$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa File: d2f04f8c-515d-3df4-8344-ef2648f062f4.roa (raw, json) Hash identifier: x1opNLGMG74FDSM5bcYo6P9whJUB6TIBqGUy00tD67w= Subject key identifier: E0:A2:8F:9B:46:B7:8C:4C:AD:78:82:84:90:C0:02:43:AF:88:B1:38 Certificate issuer: /CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Certificate serial: 010D0C9F43285848B090B04BA56B94F4F484FF80 Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 401461 IP address blocks: 23.128.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b0:4b:a5:6b:94:f4:f4:84:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=edb5a603-73bb-495d-b188-584dec38a2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:e6:c9:21:a7:22:84:f1:32:1e:f6:4a:ce: 2f:25:74:93:2d:cb:cd:c8:be:69:21:57:1c:d7:32: 5f:52:27:0a:ac:b2:c4:c4:e8:1f:ca:91:12:65:16: 2d:05:bd:16:8c:ac:dc:92:b5:dc:99:ec:ae:05:1c: fa:31:88:86:e8:25:76:66:f7:8b:aa:77:b7:d3:e4: 32:0d:14:27:d8:c4:52:f4:a2:06:1c:63:2c:18:c5: 34:89:fb:f6:0c:5c:29:36:f1:8a:0a:8e:d3:73:9b: 88:9b:53:35:dc:82:33:b6:8b:5a:fa:f5:e8:d0:43: 1d:65:cb:26:02:a0:ca:9b:62:7d:9e:d0:40:bc:50: 31:57:3d:16:b9:0a:9a:e5:cc:62:33:1d:fb:25:21: 95:a0:ef:16:57:91:be:af:d2:78:43:95:73:2f:de: 54:c1:b6:12:cf:a4:b2:ac:d9:46:50:a1:69:0f:61: f1:72:c9:be:25:b8:16:d8:d7:10:12:d6:63:e0:4c: b6:99:20:a4:03:38:7f:bd:b8:8c:73:c6:30:e3:1d: ae:57:3c:4d:3e:7b:eb:a9:a7:b9:93:40:87:46:81: b7:0e:7f:91:d0:77:a5:24:e4:46:29:80:d5:46:f1: e2:da:44:34:de:ea:ab:3c:ef:06:cf:be:87:31:f1: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A2:8F:9B:46:B7:8C:4C:AD:78:82:84:90:C0:02:43:AF:88:B1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl X509v3 Authority Key Identifier: keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer sbgp-ipAddrBlock: critical IPv4: 23.128.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:80:e2:5d:50:f0:c3:7d:6b:ca:76:14:8b:62:e5:9e:78:d1: ba:d6:1c:2e:1f:ad:56:6c:14:bf:53:b3:44:04:1a:88:a7:0d: 5a:79:12:5d:19:2c:c6:4c:44:8d:0c:b3:e0:bb:ba:7e:0d:f5: 12:1e:cc:0f:0d:a8:d6:80:df:72:dc:38:99:33:24:c3:f0:0c: 97:c7:6c:79:ac:65:d7:5e:d2:bd:94:31:b0:09:cd:32:13:29: 37:3c:ad:58:84:15:b8:b2:2d:e3:a5:d0:1d:63:66:d2:f2:22: 94:57:16:6f:c2:29:f7:36:f3:72:26:4a:d0:73:58:aa:85:cc: 2b:74:72:b2:1a:da:43:21:28:93:98:f2:aa:ff:86:e2:a4:cd: 8e:ad:c3:00:c8:02:9f:af:80:e0:74:01:39:d4:93:c4:71:7d: 31:59:87:ee:e4:f9:7f:3a:a4:05:e7:ea:b0:5b:6f:22:6e:12: 5a:64:cf:78:c5:59:2a:96:88:57:84:06:28:8f:d2:f2:18:80: eb:01:e3:ae:65:cc:b7:0f:63:aa:d5:c8:7a:77:2a:72:d1:70: d8:2e:7d:99:0d:9e:69:13:6e:ad:80:04:65:65:34:e0:f8:67: 04:97:df:87:20:35:fb:07:9e:a5:f8:cf:f9:40:31:d0:d2:26: 1f:73:93:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwkLBLpWuU9PSE/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3NWQzZmEtMDE3ZC00OTkxLTllZGYtMzkxMDFlNWQ3 OGI1MB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk ZWRiNWE2MDMtNzNiYi00OTVkLWIxODgtNTg0ZGVjMzhhMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXzmySGnIoTxMh72Ss4vJXSTLcvNyL5pIVcc 1zJfUicKrLLExOgfypESZRYtBb0WjKzckrXcmeyuBRz6MYiG6CV2ZveLqne30+Qy DRQn2MRS9KIGHGMsGMU0ifv2DFwpNvGKCo7Tc5uIm1M13IIztota+vXo0EMdZcsm AqDKm2J9ntBAvFAxVz0WuQqa5cxiMx37JSGVoO8WV5G+r9J4Q5VzL95UwbYSz6Sy rNlGUKFpD2Hxcsm+JbgW2NcQEtZj4Ey2mSCkAzh/vbiMc8Yw4x2uVzxNPnvrqae5 k0CHRoG3Dn+R0HelJORGKYDVRvHi2kQ03uqrPO8Gz76HMfFUXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCij5tGt4xMrXiChJDAAkOviLE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1 ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEwMWU1ZDc4YjUvZDJmMDRmOGMtNTE1ZC0z ZGY0LTgzNDQtZWYyNjQ4ZjA2MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3NWQzZmEtMDE3ZC00OTkxLTll ZGYtMzkxMDFlNWQ3OGI1L2Q1NzVkM2ZhLTAxN2QtNDk5MS05ZWRmLTM5MTAxZTVk NzhiNS5jcmwwHwYDVR0jBBgwFoAUwkGOiLkb3QGcAwS1SgSyzPlOLfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEw MWU1ZDc4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACA4l1Q8MN9a8p2FIti5Z540brWHC4frVZsFL9Ts0QEGoinDVp5El0Z LMZMRI0Ms+C7un4N9RIezA8NqNaA33LcOJkzJMPwDJfHbHmsZdde0r2UMbAJzTIT KTc8rViEFbiyLeOl0B1jZtLyIpRXFm/CKfc283ImStBzWKqFzCt0crIa2kMhKJOY 8qr/huKkzY6twwDIAp+vgOB0ATnUk8RxfTFZh+7k+X86pAXn6rBbbyJuElpkz3jF WSqWiFeEBiiP0vIYgOsB465lzLcPY6rVyHp3KnLRcNgufZkNnmkTbq2ABGVlNOD4 ZwSX34cgNfsHnqX4z/lAMdDSJh9zkxY= -----END CERTIFICATE-----Generated at Sat Apr 12 16:22:21 2025 by rpki-client