$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa File: 6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa (raw, json) Hash identifier: KBcl1RPSxBXmmb/6Tc2in9zveIOtfnBzxpg6y2clEms= Subject key identifier: 56:86:53:A4:B5:98:AD:F2:DE:69:24:8A:2D:54:F0:F6:E7:2C:E2:73 Certificate issuer: /CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Certificate serial: 010D0C9F43285848B090B2245369A57838D99440 Authority key identifier: 9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 399619 IP address blocks: 23.128.156.0/24 maxlen: 24 2602:f7ad::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b2:24:53:69:a5:78:38:d9:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=d1ed2e29-6c0f-45b7-9930-fa4bbc30137d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8d:0b:e4:16:2a:08:45:7e:23:d1:71:69:65: 21:80:02:04:ce:4f:90:e0:9f:d4:84:92:5b:fa:26: b7:7e:b8:0e:10:26:ae:65:cc:b6:af:5b:8c:8e:34: b3:93:3d:41:fc:37:e6:bc:88:ba:e3:e1:64:ef:67: e7:e6:f3:82:3c:7c:da:2e:cf:6e:de:20:2b:dc:cf: 54:b7:f6:75:cb:7c:1b:ae:5c:f5:47:fb:62:f8:06: cd:03:7c:8c:3a:dd:76:ff:d2:9a:e8:ee:08:44:33: 11:a9:b5:bf:ca:fd:81:f1:4a:c3:45:84:f9:70:7d: d9:ce:a4:66:65:71:1d:c6:2d:8c:66:f9:d2:d6:2e: 9f:6c:2b:c3:7e:ec:6f:db:ce:6d:3c:ec:a2:3a:85: 8c:74:13:23:2e:74:aa:a0:f0:a8:5d:d8:35:d6:5e: ba:21:36:52:aa:85:a1:64:a6:2c:16:df:49:c0:eb: 2c:13:50:3e:4a:5c:ac:d2:82:ba:7e:c4:35:f9:20: 96:84:09:76:38:de:c3:98:47:15:49:38:1b:d2:2e: 42:c3:20:75:f5:b9:16:23:83:fe:44:4e:0a:ca:ac: a6:03:7a:e2:88:e4:f6:38:d4:15:52:19:92:59:65: 91:50:a9:bf:c3:97:6f:ec:73:bd:2c:43:30:12:d1: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:86:53:A4:B5:98:AD:F2:DE:69:24:8A:2D:54:F0:F6:E7:2C:E2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl X509v3 Authority Key Identifier: keyid:9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.156.0/24 IPv6: 2602:f7ad::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:63:5f:70:07:59:cb:8c:c1:9c:88:0c:a6:23:63:9f:c3:36: 88:73:3e:d4:d2:76:92:9f:29:87:c9:ba:81:89:d5:9a:88:de: e2:78:ff:75:20:6d:1f:e1:af:40:35:66:20:8c:7a:18:68:ea: 69:96:66:be:0d:41:28:e9:4d:53:90:b7:70:00:ff:ba:23:6f: 4d:9a:1a:4b:4f:71:5f:d0:92:32:cb:21:04:88:1e:a0:eb:4b: a3:29:f9:6d:77:a5:1f:9b:00:20:3e:2a:f4:c1:4d:05:4f:8e: a5:d9:f7:91:50:74:cb:e3:45:b8:fb:d0:2d:7b:1b:6d:de:a1: ca:62:c5:d4:21:5f:79:e0:fa:0e:7a:94:89:b2:48:82:8e:e4: 16:f1:e5:11:93:05:db:6a:e1:40:a4:c0:4d:99:d9:9e:f9:19: 25:60:ef:ea:9e:46:ba:4a:62:e7:45:b5:56:5c:5f:dd:b0:1a: 95:f8:14:21:2b:f7:18:88:09:94:6c:fa:a4:6c:33:f1:db:e7: 9f:88:93:53:8a:17:9e:65:70:a3:e8:f4:cf:10:b6:ce:18:bd: a8:dd:99:62:74:11:40:14:23:b1:f0:81:5e:b8:e4:2d:36:02: 84:a1:78:fa:21:48:19:41:3c:9f:4f:f0:22:57:cd:aa:e6:36: 62:8b:ae:3d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiwkLIkU2mleDjZlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjMzdkM2QtMDVlMy00ZjViLTg1ZjItMzc0MjkyZDUw MDllMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk ZDFlZDJlMjktNmMwZi00NWI3LTk5MzAtZmE0YmJjMzAxMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY0L5BYqCEV+I9FxaWUhgAIEzk+Q4J/UhJJb +ia3frgOECauZcy2r1uMjjSzkz1B/DfmvIi64+Fk72fn5vOCPHzaLs9u3iAr3M9U t/Z1y3wbrlz1R/ti+AbNA3yMOt12/9Ka6O4IRDMRqbW/yv2B8UrDRYT5cH3ZzqRm ZXEdxi2MZvnS1i6fbCvDfuxv285tPOyiOoWMdBMjLnSqoPCoXdg11l66ITZSqoWh ZKYsFt9JwOssE1A+Slys0oK6fsQ1+SCWhAl2ON7DmEcVSTgb0i5CwyB19bkWI4P+ RE4KyqymA3riiOT2ONQVUhmSWWWRUKm/w5dv7HO9LEMwEtFfvQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFaGU6S1mK3y3mkkii1U8PbnLOJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMz N2QzZC0wNWUzLTRmNWItODVmMi0zNzQyOTJkNTAwOWUvNjEyOGMzNTEtYzFhMi0z YWFmLWJkNWItNTg2YTEwZjBlYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWZjMzdkM2QtMDVlMy00ZjViLTg1 ZjItMzc0MjkyZDUwMDllL2VmYzM3ZDNkLTA1ZTMtNGY1Yi04NWYyLTM3NDI5MmQ1 MDA5ZS5jcmwwHwYDVR0jBBgwFoAUn3ezGK3HCMBoxZf9nCsqNAP7K8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMzN2QzZC0wNWUzLTRmNWItODVmMi0zNzQy OTJkNTAwOWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CcMA4E AgACMAgDBgQmAvetADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcY19wB1nLjMGciAymI2OfwzaIcz7U0naS nymHybqBidWaiN7ieP91IG0f4a9ANWYgjHoYaOpplma+DUEo6U1TkLdwAP+6I29N mhpLT3Ff0JIyyyEEiB6g60ujKfltd6UfmwAgPir0wU0FT46l2feRUHTL40W4+9At extt3qHKYsXUIV954PoOepSJskiCjuQW8eURkwXbauFApMBNmdme+RklYO/qnka6 SmLnRbVWXF/dsBqV+BQhK/cYiAmUbPqkbDPx2+efiJNTiheeZXCj6PTPELbOGL2o 3ZlidBFAFCOx8IFeuOQtNgKEoXj6IUgZQTyfT/AiV82q5jZii649 -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:16 2025 by rpki-client