$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa File: cb858b9e-023b-313c-891a-00a6d1fa8853.roa (raw, json) Hash identifier: jjuoJa937LXJHRmPIxTY3u7iaKw7j2jCJCwBzsxvWpI= Subject key identifier: F3:CA:6C:1C:10:13:0C:7A:29:01:10:10:C2:BF:8D:3F:0E:25:CE:8F Certificate issuer: /CN=70a36240-104b-454c-b230-bf415e356e88 Certificate serial: 010D0C9F43285849AA4F510E3A9A27DF7AB1AA80 Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 31898 IP address blocks: 23.128.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:51:0e:3a:9a:27:df:7a:b1:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a36240-104b-454c-b230-bf415e356e88 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=01f51864-4d42-41fa-9451-b98a0b9d41e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3e:8c:af:33:b5:33:c6:70:14:bc:90:d7:e4: b3:30:49:74:07:c5:6a:8b:39:31:79:01:1c:24:d4: 8f:46:59:67:27:48:a3:08:79:65:9a:88:18:8e:7b: a1:a7:99:23:9b:4f:ca:41:e9:b2:70:7b:29:c8:36: ec:f3:9a:fb:a5:82:62:2e:2f:14:c3:c2:43:4d:ea: b1:08:14:93:77:9a:57:56:3e:a5:55:7d:8e:85:e2: 94:7b:aa:22:be:11:16:5f:b9:89:c7:a3:48:13:ea: 1f:84:b8:2a:05:16:c1:bc:f9:12:d6:ce:11:4e:38: 73:a4:c9:16:fb:43:7c:9a:47:73:09:dd:a9:dc:33: 68:70:63:aa:7b:cf:6e:9d:29:ed:35:a5:d4:f4:ea: 79:36:e7:77:29:f7:21:76:bb:8e:58:bf:f9:db:a9: 7a:43:00:86:4b:ae:0f:ef:ed:79:12:b1:fb:2f:77: f5:f6:6d:d3:86:2f:fd:98:b3:8f:74:a8:46:5c:29: df:2b:82:41:6f:2b:31:62:85:d0:86:0b:5a:d7:75: 31:fc:03:8f:00:8e:00:31:96:9f:91:9b:07:35:3e: a0:3a:32:5b:4a:73:12:b4:b9:cc:5b:48:ec:cd:d3: 6d:75:5c:0d:ae:1c:f2:69:3a:88:3a:d5:73:0f:62: 0f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CA:6C:1C:10:13:0C:7A:29:01:10:10:C2:BF:8D:3F:0E:25:CE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl X509v3 Authority Key Identifier: keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer sbgp-ipAddrBlock: critical IPv4: 23.128.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:34:c3:73:f0:5b:0d:3a:7b:57:43:af:e3:5b:f8:b7:3e:2f: 48:b6:22:28:cc:e1:dc:fc:a3:57:44:e1:7b:56:b4:48:06:fa: 4a:43:17:e9:af:76:4c:49:27:ca:a2:ce:87:20:31:92:37:34: f6:7b:2c:40:2c:dd:27:1b:3a:57:de:53:72:3d:bf:f7:cf:3c: c1:84:33:f5:fa:1e:d3:00:aa:16:de:6e:a4:4b:24:e2:e4:86: 6d:a1:e4:15:f1:09:36:80:a9:92:c8:3c:76:63:88:5f:60:f0: 9f:19:f5:d7:21:e6:20:0b:1e:1a:19:c2:f8:ec:48:73:c6:32: e7:80:44:36:a8:26:4d:06:50:3f:93:55:f0:12:d5:8b:60:89: da:18:16:d1:26:2c:ed:e2:06:d1:35:9b:14:53:4f:43:b6:c7: bb:80:2f:fe:ee:52:3c:11:6f:55:9f:e2:28:53:7b:f3:92:e6: 64:72:3e:8d:8d:83:42:23:01:17:f6:91:f0:a2:24:ec:32:91: 89:f9:50:b2:df:69:f6:db:7c:6e:67:13:ab:73:f8:75:77:92: 21:9f:79:ae:02:0c:dc:cf:c7:bf:eb:4e:6c:45:8f:ed:e9:cb: b8:11:c8:c0:86:11:0f:b3:5c:94:f9:1f:71:18:00:f7:cc:c9: 70:b0:fb:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT1EOOpon33qxqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhMzYyNDAtMTA0Yi00NTRjLWIyMzAtYmY0MTVlMzU2 ZTg4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MDFmNTE4NjQtNGQ0Mi00MWZhLTk0NTEtYjk4YTBiOWQ0MWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz6MrzO1M8ZwFLyQ1+SzMEl0B8VqizkxeQEc JNSPRllnJ0ijCHllmogYjnuhp5kjm0/KQemycHspyDbs85r7pYJiLi8Uw8JDTeqx CBSTd5pXVj6lVX2OheKUe6oivhEWX7mJx6NIE+ofhLgqBRbBvPkS1s4RTjhzpMkW +0N8mkdzCd2p3DNocGOqe89unSntNaXU9Op5Nud3KfchdruOWL/526l6QwCGS64P 7+15ErH7L3f19m3Thi/9mLOPdKhGXCnfK4JBbysxYoXQhgta13Ux/AOPAI4AMZaf kZsHNT6gOjJbSnMStLnMW0jszdNtdVwNrhzyaTqIOtVzD2IPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPKbBwQEwx6KQEQEMK/jT8OJc6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83MGEz NjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUzNTZlODgvY2I4NThiOWUtMDIzYi0z MTNjLTg5MWEtMDBhNmQxZmE4ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzBhMzYyNDAtMTA0Yi00NTRjLWIy MzAtYmY0MTVlMzU2ZTg4LzcwYTM2MjQwLTEwNGItNDU0Yy1iMjMwLWJmNDE1ZTM1 NmU4OC5jcmwwHwYDVR0jBBgwFoAUYDGdgAKQWMN+aqTm29e3yk6Me+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQx NWUzNTZlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI0w3PwWw06e1dDr+Nb+Lc+L0i2IijM4dz8o1dE4XtWtEgG+kpDF+mv dkxJJ8qizocgMZI3NPZ7LEAs3ScbOlfeU3I9v/fPPMGEM/X6HtMAqhbebqRLJOLk hm2h5BXxCTaAqZLIPHZjiF9g8J8Z9dch5iALHhoZwvjsSHPGMueARDaoJk0GUD+T VfAS1YtgidoYFtEmLO3iBtE1mxRTT0O2x7uAL/7uUjwRb1Wf4ihTe/OS5mRyPo2N g0IjARf2kfCiJOwykYn5ULLfafbbfG5nE6tz+HV3kiGfea4CDNzPx7/rTmxFj+3p y7gRyMCGEQ+zXJT5H3EYAPfMyXCw+5E= -----END CERTIFICATE-----Generated at Fri May 9 15:57:49 2025 by rpki-client