$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa File: f8dbe662-4178-3aea-90e2-4d5ab001b930.roa (raw, json) Hash identifier: qgGRaqDdzwNd2xx5oJlRsvSatjCtJpftAkZEpZ8121Q= Subject key identifier: 1C:86:34:03:A6:53:64:BC:C7:52:AF:9E:9F:04:53:1B:40:48:51:19 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584909E6A7235792CCCE69BE1880 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 50842 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a7:23:57:92:cc:ce:69:be:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=b5033fce-1cc6-4fce-88aa-d1f81f68b8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ab:5b:27:69:b6:d9:22:b6:ad:e9:6a:e7:37: 45:b0:70:13:f9:8f:d7:9b:90:55:4a:54:3c:3b:67: d6:6f:c8:77:f1:a5:51:b3:61:6a:ae:b1:a2:7a:5d: 64:b8:7d:7a:56:24:e5:84:8d:39:8d:6c:0f:13:c2: d6:e3:2b:9c:60:25:a8:e6:81:aa:7d:3f:e4:9f:9e: b8:86:38:72:b4:ca:38:0c:fb:76:d2:3a:b1:00:30: b6:36:b9:b1:f2:da:07:18:69:0e:79:e4:56:47:db: 6f:70:23:c1:dc:87:54:13:cc:57:87:99:b5:40:2c: fd:e9:cb:07:8f:98:a6:7a:3d:78:aa:f3:d3:b5:40: 9b:dd:14:37:2f:83:14:f9:12:75:63:96:c2:ba:35: b8:a3:9e:13:84:da:2a:15:b1:53:b1:60:0c:a9:58: 11:b7:9e:05:d9:53:44:14:98:d5:a3:b7:17:67:fb: 2b:8d:07:b3:0a:40:c6:18:7d:d9:d5:62:8d:59:0f: 2f:83:3d:d3:49:65:61:e0:e8:97:76:7e:a1:ce:cf: 61:ad:82:33:55:ce:e8:8a:56:23:46:d7:3e:48:f7: 8d:3a:c5:be:93:4c:f4:2b:25:19:d8:e1:96:1b:41: 29:fd:34:5e:cb:a3:76:41:d7:97:fd:42:1d:42:bb: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:34:03:A6:53:64:BC:C7:52:AF:9E:9F:04:53:1B:40:48:51:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a2:59:ff:8a:a6:a2:a3:16:b8:57:09:f6:d9:47:61:df:99: 47:a1:99:cb:aa:58:51:3f:4c:48:fb:50:7e:aa:00:28:12:a4: 05:6a:f1:60:cd:21:ad:90:d2:af:dd:2b:f5:d3:bd:f8:69:8b: 81:9b:22:23:f1:2c:b2:ed:1a:87:e3:b8:7e:d9:f4:8d:70:24: ef:14:c0:e6:17:c1:86:21:20:f2:19:bf:ae:9d:c1:5e:46:11: 1a:74:99:9e:e6:80:21:b4:e2:f6:03:95:b1:c1:48:69:00:25: a1:d8:e0:98:c9:7b:a7:7b:ba:61:77:2c:7d:2e:2b:c6:6f:2f: 30:a3:1e:34:51:21:b8:c5:bf:0b:f6:d6:0d:23:26:7b:4b:63: 7a:c1:ac:93:3c:8e:6e:53:9e:6f:3c:6b:c1:5f:d4:d8:c1:e5: 3c:51:7b:f7:6f:f8:cb:d7:16:ad:ef:11:4c:1c:c5:e7:9e:73: 38:11:a9:92:ac:6c:14:2a:9a:d8:db:44:e1:53:24:41:1b:0b: 7f:19:54:be:ff:40:8d:46:ee:bf:c5:c0:0e:41:07:1d:5f:44: a9:2a:2f:0a:b2:08:0b:5b:a0:cd:67:19:79:3a:6a:ee:38:45: bc:90:a1:a1:c5:2a:01:09:78:7a:7b:f4:0a:cf:0e:cc:97:47: fd:be:8f:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qcjV5LMzmm+GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk YjUwMzNmY2UtMWNjNi00ZmNlLTg4YWEtZDFmODFmNjhiOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqatbJ2m22SK2relq5zdFsHAT+Y/Xm5BVSlQ8 O2fWb8h38aVRs2FqrrGiel1kuH16ViTlhI05jWwPE8LW4yucYCWo5oGqfT/kn564 hjhytMo4DPt20jqxADC2Nrmx8toHGGkOeeRWR9tvcCPB3IdUE8xXh5m1QCz96csH j5imej14qvPTtUCb3RQ3L4MU+RJ1Y5bCujW4o54ThNoqFbFTsWAMqVgRt54F2VNE FJjVo7cXZ/srjQezCkDGGH3Z1WKNWQ8vgz3TSWVh4OiXdn6hzs9hrYIzVc7oilYj Rtc+SPeNOsW+k0z0KyUZ2OGWG0Ep/TRey6N2QdeX/UIdQrvOZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByGNAOmU2S8x1Kvnp8EUxtASFEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZjhkYmU2NjItNDE3OC0z YWVhLTkwZTItNGQ1YWIwMDFiOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeiWf+KpqKjFrhXCfbZR2HfmUehmcuqWFE/TEj7UH6qACgSpAVq8WDN Ia2Q0q/dK/XTvfhpi4GbIiPxLLLtGofjuH7Z9I1wJO8UwOYXwYYhIPIZv66dwV5G ERp0mZ7mgCG04vYDlbHBSGkAJaHY4JjJe6d7umF3LH0uK8ZvLzCjHjRRIbjFvwv2 1g0jJntLY3rBrJM8jm5Tnm88a8Ff1NjB5TxRe/dv+MvXFq3vEUwcxeeeczgRqZKs bBQqmtjbROFTJEEbC38ZVL7/QI1G7r/FwA5BBx1fRKkqLwqyCAtboM1nGXk6au44 RbyQoaHFKgEJeHp79ArPDsyXR/2+j10= -----END CERTIFICATE-----Generated at Wed Apr 9 01:07:49 2025 by rpki-client