 78:ad:96:1f:b9:81:ff:8c:16:d5:39:2f:4c:6d:5f:e6:d0:98: 98:ee:18:2e:1b:fd:7d:60:af:60:41:eb:ad:cb:a6:61:b1:c2: 4d:70:b0:1e:0f:72:c3:10:78:9b:df:78:fe:87:3d:a8:1a:7d: 8c:95:29:61:44:8e:be:fb:09:35:8b:d8:ad:3e:55:78:cc:81: 64:71:bd:a0:76:01:7e:f1:47:17:10:94:11:da:ca:bf:b5:10: 6a:a5:a0:3e:48:0c:94:18:e3:4a:18:6b:f9:52:19:01:a7:c1: cc:58:b2:bc:94:25:93:0e:be:ad:72:c0:4a:e9:5f:f3:4f:be: 6b:ae:39:cb:66:ad:f3:de:57:f7:cd:df:26:00:77:cd:44:83: 82:80:fc:b0:62:f8:58:0d:98:76:07:7c:55:3d:92:46:52:79: 19:18:8c:f9:98:af:df:cd:a5:fd:3d:ca:ff:98:cb:d7:7d:8a: bd:51:54:76:1e:4c:e2:1a:8b:47:ce:ac:f5:c4:59:24:85:77: 76:3b:e8:ca:e0:fd:fa:c9:70:1a:1f:de:1a:c5:1a:06:75:8d: bf:85:21:c7:f2:af:58:e9:e8:3f:75:ed:1b:07:c2:dc:b3:68: 42:10:51:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeH9yajpd4Yq5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzMmU1ZmQtMzc0ZS00MzBmLTlhZjMtMzA4YzFlYzZj NzJkMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk MTkyNDFjYTgtOGUyZS00ZmUyLTkxNDMtMjU4NTIxYTI2MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn/7fNv73reYmpyQyvEsp5rwxJTDl3jZwBVH 7AGHcWOlnIIg7pgtVkDBurmBfYXjpv44m4jLBBZL9sgLS0e9xRpW06DVnoeEz7wo +tM6s335myc+tlZw+PLIaufD8qwgh1sARNOuLFApjJDN8wmIg4nC6llVgl0AuzN1 HI6IgkojxV7KJIqIzulml53J8LrsjP5CZLQdT8u5qn2HZpwvdszyRXsGnDDT3NXp xCe4xyMvHxbSAKSZfQX/r2PiNx2azbKDpi93W5km8yZz0U+r2ixBAeSolfwvC62N gLJgaluvoI3kYEKIvSNGUAtSdPp/IOLBzQWHeRjWpVNca5xqBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyIUFtr2g/qHUPRgxfTDWxDxTvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NjMy ZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhjMWVjNmM3MmQvMmUzNTM0MDQtY2NlYy0z OGEyLTllN2EtYmI1YzM2Mjc4YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDYzMmU1ZmQtMzc0ZS00MzBmLTlh ZjMtMzA4YzFlYzZjNzJkLzQ2MzJlNWZkLTM3NGUtNDMwZi05YWYzLTMwOGMxZWM2 YzcyZC5jcmwwHwYDVR0jBBgwFoAUjNzpjNBqpO6W666ZAcVHnYuuD+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NjMyZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhj MWVjNmM3MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5uBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhx0/OFwOsIJmTHBD3l0jkCmHitlh+5gf+MFtU5L0xtX+bQmJjuGC4b /X1gr2BB663LpmGxwk1wsB4PcsMQeJvfeP6HPagafYyVKWFEjr77CTWL2K0+VXjM gWRxvaB2AX7xRxcQlBHayr+1EGqloD5IDJQY40oYa/lSGQGnwcxYsryUJZMOvq1y wErpX/NPvmuuOctmrfPeV/fN3yYAd81Eg4KA/LBi+FgNmHYHfFU9kkZSeRkYjPmY r9/Npf09yv+Yy9d9ir1RVHYeTOIai0fOrPXEWSSFd3Y76Mrg/frJcBof3hrFGgZ1 jb+FIcfyr1jp6D917RsHwtyzaEIQUQs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:52 2025 by rpki-client