$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa File: e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json) Hash identifier: JW7GnhjQrmly7TJtqJmD2UYpfhd2ahC2ROna0+fS9R0= Subject key identifier: 9E:86:95:8B:71:99:8D:95:32:A1:23:6C:30:76:5A:8D:F0:D9:93:3D Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479 Certificate serial: 010D0C9F43285848E43671EBABC3E0A06C6ADF80 Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa Signing time: Sat 15 Feb 2025 14:00:51 +0000 ROA not before: Sat 15 Feb 2025 14:00:51 +0000 ROA not after: Fri 16 May 2025 13:00:51 +0000 asID: 7018 IP address blocks: 23.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e4:36:71:eb:ab:c3:e0:a0:6c:6a:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479 Validity Not Before: Feb 15 14:00:51 2025 GMT Not After : May 16 13:00:51 2025 GMT Subject: CN=4c2e87f4-4713-4dac-b40a-e14cc501059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:63:69:53:b6:67:bc:34:5a:9a:09:33:09:ca: a0:6a:68:f1:9c:ec:47:1b:82:5b:0b:f4:e9:e5:10: 6b:7c:82:97:e2:c5:81:76:1e:c6:41:00:35:94:4a: 69:36:96:41:40:7e:f7:b8:c1:88:9a:51:a1:66:e2: 09:40:2a:62:d0:50:b0:63:64:00:88:23:16:4b:42: 4f:6d:67:80:98:49:3f:4c:7f:1a:ad:a3:36:06:7c: 1e:e9:b5:1a:6d:e0:17:1d:e2:34:6f:42:84:d4:89: e6:26:80:a3:9e:38:07:78:0d:99:c0:58:74:16:61: 8e:b7:0f:1b:d6:c0:12:81:c3:95:00:73:f1:2f:d2: 72:c0:ff:09:64:e7:a6:38:61:56:f8:2e:69:09:6b: 97:2b:09:23:d3:d6:51:96:16:0b:f0:3b:02:3d:a5: a3:25:84:49:9d:ca:af:89:33:29:e0:aa:8e:9e:b1: 3a:3e:fc:bf:0e:43:42:78:9b:ff:2d:12:9d:f5:da: e7:db:f1:a5:d8:72:80:5e:42:c9:0b:14:67:c2:eb: da:a6:e8:56:a0:43:40:ce:82:ec:43:71:15:c4:4a: 35:e0:39:c6:f6:86:18:00:6a:6e:c9:bb:ad:15:f7: 5c:ae:49:56:d2:f5:21:c8:5c:00:ba:d0:79:9f:dc: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:95:8B:71:99:8D:95:32:A1:23:6C:30:76:5A:8D:F0:D9:93:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl X509v3 Authority Key Identifier: keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer sbgp-ipAddrBlock: critical IPv4: 23.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c5:a4:9c:f5:32:ce:83:04:44:cf:3e:92:81:55:c7:b8:cf: b7:1f:ee:2d:90:73:94:b8:ec:b2:49:be:78:c1:1a:bd:64:a1: e4:c7:da:10:b9:97:e7:90:32:d3:a4:07:f0:47:19:fe:f6:9a: 97:58:f4:d3:1a:c0:aa:ae:5c:2b:43:35:3a:a8:9a:c3:51:4d: 81:1c:bd:52:6e:bd:9f:de:a9:43:ab:40:cf:1c:d7:8f:ef:7c: 94:65:e8:69:10:57:a8:e8:8f:44:b6:22:a6:c1:13:bf:f2:29: 1a:b8:98:8c:ec:31:ee:3a:9d:5a:f9:d5:7f:a4:3a:c7:c1:75: a8:a1:4a:93:e0:55:a3:29:06:6e:a2:14:c6:0b:d5:11:7b:23: e5:42:df:a1:fb:a4:41:48:b9:50:7a:e5:4d:65:b5:59:f9:8d: b9:af:ff:77:bc:ae:b5:22:b8:58:3a:fa:03:5d:73:49:5e:43: 8a:29:e8:ad:52:fa:5a:2e:13:99:b8:60:76:c0:2c:9f:6a:b6: 00:2b:a6:09:15:e3:6c:68:32:94:f1:54:ef:35:54:4c:39:a3: 2b:11:bd:cd:14:97:b0:cf:ac:89:24:d3:58:d8:ec:a1:46:fd: 11:63:6e:46:3c:ac:06:94:63:e4:fb:a7:b1:67:e3:7b:07:b9: 55:65:74:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjkNnHrq8PgoGxq34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm NDc5MB4XDTI1MDIxNTE0MDA1MVoXDTI1MDUxNjEzMDA1MVowLzEtMCsGA1UEAxMk NGMyZTg3ZjQtNDcxMy00ZGFjLWI0MGEtZTE0Y2M1MDEwNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGNpU7ZnvDRamgkzCcqgamjxnOxHG4JbC/Tp 5RBrfIKX4sWBdh7GQQA1lEppNpZBQH73uMGImlGhZuIJQCpi0FCwY2QAiCMWS0JP bWeAmEk/TH8araM2Bnwe6bUabeAXHeI0b0KE1InmJoCjnjgHeA2ZwFh0FmGOtw8b 1sASgcOVAHPxL9JywP8JZOemOGFW+C5pCWuXKwkj09ZRlhYL8DsCPaWjJYRJncqv iTMp4KqOnrE6Pvy/DkNCeJv/LRKd9drn2/Gl2HKAXkLJCxRnwuvapuhWoENAzoLs Q3EVxEo14DnG9oYYAGpuybutFfdcrklW0vUhyFwAutB5n9wxRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6GlYtxmY2VMqEjbDB2Wo3w2ZM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvZTNmOGJkYTctMmVlYi0z ZGNkLTgyNDItM2E0OTdmNDc4YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0 ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1 ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPFpJz1Ms6DBETPPpKBVce4z7cf7i2Qc5S47LJJvnjBGr1koeTH2hC5 l+eQMtOkB/BHGf72mpdY9NMawKquXCtDNTqomsNRTYEcvVJuvZ/eqUOrQM8c14/v fJRl6GkQV6joj0S2IqbBE7/yKRq4mIzsMe46nVr51X+kOsfBdaihSpPgVaMpBm6i FMYL1RF7I+VC36H7pEFIuVB65U1ltVn5jbmv/3e8rrUiuFg6+gNdc0leQ4op6K1S +louE5m4YHbALJ9qtgArpgkV42xoMpTxVO81VEw5oysRvc0Ul7DPrIkk01jY7KFG /RFjbkY8rAaUY+T7p7Fn43sHuVVldJw= -----END CERTIFICATE-----Generated at Fri Apr 4 21:01:30 2025 by rpki-client