$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa File: 28b7558c-0a86-30e8-a429-1570b46f2dc7.roa (raw, json) Hash identifier: Niw+wfwUN+NbjMs1pnC+tWYs5mqMFSfVUbivYT7WTeg= Subject key identifier: AF:40:F7:BC:7B:49:D4:37:31:01:33:D7:48:7B:3F:43:87:D7:05:46 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F43285849A0E35FE14E7D9EB5317CBC20 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa Signing time: Thu 24 Apr 2025 04:01:18 +0000 ROA not before: Thu 24 Apr 2025 04:01:18 +0000 ROA not after: Wed 23 Jul 2025 04:01:18 +0000 asID: 20473 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:e3:5f:e1:4e:7d:9e:b5:31:7c:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Apr 24 04:01:18 2025 GMT Not After : Jul 23 04:01:18 2025 GMT Subject: CN=75af336a-88c4-4f70-96a4-95a5db39db0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c1:61:98:89:1c:12:db:59:8a:c8:f1:cf:91: c5:04:d2:3d:a2:ac:ce:39:94:98:2c:0e:d6:c8:19: e3:b8:d8:c6:69:31:bd:38:66:64:55:6a:7d:a0:f8: c6:05:e5:49:c3:2e:0f:ac:e5:2f:bf:5b:13:e3:40: 31:cc:e8:b2:a0:47:96:f8:dd:36:20:a2:97:6d:ab: cb:40:66:93:24:04:50:7f:19:14:b2:69:9f:b3:cd: ab:d7:61:f0:d7:fe:10:78:02:8e:ed:ed:ee:d8:7c: c5:45:8f:ec:d3:5d:8a:82:29:07:fe:b5:bb:08:b8: 8a:aa:5e:5f:a5:7b:c0:75:9a:f0:f8:52:d0:c3:86: 85:ea:c2:14:c6:b8:19:60:f2:63:1e:90:e7:18:93: 5d:a7:79:dc:e2:26:e6:c1:90:39:68:c2:51:37:96: 4c:c5:6b:ff:62:02:9e:8a:4d:f4:0a:4a:5b:b2:96: d7:44:c7:46:22:81:7f:e2:71:df:67:91:78:5a:93: 06:45:ed:af:64:e6:0a:de:da:30:17:e4:30:5e:36: f6:53:09:86:09:e8:b6:f9:76:72:dd:1d:b1:bf:ac: 63:01:cd:74:f2:8f:7d:68:91:2d:f5:4d:1e:81:c8: a9:8e:ff:6d:2b:92:77:93:b0:76:83:eb:33:05:58: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:40:F7:BC:7B:49:D4:37:31:01:33:D7:48:7B:3F:43:87:D7:05:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5a:e3:b3:1d:e8:3b:24:a8:27:af:4f:51:c8:e3:7c:10:6c: f2:cf:ae:a4:f1:6e:89:db:4d:36:99:23:6c:7e:05:97:74:cb: 33:05:5e:31:91:92:4d:e7:22:a1:a3:83:83:cb:06:dc:c0:d5: 8a:1c:26:7c:9f:bd:46:a3:d0:48:8f:31:55:48:c6:e2:d6:30: dd:b7:fb:23:97:13:16:34:cf:b1:5e:7a:61:7b:2b:aa:af:ec: 06:23:e2:db:5d:c3:57:f2:88:49:07:e7:87:96:f3:21:ee:b5: 57:9e:e5:69:77:20:52:7f:97:e7:00:19:f0:d4:56:e1:d9:a6: 2d:32:e8:a2:f9:2c:fb:b3:bf:35:ca:64:ad:75:e5:e1:56:73: 1c:a0:8d:09:59:d7:4e:58:1b:4e:19:f5:b4:33:11:38:cb:ca: 36:ea:ed:fe:75:03:51:ae:1f:b6:2d:98:71:17:10:f3:98:c2: af:37:99:5f:ca:82:b6:f0:7b:64:5f:3d:39:1f:26:1a:a3:3e: 48:c1:a2:57:8e:be:cd:5f:2b:4e:0a:f3:7a:e9:6e:50:df:53: 3e:a7:20:a1:13:61:8e:07:b6:a0:64:1e:b2:3b:4a:00:f7:12: 66:07:38:1c:65:b8:56:af:1a:ff:26:84:5c:67:72:16:82:a8: 4d:a5:56:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmg41/hTn2etTF8vCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDQyNDA0MDExOFoXDTI1MDcyMzA0MDExOFowLzEtMCsGA1UEAxMk NzVhZjMzNmEtODhjNC00ZjcwLTk2YTQtOTVhNWRiMzlkYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8FhmIkcEttZisjxz5HFBNI9oqzOOZSYLA7W yBnjuNjGaTG9OGZkVWp9oPjGBeVJwy4PrOUvv1sT40AxzOiyoEeW+N02IKKXbavL QGaTJARQfxkUsmmfs82r12Hw1/4QeAKO7e3u2HzFRY/s012KgikH/rW7CLiKql5f pXvAdZrw+FLQw4aF6sIUxrgZYPJjHpDnGJNdp3nc4ibmwZA5aMJRN5ZMxWv/YgKe ik30CkpbspbXRMdGIoF/4nHfZ5F4WpMGRe2vZOYK3towF+QwXjb2UwmGCei2+XZy 3R2xv6xjAc108o99aJEt9U0egcipjv9tK5J3k7B2g+szBViugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9A97x7SdQ3MQEz10h7P0OH1wVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjhiNzU1OGMtMGE4Ni0z MGU4LWE0MjktMTU3MGI0NmYyZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBa47Md6DskqCevT1HI43wQbPLPrqTxbonbTTaZI2x+BZd0yzMFXjGR kk3nIqGjg4PLBtzA1YocJnyfvUaj0EiPMVVIxuLWMN23+yOXExY0z7FeemF7K6qv 7AYj4ttdw1fyiEkH54eW8yHutVee5Wl3IFJ/l+cAGfDUVuHZpi0y6KL5LPuzvzXK ZK115eFWcxygjQlZ105YG04Z9bQzETjLyjbq7f51A1GuH7YtmHEXEPOYwq83mV/K grbwe2RfPTkfJhqjPkjBoleOvs1fK04K83rpblDfUz6nIKETYY4HtqBkHrI7SgD3 EmYHOBxluFavGv8mhFxnchaCqE2lVgQ= -----END CERTIFICATE-----Generated at Sun Apr 27 12:55:43 2025 by rpki-client