$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa File: 2798972b-fe2c-3ced-a28d-a282be3e435d.roa (raw, json) Hash identifier: sC3mLtAaUOrOzW/vmS35P6YitVPGxHbO8eP6oVSlNv0= Subject key identifier: 01:A2:D7:C9:E2:0A:B9:12:40:C8:D1:5A:6E:66:B4:15:FF:05:04:DD Certificate issuer: /CN=a683f70a-4d8a-489e-b03c-abca94cd7852 Certificate serial: 010D0C9F4328584908816C6E8E59D3F86F8CE100 Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 36369 IP address blocks: 23.131.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6c:6e:8e:59:d3:f8:6f:8c:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=9838d518-62ad-40b3-8fd2-7af6f508e3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:8d:41:8d:28:65:f7:23:3b:54:a1:e1:e7: 72:37:93:7b:6e:aa:88:6c:4c:3b:30:9c:71:cc:56: 16:f8:26:e8:02:af:32:3d:e7:a5:2b:8d:75:fd:07: f7:58:44:68:e1:29:51:aa:32:3d:a8:d7:4c:d9:b1: 89:b6:b0:3b:07:8f:73:85:9e:e5:9a:c7:22:60:e9: 3b:81:38:af:fe:1d:71:63:5f:fa:25:eb:fc:a2:8a: 59:01:08:c2:20:21:9b:96:c4:ae:64:ff:1f:37:4c: e7:99:2d:d4:9a:fb:78:4e:38:d6:12:b7:51:ed:d2: cd:e1:f5:50:3e:b9:db:30:24:74:87:e8:e0:a5:ad: ff:f0:58:51:34:88:d8:3a:9a:85:e7:44:39:f4:47: e9:2f:fb:f0:3f:15:01:9a:b6:c5:5e:5b:d1:50:4f: 7d:9a:ae:b1:cf:94:22:16:86:a1:e6:22:92:27:5a: 13:0b:1f:87:e0:1f:bd:90:0e:cd:3e:d0:2b:69:37: 8b:5f:2f:d2:02:ac:ce:23:b7:06:2c:7e:e0:93:6d: 6f:c1:dc:61:74:50:57:48:59:81:b8:4f:31:56:e9: b8:3a:3e:de:a1:21:65:7c:6a:7e:d9:d1:61:2a:87: 68:9a:9d:2b:24:a5:70:03:24:17:49:e1:db:7f:94: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A2:D7:C9:E2:0A:B9:12:40:C8:D1:5A:6E:66:B4:15:FF:05:04:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl X509v3 Authority Key Identifier: keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer sbgp-ipAddrBlock: critical IPv4: 23.131.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9a:34:e3:96:cb:d7:0a:8a:6e:cc:a4:8d:8b:15:56:09:37: 0e:cc:2b:de:d8:52:61:20:c6:1b:d1:bf:ad:76:2d:6f:32:30: 6b:ed:00:53:69:2d:a6:4f:f3:d0:26:13:1f:cb:4a:70:a2:dc: 3f:02:b5:45:6d:3a:c5:dc:be:d7:4b:e5:97:be:3a:ba:20:e7: e9:2b:d0:71:8c:95:68:a5:1e:8b:8d:d5:9e:c3:75:bd:2d:57: 40:08:31:fb:f2:80:ad:84:b4:4d:3d:0a:0a:ac:cd:e1:fe:fe: 5c:09:0f:17:a6:3a:68:44:4b:e5:37:09:03:25:aa:d9:d4:2a: af:23:52:a2:d6:56:fa:2a:2f:99:96:8e:f9:d6:35:16:a3:e1: 4c:25:7b:10:91:bb:1d:5f:a1:d2:b3:95:44:1c:a4:3d:f6:27: f7:bb:3a:b9:04:ed:39:a4:79:0f:29:07:5f:ff:6f:96:00:2a: 8e:ec:e9:4a:5e:a8:4b:f9:ff:ac:6f:c6:d9:fe:b2:f5:f5:6d: bb:be:8a:01:16:37:35:a5:be:1f:51:5c:2c:1e:56:a6:7d:8c: d0:34:d1:57:d3:5f:cf:cc:5e:bf:99:cf:5a:28:b2:58:fb:f3: 61:1e:e2:29:9c:fc:82:cf:5d:b3:81:60:f9:49:c3:9a:87:57: d9:71:a3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWxujlnT+G+M4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4M2Y3MGEtNGQ4YS00ODllLWIwM2MtYWJjYTk0Y2Q3 ODUyMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OTgzOGQ1MTgtNjJhZC00MGIzLThmZDItN2FmNmY1MDhlM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAiNQY0oZfcjO1Sh4edyN5N7bqqIbEw7MJxx zFYW+CboAq8yPeelK411/Qf3WERo4SlRqjI9qNdM2bGJtrA7B49zhZ7lmsciYOk7 gTiv/h1xY1/6Jev8oopZAQjCICGblsSuZP8fN0znmS3Umvt4TjjWErdR7dLN4fVQ PrnbMCR0h+jgpa3/8FhRNIjYOpqF50Q59EfpL/vwPxUBmrbFXlvRUE99mq6xz5Qi Foah5iKSJ1oTCx+H4B+9kA7NPtAraTeLXy/SAqzOI7cGLH7gk21vwdxhdFBXSFmB uE8xVum4Oj7eoSFlfGp+2dFhKodomp0rJKVwAyQXSeHbf5T8wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGi18niCrkSQMjRWm5mtBX/BQTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgz ZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNhOTRjZDc4NTIvMjc5ODk3MmItZmUyYy0z Y2VkLWEyOGQtYTI4MmJlM2U0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTY4M2Y3MGEtNGQ4YS00ODllLWIw M2MtYWJjYTk0Y2Q3ODUyL2E2ODNmNzBhLTRkOGEtNDg5ZS1iMDNjLWFiY2E5NGNk Nzg1Mi5jcmwwHwYDVR0jBBgwFoAUuFkDntg3BBzZjRt1Jf/q8lgoSeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgzZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNh OTRjZDc4NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyaNOOWy9cKim7MpI2LFVYJNw7MK97YUmEgxhvRv612LW8yMGvtAFNp LaZP89AmEx/LSnCi3D8CtUVtOsXcvtdL5Ze+Orog5+kr0HGMlWilHouN1Z7Ddb0t V0AIMfvygK2EtE09CgqszeH+/lwJDxemOmhES+U3CQMlqtnUKq8jUqLWVvoqL5mW jvnWNRaj4UwlexCRux1fodKzlUQcpD32J/e7OrkE7TmkeQ8pB1//b5YAKo7s6Upe qEv5/6xvxtn+svX1bbu+igEWNzWlvh9RXCweVqZ9jNA00VfTX8/MXr+Zz1ooslj7 82Ee4imc/ILPXbOBYPlJw5qHV9lxo/0= -----END CERTIFICATE-----Generated at Tue Apr 8 14:28:24 2025 by rpki-client