$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa File: d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa (raw, json) Hash identifier: tJwTkWIuUoUIEpEfbDvemQ2jj/ohfnjTvwSQJODwAcU= Subject key identifier: 6C:14:36:F2:D5:B2:A5:22:78:11:E4:66:EA:C7:F1:7D:E9:CF:BC:20 Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F4328584902FE1F83574C8FC251130880 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa Signing time: Wed 26 Feb 2025 14:37:28 +0000 ROA not before: Wed 26 Feb 2025 14:37:28 +0000 ROA not after: Tue 27 May 2025 13:37:28 +0000 asID: 2914 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:fe:1f:83:57:4c:8f:c2:51:13:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: Feb 26 14:37:28 2025 GMT Not After : May 27 13:37:28 2025 GMT Subject: CN=6722e247-99e5-4dbb-a3ac-d9f84c23e285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:42:39:50:64:89:17:92:e4:91:66:a8:36: 9a:61:c2:8f:f4:c2:e4:e5:27:81:60:ec:9f:d8:34: 95:78:2a:de:fd:6e:e2:3d:38:18:ec:4d:2a:97:9e: f4:b9:5b:2f:dc:7f:35:7e:43:c8:db:34:c3:19:16: 12:4c:33:cc:cb:50:d1:80:ed:87:1a:45:9e:4e:13: 2e:fa:4c:1a:c0:ff:f4:5c:7a:4c:4b:21:18:f4:25: dd:57:09:df:8d:92:8e:1a:b2:22:72:a2:45:71:aa: 06:0a:ea:f5:c5:c5:32:22:6d:2f:5a:48:a2:db:38: cc:5f:10:0f:af:39:3b:d7:eb:3b:49:e0:d3:7a:fa: cb:02:50:81:3f:bf:92:18:88:8e:74:c4:0c:bd:ab: 98:8a:ea:f0:d5:bd:e9:e4:d6:71:fe:cb:f6:e3:27: 8d:05:3e:17:dd:ee:14:68:9a:e6:6d:6b:37:69:11: c8:ab:72:88:a9:a7:25:4b:67:4f:4c:8b:64:c1:dd: 02:32:60:c7:b3:fb:5b:a8:5e:ae:14:85:1a:3c:04: f0:f6:28:ea:f3:7b:ff:a6:27:3b:ae:32:3a:63:7f: 87:a0:e9:4c:8e:fa:1f:80:63:5f:59:bd:ad:4a:0b: 79:a5:e2:3a:33:29:14:ef:32:8a:10:fc:21:05:d4: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:14:36:F2:D5:B2:A5:22:78:11:E4:66:EA:C7:F1:7D:E9:CF:BC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:03:a3:c6:5f:38:82:99:89:8f:52:6c:1b:82:b5:ba:5b:42: 9a:f3:64:c3:00:92:02:97:eb:d4:1a:45:aa:0e:fb:fa:91:c0: b9:6f:d4:b1:0e:49:af:ba:0b:4e:24:85:26:b0:24:e6:9c:55: 10:78:6b:09:50:89:ef:28:7c:dd:40:8e:16:41:89:16:57:16: 7f:47:0a:5c:1d:29:ce:5f:98:6d:22:b1:2d:9e:6e:51:8e:52: 4f:05:a7:d0:d7:cc:b5:ea:36:95:35:bd:ce:ba:d2:ff:e5:75: b2:40:77:22:1d:69:a4:81:b3:d5:b1:37:b4:a3:25:e0:32:d4: 9f:47:b4:cc:da:e6:39:9d:88:60:4b:44:89:2c:69:20:b4:77: 81:90:12:a7:4f:65:77:af:f9:b7:73:e8:02:51:8a:d1:db:f2: a2:af:76:1c:37:69:c0:e3:1a:26:94:da:ea:f1:0b:2c:76:1f: 81:f4:96:cf:77:40:fd:b7:c3:04:7a:37:1c:4e:be:2c:5e:d9: 2a:58:16:6f:f6:99:14:ea:4e:5d:54:17:80:c3:25:e2:d1:4a: 64:84:68:30:d1:ba:c5:41:c6:3a:5d:88:33:3d:e0:1e:f5:4b: 6c:b3:98:6b:38:ee:13:a9:5d:70:5e:ba:c5:ce:74:8a:48:ea: 08:9b:e2:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC/h+DV0yPwlETCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI1MDIyNjE0MzcyOFoXDTI1MDUyNzEzMzcyOFowLzEtMCsGA1UEAxMk NjcyMmUyNDctOTllNS00ZGJiLWEzYWMtZDlmODRjMjNlMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIRCOVBkiReS5JFmqDaaYcKP9MLk5SeBYOyf 2DSVeCre/W7iPTgY7E0ql570uVsv3H81fkPI2zTDGRYSTDPMy1DRgO2HGkWeThMu +kwawP/0XHpMSyEY9CXdVwnfjZKOGrIicqJFcaoGCur1xcUyIm0vWkii2zjMXxAP rzk71+s7SeDTevrLAlCBP7+SGIiOdMQMvauYiurw1b3p5NZx/sv24yeNBT4X3e4U aJrmbWs3aRHIq3KIqaclS2dPTItkwd0CMmDHs/tbqF6uFIUaPATw9ijq83v/pic7 rjI6Y3+HoOlMjvofgGNfWb2tSgt5peI6MykU7zKKEPwhBdRXAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwUNvLVsqUieBHkZurH8X3pz7wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvZDBhYjAzZGYtYjU3MC0z MTVmLWI0YmEtZDUzMTg3YjZmZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8Do8ZfOIKZiY9SbBuCtbpbQprzZMMAkgKX69QaRaoO+/qRwLlv1LEO Sa+6C04khSawJOacVRB4awlQie8ofN1AjhZBiRZXFn9HClwdKc5fmG0isS2eblGO Uk8Fp9DXzLXqNpU1vc660v/ldbJAdyIdaaSBs9WxN7SjJeAy1J9HtMza5jmdiGBL RIksaSC0d4GQEqdPZXev+bdz6AJRitHb8qKvdhw3acDjGiaU2urxCyx2H4H0ls93 QP23wwR6NxxOvixe2SpYFm/2mRTqTl1UF4DDJeLRSmSEaDDRusVBxjpdiDM94B71 S2yzmGs47hOpXXBeusXOdIpI6gib4nI= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:06 2025 by rpki-client