$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa File: 42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa (raw, json) Hash identifier: nHJ/pr5aAP0If2PiEQzEmqTfa7u5c9r5poFRD6iWfEA= Subject key identifier: 59:FE:9A:01:97:ED:32:12:DE:EC:8E:A5:DD:69:91:70:F8:1D:B7:6D Certificate issuer: /CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0 Certificate serial: 010D0C9F4328584965E97E5A6BE5E588A0BAE000 Authority key identifier: D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 14618 IP address blocks: 23.235.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7e:5a:6b:e5:e5:88:a0:ba:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=c83f0b90-ede1-41bb-8ffd-f788ffa06b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:a5:d7:48:e7:7f:f7:e6:b2:6f:84:91:f0: 76:a4:6d:50:82:7e:be:80:58:11:3d:2d:b4:cb:fb: a4:03:1f:db:bc:b8:c6:ba:e4:76:59:e6:ea:db:00: fa:d2:fc:55:3a:2d:44:7c:e6:d9:55:4e:a8:57:ca: 82:36:57:db:97:60:3d:de:df:fa:f8:02:ae:29:d5: bd:72:e1:d3:3e:81:41:c8:e8:a4:00:f6:0c:ef:7f: 3f:da:77:3f:d0:30:6b:7a:44:6a:c8:85:45:be:cb: 02:f4:5e:1b:2b:d2:f3:d9:84:92:1d:e0:22:fe:a5: fe:ee:d7:a8:c3:31:ce:46:94:dd:26:26:d8:33:1b: 66:90:a2:ad:b5:36:76:1a:0f:43:b6:f6:ba:a3:43: 66:f3:e9:72:10:66:f1:ba:93:0b:b2:1f:70:82:91: 34:1c:da:ec:e2:26:2f:23:b6:12:3b:dc:c6:5c:bb: 8b:cf:48:4b:ac:d6:3b:dd:0e:1b:86:5a:5c:34:37: 88:64:2f:a8:ee:69:40:fc:5f:2c:42:74:59:50:61: 65:1d:9e:97:5c:2d:eb:3d:f6:e6:ea:43:4c:83:04: 1b:d0:a0:d5:df:f5:29:7a:2c:69:61:8f:8c:e4:6b: 2f:d6:09:b9:27:b9:e0:29:dd:e0:32:f5:63:c2:14: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:9A:01:97:ED:32:12:DE:EC:8E:A5:DD:69:91:70:F8:1D:B7:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl X509v3 Authority Key Identifier: keyid:D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer sbgp-ipAddrBlock: critical IPv4: 23.235.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7c:85:eb:e6:2f:46:bc:ba:72:56:5c:26:bc:75:0a:f2:71: b7:31:b7:d7:b7:a6:22:df:28:15:10:9d:83:ec:75:fe:4b:04: 2d:81:d1:4a:b1:cd:67:bf:66:16:c1:ba:06:00:52:49:f9:32: ff:67:ef:d0:06:09:bd:d2:1f:2d:d3:0e:e9:74:68:41:5d:bb: 2b:86:e3:17:fc:8b:a4:f0:92:9f:97:81:cd:99:0b:d7:ef:7d: 13:59:b2:f8:7c:58:65:58:11:7a:d8:51:b0:b8:d0:50:51:6f: 0e:7b:38:d4:c4:2c:8c:a6:37:9c:a6:c4:5b:5e:3e:ef:ce:68: 1e:32:4c:c7:e2:a9:47:72:ba:ee:ca:5d:16:71:bd:1f:d7:04: a5:30:fc:a4:46:7e:88:69:24:78:22:67:dc:f1:89:0e:76:cc: cf:46:52:19:e3:bd:dd:94:54:1d:7b:96:bd:81:8f:f9:26:17: 47:25:41:c4:b9:cf:c9:aa:73:9f:29:25:53:34:fc:d4:51:14: 48:8d:76:d7:d9:dd:8e:03:67:4c:02:2a:ac:cd:4c:35:24:49: 87:04:e3:cc:0d:62:0e:ea:cd:c8:3e:79:4d:72:76:5e:1c:d2: 5c:d4:98:19:8a:17:a7:64:97:29:9e:1d:47:f5:28:99:f9:2b: c9:07:31:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6X5aa+XliKC64AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQyM2M1YWItZTJlNi00Mjk1LWFiYzctYmUzZmFkMmIy NWIwMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YzgzZjBiOTAtZWRlMS00MWJiLThmZmQtZjc4OGZmYTA2Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppyl10jnf/fmsm+EkfB2pG1Qgn6+gFgRPS20 y/ukAx/bvLjGuuR2Webq2wD60vxVOi1EfObZVU6oV8qCNlfbl2A93t/6+AKuKdW9 cuHTPoFByOikAPYM738/2nc/0DBrekRqyIVFvssC9F4bK9Lz2YSSHeAi/qX+7teo wzHORpTdJibYMxtmkKKttTZ2Gg9Dtva6o0Nm8+lyEGbxupMLsh9wgpE0HNrs4iYv I7YSO9zGXLuLz0hLrNY73Q4bhlpcNDeIZC+o7mlA/F8sQnRZUGFlHZ6XXC3rPfbm 6kNMgwQb0KDV3/UpeixpYY+M5Gsv1gm5J7ngKd3gMvVjwhSQeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn+mgGX7TIS3uyOpd1pkXD4HbdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NDIz YzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNmYWQyYjI1YjAvNDJkZDVmYzMtZWI0MS0z YmM4LThhYzgtMzFiNTk0YmJiNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzQyM2M1YWItZTJlNi00Mjk1LWFi YzctYmUzZmFkMmIyNWIwLzc0MjNjNWFiLWUyZTYtNDI5NS1hYmM3LWJlM2ZhZDJi MjViMC5jcmwwHwYDVR0jBBgwFoAU0CVhDSM+xkzR1NNBlEZH2PBarAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NDIzYzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNm YWQyYjI1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+t+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ8hevmL0a8unJWXCa8dQrycbcxt9e3piLfKBUQnYPsdf5LBC2B0Uqx zWe/ZhbBugYAUkn5Mv9n79AGCb3SHy3TDul0aEFduyuG4xf8i6Twkp+Xgc2ZC9fv fRNZsvh8WGVYEXrYUbC40FBRbw57ONTELIymN5ymxFtePu/OaB4yTMfiqUdyuu7K XRZxvR/XBKUw/KRGfohpJHgiZ9zxiQ52zM9GUhnjvd2UVB17lr2Bj/kmF0clQcS5 z8mqc58pJVM0/NRRFEiNdtfZ3Y4DZ0wCKqzNTDUkSYcE48wNYg7qzcg+eU1ydl4c 0lzUmBmKF6dklymeHUf1KJn5K8kHMYQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:32 2025 by rpki-client