$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa File: db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa (raw, json) Hash identifier: cXIEW4QTgM2YdWixTeeUGlfcXt2A9vxrxZD+yF52c0A= Subject key identifier: A3:E2:AF:3A:B7:23:3B:5F:93:4B:DA:20:39:4D:37:76:8F:C6:8A:47 Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Certificate serial: 010D0C9F432858499C59E657465FCB20BD0B8500 Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 134365 IP address blocks: 23.247.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e6:57:46:5f:cb:20:bd:0b:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=3ec1e5c6-26c3-40fd-a1a4-1eeaf578b8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:7d:78:2e:44:da:d7:78:0f:f8:28:47:12: f4:20:6c:e3:c5:6f:93:b1:ea:f2:03:7c:15:29:25: c9:2d:a5:d7:06:46:f3:5a:91:01:ef:01:77:89:46: a2:c0:40:49:da:bf:31:de:e6:cf:71:d0:a0:cd:1d: 8d:c2:96:5c:00:ba:9b:10:c5:e1:30:c6:73:a6:98: e1:6b:7a:91:99:40:65:33:38:1e:02:b6:92:c4:03: 5c:21:55:85:04:db:32:96:62:88:e0:3e:67:dc:c9: c7:62:6b:a7:f3:79:e5:51:bc:4d:cf:95:f9:3a:32: f4:db:e0:a0:a9:39:a6:5d:26:e3:fb:bb:f2:ee:82: b0:5c:fe:01:31:77:3b:2c:84:aa:e1:01:b0:80:9b: c6:33:3a:10:5b:d1:2e:ac:ac:a7:c3:10:ed:a5:4d: b7:52:9f:d3:3c:c6:fc:49:44:8f:a8:e2:61:e1:1f: 6f:fd:2d:29:04:cf:2d:e4:42:c9:03:83:51:0c:3d: d1:c9:03:35:a2:54:de:f4:2e:c3:68:ce:79:fe:e2: 50:c2:6c:bc:d2:04:99:3f:cb:b6:ea:d1:45:9b:b0: 46:be:57:38:1b:49:f3:6b:3b:6f:50:b3:84:e4:09: ba:0f:cb:3b:94:87:5b:7b:0a:db:e7:2d:a7:8a:56: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:AF:3A:B7:23:3B:5F:93:4B:DA:20:39:4D:37:76:8F:C6:8A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl X509v3 Authority Key Identifier: keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:29:53:3c:82:5e:80:53:84:5d:e7:b3:44:d3:99:54:92:17: 5a:c2:21:20:7b:a2:0c:64:3c:06:ea:ed:aa:3b:26:d7:ac:49: 92:fc:a8:a4:16:a6:2e:86:55:2b:18:47:0b:8e:dd:10:5c:4e: c8:53:5e:57:5e:a1:40:6c:6f:13:8f:f4:95:e8:5a:4e:17:8e: cd:ff:3e:6a:a5:df:05:41:36:fc:e9:24:c9:ce:85:e9:7b:ef: a1:f6:d0:8f:e1:a8:95:06:fc:82:78:e0:17:08:f2:ea:7b:cf: d8:f3:fd:41:bd:15:5a:b5:7d:5b:5d:7f:3c:5d:a8:a9:ab:fa: a2:46:b7:c2:6c:ac:0b:28:10:a0:0c:4c:d8:04:14:91:ef:d0: 0a:c5:6b:30:ea:d7:f8:6a:b3:32:11:1b:6d:21:20:68:5d:a5: c5:e2:d4:6b:80:f7:78:07:8e:da:6a:90:2d:1b:e9:75:83:98: ea:6f:7d:8d:2f:c6:59:6e:b0:4e:33:dc:ad:6d:e8:fd:4a:8b: 78:9a:99:3e:b8:2c:51:19:70:61:f0:0f:4e:a2:f1:ec:22:9b: fb:02:b9:ad:c7:d5:5d:0d:b9:a5:6c:47:94:55:10:8b:96:8a: d2:1f:60:9f:f3:96:40:b3:25:c5:da:06:06:7f:1d:bb:a3:a9: 9b:78:fa:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeZXRl/LIL0LhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj ZGIxMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk M2VjMWU1YzYtMjZjMy00MGZkLWExYTQtMWVlYWY1NzhiOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKN9eC5E2td4D/goRxL0IGzjxW+TseryA3wV KSXJLaXXBkbzWpEB7wF3iUaiwEBJ2r8x3ubPcdCgzR2NwpZcALqbEMXhMMZzppjh a3qRmUBlMzgeAraSxANcIVWFBNsylmKI4D5n3MnHYmun83nlUbxNz5X5OjL02+Cg qTmmXSbj+7vy7oKwXP4BMXc7LISq4QGwgJvGMzoQW9EurKynwxDtpU23Up/TPMb8 SUSPqOJh4R9v/S0pBM8t5ELJA4NRDD3RyQM1olTe9C7DaM55/uJQwmy80gSZP8u2 6tFFm7BGvlc4G0nzaztvULOE5Am6D8s7lIdbewrb5y2nila21wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPirzq3Iztfk0vaIDlNN3aPxopHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvZGIzMzBmYTMtMWYxNi0z ZDllLWJhZDMtNDRiYzg1OGI4MmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0 M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5 MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQpUzyCXoBThF3ns0TTmVSSF1rCISB7ogxkPAbq7ao7JtesSZL8qKQW pi6GVSsYRwuO3RBcTshTXldeoUBsbxOP9JXoWk4Xjs3/Pmql3wVBNvzpJMnOhel7 76H20I/hqJUG/IJ44BcI8up7z9jz/UG9FVq1fVtdfzxdqKmr+qJGt8JsrAsoEKAM TNgEFJHv0ArFazDq1/hqszIRG20hIGhdpcXi1GuA93gHjtpqkC0b6XWDmOpvfY0v xllusE4z3K1t6P1Ki3iamT64LFEZcGHwD06i8ewim/sCua3H1V0NuaVsR5RVEIuW itIfYJ/zlkCzJcXaBgZ/HbujqZt4+ok= -----END CERTIFICATE-----Generated at Sat Apr 26 17:38:48 2025 by rpki-client