$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa File: c293780d-5803-3e0e-a47f-235faa11c550.roa (raw, json) Hash identifier: mhCYodQoWUxk3PL1XauBXc5YgodPbq+kPxhFqvyOtK8= Subject key identifier: 9C:64:A8:16:E7:58:FD:17:5B:BF:9C:DF:78:3F:4E:C3:DF:92:FB:10 Certificate issuer: /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Certificate serial: 010D0C9F4328584902F36EA3B5C1704596445980 Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa Signing time: Wed 26 Feb 2025 14:15:56 +0000 ROA not before: Wed 26 Feb 2025 14:15:56 +0000 ROA not after: Tue 27 May 2025 13:15:56 +0000 asID: 2914 IP address blocks: 23.133.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:f3:6e:a3:b5:c1:70:45:96:44:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Validity Not Before: Feb 26 14:15:56 2025 GMT Not After : May 27 13:15:56 2025 GMT Subject: CN=a2c85de2-cbc5-43b2-9f08-aad137ae6afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d8:b8:56:b5:c2:da:d7:2f:7a:12:b3:0a:d9: 1e:8a:f7:f4:a4:64:74:a1:1d:06:60:0d:93:fd:49: 1d:de:a2:f7:ba:5b:35:93:eb:10:39:63:93:78:68: d0:4b:e4:dd:b3:14:26:e3:da:25:c5:cf:12:97:26: dd:93:9b:5f:58:96:37:cb:e4:e6:8d:9e:7f:e1:3a: b7:95:b7:1a:42:dc:20:fd:3b:0d:54:78:74:b3:d1: 1a:4e:fd:f7:52:6b:7c:7a:7d:a1:23:76:03:ab:a3: 45:f7:c7:f8:74:e4:b6:33:e1:34:cd:39:0d:2d:e7: 62:20:c9:25:2a:41:6b:a9:b6:fe:01:fd:12:81:f1: 23:5e:0f:e9:e7:ed:d9:b9:39:2a:38:76:11:86:3e: 30:75:5d:c4:f4:aa:5d:29:58:b1:05:84:c4:16:cc: d5:9d:b1:82:12:e9:83:ab:3b:c6:2c:da:31:db:76: ae:c2:82:97:cc:1d:07:31:01:cb:d8:20:69:21:32: 46:69:86:cf:d9:d7:4f:b8:a0:d6:ba:68:e4:15:6b: 24:de:e6:d0:84:46:63:d6:7e:56:2c:ff:aa:27:29: 91:5f:b7:77:83:13:56:00:f4:33:95:7c:e1:c0:ee: 65:49:c5:2d:ce:92:d5:64:cb:7a:6a:94:00:c1:44: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:64:A8:16:E7:58:FD:17:5B:BF:9C:DF:78:3F:4E:C3:DF:92:FB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl X509v3 Authority Key Identifier: keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:e7:6f:a4:59:ac:40:31:51:36:81:51:24:c9:c7:56:f3:10: b5:b5:0c:85:44:e0:6f:43:57:67:35:fb:73:72:8b:82:12:e7: be:d3:4c:6a:6e:e1:1f:8f:b6:97:d3:18:f0:d8:52:2f:1f:d1: 4d:e6:9b:65:cf:56:91:17:1b:c0:e2:13:a5:20:c6:3e:ce:33: ba:8e:1a:72:84:ef:21:c8:b8:2a:9d:44:60:27:53:ac:dd:36: 71:9b:98:51:94:d6:e3:57:0b:16:91:c4:12:dd:02:c9:64:4f: 46:ae:bb:76:91:e2:9e:f8:94:2b:f1:97:8d:88:bf:91:74:4c: 9a:31:33:a0:4d:7e:c2:35:53:37:53:7f:b1:20:9e:d8:85:fd: 3a:dd:a6:63:fb:28:4b:8a:87:8f:b2:1b:42:51:9c:c6:5a:70: 78:c0:38:d2:05:8f:ac:50:8d:bb:a9:bc:48:60:e7:79:46:e8: f5:fb:5c:99:6d:dd:89:7d:75:3a:89:73:61:54:55:9c:b3:4b: 69:8a:2b:07:45:91:18:4c:95:d9:76:57:a1:c7:29:e8:d6:d1: 76:fe:34:a0:20:5a:3d:9c:e9:f7:13:72:97:50:c2:39:67:85: ed:e9:ea:7f:c1:f0:92:32:1b:4a:be:be:ab:8a:48:0c:74:d5: 21:28:21:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC826jtcFwRZZEWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4 OTEzMB4XDTI1MDIyNjE0MTU1NloXDTI1MDUyNzEzMTU1NlowLzEtMCsGA1UEAxMk YTJjODVkZTItY2JjNS00M2IyLTlmMDgtYWFkMTM3YWU2YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdi4VrXC2tcvehKzCtkeivf0pGR0oR0GYA2T /Ukd3qL3uls1k+sQOWOTeGjQS+TdsxQm49olxc8Slybdk5tfWJY3y+TmjZ5/4Tq3 lbcaQtwg/TsNVHh0s9EaTv33Umt8en2hI3YDq6NF98f4dOS2M+E0zTkNLediIMkl KkFrqbb+Af0SgfEjXg/p5+3ZuTkqOHYRhj4wdV3E9KpdKVixBYTEFszVnbGCEumD qzvGLNox23auwoKXzB0HMQHL2CBpITJGaYbP2ddPuKDWumjkFWsk3ubQhEZj1n5W LP+qJymRX7d3gxNWAPQzlXzhwO5lScUtzpLVZMt6apQAwUT7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxkqBbnWP0XW7+c33g/TsPfkvsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZi ZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvYzI5Mzc4MGQtNTgwMy0z ZTBlLWE0N2YtMjM1ZmFhMTFjNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWRmYmY1ZDctZGRmZS00ZTJlLThh OTUtNjhkZWQ2NDk4OTEzLzlkZmJmNWQ3LWRkZmUtNGUyZS04YTk1LTY4ZGVkNjQ5 ODkxMy5jcmwwHwYDVR0jBBgwFoAUdghT1LipsDTyMx5oi9yVMNoNBpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRl ZDY0OTg5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvnb6RZrEAxUTaBUSTJx1bzELW1DIVE4G9DV2c1+3Nyi4IS577TTGpu 4R+PtpfTGPDYUi8f0U3mm2XPVpEXG8DiE6Ugxj7OM7qOGnKE7yHIuCqdRGAnU6zd NnGbmFGU1uNXCxaRxBLdAslkT0auu3aR4p74lCvxl42Iv5F0TJoxM6BNfsI1UzdT f7EgntiF/TrdpmP7KEuKh4+yG0JRnMZacHjAONIFj6xQjbupvEhg53lG6PX7XJlt 3Yl9dTqJc2FUVZyzS2mKKwdFkRhMldl2V6HHKejW0Xb+NKAgWj2c6fcTcpdQwjln he3p6n/B8JIyG0q+vquKSAx01SEoIRQ= -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:34 2025 by rpki-client