$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/4629cd80-43ee-392b-b239-2aae9165dd21.roa File: 4629cd80-43ee-392b-b239-2aae9165dd21.roa (raw, json) Hash identifier: N0bFybxHOIg9pUigOdzNoFNTMwmp+DYI5u5r6paxM94= Subject key identifier: 2B:8B:31:65:6D:5F:B5:A2:0F:A9:79:87:A0:02:74:75:9C:93:88:79 Certificate issuer: /CN=1df08146-5ee7-4c5b-9f08-3436e38ab3bc Certificate serial: 010D0C9F43285848B090B207947C7A2048809FA0 Authority key identifier: 55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/4629cd80-43ee-392b-b239-2aae9165dd21.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 401469 IP address blocks: 23.138.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b2:07:94:7c:7a:20:48:80:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1df08146-5ee7-4c5b-9f08-3436e38ab3bc Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=6fd8dfe7-ee89-4b6b-b743-bc06ec7d381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:4f:d8:4b:76:44:e6:e2:64:5b:8b:b1:38: 78:9e:f2:21:16:fd:d1:e7:11:2f:69:42:c3:c4:af: 53:c3:55:a6:ac:40:48:2d:71:0b:a3:d6:1b:04:62: ea:4d:97:dd:c3:31:b3:b1:23:6d:4b:d5:87:8a:3b: da:30:4c:62:0b:d8:49:b5:4f:21:9f:de:11:8b:f2: 6d:24:2c:3b:eb:e9:12:61:5b:de:df:f1:d8:a5:ac: 0e:5f:c4:ab:87:f4:6e:19:9d:34:41:44:c3:8d:98: 2d:1b:a9:55:ab:d4:c8:b1:f1:dc:58:cb:55:d5:3b: 51:2c:d3:5e:df:ca:37:b6:0b:ad:e6:6d:74:37:e7: 04:d9:3d:62:2d:bb:35:6a:d5:66:71:3e:d4:b4:40: d1:60:40:6e:36:da:4c:d5:2e:24:00:61:0e:ed:db: f1:f2:6d:97:08:33:f5:98:8a:ba:d4:a2:6b:63:43: 7f:54:40:4b:e4:4d:7a:35:4c:60:99:57:23:eb:5f: 69:fc:a5:74:33:96:5e:5c:63:1f:eb:5c:f4:01:47: 3c:f4:b2:a8:db:eb:35:c2:e0:53:49:12:ac:67:aa: 43:5a:01:aa:fc:cd:34:dc:8f:e0:49:77:e6:fc:04: 75:05:7e:d6:f0:52:04:7e:20:7d:dd:c2:b1:de:98: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:31:65:6D:5F:B5:A2:0F:A9:79:87:A0:02:74:75:9C:93:88:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/4629cd80-43ee-392b-b239-2aae9165dd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.crl X509v3 Authority Key Identifier: keyid:55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer sbgp-ipAddrBlock: critical IPv4: 23.138.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a4:b1:79:48:61:97:ab:a3:c8:96:a4:01:97:60:a0:f4:bb: eb:6a:ce:11:e0:4b:bc:12:59:e5:db:69:d9:7b:0d:a7:84:25: ca:3e:9d:a7:d6:c8:30:2b:8a:02:3c:70:5b:8e:35:96:ed:11: 4d:22:c4:f0:bc:65:3a:06:32:7a:86:2e:f6:3e:54:e1:8e:ee: a5:0d:2b:d5:e9:21:95:0f:69:00:24:5e:1b:19:1a:70:0a:79: c3:28:d3:fb:d8:3d:7c:e1:ab:b8:ed:60:a8:78:fa:20:5e:dc: 1b:be:ff:b7:48:de:10:ca:c6:9d:ba:c5:25:c1:16:ac:25:06: f6:ac:88:f0:e9:e7:4c:43:23:09:84:80:d3:ba:40:4a:82:31: 9c:bf:3b:20:a9:9b:9e:99:76:dd:4b:68:16:12:48:06:24:74: 88:91:89:7f:ad:2f:c2:f0:16:86:d6:3b:ad:e3:0a:6e:af:b7: 1b:6b:30:08:66:63:bf:42:81:ae:6c:15:09:7d:26:42:dc:fb: 46:c3:c5:fc:1d:85:09:0b:68:ab:36:78:9b:f0:04:d2:fb:f1: bb:b0:83:8d:4e:ce:6f:44:13:8a:91:92:b4:44:3b:19:ae:96: 49:6f:59:8a:eb:2a:74:50:62:8c:a7:94:be:ab:45:80:5d:50: 37:c8:22:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwkLIHlHx6IEiAn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRmMDgxNDYtNWVlNy00YzViLTlmMDgtMzQzNmUzOGFi M2JjMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk NmZkOGRmZTctZWU4OS00YjZiLWI3NDMtYmMwNmVjN2QzODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg5P2Et2RObiZFuLsTh4nvIhFv3R5xEvaULD xK9Tw1WmrEBILXELo9YbBGLqTZfdwzGzsSNtS9WHijvaMExiC9hJtU8hn94Ri/Jt JCw76+kSYVve3/HYpawOX8Srh/RuGZ00QUTDjZgtG6lVq9TIsfHcWMtV1TtRLNNe 38o3tgut5m10N+cE2T1iLbs1atVmcT7UtEDRYEBuNtpM1S4kAGEO7dvx8m2XCDP1 mIq61KJrY0N/VEBL5E16NUxgmVcj619p/KV0M5ZeXGMf61z0AUc89LKo2+s1wuBT SRKsZ6pDWgGq/M003I/gSXfm/AR1BX7W8FIEfiB93cKx3pguzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuLMWVtX7WiD6l5h6ACdHWck4h5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZGYw ODE0Ni01ZWU3LTRjNWItOWYwOC0zNDM2ZTM4YWIzYmMvNDYyOWNkODAtNDNlZS0z OTJiLWIyMzktMmFhZTkxNjVkZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWRmMDgxNDYtNWVlNy00YzViLTlm MDgtMzQzNmUzOGFiM2JjLzFkZjA4MTQ2LTVlZTctNGM1Yi05ZjA4LTM0MzZlMzhh YjNiYy5jcmwwHwYDVR0jBBgwFoAUVXHztuiyEQixlaRtbXhldvcodzMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZGYwODE0Ni01ZWU3LTRjNWItOWYwOC0zNDM2 ZTM4YWIzYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ksXlIYZero8iWpAGXYKD0u+tqzhHgS7wSWeXbadl7DaeEJco+nafW yDArigI8cFuONZbtEU0ixPC8ZToGMnqGLvY+VOGO7qUNK9XpIZUPaQAkXhsZGnAK ecMo0/vYPXzhq7jtYKh4+iBe3Bu+/7dI3hDKxp26xSXBFqwlBvasiPDp50xDIwmE gNO6QEqCMZy/OyCpm56Zdt1LaBYSSAYkdIiRiX+tL8LwFobWO63jCm6vtxtrMAhm Y79Cga5sFQl9JkLc+0bDxfwdhQkLaKs2eJvwBNL78buwg41Ozm9EE4qRkrREOxmu lklvWYrrKnRQYoynlL6rRYBdUDfIIoo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:05 2025 by rpki-client