$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa File: 1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa (raw, json) Hash identifier: SN62af0Wcx4CEmpyLDUNB5f522QMU0W4dShsD3KfyBg= Subject key identifier: 91:08:DC:74:37:85:27:7F:5D:80:86:81:4F:56:FA:61:F7:E7:8E:27 Certificate issuer: /CN=817b315d-32a3-4ee9-ba5d-557007a627ae Certificate serial: 010D0C9F4328584945ADCFEC594C10F32DF41C00 Authority key identifier: FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa Signing time: Sat 22 Mar 2025 11:54:49 +0000 ROA not before: Sat 22 Mar 2025 11:54:49 +0000 ROA not after: Fri 20 Jun 2025 11:54:49 +0000 asID: 399861 IP address blocks: 23.129.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:45:ad:cf:ec:59:4c:10:f3:2d:f4:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817b315d-32a3-4ee9-ba5d-557007a627ae Validity Not Before: Mar 22 11:54:49 2025 GMT Not After : Jun 20 11:54:49 2025 GMT Subject: CN=45b2d15a-6a0c-49f5-af3d-8add4c8627b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:eb:4f:9b:e3:a4:05:21:20:e2:3a:9d:7b: f9:cb:b1:9c:d2:6a:c8:6e:1a:a0:d1:26:57:b9:8e: ba:b6:e7:9e:a7:fa:f9:42:f5:26:ee:a3:6d:25:4b: 07:46:bf:92:ea:c2:3f:d0:0f:32:39:09:ac:07:20: 07:f4:f7:f9:da:d4:30:f4:e9:18:cd:43:b2:f2:26: 3e:c8:e6:77:7e:ec:28:3d:71:93:58:a1:c2:e4:25: 53:d1:60:20:07:b5:2e:ab:c9:c0:4b:5e:5e:2f:97: 87:dd:73:b9:70:76:66:13:14:f0:c5:9d:c7:73:5e: e2:88:d8:d7:ed:aa:a5:93:e1:e8:33:c6:45:9e:67: 6b:7a:02:37:6a:75:6f:30:81:af:0a:4f:bd:20:84: 00:fa:7b:5a:d5:c4:28:b8:b3:95:4b:ca:18:7d:fb: 0f:bc:96:dc:fc:ed:b8:7a:85:c0:f0:f7:8d:8d:f5: ec:72:8b:e4:bd:89:3a:d1:d9:aa:15:f9:78:3b:6f: a9:bb:cb:db:db:a7:c8:11:15:05:ac:2f:dc:7e:ac: 68:a3:33:e3:4c:40:6b:a1:2b:8c:e2:af:99:42:98: 46:23:37:d7:a3:70:82:04:2c:ba:bb:ea:10:81:53: fa:d7:01:bd:af:62:e4:17:c4:2e:47:75:dc:4f:b8: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:08:DC:74:37:85:27:7F:5D:80:86:81:4F:56:FA:61:F7:E7:8E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl X509v3 Authority Key Identifier: keyid:FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer sbgp-ipAddrBlock: critical IPv4: 23.129.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:80:bc:0b:74:27:a9:bf:05:1f:e1:54:d3:71:3d:e7:a6:d1: 65:55:3f:bd:8f:f4:66:b9:81:f7:fd:eb:3b:d3:1c:37:f4:00: fc:f7:ac:97:0d:a2:19:cf:a8:68:fd:e0:94:3a:00:08:bc:6a: 1c:3e:35:42:6f:70:2f:84:63:13:7b:a5:db:ab:fc:93:c1:23: 81:d2:c4:ec:db:04:ce:f1:80:48:52:d9:3e:71:3b:42:86:b0: a2:43:e2:45:61:2c:68:b9:5e:3d:3b:75:82:d5:86:31:87:0c: 4b:dc:57:d0:ff:ff:10:78:9c:44:f5:48:e4:97:96:c4:cb:92: b9:0f:ab:ac:db:6b:59:f7:6a:d7:d5:d3:40:68:b7:f2:62:4f: a1:57:c5:fd:0a:97:08:45:31:da:e1:9d:1a:e4:a6:35:51:9a: b2:f7:63:78:e2:04:52:7f:e6:81:1b:be:3c:48:fd:76:58:64: 00:9b:d8:86:70:54:4f:38:b8:c9:94:f0:79:a5:1d:ee:24:28: ff:f2:d4:b3:23:36:3f:f9:3d:62:fc:2c:b0:52:4a:c9:a5:3e: 9f:4d:a1:54:93:2d:24:5e:9a:ce:84:65:63:ea:cb:05:d7:e7: 0b:2a:32:6f:9a:05:d6:2d:b6:87:26:02:7a:d3:d9:a7:16:42: 19:ed:67:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElFrc/sWUwQ8y30HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE3YjMxNWQtMzJhMy00ZWU5LWJhNWQtNTU3MDA3YTYy N2FlMB4XDTI1MDMyMjExNTQ0OVoXDTI1MDYyMDExNTQ0OVowLzEtMCsGA1UEAxMk NDViMmQxNWEtNmEwYy00OWY1LWFmM2QtOGFkZDRjODYyN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9DrT5vjpAUhIOI6nXv5y7Gc0mrIbhqg0SZX uY66tueep/r5QvUm7qNtJUsHRr+S6sI/0A8yOQmsByAH9Pf52tQw9OkYzUOy8iY+ yOZ3fuwoPXGTWKHC5CVT0WAgB7Uuq8nAS15eL5eH3XO5cHZmExTwxZ3Hc17iiNjX 7aqlk+HoM8ZFnmdregI3anVvMIGvCk+9IIQA+nta1cQouLOVS8oYffsPvJbc/O24 eoXA8PeNjfXscovkvYk60dmqFfl4O2+pu8vb26fIERUFrC/cfqxoozPjTEBroSuM 4q+ZQphGIzfXo3CCBCy6u+oQgVP61wG9r2LkF8QuR3XcT7gWwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEI3HQ3hSd/XYCGgU9W+mH3544nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84MTdi MzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcwMDdhNjI3YWUvMWM4NzZiZjQtNjdhNi0z ZjNjLTgwZDYtNTVjMTcyN2NlNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODE3YjMxNWQtMzJhMy00ZWU5LWJh NWQtNTU3MDA3YTYyN2FlLzgxN2IzMTVkLTMyYTMtNGVlOS1iYTVkLTU1NzAwN2E2 MjdhZS5jcmwwHwYDVR0jBBgwFoAU+l9VLXbjSPrrqZEqBBSqVyQ3WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84MTdiMzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcw MDdhNjI3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4F8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2AvAt0J6m/BR/hVNNxPeem0WVVP72P9Ga5gff96zvTHDf0APz3rJcN ohnPqGj94JQ6AAi8ahw+NUJvcC+EYxN7pdur/JPBI4HSxOzbBM7xgEhS2T5xO0KG sKJD4kVhLGi5Xj07dYLVhjGHDEvcV9D//xB4nET1SOSXlsTLkrkPq6zba1n3atfV 00Bot/JiT6FXxf0KlwhFMdrhnRrkpjVRmrL3Y3jiBFJ/5oEbvjxI/XZYZACb2IZw VE84uMmU8HmlHe4kKP/y1LMjNj/5PWL8LLBSSsmlPp9NoVSTLSRems6EZWPqywXX 5wsqMm+aBdYttocmAnrT2acWQhntZ8Q= -----END CERTIFICATE-----Generated at Sun Apr 6 08:35:38 2025 by rpki-client