$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa File: b4a1398d-1b75-3e42-b92c-420bd70b3810.roa (raw, json) Hash identifier: vUEZlmOqHImZOWpCY71VpQmHekYVAADgmiRXCQAR9j0= Subject key identifier: 01:50:BF:F4:FF:8A:06:BB:7E:5C:BA:6D:50:F3:22:7D:AE:04:EF:A6 Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F43285848DA72F7278A6AB0A38C0A4C80 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa Signing time: Wed 12 Feb 2025 02:04:45 +0000 ROA not before: Wed 12 Feb 2025 02:04:45 +0000 ROA not after: Tue 13 May 2025 01:04:45 +0000 asID: 18604 IP address blocks: 23.133.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:72:f7:27:8a:6a:b0:a3:8c:0a:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Feb 12 02:04:45 2025 GMT Not After : May 13 01:04:45 2025 GMT Subject: CN=d11d48c0-3f44-40fc-beee-f8d581e990cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:71:35:25:68:83:56:fc:ed:2c:0f:9c:cf: 5f:3a:62:fb:da:b4:21:d1:d0:d1:df:6c:84:a2:1e: 2e:c2:fd:32:52:6a:e9:94:0e:dc:e4:45:63:93:ab: 5f:8f:10:0c:bd:e8:e2:09:5d:da:10:d4:cb:22:08: b6:72:28:01:05:6d:45:9b:16:66:1c:ee:e0:32:53: c0:e8:60:7e:da:ce:58:ef:f2:24:c2:1c:6e:fd:1d: b2:2d:65:ab:ce:bb:cb:7c:b8:55:8b:7a:38:54:4d: 53:25:87:79:f9:ce:28:18:10:79:de:4e:d9:33:41: e1:9a:14:cf:8f:e8:ef:b9:8c:25:7b:66:91:df:f6: a7:16:a7:1d:c3:35:47:0a:33:58:77:2f:d1:04:ae: 83:29:d8:16:af:2d:5d:fa:ba:9b:50:b5:64:63:88: 19:81:d5:5e:63:0d:6b:f0:bd:a2:4e:8a:59:d8:df: 74:7c:1e:15:34:dc:01:57:62:8a:09:bb:37:29:8a: 96:c5:4a:b8:c4:23:1a:23:de:90:f5:41:f6:ee:07: dd:03:47:3c:f9:b8:7c:d5:2e:1e:4d:07:0f:f3:f8: bc:0a:67:fa:fe:3e:05:db:83:2f:ab:60:45:95:55: 94:82:b3:29:91:72:b6:aa:e0:3d:21:e9:97:1c:90: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:BF:F4:FF:8A:06:BB:7E:5C:BA:6D:50:F3:22:7D:AE:04:EF:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv4: 23.133.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f4:63:10:a2:14:e0:ca:47:77:81:54:c5:55:cc:71:ad:47: 72:cd:86:f5:13:c9:d8:8a:a7:cd:79:28:ae:1c:50:b4:9a:a8: 01:fa:a6:ac:1e:04:4a:40:ce:d2:61:fe:aa:be:1e:06:68:e2: e6:c1:8b:5b:e1:fb:14:ff:8c:1d:b4:77:57:a9:eb:fb:f0:42: 56:17:da:7e:7a:ed:ad:4e:bb:de:85:22:70:92:ff:74:0b:a9: a9:59:ef:26:28:2a:a0:14:49:14:4a:2c:5c:6c:d6:9d:04:d3: f0:8d:d9:f7:2d:c3:14:60:17:18:9f:43:25:ff:31:a0:ec:f2: 15:0d:c7:3d:e0:ce:de:47:f5:b6:0d:99:63:b8:c6:ef:22:fd: 44:9b:64:61:ad:eb:8a:a0:71:a3:7d:f1:6b:07:77:77:35:7e: 5b:a1:fc:32:2c:64:82:18:83:cc:11:10:cb:58:90:24:f9:28: c2:aa:86:92:4a:1b:d9:ac:4a:d3:a5:9c:57:af:bf:32:1e:25: 2e:d7:1c:90:eb:14:9e:d0:a4:81:4c:2e:a6:f3:cc:21:7d:40: 6d:56:2f:84:26:04:c5:ba:34:f6:f9:19:61:23:b0:ad:f2:32: a1:34:8e:72:67:9a:2b:f9:33:e6:7f:7a:f3:15:d3:68:bf:00: 5e:1a:40:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacvcnimqwo4wKTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI1MDIxMjAyMDQ0NVoXDTI1MDUxMzAxMDQ0NVowLzEtMCsGA1UEAxMk ZDExZDQ4YzAtM2Y0NC00MGZjLWJlZWUtZjhkNTgxZTk5MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtxxNSVog1b87SwPnM9fOmL72rQh0dDR32yE oh4uwv0yUmrplA7c5EVjk6tfjxAMvejiCV3aENTLIgi2cigBBW1FmxZmHO7gMlPA 6GB+2s5Y7/Ikwhxu/R2yLWWrzrvLfLhVi3o4VE1TJYd5+c4oGBB53k7ZM0HhmhTP j+jvuYwle2aR3/anFqcdwzVHCjNYdy/RBK6DKdgWry1d+rqbULVkY4gZgdVeYw1r 8L2iTopZ2N90fB4VNNwBV2KKCbs3KYqWxUq4xCMaI96Q9UH27gfdA0c8+bh81S4e TQcP8/i8Cmf6/j4F24Mvq2BFlVWUgrMpkXK2quA9IemXHJBFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFQv/T/iga7fly6bVDzIn2uBO+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvYjRhMTM5OGQtMWI3NS0z ZTQyLWI5MmMtNDIwYmQ3MGIzODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj0YxCiFODKR3eBVMVVzHGtR3LNhvUTydiKp815KK4cULSaqAH6pqwe BEpAztJh/qq+HgZo4ubBi1vh+xT/jB20d1ep6/vwQlYX2n567a1Ou96FInCS/3QL qalZ7yYoKqAUSRRKLFxs1p0E0/CN2fctwxRgFxifQyX/MaDs8hUNxz3gzt5H9bYN mWO4xu8i/USbZGGt64qgcaN98WsHd3c1fluh/DIsZIIYg8wREMtYkCT5KMKqhpJK G9msStOlnFevvzIeJS7XHJDrFJ7QpIFMLqbzzCF9QG1WL4QmBMW6NPb5GWEjsK3y MqE0jnJnmiv5M+Z/evMV02i/AF4aQMs= -----END CERTIFICATE-----Generated at Mon Apr 28 06:13:58 2025 by rpki-client