$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de9f86d5-f024-3d1c-b581-c322cc307c9d.roa File: de9f86d5-f024-3d1c-b581-c322cc307c9d.roa (raw, json) Hash identifier: pH1IZ9C7Bctl81gmoM+F2x3oyAIiD6IacUThHU8VN+0= Subject key identifier: 36:30:75:80:FB:43:3A:A5:FC:02:7E:6F:93:B8:29:F3:2B:B9:77:DC Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848BFEB91268D75C86409EC1BC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de9f86d5-f024-3d1c-b581-c322cc307c9d.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 3257 IP address blocks: 23.230.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:91:26:8d:75:c8:64:09:ec:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=60edf035-f433-480f-b022-80aaceb59bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:f3:e8:0a:cd:27:5d:dc:b5:fe:a4:2d:97: 61:4c:7d:36:07:fc:d6:4f:80:04:d1:9c:67:96:0b: 5f:21:79:44:91:cf:c4:b6:8d:df:29:60:b6:68:fd: 2f:85:19:78:77:9a:68:94:af:6a:50:45:1e:e5:44: a3:eb:0a:de:47:75:a9:84:0a:10:d6:d4:c6:0d:49: 72:96:8d:5a:55:e2:d7:51:f8:fb:54:51:f4:b7:43: 7b:72:71:cb:41:87:9b:b7:95:2d:1f:81:c1:5e:a6: 96:b2:4a:1c:91:25:6e:b1:1a:c2:c4:c6:38:13:1a: b1:20:54:f7:31:86:f6:48:7c:79:0e:a5:1c:a0:05: 9d:0d:e3:48:fd:74:b4:dc:5f:9d:1a:6e:cf:7c:7b: 16:9f:ff:38:b0:65:ae:cb:41:6a:72:3e:e0:48:1c: 7c:7e:d1:0d:47:0f:9c:c1:0b:b6:3b:10:33:f3:d8: f8:85:4c:33:89:14:2b:0a:de:ce:2e:d1:ce:2b:58: ac:17:20:1f:cc:0b:ce:f7:43:ac:c0:6a:52:fb:39: e0:a2:d2:36:2c:af:4b:15:f2:b0:ec:c4:3a:6e:3b: 05:3f:88:9e:d0:f5:ca:c4:de:2b:93:93:0e:23:b0: 1b:2a:3c:1b:84:e6:e8:9a:a6:e5:43:0e:44:ef:cf: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:30:75:80:FB:43:3A:A5:FC:02:7E:6F:93:B8:29:F3:2B:B9:77:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de9f86d5-f024-3d1c-b581-c322cc307c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:92:c3:9c:e5:5c:21:a0:37:97:b3:0e:84:ca:a9:bf:4d:30: c0:a2:1c:fc:49:cf:c0:0e:57:1e:32:5f:bb:f2:18:99:5d:51: a2:b4:4a:11:e9:68:f1:2e:55:bc:4f:14:45:bb:a7:f7:76:f0: b0:3e:35:d8:e3:65:54:d1:9d:5a:f1:17:53:6a:37:83:43:99: 60:7f:99:2b:2e:ae:a0:f5:7e:bc:61:e1:a1:d3:e2:28:66:05: bb:d0:b9:89:5c:74:eb:3c:eb:b3:db:2a:b2:79:fb:4c:84:59: 58:b7:5e:a8:b4:02:dc:4c:00:a5:32:9e:e0:06:66:b6:66:2b: ea:2d:8b:0c:c6:3e:b8:cc:e2:86:2c:24:c5:cc:ac:22:f2:46: 8d:db:b8:49:09:34:62:52:00:f4:27:70:5f:71:a0:66:a4:9a: 0c:ee:b5:f1:f5:0f:c6:0f:4a:db:e1:7b:01:ae:e5:d2:0f:f2: 77:9b:35:e0:5e:d9:3d:09:de:0d:b3:07:6e:b7:a6:9a:e3:c3: 40:23:14:9e:67:45:8b:18:a5:6e:b8:fa:1f:a7:20:53:94:8a: cd:36:3d:46:74:3c:77:d2:26:90:51:4a:07:65:91:b6:44:71: 43:54:91:7d:91:53:3c:fe:a1:71:51:36:9e:f6:90:cf:c8:58: c7:a4:94:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65EmjXXIZAnsG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NjBlZGYwMzUtZjQzMy00ODBmLWIwMjItODBhYWNlYjU5YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIjz6ArNJ13ctf6kLZdhTH02B/zWT4AE0Zxn lgtfIXlEkc/Eto3fKWC2aP0vhRl4d5polK9qUEUe5USj6wreR3WphAoQ1tTGDUly lo1aVeLXUfj7VFH0t0N7cnHLQYebt5UtH4HBXqaWskockSVusRrCxMY4ExqxIFT3 MYb2SHx5DqUcoAWdDeNI/XS03F+dGm7PfHsWn/84sGWuy0Fqcj7gSBx8ftENRw+c wQu2OxAz89j4hUwziRQrCt7OLtHOK1isFyAfzAvO90OswGpS+zngotI2LK9LFfKw 7MQ6bjsFP4ie0PXKxN4rk5MOI7AbKjwbhObomqblQw5E78/9KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYwdYD7Qzql/AJ+b5O4KfMruXfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGU5Zjg2ZDUtZjAyNC0z ZDFjLWI1ODEtYzMyMmNjMzA3YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+Z5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOSw5zlXCGgN5ezDoTKqb9NMMCiHPxJz8AOVx4yX7vyGJldUaK0ShHp aPEuVbxPFEW7p/d28LA+NdjjZVTRnVrxF1NqN4NDmWB/mSsurqD1frxh4aHT4ihm BbvQuYlcdOs867PbKrJ5+0yEWVi3Xqi0AtxMAKUynuAGZrZmK+otiwzGPrjM4oYs JMXMrCLyRo3buEkJNGJSAPQncF9xoGakmgzutfH1D8YPStvhewGu5dIP8nebNeBe 2T0J3g2zB263pprjw0AjFJ5nRYsYpW64+h+nIFOUis02PUZ0PHfSJpBRSgdlkbZE cUNUkX2RUzz+oXFRNp72kM/IWMeklGk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:38 2025 by rpki-client