$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa File: 8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa (raw, json) Hash identifier: q/evmUn9FXDmCmDNRN3BArdp056v+fbUWnxbS1ppCcI= Subject key identifier: 80:B1:B9:FC:87:C4:DE:03:2C:EF:55:6B:E6:F2:6E:6A:DA:59:8B:32 Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Certificate serial: 010D0C9F43285848854B3220E8577ED7F4C83E40 Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 20417 IP address blocks: 23.128.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:32:20:e8:57:7e:d7:f4:c8:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=8a6e0d51-e2fa-4f3a-b46a-670133eac3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:63:05:8e:f7:b5:69:72:12:c4:2c:1a:6f: 0d:04:08:7d:6d:74:92:80:55:4b:97:54:36:f9:99: 77:9c:33:5b:56:3e:ed:72:04:7a:09:2e:b6:cc:31: ab:83:e3:85:65:62:33:14:95:35:d7:b5:8f:ee:d0: b4:07:37:7c:e0:45:47:74:be:0a:27:db:cc:43:83: 33:05:a0:19:55:ae:8a:eb:d4:d7:e9:3a:80:88:50: 10:51:c7:3e:ab:3c:b7:72:21:dc:91:64:79:84:d8: aa:f0:46:e4:54:49:1d:de:81:90:cc:d6:80:79:b9: b7:76:83:e0:a7:bb:68:26:44:e2:03:ed:34:bb:1e: e7:91:09:26:2e:88:d5:20:5f:35:ee:df:7e:4a:63: 5e:f1:8b:0b:ab:bb:e3:d3:38:6c:5a:31:5f:14:ae: 6b:e3:34:60:c1:b0:68:0a:eb:7c:a6:7d:35:d9:94: ff:93:8f:35:c0:8a:2d:b9:c8:c1:7e:e6:91:30:62: b7:bf:f9:20:d6:3c:1c:cd:a9:d3:59:27:05:d1:0b: 5a:f3:21:70:69:87:3b:7f:dd:0c:2e:d6:9d:c2:a2: b7:61:b6:c3:3b:24:11:cb:01:bf:d5:1b:75:ad:53: 26:c6:9f:c2:97:c0:e6:c1:f2:12:f8:09:9a:47:8e: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B1:B9:FC:87:C4:DE:03:2C:EF:55:6B:E6:F2:6E:6A:DA:59:8B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl X509v3 Authority Key Identifier: keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer sbgp-ipAddrBlock: critical IPv4: 23.128.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7b:98:fd:7f:bf:a4:a6:98:cf:ac:2e:59:0b:95:d3:36:8f: 55:60:ee:08:2e:b9:6b:ed:99:db:6b:9a:2b:8b:c8:83:30:48: 5e:d1:f7:63:dd:ca:4e:ef:92:03:89:99:a0:35:f6:6d:53:4e: 16:ff:1b:5d:63:c7:a3:16:5a:70:db:f4:9c:a0:3c:46:ed:15: 76:54:dc:a7:1e:df:65:fa:5d:47:36:d0:5d:e1:b3:ba:85:d0: e9:83:8d:cd:6a:33:eb:6f:ab:83:3b:8f:05:fe:fe:ce:f7:fd: d7:af:56:83:18:4f:a9:d2:4e:a7:15:fd:89:01:3a:31:a2:5c: 56:db:38:d5:42:08:e2:5a:a3:d8:e5:c3:3c:a5:50:ff:06:ba: 44:5b:0e:04:96:72:f8:33:0a:ab:ce:49:cc:c2:33:0e:d6:67: 31:36:52:88:b9:6b:ea:3b:c8:53:00:c3:ca:60:5b:55:99:e4: df:1e:ff:8c:26:50:12:2a:05:ae:02:29:9f:9c:e3:e1:98:1b: ae:37:d6:65:c1:bb:9a:47:09:00:02:8c:70:2c:01:95:c8:bf: 96:a7:19:dc:40:b7:ef:c6:7e:95:db:8f:0f:a6:ff:37:1c:a3: a7:31:eb:77:a4:23:3f:44:e8:00:7c:8c:6e:a5:d8:31:02:8c: 75:9b:c9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFSzIg6Fd+1/TIPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4 ODM2MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk OGE2ZTBkNTEtZTJmYS00ZjNhLWI0NmEtNjcwMTMzZWFjM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1xjBY73tWlyEsQsGm8NBAh9bXSSgFVLl1Q2 +Zl3nDNbVj7tcgR6CS62zDGrg+OFZWIzFJU117WP7tC0Bzd84EVHdL4KJ9vMQ4Mz BaAZVa6K69TX6TqAiFAQUcc+qzy3ciHckWR5hNiq8EbkVEkd3oGQzNaAebm3doPg p7toJkTiA+00ux7nkQkmLojVIF817t9+SmNe8YsLq7vj0zhsWjFfFK5r4zRgwbBo Cut8pn012ZT/k481wIotucjBfuaRMGK3v/kg1jwczanTWScF0Qta8yFwaYc7f90M LtadwqK3YbbDOyQRywG/1Rt1rVMmxp/Cl8DmwfIS+AmaR47rYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICxufyHxN4DLO9Va+bybmraWYsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJm ZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvOGQ1NWFjZmUtZTBlNi0z M2YwLWE5NjItOGMwNTZiNGMyOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZiZmUwMGEtM2ZkNy00MGM3LWIz YmUtMTBmOWI2OTY4ODM2L2RmYmZlMDBhLTNmZDctNDBjNy1iM2JlLTEwZjliNjk2 ODgzNi5jcmwwHwYDVR0jBBgwFoAUavSA+gtYKMjGLV4JpbBNL77AUG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5 YjY5Njg4MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt7mP1/v6SmmM+sLlkLldM2j1Vg7gguuWvtmdtrmiuLyIMwSF7R92Pd yk7vkgOJmaA19m1TThb/G11jx6MWWnDb9JygPEbtFXZU3Kce32X6XUc20F3hs7qF 0OmDjc1qM+tvq4M7jwX+/s73/devVoMYT6nSTqcV/YkBOjGiXFbbONVCCOJao9jl wzylUP8GukRbDgSWcvgzCqvOSczCMw7WZzE2Uoi5a+o7yFMAw8pgW1WZ5N8e/4wm UBIqBa4CKZ+c4+GYG6431mXBu5pHCQACjHAsAZXIv5anGdxAt+/GfpXbjw+m/zcc o6cx63ekIz9E6AB8jG6l2DECjHWbyWk= -----END CERTIFICATE-----Generated at Sun Feb 16 16:00:20 2025 by rpki-client