$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa File: cb858b9e-023b-313c-891a-00a6d1fa8853.roa (raw, json) Hash identifier: 8ahplm43ocAaljP9hWZuM45Z4Q0uoHVKHJHJqh169q8= Subject key identifier: 2B:69:1F:D5:BC:7C:4F:6A:19:DC:26:73:89:DA:4F:A2:5B:69:FA:66 Certificate issuer: /CN=70a36240-104b-454c-b230-bf415e356e88 Certificate serial: 010D0C9F43285848CA15CBFF70A6E93178B01980 Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa Signing time: Thu 06 Feb 2025 05:24:05 +0000 ROA not before: Thu 06 Feb 2025 05:24:05 +0000 ROA not after: Wed 07 May 2025 04:24:05 +0000 asID: 31898 IP address blocks: 23.128.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ca:15:cb:ff:70:a6:e9:31:78:b0:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a36240-104b-454c-b230-bf415e356e88 Validity Not Before: Feb 6 05:24:05 2025 GMT Not After : May 7 04:24:05 2025 GMT Subject: CN=e8b248e0-f1b4-4181-b745-fa1908eca897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:77:7f:b2:ec:f5:a4:98:b7:67:6f:01:da:7e: 31:e6:2d:c6:93:72:dc:8b:b9:9b:0b:4d:8c:80:dc: 35:ee:d4:2d:9e:54:7f:ac:79:d8:be:c1:02:8b:e8: 8d:a4:cc:b4:cc:d8:62:c7:3f:85:11:c8:a1:57:29: a7:ca:a9:25:43:ea:f4:8d:56:9c:16:b2:5a:b5:f3: 80:2a:27:a8:79:2a:9a:fe:95:03:c0:bd:cf:14:fb: 3f:1d:32:ba:c3:6f:18:a5:ff:84:f7:4a:e1:bf:30: 07:ad:7b:44:65:7a:fd:ee:36:05:59:d2:44:0f:d0: 0b:21:9f:2c:64:75:e6:33:30:7c:4b:de:f1:29:0a: 4c:66:81:38:8d:65:68:d0:16:3e:c8:a3:49:20:94: 7e:95:3c:2f:83:0c:f7:17:8b:63:81:d4:43:ca:d2: bd:4d:83:5e:94:59:24:f8:79:0a:3e:eb:95:f9:fc: 1a:0c:4d:51:c7:54:92:cc:7b:35:50:80:6e:76:82: 0b:3c:ec:25:a5:3a:8f:79:4b:97:e3:93:3c:71:be: 1f:58:46:89:6d:d3:24:3d:95:a6:fa:5e:f0:f5:ed: b3:36:9b:e5:c0:bb:f3:75:ba:63:47:85:b0:34:ea: 45:cb:6d:6a:e4:e9:63:9e:aa:c2:ed:33:82:5c:e0: 95:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:1F:D5:BC:7C:4F:6A:19:DC:26:73:89:DA:4F:A2:5B:69:FA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl X509v3 Authority Key Identifier: keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer sbgp-ipAddrBlock: critical IPv4: 23.128.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d3:9a:19:9d:40:88:f8:75:fb:91:21:79:8b:98:55:81:65: 3d:77:c1:d1:ca:60:c0:55:c6:84:5f:73:9d:ea:ac:3b:4e:2c: 76:6f:24:43:61:fc:b2:87:f2:f9:a0:01:4b:72:2c:03:fc:5a: 41:91:f5:cb:52:ff:d4:fd:e1:26:2c:cf:88:f7:66:05:a3:33: f1:2e:3b:4e:e6:a9:b8:fc:c4:45:85:e5:84:f2:fa:66:bc:90: 80:9d:38:eb:4e:75:73:5d:89:0d:fe:bf:e1:29:a9:3f:97:07: 5d:cd:75:f6:f2:1a:55:b3:fe:49:18:93:af:bf:50:ad:0a:fe: 45:a2:30:90:15:30:bc:6e:d9:12:e0:0d:5f:de:c2:33:9b:5d: 50:d1:90:22:2f:bb:11:11:39:b3:0b:91:ff:c0:53:36:28:28: 6e:0b:0d:21:f0:49:a9:cb:20:b4:d2:71:25:be:ea:f7:c8:d6: 6e:ce:5a:4a:a7:a9:ac:6b:3e:10:7b:b1:fe:4e:2b:27:e9:4d: d3:8e:78:39:b7:ad:b6:97:c3:8f:ea:04:f7:a1:38:94:2d:e6: 9e:26:3f:de:e2:7d:be:19:a8:bd:51:55:e0:42:df:98:de:49: b2:de:3e:1e:53:61:43:5e:78:95:5b:5b:65:da:a7:d9:63:cd: b7:1a:3d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjKFcv/cKbpMXiwGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhMzYyNDAtMTA0Yi00NTRjLWIyMzAtYmY0MTVlMzU2 ZTg4MB4XDTI1MDIwNjA1MjQwNVoXDTI1MDUwNzA0MjQwNVowLzEtMCsGA1UEAxMk ZThiMjQ4ZTAtZjFiNC00MTgxLWI3NDUtZmExOTA4ZWNhODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHd/suz1pJi3Z28B2n4x5i3Gk3Lci7mbC02M gNw17tQtnlR/rHnYvsECi+iNpMy0zNhixz+FEcihVymnyqklQ+r0jVacFrJatfOA KieoeSqa/pUDwL3PFPs/HTK6w28Ypf+E90rhvzAHrXtEZXr97jYFWdJED9ALIZ8s ZHXmMzB8S97xKQpMZoE4jWVo0BY+yKNJIJR+lTwvgwz3F4tjgdRDytK9TYNelFkk +HkKPuuV+fwaDE1Rx1SSzHs1UIBudoILPOwlpTqPeUuX45M8cb4fWEaJbdMkPZWm +l7w9e2zNpvlwLvzdbpjR4WwNOpFy21q5OljnqrC7TOCXOCVfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtpH9W8fE9qGdwmc4naT6JbafpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83MGEz NjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUzNTZlODgvY2I4NThiOWUtMDIzYi0z MTNjLTg5MWEtMDBhNmQxZmE4ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzBhMzYyNDAtMTA0Yi00NTRjLWIy MzAtYmY0MTVlMzU2ZTg4LzcwYTM2MjQwLTEwNGItNDU0Yy1iMjMwLWJmNDE1ZTM1 NmU4OC5jcmwwHwYDVR0jBBgwFoAUYDGdgAKQWMN+aqTm29e3yk6Me+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQx NWUzNTZlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvTmhmdQIj4dfuRIXmLmFWBZT13wdHKYMBVxoRfc53qrDtOLHZvJENh /LKH8vmgAUtyLAP8WkGR9ctS/9T94SYsz4j3ZgWjM/EuO07mqbj8xEWF5YTy+ma8 kICdOOtOdXNdiQ3+v+EpqT+XB13NdfbyGlWz/kkYk6+/UK0K/kWiMJAVMLxu2RLg DV/ewjObXVDRkCIvuxERObMLkf/AUzYoKG4LDSHwSanLILTScSW+6vfI1m7OWkqn qaxrPhB7sf5OKyfpTdOOeDm3rbaXw4/qBPehOJQt5p4mP97ifb4ZqL1RVeBC35je SbLePh5TYUNeeJVbW2Xap9ljzbcaPTQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:54 2025 by rpki-client