$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/660b6ef1-15a1-3567-b23c-72a0083f376d.roa File: 660b6ef1-15a1-3567-b23c-72a0083f376d.roa (raw, json) Hash identifier: lCSBQY15r2Ort8KOEGg/4KayOR37GB9jD/tiLCCWnHo= Subject key identifier: 43:56:C0:A8:F0:9F:35:CA:08:E0:58:0D:FC:FA:D3:43:3E:CD:11:0C Certificate issuer: /CN=785ebc21-6768-44cb-a7b2-5c9a920d572b Certificate serial: 010D0C9F432858490B75128945827878D4F26AC0 Authority key identifier: 59:A6:95:F8:1F:93:28:42:47:18:07:4B:59:86:B3:E1:00:01:4F:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/660b6ef1-15a1-3567-b23c-72a0083f376d.roa Signing time: Sat 01 Mar 2025 15:23:36 +0000 ROA not before: Sat 01 Mar 2025 15:23:36 +0000 ROA not after: Fri 30 May 2025 14:23:36 +0000 asID: 399870 IP address blocks: 23.129.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/785ebc21-6768-44cb-a7b2-5c9a920d572b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/785ebc21-6768-44cb-a7b2-5c9a920d572b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:75:12:89:45:82:78:78:d4:f2:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785ebc21-6768-44cb-a7b2-5c9a920d572b Validity Not Before: Mar 1 15:23:36 2025 GMT Not After : May 30 14:23:36 2025 GMT Subject: CN=9066efe5-8ac0-4448-b3f7-b30da2b693a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:be:b3:34:a5:0c:d1:b3:b0:21:f4:62:fd: 23:80:4d:f8:dd:2b:49:0e:de:8a:9f:a3:72:a4:73: 8c:e6:38:f8:11:96:72:66:c9:7b:a6:55:06:93:c4: 67:64:ec:c6:2c:15:d7:94:c1:c9:39:f3:c3:fc:80: b2:61:4e:38:de:10:53:d4:c5:39:5e:2d:ff:7d:44: 22:01:d2:bf:a8:3b:ce:56:f6:15:3c:e9:9f:4f:ba: 96:7a:92:7f:bc:a7:99:70:a0:56:34:03:ae:16:19: c9:7e:cf:0a:d0:fa:f2:98:ec:d3:58:3f:bf:0b:a8: 93:2b:7f:d1:ac:bd:96:1b:51:1c:3a:25:34:f8:b9: e5:67:6b:5a:b4:41:b4:fd:3e:26:77:08:0c:39:37: 53:d5:26:e4:ad:b8:cc:67:a3:0d:d0:e5:cc:2d:53: 85:8d:a9:2f:e6:b8:50:86:9e:e5:d4:3c:84:fd:36: 71:49:ef:b0:c8:0d:ef:a5:c8:ba:35:50:45:55:4c: 49:7f:0a:94:8b:fd:29:37:b5:0f:d9:c1:f8:ed:b2: 5f:90:21:f4:27:fc:79:35:01:c8:6d:51:ea:0d:ba: 46:1a:12:47:1c:1b:b0:23:fd:2c:a8:6e:c3:f2:37: 0b:de:fe:2b:b0:01:6a:7c:39:a1:4d:46:64:08:aa: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:56:C0:A8:F0:9F:35:CA:08:E0:58:0D:FC:FA:D3:43:3E:CD:11:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/660b6ef1-15a1-3567-b23c-72a0083f376d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/785ebc21-6768-44cb-a7b2-5c9a920d572b.crl X509v3 Authority Key Identifier: keyid:59:A6:95:F8:1F:93:28:42:47:18:07:4B:59:86:B3:E1:00:01:4F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b.cer sbgp-ipAddrBlock: critical IPv4: 23.129.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f3:eb:72:bd:94:a9:b4:31:81:a3:b0:e4:46:cd:b8:c1:13: 3b:66:a0:9e:f3:2c:ea:d8:75:41:10:16:a7:bf:b1:cc:48:fb: df:28:41:f0:73:cb:be:ed:9d:bc:7e:a6:d4:90:61:d8:4e:e6: d5:9e:d4:c7:5b:4f:4e:8d:cf:99:75:5c:5c:2c:ac:d8:8a:f5: 8e:d8:52:be:bf:14:9b:5c:9f:5a:10:ff:58:b8:75:31:c5:29: f7:ab:ac:a0:9a:f1:75:1a:04:64:8c:48:0f:42:d8:55:b3:80: ba:7d:7a:12:c7:3a:b7:e8:59:00:6d:b9:3b:0a:74:97:12:6b: b6:68:a9:e7:ec:8a:67:1c:c9:6d:fb:f7:00:35:63:ca:cc:b8: 63:49:20:ea:82:92:66:9b:78:99:cc:e1:d3:d3:48:e4:e1:de: 98:2e:18:f6:f2:ae:57:e4:d4:ab:6c:09:83:a3:b8:8c:8d:cd: 5b:cc:6c:a4:49:ca:c2:bb:f2:e8:bf:70:b5:8c:69:22:e2:72: 13:77:65:75:7b:1f:30:fc:97:ed:68:01:89:0f:11:1f:b7:cb: aa:f7:a6:96:d5:50:21:ec:47:8a:90:88:65:a1:32:1e:50:32: 12:1a:10:95:b2:55:cd:e7:42:4c:5c:50:c8:7c:85:9a:cc:88: b8:c0:29:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLdRKJRYJ4eNTyasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg1ZWJjMjEtNjc2OC00NGNiLWE3YjItNWM5YTkyMGQ1 NzJiMB4XDTI1MDMwMTE1MjMzNloXDTI1MDUzMDE0MjMzNlowLzEtMCsGA1UEAxMk OTA2NmVmZTUtOGFjMC00NDQ4LWIzZjctYjMwZGEyYjY5M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSu+szSlDNGzsCH0Yv0jgE343StJDt6Kn6Ny pHOM5jj4EZZyZsl7plUGk8RnZOzGLBXXlMHJOfPD/ICyYU443hBT1MU5Xi3/fUQi AdK/qDvOVvYVPOmfT7qWepJ/vKeZcKBWNAOuFhnJfs8K0PrymOzTWD+/C6iTK3/R rL2WG1EcOiU0+LnlZ2tatEG0/T4mdwgMOTdT1SbkrbjMZ6MN0OXMLVOFjakv5rhQ hp7l1DyE/TZxSe+wyA3vpci6NVBFVUxJfwqUi/0pN7UP2cH47bJfkCH0J/x5NQHI bVHqDbpGGhJHHBuwI/0sqG7D8jcL3v4rsAFqfDmhTUZkCKqwIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENWwKjwnzXKCOBYDfz600M+zREMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ODVl YmMyMS02NzY4LTQ0Y2ItYTdiMi01YzlhOTIwZDU3MmIvNjYwYjZlZjEtMTVhMS0z NTY3LWIyM2MtNzJhMDA4M2YzNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzg1ZWJjMjEtNjc2OC00NGNiLWE3 YjItNWM5YTkyMGQ1NzJiLzc4NWViYzIxLTY3NjgtNDRjYi1hN2IyLTVjOWE5MjBk NTcyYi5jcmwwHwYDVR0jBBgwFoAUWaaV+B+TKEJHGAdLWYaz4QABT/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ODVlYmMyMS02NzY4LTQ0Y2ItYTdiMi01Yzlh OTIwZDU3MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3z63K9lKm0MYGjsORGzbjBEztmoJ7zLOrYdUEQFqe/scxI+98oQfBz y77tnbx+ptSQYdhO5tWe1MdbT06Nz5l1XFwsrNiK9Y7YUr6/FJtcn1oQ/1i4dTHF KferrKCa8XUaBGSMSA9C2FWzgLp9ehLHOrfoWQBtuTsKdJcSa7ZoqefsimccyW37 9wA1Y8rMuGNJIOqCkmabeJnM4dPTSOTh3pguGPbyrlfk1KtsCYOjuIyNzVvMbKRJ ysK78ui/cLWMaSLichN3ZXV7HzD8l+1oAYkPER+3y6r3ppbVUCHsR4qQiGWhMh5Q MhIaEJWyVc3nQkxcUMh8hZrMiLjAKeo= -----END CERTIFICATE-----Generated at Sun Apr 6 21:25:44 2025 by rpki-client