$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/2e353404-ccec-38a2-9e7a-bb5c36278a61.roa File: 2e353404-ccec-38a2-9e7a-bb5c36278a61.roa (raw, json) Hash identifier: I3sjv22bADONNsE/zJY4EfgMIVLDzy/dfy2SuuKhhMY= Subject key identifier: 90:9B:68:19:43:E8:E8:0B:B9:9E:19:C2:73:BF:3E:D0:C6:D8:30:37 Certificate issuer: /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Certificate serial: 010D0C9F4328584973DEEA196C1A68BC2C28A100 Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/2e353404-ccec-38a2-9e7a-bb5c36278a61.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 395261 IP address blocks: 23.155.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:ea:19:6c:1a:68:bc:2c:28:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=1ac9fcf7-5658-44da-8801-bad46a584c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:2c:e5:7c:65:22:b9:d8:e9:ec:84:27:8f: 21:82:9f:37:30:19:af:c2:c5:c2:dd:a9:77:90:40: 6b:54:19:a1:c9:b4:70:a7:a1:71:d2:73:52:fd:e2: e9:1f:b8:5b:33:00:b7:85:e9:6f:cd:d3:7c:a0:43: a2:5d:ba:16:40:14:0f:2f:47:f5:7b:95:b3:3d:cb: 22:ed:fa:ee:a0:78:86:37:65:3e:f2:f4:2a:9e:dd: 56:70:9b:93:0e:39:08:00:51:28:50:a2:17:8b:28: 70:36:4b:38:e8:48:2e:e8:6e:28:f3:96:e4:e1:f2: 64:69:80:f9:59:e9:38:a0:e0:0f:ab:d6:68:82:1a: ee:9b:00:b7:3d:fa:fa:8b:a6:ae:e4:6e:f5:46:b0: d4:3e:a5:40:ef:61:5b:62:4d:79:10:d0:d9:f5:53: 9f:22:60:8c:44:c7:f9:54:93:19:c5:78:dd:9b:7f: 5e:6f:9c:a0:29:96:0f:c3:f2:13:07:c7:bd:1d:c5: b1:d0:66:bb:d3:65:05:53:57:33:aa:fb:38:b1:80: 45:92:40:fa:59:08:04:6d:f4:e3:b1:92:9c:7b:0a: a7:c7:1d:d4:c6:1f:53:60:b8:4b:2a:66:36:18:2b: 3b:98:3e:bc:f7:e3:57:3d:f4:e4:4c:eb:15:00:62: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9B:68:19:43:E8:E8:0B:B9:9E:19:C2:73:BF:3E:D0:C6:D8:30:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/2e353404-ccec-38a2-9e7a-bb5c36278a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl X509v3 Authority Key Identifier: keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer sbgp-ipAddrBlock: critical IPv4: 23.155.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7c:3f:f2:4c:27:45:70:3d:f0:6c:51:78:8d:b1:ff:95:f5: 66:d1:11:fb:8c:5f:41:5a:28:ab:da:67:66:d1:da:66:eb:25: 7e:8e:b0:28:bb:76:3a:32:ea:91:5d:35:4e:8c:6a:17:cb:93: eb:be:b9:72:f4:5b:03:57:8a:67:d4:5f:8c:71:7d:0a:0e:e0: c2:19:01:64:65:36:32:9b:52:3e:6a:75:7b:8b:4c:54:43:1a: 7e:94:3a:d6:b0:f6:58:67:21:11:33:82:50:45:82:ea:e4:7b: 2d:b1:b7:6e:e9:df:50:30:50:cd:fd:81:c2:eb:5a:bc:df:51: 6a:2a:ed:50:d7:45:3e:24:07:98:79:17:ab:85:43:8c:21:97: 78:35:ca:6c:99:6c:d4:9f:21:f2:f3:3b:b8:3d:81:8f:b4:fe: 0e:1d:e3:00:38:18:2f:2b:4c:7f:0d:2f:39:de:e3:15:be:38: ff:e5:27:7d:25:e3:eb:0c:26:c8:ee:43:4d:a8:df:70:8d:06: 27:01:d0:85:22:2e:c6:71:b5:1f:98:a1:8d:6c:6c:53:14:f6: 07:0b:45:b9:88:53:c5:9b:4d:2d:4c:0f:a6:3c:66:9e:82:12: ca:9f:30:41:69:83:2c:11:fa:f8:62:fa:a5:43:5c:52:2b:4c: 83:a9:7c:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uoZbBpovCwooQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzMmU1ZmQtMzc0ZS00MzBmLTlhZjMtMzA4YzFlYzZj NzJkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk MWFjOWZjZjctNTY1OC00NGRhLTg4MDEtYmFkNDZhNTg0YzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAgs5XxlIrnY6eyEJ48hgp83MBmvwsXC3al3 kEBrVBmhybRwp6Fx0nNS/eLpH7hbMwC3helvzdN8oEOiXboWQBQPL0f1e5WzPcsi 7fruoHiGN2U+8vQqnt1WcJuTDjkIAFEoUKIXiyhwNks46Egu6G4o85bk4fJkaYD5 Wek4oOAPq9ZoghrumwC3Pfr6i6au5G71RrDUPqVA72FbYk15ENDZ9VOfImCMRMf5 VJMZxXjdm39eb5ygKZYPw/ITB8e9HcWx0Ga702UFU1czqvs4sYBFkkD6WQgEbfTj sZKcewqnxx3Uxh9TYLhLKmY2GCs7mD689+NXPfTkTOsVAGJTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCbaBlD6OgLuZ4ZwnO/PtDG2DA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NjMy ZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhjMWVjNmM3MmQvMmUzNTM0MDQtY2NlYy0z OGEyLTllN2EtYmI1YzM2Mjc4YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDYzMmU1ZmQtMzc0ZS00MzBmLTlh ZjMtMzA4YzFlYzZjNzJkLzQ2MzJlNWZkLTM3NGUtNDMwZi05YWYzLTMwOGMxZWM2 YzcyZC5jcmwwHwYDVR0jBBgwFoAUjNzpjNBqpO6W666ZAcVHnYuuD+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NjMyZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhj MWVjNmM3MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5uBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB18P/JMJ0VwPfBsUXiNsf+V9WbREfuMX0FaKKvaZ2bR2mbrJX6OsCi7 djoy6pFdNU6MahfLk+u+uXL0WwNXimfUX4xxfQoO4MIZAWRlNjKbUj5qdXuLTFRD Gn6UOtaw9lhnIREzglBFgurkey2xt27p31AwUM39gcLrWrzfUWoq7VDXRT4kB5h5 F6uFQ4whl3g1ymyZbNSfIfLzO7g9gY+0/g4d4wA4GC8rTH8NLzne4xW+OP/lJ30l 4+sMJsjuQ02o33CNBicB0IUiLsZxtR+YoY1sbFMU9gcLRbmIU8WbTS1MD6Y8Zp6C EsqfMEFpgywR+vhi+qVDXFIrTIOpfEg= -----END CERTIFICATE-----Generated at Mon Apr 28 11:06:43 2025 by rpki-client