$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa File: 237d99b9-087a-3afe-927c-18b9bed4f66c.roa (raw, json) Hash identifier: yweTWj+9fKbeBEtTONolPcLZ5qXlGXGAIDiN1bnbFYs= Subject key identifier: 1C:CF:C3:0C:7C:05:C4:EE:A1:CB:F4:BE:50:64:D5:30:2F:F8:3E:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582107D23058F3D6BC69116 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 23.251.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:10:7d:23:05:8f:3d:6b:c6:91:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=afe90671-8eeb-4aea-aaa6-758b28b6a3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d6:30:72:ce:27:3a:69:2a:2f:f0:29:27:83: 10:23:1a:73:37:86:0c:33:45:7c:01:5c:ab:ae:f3: 19:46:eb:93:65:9b:65:85:a0:00:ac:92:29:bb:74: b9:83:65:91:cd:73:53:af:18:2d:b9:52:e3:9d:ab: 09:70:5e:75:5f:91:42:fd:ea:18:fd:2d:23:5a:3d: a0:82:da:86:51:7e:af:ee:69:1e:5b:74:bf:a8:eb: 7d:f3:b3:9f:bb:da:80:22:61:de:23:fa:2f:95:08: 92:c6:1a:9d:30:ee:72:90:e2:ce:fe:45:32:5f:ec: ca:38:0f:56:80:2f:81:fe:97:db:57:80:cd:23:f9: 20:e3:23:4f:89:55:fc:14:32:ac:a8:17:ce:5d:9c: 2a:b5:e7:a0:36:78:3d:8b:5f:dc:b6:3c:71:1f:06: b6:47:fc:66:3b:b3:81:04:3d:54:8c:f2:b8:31:81: a5:ce:4c:bf:76:1b:fc:fa:a6:b0:39:2d:20:eb:71: 18:b0:9b:e7:fb:50:5c:40:03:f2:1d:c1:29:9b:5a: 40:28:5e:63:84:f3:47:94:5b:f7:81:9b:25:86:c0: 71:94:51:34:26:05:1f:7f:79:d0:e1:5b:3c:ac:c9: c7:7b:2a:6b:33:71:fe:ba:d0:ee:40:e5:2a:75:34: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:C3:0C:7C:05:C4:EE:A1:CB:F4:BE:50:64:D5:30:2F:F8:3E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c7:29:b6:2b:8c:ac:8f:f3:e2:8a:5f:a6:97:bd:02:39:a8: c3:8e:03:2b:7d:c3:75:6c:7b:5a:99:6f:d5:1a:d5:ff:19:8a: de:6f:39:46:d3:b4:a7:11:f7:4c:87:76:f6:30:79:25:c5:15: 54:a1:db:bf:31:e4:c2:ec:b8:77:2a:bf:52:71:8c:fa:62:46: f1:c1:18:24:1f:2e:c6:e2:41:2e:e0:b5:be:88:d6:9d:97:31: ff:fa:6a:f3:06:c1:e6:67:fc:87:27:f8:c3:ac:5b:3c:b9:5f: ae:94:25:51:aa:fa:8b:df:64:83:99:76:60:c1:94:d4:4f:6c: 53:32:43:9b:af:35:06:4a:be:7b:7b:57:27:4c:ce:4d:d3:10: 5a:11:e1:69:1e:1a:45:8f:81:3c:42:66:f3:a7:4b:01:06:ee: e4:46:64:c7:e5:09:92:4a:d1:be:3e:1d:f2:55:bb:79:b2:69: 78:16:ec:86:b2:ea:12:c3:5e:4f:8e:fa:71:51:b0:89:e7:86: 3f:cf:dc:df:ce:f9:03:7e:2b:16:b9:c6:c4:73:4e:bc:c3:a1: e7:fd:fd:48:82:fe:9d:79:e9:ab:ed:74:f9:85:e2:3f:83:5e: 33:eb:ad:f5:a5:9b:3b:60:d5:50:9c:0d:2e:15:4a:00:99:f8: 68:d8:01:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghB9IwWPPWvGkRYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWZlOTA2NzEtOGVlYi00YWVhLWFhYTYtNzU4YjI4YjZhM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNYwcs4nOmkqL/ApJ4MQIxpzN4YMM0V8AVyr rvMZRuuTZZtlhaAArJIpu3S5g2WRzXNTrxgtuVLjnasJcF51X5FC/eoY/S0jWj2g gtqGUX6v7mkeW3S/qOt987Ofu9qAImHeI/ovlQiSxhqdMO5ykOLO/kUyX+zKOA9W gC+B/pfbV4DNI/kg4yNPiVX8FDKsqBfOXZwqteegNng9i1/ctjxxHwa2R/xmO7OB BD1UjPK4MYGlzky/dhv8+qawOS0g63EYsJvn+1BcQAPyHcEpm1pAKF5jhPNHlFv3 gZslhsBxlFE0JgUff3nQ4Vs8rMnHeyprM3H+utDuQOUqdTQU4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzPwwx8BcTuocv0vlBk1TAv+D4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM3ZDk5YjktMDg3YS0z YWZlLTkyN2MtMThiOWJlZDRmNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/HKbYrjKyP8+KKX6aXvQI5qMOOAyt9w3Vse1qZb9Ua1f8Zit5vOUbT tKcR90yHdvYweSXFFVSh278x5MLsuHcqv1JxjPpiRvHBGCQfLsbiQS7gtb6I1p2X Mf/6avMGweZn/Icn+MOsWzy5X66UJVGq+ovfZIOZdmDBlNRPbFMyQ5uvNQZKvnt7 VydMzk3TEFoR4WkeGkWPgTxCZvOnSwEG7uRGZMflCZJK0b4+HfJVu3myaXgW7Iay 6hLDXk+O+nFRsInnhj/P3N/O+QN+Kxa5xsRzTrzDoef9/UiC/p156avtdPmF4j+D XjPrrfWlmztg1VCcDS4VSgCZ+GjYAZ4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:12 2025 by rpki-client