$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa File: 445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa (raw, json) Hash identifier: EN6VzZu7ysOYoJXFy6cJm70CnH02E5AaeUU09q3gxCQ= Subject key identifier: 05:84:1A:07:CE:AD:D6:1B:40:9B:CD:5E:76:D7:C0:57:B0:D7:31:1B Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F43285848EDFBB8A1C1478D3C6DEBBC50 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa Signing time: Wed 19 Feb 2025 02:00:38 +0000 ROA not before: Wed 19 Feb 2025 02:00:38 +0000 ROA not after: Tue 20 May 2025 01:00:38 +0000 asID: 401481 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:fb:b8:a1:c1:47:8d:3c:6d:eb:bc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Feb 19 02:00:38 2025 GMT Not After : May 20 01:00:38 2025 GMT Subject: CN=dcf576e1-ab77-41ff-bb77-15c3a10a7db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:c1:9d:11:2b:b6:ce:3a:0f:ba:a8:98:1a: 62:e9:bd:ac:91:21:1d:8b:cd:b8:2a:45:0e:6e:5a: 55:68:37:49:db:ef:cc:ad:8a:79:bb:70:60:49:8d: bf:e0:12:71:dd:9a:07:e0:58:08:aa:37:89:5a:a5: 31:2f:33:4e:51:38:77:a9:9f:c3:f7:61:eb:a5:e8: 29:d3:a5:c0:76:6b:ba:9a:24:bb:fd:4a:39:07:52: f3:89:c0:a0:be:a6:be:87:27:6a:ed:63:44:96:4d: 69:f8:42:34:b9:06:80:8d:db:87:fb:fe:dd:4e:93: 34:d9:89:76:02:f1:d1:7c:5a:18:eb:4b:5b:5b:2f: 6c:26:fe:b8:a5:91:4c:dd:f9:5d:16:ce:5e:4f:be: 5f:63:a3:7d:f0:34:37:a3:7e:7d:23:78:33:ff:6b: fc:22:59:af:77:de:01:8f:b4:3e:c4:a1:39:e6:1a: a1:bd:54:b9:b0:de:1b:5d:04:7d:38:d5:3d:3d:9b: f3:06:73:0f:e4:4c:4a:cd:23:1a:a9:2f:b5:d7:ab: 6b:3d:89:d8:3b:7c:7a:58:49:b6:3d:6c:bf:81:51: 98:f4:55:4f:17:da:5d:fd:84:0a:af:aa:da:e3:d9: 3e:43:04:8b:20:b6:39:83:a4:89:c1:6b:8e:5d:79: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:1A:07:CE:AD:D6:1B:40:9B:CD:5E:76:D7:C0:57:B0:D7:31:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:26:12:c9:00:72:c9:2c:bd:42:28:28:db:fe:97:67:74:07: 6f:77:a8:a1:9f:d2:9f:9e:cf:bf:b7:fc:02:3c:fb:9a:a7:b8: b5:2d:1e:e0:94:c0:5c:4d:9b:ad:87:33:ce:37:ef:58:77:b9: 2b:71:28:e2:b7:11:46:6f:8c:17:54:4c:cf:84:bb:cd:87:8b: 3f:4a:87:fd:84:ab:b8:3c:36:89:94:6a:28:6d:d4:2d:aa:11: 39:af:0a:f4:e7:c1:94:ae:49:88:8d:73:42:c0:a8:76:4b:de: 1f:0c:45:0a:d7:7b:2e:90:b9:00:92:92:44:74:a8:22:ef:8b: 16:44:f2:a8:cc:56:dd:fa:2e:44:fe:14:62:8a:b2:e7:49:b2: 69:0b:6e:98:90:d8:85:03:01:b3:f4:99:b9:53:84:82:f1:b0: 82:6a:6f:d7:58:de:1d:41:2b:e7:94:81:ca:47:c5:4e:5c:4f: 44:dc:a3:74:a2:47:64:e7:ba:b3:b6:87:6d:81:bc:d6:1d:b8: 88:a2:bc:06:19:17:51:4b:88:95:5e:e0:5d:d5:be:1c:f8:ff: 94:8e:1d:4f:46:2b:b1:28:90:10:35:0c:42:56:f9:21:58:e3: 9c:df:51:98:50:82:29:9c:8f:58:cf:d3:a2:01:a7:cc:50:f6: 9f:97:c5:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjt+7ihwUeNPG3rvFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI1MDIxOTAyMDAzOFoXDTI1MDUyMDAxMDAzOFowLzEtMCsGA1UEAxMk ZGNmNTc2ZTEtYWI3Ny00MWZmLWJiNzctMTVjM2ExMGE3ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVjBnRErts46D7qomBpi6b2skSEdi824KkUO blpVaDdJ2+/MrYp5u3BgSY2/4BJx3ZoH4FgIqjeJWqUxLzNOUTh3qZ/D92Hrpegp 06XAdmu6miS7/Uo5B1LzicCgvqa+hydq7WNElk1p+EI0uQaAjduH+/7dTpM02Yl2 AvHRfFoY60tbWy9sJv64pZFM3fldFs5eT75fY6N98DQ3o359I3gz/2v8Ilmvd94B j7Q+xKE55hqhvVS5sN4bXQR9ONU9PZvzBnMP5ExKzSMaqS+116trPYnYO3x6WEm2 PWy/gVGY9FVPF9pd/YQKr6ra49k+QwSLILY5g6SJwWuOXXn6GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWEGgfOrdYbQJvNXnbXwFew1zEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvNDQ1YjFjMDYtZmVjMS0z YjFmLTg1MGQtMDJhYzY1Y2MyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsmEskAcsksvUIoKNv+l2d0B293qKGf0p+ez7+3/AI8+5qnuLUtHuCU wFxNm62HM84371h3uStxKOK3EUZvjBdUTM+Eu82Hiz9Kh/2Eq7g8NomUaiht1C2q ETmvCvTnwZSuSYiNc0LAqHZL3h8MRQrXey6QuQCSkkR0qCLvixZE8qjMVt36LkT+ FGKKsudJsmkLbpiQ2IUDAbP0mblThILxsIJqb9dY3h1BK+eUgcpHxU5cT0Tco3Si R2TnurO2h22BvNYduIiivAYZF1FLiJVe4F3Vvhz4/5SOHU9GK7EokBA1DEJW+SFY 45zfUZhQgimcj1jP06IBp8xQ9p+XxQY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:38:18 2025 by rpki-client