$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa File: 65b4ebf4-2826-3053-8d95-46485d6fea90.roa (raw, json) Hash identifier: 5FvxyDblW1C67Q60R9F3XvjJlpfCLIyoOW05NhdnWfg= Subject key identifier: 56:7C:DF:07:CD:1C:EB:85:9F:92:96:DB:59:A9:57:C4:60:00:EA:73 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F43285848DF502EDE76DD5857C2141400 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa Signing time: Thu 13 Feb 2025 19:53:42 +0000 ROA not before: Thu 13 Feb 2025 19:53:42 +0000 ROA not after: Wed 14 May 2025 18:53:42 +0000 asID: 19468 IP address blocks: 23.134.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:50:2e:de:76:dd:58:57:c2:14:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Feb 13 19:53:42 2025 GMT Not After : May 14 18:53:42 2025 GMT Subject: CN=c87390eb-3180-47ee-8760-49053b812963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:de:8d:bb:f2:bd:87:1b:54:33:8a:fc:f2: c4:0b:58:6b:aa:77:3c:11:69:04:91:a8:e8:4e:b8: 34:4c:e2:6a:40:0f:19:71:78:be:ed:46:ae:40:ad: 02:09:e6:01:ff:36:5d:38:8a:9e:84:e2:5f:be:fc: 8c:d3:af:7e:ec:f8:b6:7e:f0:24:e8:39:df:fa:40: 02:31:2e:46:49:3d:a9:0d:fa:79:9d:d1:23:b7:3e: 12:91:4b:59:b8:5b:8c:13:20:63:d7:30:26:40:7d: 72:93:ed:87:b4:46:62:8a:41:7d:53:3a:8c:a6:78: 7d:ee:31:98:b5:97:16:43:12:1b:87:00:1e:dd:ce: 06:91:87:92:5c:20:50:3d:57:5a:85:dd:8b:50:2a: 7e:cf:16:91:aa:e5:e3:28:c3:18:ae:58:a0:22:c6: 0c:3b:7b:30:19:06:25:2f:9b:db:96:32:91:63:c9: 63:da:f0:ca:bd:e7:e6:0d:46:37:5f:14:9e:e7:3d: b2:d2:02:31:4b:17:bb:17:66:7d:c6:cc:7b:50:f9: f0:ed:d4:96:bd:e4:ea:44:55:ce:e8:f2:34:63:66: 14:dd:4a:ce:34:28:c6:ce:33:a6:3c:c8:96:5d:c8: ff:30:79:b1:25:f1:98:69:80:23:ae:50:34:35:3a: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7C:DF:07:CD:1C:EB:85:9F:92:96:DB:59:A9:57:C4:60:00:EA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0b:42:31:80:6b:a5:f1:bf:4b:81:d6:4b:3b:e8:5e:0d:f6: 3c:a1:6e:2f:e3:80:e8:2c:93:d2:08:17:30:7e:02:3f:21:49: 29:17:10:ca:01:7b:46:53:eb:4f:94:23:27:3e:50:87:f6:ad: ee:03:ac:d1:fa:1f:b8:89:90:a7:5e:c0:7a:7c:a7:7a:31:f0: 3d:1f:0f:24:6b:47:c8:24:46:5a:aa:0c:4e:a6:ce:06:41:bb: 5b:0f:f4:5a:f5:67:fc:67:fd:35:8d:8b:ad:44:73:78:a3:74: ff:d4:ed:08:df:b7:d2:a4:76:60:07:f8:2a:ad:ce:5c:25:42: a7:6d:db:af:8d:26:d2:5c:50:61:c2:a4:db:c3:6b:a4:38:38: 31:7d:7f:dc:63:f4:e7:f0:79:05:88:9c:62:af:95:f9:66:58: c7:98:43:64:1e:c4:aa:68:db:73:4c:e4:1f:34:86:52:d1:f5: 95:5a:48:b4:11:c8:71:fc:6c:34:2d:c2:90:34:94:02:ce:ba: c5:cd:56:9b:4b:8c:3f:21:ee:29:3c:2e:dd:69:38:cc:52:42: 0d:17:87:c8:95:b3:c3:ad:17:50:c1:82:08:a2:d0:ed:84:ff: a8:69:00:2d:9d:de:2f:e8:f9:d2:de:3a:43:27:2c:f6:b3:87: 9e:1e:41:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfUC7edt1YV8IUFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI1MDIxMzE5NTM0MloXDTI1MDUxNDE4NTM0MlowLzEtMCsGA1UEAxMk Yzg3MzkwZWItMzE4MC00N2VlLTg3NjAtNDkwNTNiODEyOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOTejbvyvYcbVDOK/PLEC1hrqnc8EWkEkajo Trg0TOJqQA8ZcXi+7UauQK0CCeYB/zZdOIqehOJfvvyM069+7Pi2fvAk6Dnf+kAC MS5GST2pDfp5ndEjtz4SkUtZuFuMEyBj1zAmQH1yk+2HtEZiikF9UzqMpnh97jGY tZcWQxIbhwAe3c4GkYeSXCBQPVdahd2LUCp+zxaRquXjKMMYrligIsYMO3swGQYl L5vbljKRY8lj2vDKvefmDUY3XxSe5z2y0gIxSxe7F2Z9xsx7UPnw7dSWveTqRFXO 6PI0Y2YU3UrONCjGzjOmPMiWXcj/MHmxJfGYaYAjrlA0NTrd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ83wfNHOuFn5KW21mpV8RgAOpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvNjViNGViZjQtMjgyNi0z MDUzLThkOTUtNDY0ODVkNmZlYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcLQjGAa6Xxv0uB1ks76F4N9jyhbi/jgOgsk9IIFzB+Aj8hSSkXEMoB e0ZT60+UIyc+UIf2re4DrNH6H7iJkKdewHp8p3ox8D0fDyRrR8gkRlqqDE6mzgZB u1sP9Fr1Z/xn/TWNi61Ec3ijdP/U7Qjft9KkdmAH+CqtzlwlQqdt26+NJtJcUGHC pNvDa6Q4ODF9f9xj9OfweQWInGKvlflmWMeYQ2QexKpo23NM5B80hlLR9ZVaSLQR yHH8bDQtwpA0lALOusXNVptLjD8h7ik8Lt1pOMxSQg0Xh8iVs8OtF1DBggii0O2E /6hpAC2d3i/o+dLeOkMnLPazh54eQXE= -----END CERTIFICATE-----Generated at Tue Apr 8 14:47:44 2025 by rpki-client