$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/326f43f8-c776-3bac-9c88-f6d427ac34b4.roa File: 326f43f8-c776-3bac-9c88-f6d427ac34b4.roa (raw, json) Hash identifier: 1Bp4ik5Gt7E01FRWWFxzLjWRFi9A0EgO8EzVnH85uvY= Subject key identifier: E4:29:40:B4:55:74:C6:7D:6E:6A:C8:8C:76:8E:D2:91:DB:91:5B:96 Certificate issuer: /CN=ffb931d1-3206-47c9-b23b-ac8485700ccd Certificate serial: 010D0C9F43285848CE08AE7797716518C1325B38 Authority key identifier: BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/326f43f8-c776-3bac-9c88-f6d427ac34b4.roa Signing time: Fri 07 Feb 2025 15:20:54 +0000 ROA not before: Fri 07 Feb 2025 15:20:54 +0000 ROA not after: Thu 08 May 2025 14:20:54 +0000 asID: 18781 IP address blocks: 23.133.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:08:ae:77:97:71:65:18:c1:32:5b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb931d1-3206-47c9-b23b-ac8485700ccd Validity Not Before: Feb 7 15:20:54 2025 GMT Not After : May 8 14:20:54 2025 GMT Subject: CN=12cc339c-065b-424b-9cb7-4b4b42f09716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2b:79:67:9f:2e:1c:44:88:7d:d6:d4:1f:38: 6e:cd:82:9e:33:e9:ae:ae:1f:9a:98:ba:6e:6a:d6: e6:95:01:10:69:78:de:ae:2f:f3:aa:31:bb:0b:9c: c8:e9:3a:34:22:c2:82:63:00:fe:40:ac:1d:8d:f0: e8:72:7b:ee:7d:00:66:4f:90:78:96:cf:55:69:16: 0f:89:11:f9:c0:2b:b2:57:d0:d3:75:76:88:fe:05: f3:e5:e3:44:0b:c6:4c:d5:f4:59:d4:d3:a0:62:c7: 45:c3:0d:13:d3:fd:74:66:48:26:fd:1c:77:8b:9f: 72:f6:fd:df:bc:5a:d6:6d:c0:80:6b:a5:c4:4d:50: 41:32:aa:d0:df:71:53:51:14:4c:67:d4:3d:86:70: 83:c7:03:f6:e1:fb:c5:57:e3:6d:fe:f2:02:af:b2: fe:a2:7c:16:07:89:87:92:39:c1:51:04:ed:aa:35: 1e:45:ab:31:51:fd:45:a8:53:9d:aa:9c:0c:68:d0: cd:35:ed:9f:41:97:a9:33:e1:03:2b:67:e7:7e:6e: ec:90:a8:7b:00:95:35:e7:2c:9b:e4:07:e8:5a:a8: 54:3c:8b:a4:e7:22:2d:8a:fd:ff:1b:e5:2e:8e:19: f2:1d:f4:65:c3:59:14:11:bf:6d:a8:4b:a5:65:d8: fc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:29:40:B4:55:74:C6:7D:6E:6A:C8:8C:76:8E:D2:91:DB:91:5B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/326f43f8-c776-3bac-9c88-f6d427ac34b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.crl X509v3 Authority Key Identifier: keyid:BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer sbgp-ipAddrBlock: critical IPv4: 23.133.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:0f:e8:c2:e3:c4:c5:6a:84:18:bc:4c:94:56:e2:14:2e:54: b0:4e:37:19:5f:e2:c4:7e:34:48:10:92:c2:a0:e1:65:3c:23: da:52:ed:39:d6:53:98:68:08:b8:12:f5:5a:1a:1e:0b:29:2e: 58:a2:05:0b:c3:b2:8d:d6:cc:8f:9a:3b:85:1a:11:e7:01:54: bb:bf:fa:9c:31:1c:ad:bd:7a:10:99:71:63:9e:1b:47:c5:7a: 23:6c:8e:57:a1:51:bc:59:ae:18:b3:a9:12:0f:91:c1:d0:ce: 46:ea:5a:53:84:47:82:75:f2:57:db:4d:bc:94:d7:7a:ac:06: 88:bd:9b:a2:7d:d8:22:78:98:03:67:26:b9:e4:bf:a0:c9:21: 38:dc:0d:3e:26:a1:bb:1a:bc:b6:ad:8f:c0:a6:1e:1b:dd:91: 55:64:6d:32:58:01:68:f5:b0:df:ff:97:08:43:fd:07:16:15: 60:4e:fc:66:ca:cd:ff:ee:84:6b:46:f7:c8:d2:4f:06:af:94: 9a:89:40:11:a0:db:d4:b1:d5:70:dc:0e:b0:c4:3d:d0:52:1e: cc:77:7e:c0:27:0c:0e:74:80:65:bf:4f:ac:86:af:f9:de:13: b6:79:4a:61:61:a7:ae:af:35:51:75:a5:93:4b:fe:ed:e3:f6: ad:e6:8c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjOCK53l3FlGMEyWzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZiOTMxZDEtMzIwNi00N2M5LWIyM2ItYWM4NDg1NzAw Y2NkMB4XDTI1MDIwNzE1MjA1NFoXDTI1MDUwODE0MjA1NFowLzEtMCsGA1UEAxMk MTJjYzMzOWMtMDY1Yi00MjRiLTljYjctNGI0YjQyZjA5NzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyt5Z58uHESIfdbUHzhuzYKeM+murh+amLpu atbmlQEQaXjeri/zqjG7C5zI6To0IsKCYwD+QKwdjfDocnvufQBmT5B4ls9VaRYP iRH5wCuyV9DTdXaI/gXz5eNEC8ZM1fRZ1NOgYsdFww0T0/10Zkgm/Rx3i59y9v3f vFrWbcCAa6XETVBBMqrQ33FTURRMZ9Q9hnCDxwP24fvFV+Nt/vICr7L+onwWB4mH kjnBUQTtqjUeRasxUf1FqFOdqpwMaNDNNe2fQZepM+EDK2fnfm7skKh7AJU15yyb 5AfoWqhUPIuk5yItiv3/G+UujhnyHfRlw1kUEb9tqEulZdj8/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQpQLRVdMZ9bmrIjHaO0pHbkVuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZmI5 MzFkMS0zMjA2LTQ3YzktYjIzYi1hYzg0ODU3MDBjY2QvMzI2ZjQzZjgtYzc3Ni0z YmFjLTljODgtZjZkNDI3YWMzNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmZiOTMxZDEtMzIwNi00N2M5LWIy M2ItYWM4NDg1NzAwY2NkL2ZmYjkzMWQxLTMyMDYtNDdjOS1iMjNiLWFjODQ4NTcw MGNjZC5jcmwwHwYDVR0jBBgwFoAUu7rCJ+djCndFVAYHJY1G/oPCSx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZmI5MzFkMS0zMjA2LTQ3YzktYjIzYi1hYzg0 ODU3MDBjY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoP6MLjxMVqhBi8TJRW4hQuVLBONxlf4sR+NEgQksKg4WU8I9pS7TnW U5hoCLgS9VoaHgspLliiBQvDso3WzI+aO4UaEecBVLu/+pwxHK29ehCZcWOeG0fF eiNsjlehUbxZrhizqRIPkcHQzkbqWlOER4J18lfbTbyU13qsBoi9m6J92CJ4mANn Jrnkv6DJITjcDT4mobsavLatj8CmHhvdkVVkbTJYAWj1sN//lwhD/QcWFWBO/GbK zf/uhGtG98jSTwavlJqJQBGg29Sx1XDcDrDEPdBSHsx3fsAnDA50gGW/T6yGr/ne E7Z5SmFhp66vNVF1pZNL/u3j9q3mjFM= -----END CERTIFICATE-----Generated at Fri Apr 11 21:21:58 2025 by rpki-client