$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa File: 2269ef02-ea5a-3244-b8a9-793522bcb47c.roa (raw, json) Hash identifier: XMk40Q0IEHrg4EwOMtlgeEFZInjfExF4ezSMODzsL2Q= Subject key identifier: 65:F8:F9:5A:26:12:31:BE:02:F8:4F:4C:66:98:8B:84:A9:29:D3:F2 Certificate issuer: /CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Certificate serial: 010D0C9F432858498A347643040B04EAE39B8770 Authority key identifier: 9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 401469 IP address blocks: 23.128.156.0/24 maxlen: 24 2602:f7ad::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:76:43:04:0b:04:ea:e3:9b:87:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=bb9976d3-a36c-4848-a1fc-da0d95a6e5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:da:51:11:9a:be:e4:f1:67:4a:3a:7b:73: 42:3c:b2:dc:a3:51:c6:ea:40:aa:0e:94:36:65:99: bd:81:97:b3:64:1b:a2:fd:60:be:73:a6:8d:fd:d3: 4d:1f:39:c4:be:29:b7:74:ce:d3:d7:eb:96:c2:f2: 40:0b:83:cc:4d:80:de:08:ed:34:8c:d7:c9:21:c9: e5:f5:64:b1:42:be:9b:8d:f2:bd:bc:fe:01:51:40: f2:d2:33:8a:ea:b0:e2:af:40:3f:9e:96:cf:e2:98: 99:5e:2f:8f:d2:aa:94:cb:a4:33:f6:c9:7e:f2:51: e1:32:f5:72:23:5a:61:f6:5a:fb:06:c7:3a:6d:ea: 71:ae:f3:51:7b:c7:ee:b3:b1:db:5a:c9:0d:c9:b8: 13:36:46:f6:cc:23:7c:ae:0d:e1:14:35:1b:db:d0: 76:8c:7a:ce:ab:81:ee:e2:1c:5f:43:20:a7:18:5d: fa:b8:95:6a:36:4a:36:7d:67:f7:53:e3:cb:0e:11: 55:0c:fe:7e:f4:fd:e5:fe:b3:84:24:6e:4b:25:e3: 2d:f8:e4:1e:9e:13:09:8f:56:12:52:91:2a:b8:7f: 43:3b:db:9f:3d:75:1c:bf:9c:7d:08:57:27:30:64: 72:0e:af:47:0c:c7:9e:e5:6d:85:8f:87:15:be:99: ed:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:F9:5A:26:12:31:BE:02:F8:4F:4C:66:98:8B:84:A9:29:D3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl X509v3 Authority Key Identifier: keyid:9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.156.0/24 IPv6: 2602:f7ad::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a7:39:53:7d:af:75:37:b6:55:c4:34:b3:91:be:be:97:e9: 36:34:56:b8:26:75:ec:fb:68:9c:9f:0c:23:01:6a:90:71:a0: d5:b6:72:7f:26:e4:5e:28:c6:84:df:b6:16:ce:c2:33:4e:82: d9:40:90:71:3b:2d:87:68:8d:a0:cd:b9:40:d6:c2:15:52:93: c6:b1:21:1b:ca:77:cc:c9:a4:2a:d6:a3:59:22:bb:22:17:5a: 65:c8:4d:b2:11:98:c6:46:35:d1:d8:75:67:82:e3:54:f3:d4: b6:f7:dc:4a:ba:72:0b:f8:c8:c2:78:99:73:dd:f8:8c:05:9c: 56:ed:4e:bf:a6:17:d0:e6:02:19:8c:21:37:09:b4:03:ee:46: 09:4b:c9:4d:19:51:58:52:c6:df:e4:34:77:a7:94:b6:af:fd: ce:4e:dd:42:c4:b7:7a:bb:30:24:7e:e0:d9:6d:4f:8a:10:d2: 34:79:17:d5:98:23:eb:0c:ff:1e:df:70:7c:b1:5f:18:34:49: aa:84:4a:fa:85:81:3e:8d:86:e5:46:73:4d:47:96:44:83:3c: 4b:c1:89:76:67:d6:f4:e8:2e:bb:96:46:ba:33:71:3d:b6:4e: 76:f7:ea:0e:11:43:d7:b4:bf:d4:4c:ad:ab:e9:a7:5c:75:19: 69:87:7b:c5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmKNHZDBAsE6uObh3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjMzdkM2QtMDVlMy00ZjViLTg1ZjItMzc0MjkyZDUw MDllMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YmI5OTc2ZDMtYTM2Yy00ODQ4LWExZmMtZGEwZDk1YTZlNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0baURGavuTxZ0o6e3NCPLLco1HG6kCqDpQ2 ZZm9gZezZBui/WC+c6aN/dNNHznEvim3dM7T1+uWwvJAC4PMTYDeCO00jNfJIcnl 9WSxQr6bjfK9vP4BUUDy0jOK6rDir0A/npbP4piZXi+P0qqUy6Qz9sl+8lHhMvVy I1ph9lr7Bsc6bepxrvNRe8fus7HbWskNybgTNkb2zCN8rg3hFDUb29B2jHrOq4Hu 4hxfQyCnGF36uJVqNko2fWf3U+PLDhFVDP5+9P3l/rOEJG5LJeMt+OQenhMJj1YS UpEquH9DO9ufPXUcv5x9CFcnMGRyDq9HDMee5W2Fj4cVvpntEwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGX4+VomEjG+AvhPTGaYi4SpKdPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMz N2QzZC0wNWUzLTRmNWItODVmMi0zNzQyOTJkNTAwOWUvMjI2OWVmMDItZWE1YS0z MjQ0LWI4YTktNzkzNTIyYmNiNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWZjMzdkM2QtMDVlMy00ZjViLTg1 ZjItMzc0MjkyZDUwMDllL2VmYzM3ZDNkLTA1ZTMtNGY1Yi04NWYyLTM3NDI5MmQ1 MDA5ZS5jcmwwHwYDVR0jBBgwFoAUn3ezGK3HCMBoxZf9nCsqNAP7K8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMzN2QzZC0wNWUzLTRmNWItODVmMi0zNzQy OTJkNTAwOWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CcMA4E AgACMAgDBgQmAvetADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLpzlTfa91N7ZVxDSzkb6+l+k2NFa4JnXs +2icnwwjAWqQcaDVtnJ/JuReKMaE37YWzsIzToLZQJBxOy2HaI2gzblA1sIVUpPG sSEbynfMyaQq1qNZIrsiF1plyE2yEZjGRjXR2HVnguNU89S299xKunIL+MjCeJlz 3fiMBZxW7U6/phfQ5gIZjCE3CbQD7kYJS8lNGVFYUsbf5DR3p5S2r/3OTt1CxLd6 uzAkfuDZbU+KENI0eRfVmCPrDP8e33B8sV8YNEmqhEr6hYE+jYblRnNNR5ZEgzxL wYl2Z9b06C67lka6M3E9tk529+oOEUPXtL/UTK2r6adcdRlph3vF -----END CERTIFICATE-----Generated at Sun Apr 27 17:03:45 2025 by rpki-client