$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa File: 3b3526a8-4570-3977-a83c-fd552e5012a1.roa (raw, json) Hash identifier: nFqcChz7ReNfTBDdnyfwwrXkaLttYlG4UBvQVxI5v0c= Subject key identifier: B4:EC:4F:A3:EC:A0:23:72:C9:15:C3:F2:00:6F:44:EA:C5:23:92:98 Certificate issuer: /CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b Certificate serial: 010D0C9F432858489EB9CE04FD34AA4C78E84740 Authority key identifier: 6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa Signing time: Tue 21 Jan 2025 16:38:59 +0000 ROA not before: Tue 21 Jan 2025 16:38:59 +0000 ROA not after: Mon 21 Apr 2025 15:38:59 +0000 asID: 401632 IP address blocks: 23.132.188.0/24 maxlen: 24 2602:f72a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:b9:ce:04:fd:34:aa:4c:78:e8:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b Validity Not Before: Jan 21 16:38:59 2025 GMT Not After : Apr 21 15:38:59 2025 GMT Subject: CN=e978ca06-e790-4f78-a0d2-ebd2998709d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:cb:dd:cb:b0:08:d8:26:96:34:f8:52:f6: ba:d6:b4:d6:25:c0:4f:9a:bf:05:b0:35:03:2f:e7: 31:74:aa:a4:73:e8:6c:64:13:b7:08:d1:41:15:47: 46:bd:ff:eb:78:13:59:2e:f2:20:19:f4:b6:11:43: e3:c1:80:d3:94:cd:78:fb:a0:0e:64:e7:96:52:2f: 56:86:f7:ad:70:f0:ea:8b:8a:5d:01:f6:83:c3:bd: 0e:3b:43:86:46:e5:b4:03:3c:43:86:ce:ce:14:eb: 55:df:de:b3:22:ff:f5:f9:cb:43:58:e1:4e:84:e7: bc:7f:6d:43:f0:7b:29:27:ea:aa:cf:3d:72:6d:f3: 4e:37:51:d9:4e:3b:39:95:77:39:81:49:48:77:ba: 98:1d:65:8c:87:10:6a:45:2c:54:d0:43:6e:e9:db: e8:09:f4:45:ac:90:4a:3c:45:95:64:69:89:1c:da: 35:7e:8f:a6:0e:af:03:e6:9a:2d:06:91:76:a2:9c: fb:53:96:9e:41:8e:2a:23:52:9e:c5:a5:dc:0d:ac: 40:8a:e9:7a:e7:1e:37:c0:51:8f:86:a0:10:c5:3d: 60:f4:15:2f:af:09:82:e3:0a:86:31:7c:9e:e8:ed: 49:80:75:43:0a:45:4d:b8:b0:e3:22:b2:79:d3:c2: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EC:4F:A3:EC:A0:23:72:C9:15:C3:F2:00:6F:44:EA:C5:23:92:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl X509v3 Authority Key Identifier: keyid:6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer sbgp-ipAddrBlock: critical IPv4: 23.132.188.0/24 IPv6: 2602:f72a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:90:92:ec:22:04:d4:0c:df:89:01:f9:ec:08:d0:46:51:72: 14:16:c5:cb:fe:ec:b6:a5:11:94:72:7b:f1:40:61:a6:13:e0: 45:c6:b3:33:f7:9a:2a:7b:23:ca:fe:25:02:b0:db:fb:7b:28: ab:7d:0f:bf:ec:9a:4c:0d:24:31:a0:89:1c:a7:75:ed:99:38: 60:1c:a3:77:cb:3e:5c:55:88:0f:91:a7:25:d6:e1:07:68:3f: 91:67:f9:1d:41:de:ea:3a:51:c0:1b:0f:39:59:38:5b:3f:16: cb:2c:a8:ea:8e:1a:4f:80:c4:d1:40:69:a5:30:13:d5:d4:ad: 66:45:fc:f4:23:a2:02:83:55:08:09:0e:2f:c3:03:d3:c8:66: 29:49:ac:b7:9f:27:32:00:8f:03:f9:df:9c:2e:94:0f:18:26: 6e:16:5e:c1:d2:b3:2a:48:16:aa:7d:a3:37:49:4c:a1:08:38: 9f:a2:8a:ab:57:17:7c:a6:14:d3:d6:9a:8b:57:c9:26:14:bc: 98:51:ed:fd:aa:cb:db:a0:e5:82:c5:fd:bf:ec:27:e7:68:6d: be:80:65:6d:d4:ba:c3:35:6c:bd:fd:63:f8:12:4e:62:0e:50: 1a:02:30:ca:25:54:10:e2:1f:b9:12:46:ce:8d:bd:75:e0:ed: 3e:57:fa:8b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEieuc4E/TSqTHjoR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhYzcyY2EtMzA2ZS00YjEwLTkxZmQtZjRmZDU2ZTUx MjRiMB4XDTI1MDEyMTE2Mzg1OVoXDTI1MDQyMTE1Mzg1OVowLzEtMCsGA1UEAxMk ZTk3OGNhMDYtZTc5MC00Zjc4LWEwZDItZWJkMjk5ODcwOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBrL3cuwCNgmljT4Uva61rTWJcBPmr8FsDUD L+cxdKqkc+hsZBO3CNFBFUdGvf/reBNZLvIgGfS2EUPjwYDTlM14+6AOZOeWUi9W hvetcPDqi4pdAfaDw70OO0OGRuW0AzxDhs7OFOtV396zIv/1+ctDWOFOhOe8f21D 8HspJ+qqzz1ybfNON1HZTjs5lXc5gUlId7qYHWWMhxBqRSxU0ENu6dvoCfRFrJBK PEWVZGmJHNo1fo+mDq8D5potBpF2opz7U5aeQY4qI1KexaXcDaxAiul65x43wFGP hqAQxT1g9BUvrwmC4wqGMXye6O1JgHVDCkVNuLDjIrJ508KH3wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLTsT6PsoCNyyRXD8gBvROrFI5KYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82OWFj NzJjYS0zMDZlLTRiMTAtOTFmZC1mNGZkNTZlNTEyNGIvM2IzNTI2YTgtNDU3MC0z OTc3LWE4M2MtZmQ1NTJlNTAxMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjlhYzcyY2EtMzA2ZS00YjEwLTkx ZmQtZjRmZDU2ZTUxMjRiLzY5YWM3MmNhLTMwNmUtNGIxMC05MWZkLWY0ZmQ1NmU1 MTI0Yi5jcmwwHwYDVR0jBBgwFoAUavDcZmKBhPfyY8ilzXNr6ls8yr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82OWFjNzJjYS0zMDZlLTRiMTAtOTFmZC1mNGZk NTZlNTEyNGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4S8MA4E AgACMAgDBgQmAvcqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC6kJLsIgTUDN+JAfnsCNBGUXIUFsXL/uy2 pRGUcnvxQGGmE+BFxrMz95oqeyPK/iUCsNv7eyirfQ+/7JpMDSQxoIkcp3XtmThg HKN3yz5cVYgPkacl1uEHaD+RZ/kdQd7qOlHAGw85WThbPxbLLKjqjhpPgMTRQGml MBPV1K1mRfz0I6ICg1UICQ4vwwPTyGYpSay3nycyAI8D+d+cLpQPGCZuFl7B0rMq SBaqfaM3SUyhCDifooqrVxd8phTT1pqLV8kmFLyYUe39qsvboOWCxf2/7CfnaG2+ gGVt1LrDNWy9/WP4Ek5iDlAaAjDKJVQQ4h+5EkbOjb114O0+V/qL -----END CERTIFICATE-----Generated at Sun Apr 6 19:02:26 2025 by rpki-client