$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa File: e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa (raw, json) Hash identifier: BcMtKyQazOwiRLsdqIiETkMZycDT5PsQkKCy3B2CIB4= Subject key identifier: 87:59:5C:10:F6:D3:8A:AF:68:63:7C:4C:78:CF:CA:32:33:EF:88:C3 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F432858487D6FC8341B1AA12C0D0B86C0 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa Signing time: Thu 09 Jan 2025 18:28:09 +0000 ROA not before: Thu 09 Jan 2025 18:28:09 +0000 ROA not after: Wed 09 Apr 2025 17:28:09 +0000 asID: 213622 IP address blocks: 23.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7d:6f:c8:34:1b:1a:a1:2c:0d:0b:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Jan 9 18:28:09 2025 GMT Not After : Apr 9 17:28:09 2025 GMT Subject: CN=7c3acec6-8064-4527-9c4f-3b278ceb2cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:3e:37:87:50:f1:4b:9c:86:ac:78:e4:e8: e0:a2:7e:64:59:1a:b4:91:ee:d2:51:1f:79:76:d4: 38:4a:18:10:09:69:b0:72:d7:01:90:ff:b2:6c:92: f9:98:d4:b8:39:7b:90:80:1b:4a:df:82:10:57:86: e5:fb:e2:ea:83:8a:88:cc:6a:2f:4f:0f:09:58:24: 89:35:96:7e:95:df:03:57:6e:97:bc:a6:4c:b8:b1: 2c:cf:a3:b0:25:96:86:24:66:40:3f:b8:d4:e8:c5: 70:00:43:b9:d1:a9:9d:63:41:34:6c:c1:a0:dc:f7: aa:54:c6:64:d6:2a:f5:96:a2:60:a8:3d:09:fa:56: b5:6f:ea:82:c9:0e:14:8e:f1:ce:b0:e4:8e:4c:eb: cf:eb:68:16:9c:a5:b2:ac:49:2f:80:f5:71:2d:46: 09:5e:44:83:02:71:b8:8a:19:a7:28:5e:23:f3:17: e6:33:57:fb:15:d5:5b:32:4a:7b:bc:72:31:de:07: 83:15:5d:c8:47:75:b5:66:5f:4d:3a:b2:b0:63:85: 05:8c:2d:89:d1:09:fb:e8:4d:61:fe:33:a6:8b:e4: 11:eb:4a:e2:60:8b:74:5f:a2:81:77:e3:18:93:cc: fa:7d:43:4e:03:1e:94:9e:e9:a7:a8:fd:33:4e:7f: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:59:5C:10:F6:D3:8A:AF:68:63:7C:4C:78:CF:CA:32:33:EF:88:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:5e:c3:6f:69:0a:60:75:d2:1c:5e:b1:26:b3:7b:18:af:8e: 76:d6:cc:64:97:a2:68:f6:ad:b2:62:87:a1:ce:e4:7d:48:d0: 31:01:87:0c:9d:2a:09:a2:9c:00:e1:2e:32:61:7e:f4:e4:25: f5:bc:58:42:55:0f:49:ee:98:69:ad:1f:37:04:14:15:e2:f3: b0:53:f4:5c:0b:85:88:0b:7c:24:2b:76:e5:8b:d5:2d:1d:06: d2:c9:95:b5:59:26:65:36:47:e4:bc:4b:f9:31:00:b9:69:db: 61:98:25:34:2a:77:2f:cd:3c:6f:cf:9c:78:f1:2a:74:0b:d4: cc:59:7a:c5:19:e5:5d:ba:cf:02:03:98:3f:db:de:de:13:d8: c1:29:38:c7:50:9d:97:c3:75:95:90:a4:4b:de:25:28:26:bb: a1:2a:af:df:33:77:b5:00:20:a8:a1:2a:7e:c4:30:67:0c:c3: 99:b9:b3:1d:17:e1:aa:87:31:21:50:35:1e:ed:05:70:f9:51: 26:e9:1e:0e:36:c3:d1:cf:c2:8c:44:5b:d7:39:bf:5f:92:03: 4f:67:46:75:fc:d6:9a:b7:e6:84:3b:67:7a:2c:e0:05:26:2f: 50:4d:71:6c:1e:6b:9d:37:d2:65:c0:b8:32:64:b8:12:cb:ac: fc:1a:ca:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh9b8g0GxqhLA0LhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MDEwOTE4MjgwOVoXDTI1MDQwOTE3MjgwOVowLzEtMCsGA1UEAxMk N2MzYWNlYzYtODA2NC00NTI3LTljNGYtM2IyNzhjZWIyY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiE+N4dQ8Uuchqx45Ojgon5kWRq0ke7SUR95 dtQ4ShgQCWmwctcBkP+ybJL5mNS4OXuQgBtK34IQV4bl++Lqg4qIzGovTw8JWCSJ NZZ+ld8DV26XvKZMuLEsz6OwJZaGJGZAP7jU6MVwAEO50amdY0E0bMGg3PeqVMZk 1ir1lqJgqD0J+la1b+qCyQ4UjvHOsOSOTOvP62gWnKWyrEkvgPVxLUYJXkSDAnG4 ihmnKF4j8xfmM1f7FdVbMkp7vHIx3geDFV3IR3W1Zl9NOrKwY4UFjC2J0Qn76E1h /jOmi+QR60riYIt0X6KBd+MYk8z6fUNOAx6UnumnqP0zTn8VTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdZXBD204qvaGN8THjPyjIz74jDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvZTg1ZWEwN2ItZWYwYS0z NDU2LWEzN2QtYTIzZWMyYTI2MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpew29pCmB10hxesSazexivjnbWzGSXomj2rbJih6HO5H1I0DEBhwyd KgminADhLjJhfvTkJfW8WEJVD0numGmtHzcEFBXi87BT9FwLhYgLfCQrduWL1S0d BtLJlbVZJmU2R+S8S/kxALlp22GYJTQqdy/NPG/PnHjxKnQL1MxZesUZ5V26zwID mD/b3t4T2MEpOMdQnZfDdZWQpEveJSgmu6Eqr98zd7UAIKihKn7EMGcMw5m5sx0X 4aqHMSFQNR7tBXD5USbpHg42w9HPwoxEW9c5v1+SA09nRnX81pq35oQ7Z3os4AUm L1BNcWwea5030mXAuDJkuBLLrPwaylQ= -----END CERTIFICATE-----Generated at Sun Feb 2 15:45:40 2025 by rpki-client