$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa File: 7108cb79-914e-3bcb-be90-fa39e1b08f83.roa (raw, json) Hash identifier: qyC6a4xST1EIC8dyJJs8QT1nxq6fb07wv+K1pAwdp7Q= Subject key identifier: B4:FF:41:CA:C1:DA:FE:2B:00:B9:00:67:29:3C:72:CE:FD:E0:66:13 Certificate issuer: /CN=9d5e8807-643a-46c3-a245-693c793610e4 Certificate serial: 010D0C9F432858491ED6D515AC743B255C018B00 Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 5065 IP address blocks: 23.129.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d5:15:ac:74:3b:25:5c:01:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=2e6ad354-b835-45c1-9430-7b7cf0da462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:a9:9c:50:36:16:be:ed:c3:e1:e4:9e:4c: 75:8b:80:cb:27:f2:ae:6a:84:0a:91:11:83:bf:ab: 06:c3:e7:ec:e0:52:c4:73:8a:96:39:b4:f9:3e:17: 68:d0:12:2f:96:26:76:19:93:d1:6e:f7:ae:c3:d5: b9:83:76:9c:5d:86:23:4f:bc:48:8e:04:fc:59:00: 64:b5:40:bf:58:6c:43:85:9c:85:f1:69:99:48:17: 10:d9:cd:f6:e4:f7:42:e5:08:94:0e:8d:ff:28:81: cc:b7:f3:aa:de:a9:fb:0c:84:e0:87:2d:0e:32:ed: 09:0c:36:28:0f:c8:ea:ec:3a:bd:0b:c3:2e:a7:c1: 0c:19:7f:46:e5:79:90:c9:34:12:07:da:48:81:ad: bd:39:08:d7:63:11:a3:72:1b:bb:13:86:c2:19:5d: 72:d0:c7:fb:4a:2e:35:0b:2a:22:73:7c:b3:5b:8c: d1:8c:b2:2f:a2:c2:e0:fa:4f:f4:d0:76:5b:fd:06: 9e:c7:f0:18:af:2c:9f:e5:4d:ce:27:5e:e2:a9:13: c3:5d:3d:01:f8:8c:41:c3:ce:26:00:94:bb:93:ad: a1:4b:76:71:04:d2:f1:d3:5e:98:ee:a1:f4:71:1a: 80:61:da:80:4c:64:d5:62:d2:a1:54:ec:a3:da:3b: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FF:41:CA:C1:DA:FE:2B:00:B9:00:67:29:3C:72:CE:FD:E0:66:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl X509v3 Authority Key Identifier: keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:30:19:40:ce:c0:4d:27:95:31:b8:76:06:c7:9c:cc:33:da: e6:50:f4:d2:65:62:e2:75:c7:d6:cc:57:e5:16:2a:d8:68:f5: ce:04:01:64:77:84:a8:8f:01:f2:e5:8f:d0:2d:94:d3:06:54: 86:c0:4a:94:f5:4b:1f:73:ba:fd:7f:a2:1a:2d:a5:d4:60:2a: f1:08:41:39:f4:cd:43:62:6f:17:38:c9:cd:8f:6d:64:8a:0d: 49:c5:3c:a3:92:56:dd:1a:92:e0:e7:1f:fd:15:db:74:2d:4f: c4:ca:40:14:a4:1a:7b:81:63:4b:cb:10:89:81:db:8a:af:ed: 76:f8:29:e4:85:0b:29:12:e7:c8:cc:21:a6:14:f4:3e:cf:c9: c3:7a:94:86:ab:b1:61:58:ef:89:86:cb:5b:2f:38:d7:e7:4a: b1:95:56:f3:28:2f:ef:77:01:9e:b6:65:a1:77:f4:c5:21:d2: f3:03:13:7b:0e:7c:ec:51:2e:cf:19:af:c6:85:f1:b5:3a:52: 02:81:c5:6e:72:f2:fa:59:40:3f:12:56:ab:08:b7:51:2b:30: 74:d8:44:1f:66:38:0f:9e:5c:5b:f3:a9:d7:14:e7:4c:fb:9d: c5:ce:30:f1:42:e8:26:ce:4d:e4:bb:60:d9:94:2c:ff:41:fd: f4:b6:f7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tUVrHQ7JVwBiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYx MGU0MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MmU2YWQzNTQtYjgzNS00NWMxLTk0MzAtN2I3Y2YwZGE0NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS+pnFA2Fr7tw+Hknkx1i4DLJ/KuaoQKkRGD v6sGw+fs4FLEc4qWObT5Phdo0BIvliZ2GZPRbveuw9W5g3acXYYjT7xIjgT8WQBk tUC/WGxDhZyF8WmZSBcQ2c325PdC5QiUDo3/KIHMt/Oq3qn7DITghy0OMu0JDDYo D8jq7Dq9C8Mup8EMGX9G5XmQyTQSB9pIga29OQjXYxGjchu7E4bCGV1y0Mf7Si41 Cyoic3yzW4zRjLIvosLg+k/00HZb/Qaex/AYryyf5U3OJ17iqRPDXT0B+IxBw84m AJS7k62hS3ZxBNLx016Y7qH0cRqAYdqATGTVYtKhVOyj2jss1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLT/QcrB2v4rALkAZyk8cs794GYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDVl ODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvNzEwOGNiNzktOTE0ZS0z YmNiLWJlOTAtZmEzOWUxYjA4ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQ1ZTg4MDctNjQzYS00NmMzLWEy NDUtNjkzYzc5MzYxMGU0LzlkNWU4ODA3LTY0M2EtNDZjMy1hMjQ1LTY5M2M3OTM2 MTBlNC5jcmwwHwYDVR0jBBgwFoAUEU+gTdTjeDuK8GPpSSQsmWODPMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNj NzkzNjEwZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0wGUDOwE0nlTG4dgbHnMwz2uZQ9NJlYuJ1x9bMV+UWKtho9c4EAWR3 hKiPAfLlj9AtlNMGVIbASpT1Sx9zuv1/ohotpdRgKvEIQTn0zUNibxc4yc2PbWSK DUnFPKOSVt0akuDnH/0V23QtT8TKQBSkGnuBY0vLEImB24qv7Xb4KeSFCykS58jM IaYU9D7PycN6lIarsWFY74mGy1svONfnSrGVVvMoL+93AZ62ZaF39MUh0vMDE3sO fOxRLs8Zr8aF8bU6UgKBxW5y8vpZQD8SVqsIt1ErMHTYRB9mOA+eXFvzqdcU50z7 ncXOMPFC6CbOTeS7YNmULP9B/fS29xI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:38 2025 by rpki-client