$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa File: 2e628c5f-b9c8-354e-8ca8-2be946b33257.roa (raw, json) Hash identifier: X0/JrGe24/FWKBwmQsvAoVjjjAl/KUjaR18ooISHXl4= Subject key identifier: 15:64:8D:42:0F:78:14:0F:57:EB:B7:E6:B5:73:4A:6B:9F:68:13:79 Certificate issuer: /CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f Certificate serial: 010D0C9F432858497AD9B627ABD0991C835F12C0 Authority key identifier: 0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 13850 IP address blocks: 23.132.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:b6:27:ab:d0:99:1c:83:5f:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=311f6d43-4171-4407-a88e-761f29241996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:ff:ca:8d:17:0a:bf:77:e1:60:30:54:44: 15:cf:fa:25:9e:9a:e3:e9:6e:52:11:aa:da:a4:11: 7e:e5:91:f2:69:58:53:e8:b5:68:3f:9f:f1:a3:76: d8:ab:d3:69:fc:37:6b:49:66:17:1a:4a:33:70:e7: 71:35:d2:66:99:34:43:6d:26:e8:75:7a:be:98:89: c5:68:64:aa:03:23:8c:06:8e:6b:95:bf:92:e7:a9: 67:4e:65:f5:28:94:53:92:98:c9:65:ce:8e:f3:5f: a2:b7:61:be:03:61:51:84:89:1f:99:9a:83:5d:dc: 92:5a:b7:36:26:d3:74:3a:84:93:8f:cd:9e:ec:cc: e6:b2:b8:83:6c:58:17:14:ad:85:00:5b:89:d3:ca: 30:b3:fe:44:64:c2:24:e5:79:f0:75:f8:99:73:49: af:17:e8:2d:2f:e5:5e:3d:b9:16:73:56:fb:8d:ae: 8a:25:70:4a:8b:fa:99:50:01:53:b6:a5:fe:30:e4: 22:f4:c0:b5:78:88:68:1f:47:99:1a:ab:02:7c:b8: d6:87:ed:3f:4f:46:55:81:47:c9:2c:d1:4c:05:01: e6:74:90:17:d3:69:91:f1:46:b6:8f:b6:64:0f:5d: 7b:c8:b7:0c:66:64:0c:87:f5:35:fd:13:46:4b:e1: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:8D:42:0F:78:14:0F:57:EB:B7:E6:B5:73:4A:6B:9F:68:13:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl X509v3 Authority Key Identifier: keyid:0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer sbgp-ipAddrBlock: critical IPv4: 23.132.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3c:7c:20:d0:d9:6d:38:7c:06:26:99:6d:87:5b:ad:cc:15: a5:b0:03:be:ac:59:69:67:b4:8f:de:e3:a7:8f:a0:9b:6b:86: b8:90:9e:40:cf:e9:5d:7a:64:c4:d5:aa:76:74:80:cb:cd:cb: cb:47:58:d7:d5:80:42:06:ec:92:ac:77:e6:d9:d0:28:03:e0: b2:e0:e6:64:a8:50:1e:a4:07:f2:cd:f0:4e:3f:c9:6d:9d:99: 3c:59:9d:52:6a:cb:cc:da:e3:73:ce:b1:bf:b0:a2:a6:18:95: 07:88:20:95:29:10:dc:ef:d8:c8:91:8f:a2:92:9d:45:2a:70: 5c:99:85:16:9c:e0:f0:5d:ae:d9:68:c6:40:ff:ed:4c:37:03: e2:6c:0d:6b:87:82:8c:18:00:10:f8:38:e8:fc:5d:33:1c:0b: 72:9a:84:ff:2f:43:9c:14:3a:fc:3a:8d:9c:4f:f5:98:89:ab: c5:ec:dc:af:1a:a8:b1:65:c7:03:d9:a7:3a:39:73:67:fd:a3: 45:ab:dd:22:6e:53:65:80:fa:bd:98:9b:dd:ed:d0:bd:ea:80: 5e:fd:c8:d9:b1:e9:3f:ef:69:b1:6c:cb:e5:6b:b1:e4:28:80: c9:76:4e:f8:c6:ea:45:1f:a7:76:89:96:1b:30:0e:f1:ae:6d: de:03:fb:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62bYnq9CZHINfEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA0ZDIxMjYtYTA5ZS00NmE4LWI2YzMtMWMzYzEyYTYz NDJmMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk MzExZjZkNDMtNDE3MS00NDA3LWE4OGUtNzYxZjI5MjQxOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprX/yo0XCr934WAwVEQVz/olnprj6W5SEara pBF+5ZHyaVhT6LVoP5/xo3bYq9Np/DdrSWYXGkozcOdxNdJmmTRDbSbodXq+mInF aGSqAyOMBo5rlb+S56lnTmX1KJRTkpjJZc6O81+it2G+A2FRhIkfmZqDXdySWrc2 JtN0OoSTj82e7MzmsriDbFgXFK2FAFuJ08ows/5EZMIk5XnwdfiZc0mvF+gtL+Ve PbkWc1b7ja6KJXBKi/qZUAFTtqX+MOQi9MC1eIhoH0eZGqsCfLjWh+0/T0ZVgUfJ LNFMBQHmdJAX02mR8Ua2j7ZkD117yLcMZmQMh/U1/RNGS+HqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVkjUIPeBQPV+u35rVzSmufaBN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDRk MjEyNi1hMDllLTQ2YTgtYjZjMy0xYzNjMTJhNjM0MmYvMmU2MjhjNWYtYjljOC0z NTRlLThjYTgtMmJlOTQ2YjMzMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDA0ZDIxMjYtYTA5ZS00NmE4LWI2 YzMtMWMzYzEyYTYzNDJmL2QwNGQyMTI2LWEwOWUtNDZhOC1iNmMzLTFjM2MxMmE2 MzQyZi5jcmwwHwYDVR0jBBgwFoAUDBuqFOmbEE+ivyKpGzB9qqjimwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDRkMjEyNi1hMDllLTQ2YTgtYjZjMy0xYzNj MTJhNjM0MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg8fCDQ2W04fAYmmW2HW63MFaWwA76sWWlntI/e46ePoJtrhriQnkDP 6V16ZMTVqnZ0gMvNy8tHWNfVgEIG7JKsd+bZ0CgD4LLg5mSoUB6kB/LN8E4/yW2d mTxZnVJqy8za43POsb+woqYYlQeIIJUpENzv2MiRj6KSnUUqcFyZhRac4PBdrtlo xkD/7Uw3A+JsDWuHgowYABD4OOj8XTMcC3KahP8vQ5wUOvw6jZxP9ZiJq8Xs3K8a qLFlxwPZpzo5c2f9o0Wr3SJuU2WA+r2Ym93t0L3qgF79yNmx6T/vabFsy+VrseQo gMl2TvjG6kUfp3aJlhswDvGubd4D+34= -----END CERTIFICATE-----Generated at Sat Apr 12 10:10:32 2025 by rpki-client