$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cf26b717-18a5-3ae2-91f2-76f8027459e1.roa File: cf26b717-18a5-3ae2-91f2-76f8027459e1.roa (raw, json) Hash identifier: 11HdVmwVvafWh1ACMQVaWGBLicv9N8hWb4QOGs8YF+g= Subject key identifier: 5A:87:0E:C5:3B:89:7E:42:AB:04:FB:2F:C4:80:37:FB:B1:34:1B:62 Certificate issuer: /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Certificate serial: 010D0C9F43285848BA562D1F2802EEA664946980 Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cf26b717-18a5-3ae2-91f2-76f8027459e1.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 395261 IP address blocks: 23.155.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:2d:1f:28:02:ee:a6:64:94:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=fd871097-27f9-4f9f-b9f9-dd1f9c41d94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:c6:6d:1e:5b:0e:98:e0:5b:b7:0e:4e:49: 30:cd:d6:75:99:a8:95:5e:48:ea:bc:d7:82:f5:c5: 13:24:75:07:e1:30:0d:63:00:ce:e2:d4:89:13:a0: b2:a1:38:86:3f:9c:46:ba:e4:db:ae:ba:e3:20:9e: 23:95:0e:bd:a1:61:50:b6:2e:77:db:e7:76:bf:8e: 69:94:7c:e5:c4:fe:ef:f1:d9:91:74:c5:13:52:88: c4:b0:5f:25:bd:8b:04:38:db:e0:f1:dd:4a:ab:8e: 7e:be:8c:6c:69:1e:c3:c7:2a:19:ba:4a:a7:11:be: c0:3b:3c:e8:ad:a3:de:be:1d:6a:63:13:64:e0:2a: 7c:45:6f:0f:30:95:e3:89:d2:bc:26:cf:fb:1d:ab: 41:cc:6b:d3:2b:43:8b:4d:1c:59:5d:8c:b1:92:60: 4c:b3:2c:9a:98:ae:7c:fa:28:8b:b5:c4:5a:27:fa: e9:55:5d:62:78:1a:67:e9:ca:cd:1b:2d:b3:09:be: ad:82:82:84:f7:1c:68:75:5c:d2:99:2c:c2:58:d2: 39:79:fb:ca:18:e6:2f:a5:c6:c9:e5:79:3a:f0:45: 23:35:0b:40:66:1b:8a:29:6d:74:6c:4b:35:f9:b5: 2f:2a:6a:cc:7e:65:cd:da:23:ed:cb:ef:8a:a9:9b: 46:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:87:0E:C5:3B:89:7E:42:AB:04:FB:2F:C4:80:37:FB:B1:34:1B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cf26b717-18a5-3ae2-91f2-76f8027459e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl X509v3 Authority Key Identifier: keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer sbgp-ipAddrBlock: critical IPv4: 23.155.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e7:e3:55:7c:a3:43:ad:8e:dd:ee:c0:de:c2:7e:30:a3:86: e8:10:67:d4:74:fc:f8:5d:b9:19:a2:a1:d3:8d:3f:c8:0c:8d: d5:3d:a1:42:ea:5d:e2:be:cf:67:a5:fd:f5:dd:f1:b8:ce:2c: 84:31:16:17:8e:a3:c9:bf:c0:ec:fb:a6:67:13:52:52:d8:a0: c2:b2:d8:0b:7d:d6:4b:6a:53:d1:b6:a6:ba:60:7f:5a:69:6a: 49:b0:34:e1:29:1f:c6:24:05:b1:c8:44:c1:79:1f:9b:7b:44: a3:a2:e9:9c:cb:a8:5f:70:af:aa:18:7c:87:7f:03:2a:83:03: c0:2c:41:30:3d:fb:22:24:d1:3a:91:b2:2a:87:e0:8d:6c:75: b0:c4:d2:1f:99:10:80:00:e3:4f:b6:04:01:d1:ae:12:72:07: 87:12:db:ca:2f:fd:b9:13:0c:fd:d5:b7:71:96:8d:4a:bb:6f: 79:c8:98:31:54:23:3a:77:6d:c9:39:1c:4a:e6:17:d0:55:01: 2a:76:f0:57:de:6a:3f:bf:7b:ec:a7:80:5f:f5:5e:46:98:50: b3:56:99:51:80:7f:04:24:e9:5d:79:96:46:82:a1:75:5a:ce: 20:32:d1:3c:64:8a:ae:14:a6:f4:45:e4:e3:4c:82:ca:18:ad: 33:26:7b:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6Vi0fKALupmSUaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzMmU1ZmQtMzc0ZS00MzBmLTlhZjMtMzA4YzFlYzZj NzJkMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ZmQ4NzEwOTctMjdmOS00ZjlmLWI5ZjktZGQxZjljNDFkOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJbGbR5bDpjgW7cOTkkwzdZ1maiVXkjqvNeC 9cUTJHUH4TANYwDO4tSJE6CyoTiGP5xGuuTbrrrjIJ4jlQ69oWFQti532+d2v45p lHzlxP7v8dmRdMUTUojEsF8lvYsEONvg8d1Kq45+voxsaR7DxyoZukqnEb7AOzzo raPevh1qYxNk4Cp8RW8PMJXjidK8Js/7HatBzGvTK0OLTRxZXYyxkmBMsyyamK58 +iiLtcRaJ/rpVV1ieBpn6crNGy2zCb6tgoKE9xxodVzSmSzCWNI5efvKGOYvpcbJ 5Xk68EUjNQtAZhuKKW10bEs1+bUvKmrMfmXN2iPty++KqZtG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqHDsU7iX5CqwT7L8SAN/uxNBtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NjMy ZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhjMWVjNmM3MmQvY2YyNmI3MTctMThhNS0z YWUyLTkxZjItNzZmODAyNzQ1OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDYzMmU1ZmQtMzc0ZS00MzBmLTlh ZjMtMzA4YzFlYzZjNzJkLzQ2MzJlNWZkLTM3NGUtNDMwZi05YWYzLTMwOGMxZWM2 YzcyZC5jcmwwHwYDVR0jBBgwFoAUjNzpjNBqpO6W666ZAcVHnYuuD+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NjMyZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhj MWVjNmM3MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5uCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzn41V8o0Otjt3uwN7CfjCjhugQZ9R0/PhduRmiodONP8gMjdU9oULq XeK+z2el/fXd8bjOLIQxFheOo8m/wOz7pmcTUlLYoMKy2At91ktqU9G2prpgf1pp akmwNOEpH8YkBbHIRMF5H5t7RKOi6ZzLqF9wr6oYfId/AyqDA8AsQTA9+yIk0TqR siqH4I1sdbDE0h+ZEIAA40+2BAHRrhJyB4cS28ov/bkTDP3Vt3GWjUq7b3nImDFU Izp3bck5HErmF9BVASp28Ffeaj+/e+yngF/1XkaYULNWmVGAfwQk6V15lkaCoXVa ziAy0Txkiq4UpvRF5ONMgsoYrTMme58= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:46 2025 by rpki-client