$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa File: a37593aa-4999-3250-9d18-4320c2f39adb.roa (raw, json) Hash identifier: vMgYNBnTm04V7fd8YaYxWqeJE0pqJsyZCSKO//y/ATQ= Subject key identifier: 26:64:11:AF:97:09:63:12:6C:CB:AB:56:BF:98:56:5B:ED:82:EC:B0 Certificate issuer: /CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Certificate serial: 010D0C9F4328584902FDB2C21B9D7970DA75F200 Authority key identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa Signing time: Wed 26 Feb 2025 14:36:37 +0000 ROA not before: Wed 26 Feb 2025 14:36:37 +0000 ROA not after: Tue 27 May 2025 13:36:37 +0000 asID: 2914 IP address blocks: 23.133.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:fd:b2:c2:1b:9d:79:70:da:75:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Validity Not Before: Feb 26 14:36:37 2025 GMT Not After : May 27 13:36:37 2025 GMT Subject: CN=1892966e-9366-4460-88a4-df04441729e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:7d:b2:bc:e8:83:ed:1f:5a:5b:e0:f0:c8: d2:4d:8e:04:af:dd:91:02:be:f7:4d:b5:cd:fd:0c: 3d:94:2c:eb:09:4b:e8:55:43:48:8b:ee:cb:ef:35: a5:84:a6:f6:b3:45:d7:4c:a0:eb:bd:4b:1c:e2:ca: a9:09:f5:16:f4:56:fc:4e:1d:5b:d3:5a:97:42:4e: 58:a7:97:f6:d9:78:70:9d:95:06:59:a0:2e:52:28: a0:5d:f6:0f:28:92:e3:9a:17:4b:91:9d:18:d2:1a: d4:f4:ea:70:8c:42:48:89:c9:12:a4:2e:3e:c4:c0: 54:90:d4:fe:88:46:55:d8:90:96:21:bf:09:4e:75: 83:61:6c:1f:8d:3d:cb:c4:19:0b:61:2e:3e:33:ba: 76:a9:ec:25:fd:da:67:5a:c1:ce:43:28:4c:5a:23: 21:91:1f:70:a8:c4:ee:96:37:4f:79:25:6b:d6:51: 49:60:7d:41:98:d7:70:9d:b0:d4:cd:0f:10:40:40: 77:f3:de:04:99:76:64:49:41:a3:a8:08:bf:bf:7e: 48:e9:a7:25:87:32:bf:45:3b:7f:87:d4:a8:ff:c2: 04:84:f3:5c:9d:5e:e4:86:41:74:00:a6:02:1c:4a: 7d:87:84:87:c1:ed:81:1c:ec:67:63:41:ba:59:99: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:64:11:AF:97:09:63:12:6C:CB:AB:56:BF:98:56:5B:ED:82:EC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl X509v3 Authority Key Identifier: keyid:B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer sbgp-ipAddrBlock: critical IPv4: 23.133.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:a8:e9:9a:4f:a3:ae:df:0a:b7:ea:3e:d8:c8:15:53:8e:89: 17:87:dd:0b:f7:a0:4e:77:98:b0:cf:65:87:62:f4:2c:36:24: 7f:6a:9e:e4:b9:1b:20:83:9b:43:f2:26:e9:88:da:f4:db:85: 46:11:de:75:92:5d:8a:f7:52:57:52:e7:f7:75:7d:72:cc:52: ae:40:08:8b:ee:98:88:1d:13:64:40:a7:09:c0:ec:bc:fe:95: e7:db:e6:48:f9:80:94:a4:41:c1:5e:e2:ba:d5:4c:1e:b8:db: 98:1e:e2:86:fd:66:5d:e4:19:34:63:b7:71:33:09:be:33:c2: 5b:c1:29:05:64:07:ad:d4:8a:3c:18:ee:a6:21:d6:f7:50:75: 89:76:7a:4b:ca:df:f7:5b:75:a2:da:f6:c6:7f:0e:c1:26:ee: 83:60:c7:39:1e:a8:93:dc:ce:d6:52:a2:a1:91:21:c6:25:e1: f0:6b:d8:80:4a:0f:f4:c1:a5:ab:32:f3:22:3d:e1:b6:b1:d1: 97:62:bf:d1:6e:89:d2:2c:87:2e:96:44:bd:b7:a8:c3:6d:c2: ed:61:d0:22:ca:65:7a:64:1a:b5:20:1f:75:20:50:4b:ae:32: a3:9f:d1:ea:8b:c5:ec:03:27:5f:e3:6f:09:9a:4f:46:53:b6: 05:9d:30:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC/bLCG515cNp18gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlmNmU1NDUtMTk0NC00Y2EwLWExNTUtNjlkZWQyY2Ri MWZmMB4XDTI1MDIyNjE0MzYzN1oXDTI1MDUyNzEzMzYzN1owLzEtMCsGA1UEAxMk MTg5Mjk2NmUtOTM2Ni00NDYwLTg4YTQtZGYwNDQ0MTcyOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZt9srzog+0fWlvg8MjSTY4Er92RAr73TbXN /Qw9lCzrCUvoVUNIi+7L7zWlhKb2s0XXTKDrvUsc4sqpCfUW9Fb8Th1b01qXQk5Y p5f22XhwnZUGWaAuUiigXfYPKJLjmhdLkZ0Y0hrU9OpwjEJIickSpC4+xMBUkNT+ iEZV2JCWIb8JTnWDYWwfjT3LxBkLYS4+M7p2qewl/dpnWsHOQyhMWiMhkR9wqMTu ljdPeSVr1lFJYH1BmNdwnbDUzQ8QQEB3894EmXZkSUGjqAi/v35I6aclhzK/RTt/ h9So/8IEhPNcnV7khkF0AKYCHEp9h4SHwe2BHOxnY0G6WZk/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZkEa+XCWMSbMurVr+YVlvtguywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81OWY2 ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRlZDJjZGIxZmYvYTM3NTkzYWEtNDk5OS0z MjUwLTlkMTgtNDMyMGMyZjM5YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTlmNmU1NDUtMTk0NC00Y2EwLWEx NTUtNjlkZWQyY2RiMWZmLzU5ZjZlNTQ1LTE5NDQtNGNhMC1hMTU1LTY5ZGVkMmNk YjFmZi5jcmwwHwYDVR0jBBgwFoAUtr+vPh3qzjyMeeE8dUIb/8NkN5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81OWY2ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRl ZDJjZGIxZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOCo6ZpPo67fCrfqPtjIFVOOiReH3Qv3oE53mLDPZYdi9Cw2JH9qnuS5 GyCDm0PyJumI2vTbhUYR3nWSXYr3UldS5/d1fXLMUq5ACIvumIgdE2RApwnA7Lz+ lefb5kj5gJSkQcFe4rrVTB6425ge4ob9Zl3kGTRjt3EzCb4zwlvBKQVkB63UijwY 7qYh1vdQdYl2ekvK3/dbdaLa9sZ/DsEm7oNgxzkeqJPcztZSoqGRIcYl4fBr2IBK D/TBpasy8yI94bax0Zdiv9FuidIshy6WRL23qMNtwu1h0CLKZXpkGrUgH3UgUEuu MqOf0eqLxewDJ1/jbwmaT0ZTtgWdMEk= -----END CERTIFICATE-----Generated at Sat Apr 5 05:40:54 2025 by rpki-client