$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa File: d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa (raw, json) Hash identifier: bF6l2UJYpmD5unr1GlT7wnLqktqkN4odnikri2qOcWc= Subject key identifier: 42:9B:14:02:2C:93:19:85:C6:76:83:86:F9:E3:24:F0:42:67:76:A9 Certificate issuer: /CN=9b2dd4d6-06da-4602-9071-aee92968f31a Certificate serial: 010D0C9F43285848965F4341435141D130F1E280 Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa Signing time: Sat 18 Jan 2025 16:50:05 +0000 ROA not before: Sat 18 Jan 2025 16:50:05 +0000 ROA not after: Fri 18 Apr 2025 15:50:05 +0000 asID: 400596 IP address blocks: 23.132.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:5f:43:41:43:51:41:d1:30:f1:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a Validity Not Before: Jan 18 16:50:05 2025 GMT Not After : Apr 18 15:50:05 2025 GMT Subject: CN=d5b6e9ae-6780-4e4f-b8e3-73b887b3ebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:f6:13:70:1f:9e:fa:98:23:3d:f3:a7:63: 22:c5:d8:ab:96:aa:8a:a5:df:3f:e7:9f:ed:27:de: ad:06:9f:17:29:38:08:d3:47:b8:af:fb:e7:53:dc: 52:0a:00:af:35:34:0e:97:5a:0e:f9:d4:89:50:9f: 14:95:4a:27:32:e3:51:d0:24:5a:c6:b9:64:45:2c: cc:b0:bb:54:84:87:77:cd:00:6a:a3:75:3c:de:9f: 3b:47:5e:6b:e5:4a:be:75:c2:93:eb:21:90:d1:9a: e1:9c:73:dc:68:21:94:78:1b:57:91:d9:3f:6f:43: a2:72:55:3a:a1:35:a7:77:5d:36:7a:11:36:f3:36: bb:84:0a:bd:8b:7e:f0:e4:32:c0:12:3c:cb:8e:d5: 08:c4:ac:05:d1:53:d9:d8:65:d5:ac:47:48:ea:29: 12:d8:0d:b0:76:4f:08:27:5e:1d:a7:64:d1:97:42: 58:f2:52:4a:d3:d5:52:78:2e:06:41:d3:8d:7e:45: 61:bc:3a:6f:30:ec:a3:5a:7a:7c:6d:29:68:af:cf: 25:9f:57:3c:88:6c:dc:bb:32:6d:67:93:29:e4:16: b5:6f:37:7e:10:b0:2a:75:48:51:b8:1b:50:ab:ec: e8:4d:21:73:a2:08:92:1d:06:81:29:8d:bc:d6:ec: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:14:02:2C:93:19:85:C6:76:83:86:F9:E3:24:F0:42:67:76:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl X509v3 Authority Key Identifier: keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer sbgp-ipAddrBlock: critical IPv4: 23.132.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b4:30:43:dc:ba:1f:1f:a0:97:da:cf:5a:57:66:da:dc:e2: 16:e1:30:1f:d0:75:0c:c5:01:fe:a3:89:5c:80:56:45:ee:1a: f4:b2:c5:e0:e4:c0:6f:c4:be:38:5f:e9:44:7a:73:05:3c:a6: 83:77:c9:21:3a:e4:b9:fc:a7:85:09:e0:70:f2:cb:a6:29:2c: 66:94:d1:63:c3:2a:9e:c9:eb:4b:d8:13:1e:97:05:8a:9a:5b: 17:3e:ea:05:18:a8:f7:c5:33:d4:0c:31:91:35:6a:6d:48:bf: 37:7e:26:e4:70:cf:de:8a:c8:01:13:67:00:36:7f:d6:1a:85: af:ae:c2:ff:df:ba:f8:f4:a7:c4:5e:8a:cc:28:c3:e9:96:a2: da:b9:98:d3:b6:62:35:a8:c4:48:e9:58:a6:fd:17:e7:bd:f8: f7:9f:79:5a:43:82:8c:b7:13:2c:f0:5f:25:a9:a4:39:87:24: c5:c8:84:37:29:a3:5b:6f:40:14:1f:a8:1e:d9:c2:f7:af:e7: cb:a0:12:75:68:e5:48:65:79:93:6c:b3:d4:e7:ac:ec:0b:9f: 12:53:be:36:e5:b2:93:3f:51:aa:fb:46:ec:7a:f5:c9:90:19: 84:41:12:f6:1e:69:70:9b:33:5e:d0:42:2f:81:20:f6:58:48: a6:49:bf:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWX0NBQ1FB0TDx4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZGQ0ZDYtMDZkYS00NjAyLTkwNzEtYWVlOTI5Njhm MzFhMB4XDTI1MDExODE2NTAwNVoXDTI1MDQxODE1NTAwNVowLzEtMCsGA1UEAxMk ZDViNmU5YWUtNjc4MC00ZTRmLWI4ZTMtNzNiODg3YjNlYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAb2E3AfnvqYIz3zp2MixdirlqqKpd8/55/t J96tBp8XKTgI00e4r/vnU9xSCgCvNTQOl1oO+dSJUJ8UlUonMuNR0CRaxrlkRSzM sLtUhId3zQBqo3U83p87R15r5Uq+dcKT6yGQ0ZrhnHPcaCGUeBtXkdk/b0OiclU6 oTWnd102ehE28za7hAq9i37w5DLAEjzLjtUIxKwF0VPZ2GXVrEdI6ikS2A2wdk8I J14dp2TRl0JY8lJK09VSeC4GQdONfkVhvDpvMOyjWnp8bSlor88ln1c8iGzcuzJt Z5Mp5Ba1bzd+ELAqdUhRuBtQq+zoTSFzogiSHQaBKY281uzgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKbFAIskxmFxnaDhvnjJPBCZ3apMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjJk ZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5Mjk2OGYzMWEvZDBlMGY0Y2MtZDdiMC0z MTMzLWJhNzMtNTBhMzE2MjA5MmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWIyZGQ0ZDYtMDZkYS00NjAyLTkw NzEtYWVlOTI5NjhmMzFhLzliMmRkNGQ2LTA2ZGEtNDYwMi05MDcxLWFlZTkyOTY4 ZjMxYS5jcmwwHwYDVR0jBBgwFoAUhttI55ulqKaIWlTVYBPNgnRyiYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjJkZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5 Mjk2OGYzMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO0MEPcuh8foJfaz1pXZtrc4hbhMB/QdQzFAf6jiVyAVkXuGvSyxeDk wG/Evjhf6UR6cwU8poN3ySE65Ln8p4UJ4HDyy6YpLGaU0WPDKp7J60vYEx6XBYqa Wxc+6gUYqPfFM9QMMZE1am1Ivzd+JuRwz96KyAETZwA2f9Yaha+uwv/fuvj0p8Re iswow+mWotq5mNO2YjWoxEjpWKb9F+e9+PefeVpDgoy3EyzwXyWppDmHJMXIhDcp o1tvQBQfqB7Zwvev58ugEnVo5UhleZNss9TnrOwLnxJTvjblspM/Uar7Rux69cmQ GYRBEvYeaXCbM17QQi+BIPZYSKZJv1o= -----END CERTIFICATE-----Generated at Wed Feb 5 14:47:18 2025 by rpki-client