$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa File: 91e1a3cc-e019-3754-b8b6-315f387f30d2.roa (raw, json) Hash identifier: s2eOafJ0CpHmOMCHFdeCZ0mkulzWaQxByCi02KUXqi0= Subject key identifier: FB:E7:10:25:2A:38:0D:6A:90:09:B3:C2:E1:C0:CC:28:13:66:1F:77 Certificate issuer: /CN=478a0a21-d101-464c-8706-25bb157545c8 Certificate serial: 010D0C9F43285849C0A4EA267749A7814A9423B0 Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 401457 IP address blocks: 23.128.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ea:26:77:49:a7:81:4a:94:23:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=aa0eb575-26e6-46fd-bd29-0ec841dc4394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:99:47:cb:93:b7:bc:43:5d:e7:d5:b2:72: 13:0e:5d:94:13:c4:b8:60:4c:e1:b9:f8:d0:28:df: 14:74:a5:d1:a5:00:52:8c:5a:ce:0d:fe:07:7f:3f: 1f:64:6d:9d:f2:cb:e3:37:b9:fb:3a:d5:3e:84:89: e3:2d:52:c6:3b:95:4e:33:50:67:ef:b6:3b:d1:31: 29:eb:85:39:4d:f4:59:2a:d5:ac:73:1e:4a:f2:47: 46:af:bc:b4:52:e6:b9:f1:b7:3d:ee:e9:be:69:3f: 97:71:02:da:83:31:fd:34:1b:ff:bf:c2:7c:66:92: ac:97:87:c3:ee:80:08:97:99:21:fb:3c:a1:94:e9: d2:02:01:38:3d:26:4f:1b:b0:03:1f:3c:9a:18:6f: 11:d3:71:b6:26:ba:41:72:26:fe:9f:1f:c7:c4:05: 60:96:9a:7f:f6:e9:68:0e:4d:38:da:46:c8:67:6c: 39:f5:2c:b2:28:de:9b:b3:5e:f0:52:17:a5:23:fa: 95:54:a3:b4:96:3b:07:a7:f7:07:7d:db:89:b1:1c: fb:e4:d8:32:0a:1d:81:2b:0e:43:70:84:41:4f:71: af:56:52:ca:db:d6:fe:c4:e8:da:0b:15:9d:89:c8: 0c:15:10:3f:4a:5c:87:23:95:77:40:d6:b2:42:42: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E7:10:25:2A:38:0D:6A:90:09:B3:C2:E1:C0:CC:28:13:66:1F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl X509v3 Authority Key Identifier: keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer sbgp-ipAddrBlock: critical IPv4: 23.128.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8b:9d:4c:5d:eb:4f:ee:54:1e:e3:0c:e1:f2:9a:5b:68:94: 85:10:fe:3b:e4:1c:2b:c6:43:fc:0d:9d:b9:e2:3d:a9:46:80: e0:58:6e:af:a9:87:f9:08:e4:ba:60:db:50:bf:3c:cc:50:c7: 6e:a9:52:2f:f8:20:8c:da:01:c5:75:98:27:35:5c:2f:d5:e8: a8:f1:cf:6e:d7:3c:8c:f2:53:fb:e7:b5:fb:5c:0e:9f:35:9f: 01:9d:a9:9d:e6:63:b9:8d:79:af:e9:02:47:ed:41:fb:a6:ac: 4c:08:ad:03:bc:a1:e4:f7:e1:33:80:f9:4e:c5:04:0b:42:b0: 16:11:98:d0:1c:ba:59:f7:1b:34:86:9a:2a:bc:3a:47:93:36: 54:9a:9f:60:32:95:52:d1:c8:f3:2a:49:08:a7:c4:33:bf:81: 9c:ba:b3:aa:b6:b1:1a:ff:0b:08:1a:6f:86:ff:6e:cf:ef:74: 0a:33:d6:5e:b6:a5:5e:1b:c7:fc:5d:9a:8e:e9:15:81:7b:e1: 97:5c:15:20:58:ec:ac:49:b8:c2:d6:a0:c4:1a:0e:3f:2a:77: 83:cd:32:cb:32:ef:8a:07:d5:fa:10:1b:d4:11:9d:14:ba:62: 44:17:ca:29:a8:3e:d6:81:fd:90:05:73:4c:a3:84:7b:38:03: 35:02:c8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOomd0mngUqUI7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4YTBhMjEtZDEwMS00NjRjLTg3MDYtMjViYjE1NzU0 NWM4MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YWEwZWI1NzUtMjZlNi00NmZkLWJkMjktMGVjODQxZGM0Mzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb2ZR8uTt7xDXefVsnITDl2UE8S4YEzhufjQ KN8UdKXRpQBSjFrODf4Hfz8fZG2d8svjN7n7OtU+hInjLVLGO5VOM1Bn77Y70TEp 64U5TfRZKtWscx5K8kdGr7y0Uua58bc97um+aT+XcQLagzH9NBv/v8J8ZpKsl4fD 7oAIl5kh+zyhlOnSAgE4PSZPG7ADHzyaGG8R03G2JrpBcib+nx/HxAVglpp/9ulo Dk042kbIZ2w59SyyKN6bs17wUhelI/qVVKO0ljsHp/cHfduJsRz75NgyCh2BKw5D cIRBT3GvVlLK29b+xOjaCxWdicgMFRA/SlyHI5V3QNayQkJt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvnECUqOA1qkAmzwuHAzCgTZh93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80Nzhh MGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJiMTU3NTQ1YzgvOTFlMWEzY2MtZTAxOS0z NzU0LWI4YjYtMzE1ZjM4N2YzMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDc4YTBhMjEtZDEwMS00NjRjLTg3 MDYtMjViYjE1NzU0NWM4LzQ3OGEwYTIxLWQxMDEtNDY0Yy04NzA2LTI1YmIxNTc1 NDVjOC5jcmwwHwYDVR0jBBgwFoAUNcXLPqvEc4Whq6zjIWHTNz4I6RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NzhhMGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJi MTU3NTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeLnUxd60/uVB7jDOHymltolIUQ/jvkHCvGQ/wNnbniPalGgOBYbq+p h/kI5Lpg21C/PMxQx26pUi/4IIzaAcV1mCc1XC/V6Kjxz27XPIzyU/vntftcDp81 nwGdqZ3mY7mNea/pAkftQfumrEwIrQO8oeT34TOA+U7FBAtCsBYRmNAculn3GzSG miq8OkeTNlSan2AylVLRyPMqSQinxDO/gZy6s6q2sRr/Cwgab4b/bs/vdAoz1l62 pV4bx/xdmo7pFYF74ZdcFSBY7KxJuMLWoMQaDj8qd4PNMssy74oH1foQG9QRnRS6 YkQXyimoPtaB/ZAFc0yjhHs4AzUCyPQ= -----END CERTIFICATE-----Generated at Mon May 12 15:50:47 2025 by rpki-client