$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa File: e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa (raw, json) Hash identifier: dVZILlvReZhu5kHj68XBR6fyAf1uF7iC7bP9kFUItPE= Subject key identifier: C8:1C:61:87:00:67:F8:4F:7C:68:36:D3:A5:47:BC:94:20:AA:BA:B0 Certificate issuer: /CN=74abbfb2-e5dc-4531-8f8b-856399f8fa45 Certificate serial: 010D0C9F43285848E9CBEBD75854FBC312920B80 Authority key identifier: 08:12:D1:FE:DD:1B:0E:26:9D:4C:D4:93:35:35:92:84:7B:F8:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 23.188.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:eb:d7:58:54:fb:c3:12:92:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74abbfb2-e5dc-4531-8f8b-856399f8fa45 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=0c70f19d-a863-4d84-aee1-e0210184826b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:7c:ec:11:41:18:91:fd:c8:60:22:05:93: 21:11:64:ad:0b:b2:65:89:93:e4:f0:fc:2d:11:f5: 5b:bb:53:94:de:ca:1b:9c:3e:48:55:10:7d:3f:00: 19:91:01:8e:bb:f2:a8:e5:3a:26:4f:3a:34:52:2e: e6:4d:30:af:65:4c:18:e0:93:f8:69:10:9c:d7:21: e0:b8:09:29:71:ed:5f:a5:a7:b8:d2:b9:1e:13:db: 76:2f:f9:cf:c0:ff:a6:4b:11:71:f8:7d:ea:36:8a: 9b:87:20:8d:89:2b:06:1f:32:9a:2f:27:db:47:2c: e8:96:a1:2b:1e:68:01:cd:1f:ee:17:bb:c0:19:93: 07:7a:e3:70:a7:e5:01:9f:27:92:ba:85:97:73:1e: 11:05:6c:af:a5:21:57:04:b4:af:80:f5:ec:bb:bb: ff:15:6d:89:3f:27:60:e7:13:60:95:12:39:a7:ee: b7:98:84:fd:e9:86:5c:40:5e:c7:e3:25:99:a0:1b: cb:fe:f0:b0:47:e1:52:4a:d6:06:e2:31:cf:ea:71: fd:51:31:da:0a:ca:94:28:cc:14:02:cc:84:8f:c7: e5:39:05:ac:80:7f:41:62:25:c6:4d:99:88:ef:b8: 0d:9d:78:3d:a9:61:05:8f:bf:58:a9:e7:2e:dd:b1: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1C:61:87:00:67:F8:4F:7C:68:36:D3:A5:47:BC:94:20:AA:BA:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.crl X509v3 Authority Key Identifier: keyid:08:12:D1:FE:DD:1B:0E:26:9D:4C:D4:93:35:35:92:84:7B:F8:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer sbgp-ipAddrBlock: critical IPv4: 23.188.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:04:a1:ef:9a:02:ca:9d:45:d2:2e:b0:7f:41:3b:dd:ab:a4: 35:cf:b7:59:f3:59:7c:48:cc:1c:40:3b:9c:31:4c:d2:07:b4: 6e:a8:27:b7:85:ce:e8:c7:17:85:29:ee:f6:6a:22:0d:bf:4f: 21:33:6f:15:2a:07:83:cd:d4:2b:b3:c8:a6:1b:51:45:32:21: 60:79:4a:09:1d:e8:8e:c8:1f:fc:d7:3a:6f:5b:b2:5f:16:55: a3:d4:76:69:4f:18:d4:28:34:cf:2f:e2:57:6a:b2:56:75:00: f9:83:6c:79:83:13:e6:f6:d4:3f:5e:b1:6c:8f:a9:11:f7:6c: 56:c7:f6:ba:e2:f3:b6:64:dc:85:83:c0:a7:48:cc:30:fe:71: 82:b2:0b:78:88:6a:6f:65:a2:c9:a3:2a:ea:a8:9d:b6:e9:f3: 30:90:7b:47:be:a6:85:e2:00:53:7a:57:cf:6e:ab:09:06:bc: c9:50:a8:a8:2b:08:8d:89:1f:a7:8c:4d:b2:ca:f9:b3:66:b1: da:3c:7b:dc:42:fb:ca:36:f2:19:4c:49:05:15:52:52:e0:bd: 63:57:3e:ee:67:45:32:d3:ae:22:34:3a:cf:94:f1:af:b1:a7: 3d:58:63:ae:29:f6:09:f5:89:e2:c1:f2:39:aa:b7:45:a2:9c: b0:44:cb:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+vXWFT7wxKSC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhYmJmYjItZTVkYy00NTMxLThmOGItODU2Mzk5Zjhm YTQ1MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MGM3MGYxOWQtYTg2My00ZDg0LWFlZTEtZTAyMTAxODQ4MjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2V87BFBGJH9yGAiBZMhEWStC7JliZPk8Pwt EfVbu1OU3sobnD5IVRB9PwAZkQGOu/Ko5TomTzo0Ui7mTTCvZUwY4JP4aRCc1yHg uAkpce1fpae40rkeE9t2L/nPwP+mSxFx+H3qNoqbhyCNiSsGHzKaLyfbRyzolqEr HmgBzR/uF7vAGZMHeuNwp+UBnyeSuoWXcx4RBWyvpSFXBLSvgPXsu7v/FW2JPydg 5xNglRI5p+63mIT96YZcQF7H4yWZoBvL/vCwR+FSStYG4jHP6nH9UTHaCsqUKMwU AsyEj8flOQWsgH9BYiXGTZmI77gNnXg9qWEFj79Yqecu3bHV8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgcYYcAZ/hPfGg206VHvJQgqrqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NGFi YmZiMi1lNWRjLTQ1MzEtOGY4Yi04NTYzOTlmOGZhNDUvZTljZTZhMGUtYjFmYS0z OTg3LWI5YWQtZDcxOTU3ZDE4NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzRhYmJmYjItZTVkYy00NTMxLThm OGItODU2Mzk5ZjhmYTQ1Lzc0YWJiZmIyLWU1ZGMtNDUzMS04ZjhiLTg1NjM5OWY4 ZmE0NS5jcmwwHwYDVR0jBBgwFoAUCBLR/t0bDiadTNSTNTWShHv4QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NGFiYmZiMi1lNWRjLTQ1MzEtOGY4Yi04NTYz OTlmOGZhNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEEoe+aAsqdRdIusH9BO92rpDXPt1nzWXxIzBxAO5wxTNIHtG6oJ7eF zujHF4Up7vZqIg2/TyEzbxUqB4PN1CuzyKYbUUUyIWB5Sgkd6I7IH/zXOm9bsl8W VaPUdmlPGNQoNM8v4ldqslZ1APmDbHmDE+b21D9esWyPqRH3bFbH9rri87Zk3IWD wKdIzDD+cYKyC3iIam9losmjKuqonbbp8zCQe0e+poXiAFN6V89uqwkGvMlQqKgr CI2JH6eMTbLK+bNmsdo8e9xC+8o28hlMSQUVUlLgvWNXPu5nRTLTriI0Os+U8a+x pz1YY64p9gn1ieLB8jmqt0WinLBEywo= -----END CERTIFICATE-----Generated at Fri Mar 14 13:41:11 2025 by rpki-client