$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa File: 70832e38-c84d-3a35-8dba-711ac64c0596.roa (raw, json) Hash identifier: IJsCiGrLy4Tu4WoeBC6RPJC94Ndkk06GocpPYqMFaOc= Subject key identifier: 65:85:E7:5D:5E:72:6D:68:76:8A:55:9A:AA:CD:65:BB:B7:87:4D:0C Certificate issuer: /CN=817b315d-32a3-4ee9-ba5d-557007a627ae Certificate serial: 010D0C9F43285849CE9A632935921047AE10AF40 Authority key identifier: FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 62836 IP address blocks: 23.129.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:63:29:35:92:10:47:ae:10:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817b315d-32a3-4ee9-ba5d-557007a627ae Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=03b0b049-116a-4b15-8650-7f6b0ced7a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:d8:1d:0f:02:11:79:81:14:d8:13:d3:61: 8c:51:17:8e:0a:9c:f3:85:62:4b:6a:5f:82:80:d9: 09:79:7d:6a:34:61:bb:d0:73:97:cd:5f:07:7d:80: b3:a4:78:2f:67:17:59:3a:e4:08:78:d1:74:e5:00: 42:83:cc:76:56:d5:5c:91:1b:64:4c:4f:e6:10:7b: 04:24:a7:66:55:77:11:86:71:59:0a:7b:19:88:ca: fe:cc:ce:68:80:a5:56:06:bc:b0:1b:af:5d:a3:b7: 36:2e:01:bd:c7:60:b2:17:6f:2b:43:76:40:85:77: 1a:b9:9c:16:10:85:4d:66:48:4e:2e:ae:7f:c4:9f: 60:19:d3:b8:a0:67:a7:cd:61:60:84:bb:e4:ad:77: e5:e8:96:3f:0a:a8:69:c3:ff:36:a6:94:70:b6:82: dc:5b:23:44:e3:cf:74:58:70:5d:12:44:63:26:91: 48:05:a7:84:af:fa:dc:38:40:0c:38:a4:88:c4:9e: 66:da:a8:40:02:06:97:9d:5f:d0:33:79:7a:6f:fb: 38:16:16:a0:a5:94:90:57:3c:66:22:62:cb:40:44: 20:51:a1:c1:c8:2a:65:f3:f4:9f:74:c2:93:c4:ae: f5:a5:09:a2:61:86:5d:7e:d7:2f:d5:74:b2:d1:c6: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:E7:5D:5E:72:6D:68:76:8A:55:9A:AA:CD:65:BB:B7:87:4D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl X509v3 Authority Key Identifier: keyid:FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer sbgp-ipAddrBlock: critical IPv4: 23.129.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f6:42:07:91:9a:61:f8:60:7e:03:a7:47:14:fd:5f:50:0d: 05:af:01:9a:5f:39:f2:5c:f8:f8:2c:92:04:84:48:79:d0:99: e6:5c:92:86:1a:95:1a:64:34:38:5e:7f:7c:97:54:35:37:b1: 00:2d:07:04:e5:f0:93:e3:c7:95:41:13:23:2d:df:a3:88:35: dd:d6:ac:09:59:42:1d:34:aa:ea:61:08:7f:ef:5a:b9:d2:60: a0:49:82:3a:34:a8:49:c7:cc:36:37:43:96:9f:b4:eb:9b:b7: 52:94:b7:a1:80:2e:25:26:51:3e:b4:ab:88:a5:be:37:44:9a: a1:f9:a2:98:fe:27:24:29:37:e2:ec:3d:e0:55:4b:c2:74:98: 25:db:62:79:c0:56:35:be:50:d2:44:1e:48:72:32:31:ed:6e: 72:ab:53:d2:5b:99:9e:59:c8:4e:11:65:e7:43:32:1f:16:60: f7:4e:a7:8b:27:ba:26:b3:cb:bb:09:d6:bf:ab:5b:24:50:1d: 85:d3:7f:25:b9:f3:8d:b8:f1:f0:19:53:af:c5:b3:c8:17:53: 84:b7:38:85:a6:42:1c:51:6d:06:29:23:23:6c:fa:cd:94:2b: 61:d9:e9:30:84:2f:01:3f:74:86:12:a3:43:4f:2f:cb:f9:1b: 94:22:00:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmMpNZIQR64Qr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE3YjMxNWQtMzJhMy00ZWU5LWJhNWQtNTU3MDA3YTYy N2FlMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MDNiMGIwNDktMTE2YS00YjE1LTg2NTAtN2Y2YjBjZWQ3YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqXYHQ8CEXmBFNgT02GMUReOCpzzhWJLal+C gNkJeX1qNGG70HOXzV8HfYCzpHgvZxdZOuQIeNF05QBCg8x2VtVckRtkTE/mEHsE JKdmVXcRhnFZCnsZiMr+zM5ogKVWBrywG69do7c2LgG9x2CyF28rQ3ZAhXcauZwW EIVNZkhOLq5/xJ9gGdO4oGenzWFghLvkrXfl6JY/Cqhpw/82ppRwtoLcWyNE4890 WHBdEkRjJpFIBaeEr/rcOEAMOKSIxJ5m2qhAAgaXnV/QM3l6b/s4FhagpZSQVzxm ImLLQEQgUaHByCpl8/SfdMKTxK71pQmiYYZdftcv1XSy0cbk0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWF511ecm1odopVmqrNZbu3h00MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84MTdi MzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcwMDdhNjI3YWUvNzA4MzJlMzgtYzg0ZC0z YTM1LThkYmEtNzExYWM2NGMwNTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODE3YjMxNWQtMzJhMy00ZWU5LWJh NWQtNTU3MDA3YTYyN2FlLzgxN2IzMTVkLTMyYTMtNGVlOS1iYTVkLTU1NzAwN2E2 MjdhZS5jcmwwHwYDVR0jBBgwFoAU+l9VLXbjSPrrqZEqBBSqVyQ3WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84MTdiMzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcw MDdhNjI3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4F8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB72QgeRmmH4YH4Dp0cU/V9QDQWvAZpfOfJc+PgskgSESHnQmeZckoYa lRpkNDhef3yXVDU3sQAtBwTl8JPjx5VBEyMt36OINd3WrAlZQh00quphCH/vWrnS YKBJgjo0qEnHzDY3Q5aftOubt1KUt6GALiUmUT60q4ilvjdEmqH5opj+JyQpN+Ls PeBVS8J0mCXbYnnAVjW+UNJEHkhyMjHtbnKrU9JbmZ5ZyE4RZedDMh8WYPdOp4sn uiazy7sJ1r+rWyRQHYXTfyW584248fAZU6/Fs8gXU4S3OIWmQhxRbQYpIyNs+s2U K2HZ6TCELwE/dIYSo0NPL8v5G5QiAHs= -----END CERTIFICATE-----Generated at Mon May 12 11:03:35 2025 by rpki-client