$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8692fdd8-8086-3810-8dcb-0d62a14759fd.roa File: 8692fdd8-8086-3810-8dcb-0d62a14759fd.roa (raw, json) Hash identifier: 5nOR3ToC92sb+SIzUcwj//OitXV6FzaNtBxl/mgvicU= Subject key identifier: 4A:43:C3:4A:5F:E6:9B:F1:F3:9F:DD:1F:B4:CF:F6:22:42:B6:48:4F Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Certificate serial: 010D0C9F43285848BD20E56AFF642A8EF3351E80 Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8692fdd8-8086-3810-8dcb-0d62a14759fd.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 134365 IP address blocks: 23.247.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e5:6a:ff:64:2a:8e:f3:35:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=8ee31ace-b33a-4f09-b3f3-91751570af3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:08:e3:f8:ae:2f:37:ad:42:b8:ac:1c:1b: 48:51:4c:43:95:74:75:44:05:1f:15:02:80:9e:bd: 8d:dd:f2:96:03:17:09:f6:c4:38:c1:10:76:0b:58: 87:a3:cf:a2:2f:fc:68:cb:e1:0c:d8:84:31:74:13: 30:61:b0:e9:f6:ab:b1:de:91:95:b1:25:c8:3f:a2: 20:f0:5c:c9:7f:a1:57:e0:9d:25:1b:ef:ce:2c:66: 1e:6e:fd:d7:f2:6b:a7:dc:e5:a8:71:7d:6a:0a:3f: 84:c9:2d:bc:b0:79:3b:e8:52:78:5a:f5:80:9a:bf: 7c:4f:c7:61:8a:57:f2:02:20:f2:24:d7:dc:1b:b1: 83:ed:08:45:1e:88:35:fe:86:7d:37:a8:75:58:e6: d9:6b:14:47:aa:1f:fe:f6:78:28:ec:fa:0c:72:71: 2d:6b:c7:3e:f7:54:2c:48:b0:ee:1c:15:50:a2:43: a0:e9:44:7e:ea:a5:d8:ac:c4:0b:89:0d:23:27:d9: 14:19:c2:d7:43:d1:e3:fc:b0:cc:a7:d5:05:77:45: 9a:8b:98:a0:40:16:e0:04:59:a4:3c:8a:ad:82:f8: 61:0e:7c:eb:67:cd:21:52:7d:4c:8e:8b:33:f1:54: 4c:00:b4:32:a5:33:16:a9:39:bd:ac:b7:ef:27:c6: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:C3:4A:5F:E6:9B:F1:F3:9F:DD:1F:B4:CF:F6:22:42:B6:48:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8692fdd8-8086-3810-8dcb-0d62a14759fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl X509v3 Authority Key Identifier: keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:84:58:5f:43:c2:66:f4:51:48:43:9a:a1:42:c9:8d:7f:1e: f6:ee:1a:fd:5f:be:07:4a:dd:54:ef:40:ec:c2:2d:50:8d:63: 6f:0c:73:dc:c4:cd:58:d8:e9:1d:da:ae:0a:f7:67:d1:1e:7e: 49:d3:16:1b:99:1f:fb:3b:36:a0:d9:ee:9a:5a:e5:5c:be:66: 1e:23:d9:cf:d9:13:ab:f4:a4:74:30:24:3b:f5:f8:ca:d2:cc: ca:37:19:b7:77:39:b7:be:e9:75:a4:03:a4:bd:13:1c:b5:32: 1e:31:56:51:95:1c:fd:de:eb:1a:6b:fe:1c:c7:01:d2:7d:36: e1:1d:f9:f1:49:ab:d4:4a:72:9d:b4:26:69:e3:fd:0a:76:64: 33:e9:e3:ef:33:73:cb:4b:98:f0:dd:a9:59:8b:a0:7b:7d:7c: 42:b9:9f:51:36:b5:e0:fe:18:b5:07:2f:89:b1:ab:5c:fc:3a: 71:63:02:e0:64:e1:3d:e5:a2:ba:2a:91:46:d6:50:fa:d2:6f: 70:61:98:71:8a:3b:25:a9:aa:b8:f3:9b:44:8b:bd:84:6d:f3: 61:d0:a8:97:59:f6:ef:63:32:b7:0c:88:77:3b:e3:52:ee:b2: 01:aa:21:10:e7:9c:e1:4d:27:d2:95:ae:63:64:53:43:6a:03: cc:c5:c2:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOVq/2QqjvM1HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj ZGIxMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk OGVlMzFhY2UtYjMzYS00ZjA5LWIzZjMtOTE3NTE1NzBhZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNAI4/iuLzetQrisHBtIUUxDlXR1RAUfFQKA nr2N3fKWAxcJ9sQ4wRB2C1iHo8+iL/xoy+EM2IQxdBMwYbDp9qux3pGVsSXIP6Ig 8FzJf6FX4J0lG+/OLGYebv3X8mun3OWocX1qCj+EyS28sHk76FJ4WvWAmr98T8dh ilfyAiDyJNfcG7GD7QhFHog1/oZ9N6h1WObZaxRHqh/+9ngo7PoMcnEta8c+91Qs SLDuHBVQokOg6UR+6qXYrMQLiQ0jJ9kUGcLXQ9Hj/LDMp9UFd0Wai5igQBbgBFmk PIqtgvhhDnzrZ80hUn1Mjosz8VRMALQypTMWqTm9rLfvJ8bFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpDw0pf5pvx85/dH7TP9iJCtkhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvODY5MmZkZDgtODA4Ni0z ODEwLThkY2ItMGQ2MmExNDc1OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0 M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5 MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyEWF9Dwmb0UUhDmqFCyY1/HvbuGv1fvgdK3VTvQOzCLVCNY28Mc9zE zVjY6R3argr3Z9EefknTFhuZH/s7NqDZ7ppa5Vy+Zh4j2c/ZE6v0pHQwJDv1+MrS zMo3Gbd3Obe+6XWkA6S9Exy1Mh4xVlGVHP3e6xpr/hzHAdJ9NuEd+fFJq9RKcp20 Jmnj/Qp2ZDPp4+8zc8tLmPDdqVmLoHt9fEK5n1E2teD+GLUHL4mxq1z8OnFjAuBk 4T3loroqkUbWUPrSb3BhmHGKOyWpqrjzm0SLvYRt82HQqJdZ9u9jMrcMiHc741Lu sgGqIRDnnOFNJ9KVrmNkU0NqA8zFwlY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:38:42 2025 by rpki-client