$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa File: a2022f42-0e7e-346d-8d87-d07af1866713.roa (raw, json) Hash identifier: lMvXC7jSqjIP3N7/0BwYU+2JGhV/L6HdWsRSv5Cs70Q= Subject key identifier: 8C:25:52:56:0A:B2:3C:C1:93:A1:9C:57:B0:00:91:0F:CF:A9:C7:01 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F43285849A4BA4E97912A85F62FD7BD80 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 55571 IP address blocks: 167.23.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4e:97:91:2a:85:f6:2f:d7:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e7411feb-ba1b-4ca0-8aa8-39e3d55c8f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:17:4f:fc:ca:e3:f0:6d:6b:f2:92:fe:3d: ea:89:96:21:a8:e6:82:1c:e0:fa:e9:63:c9:44:cc: 72:14:d6:9b:75:9d:91:d9:f3:62:c2:89:85:c2:8f: 48:6b:5f:c4:cd:2d:55:0e:60:84:c5:a0:82:76:65: b2:55:fc:63:53:8f:c3:41:5f:80:77:b0:5e:b9:ce: 9a:29:5b:40:08:21:9f:6d:97:8c:9a:fb:a6:34:f6: 35:5a:87:28:3a:a0:08:b6:50:c2:ad:e3:8b:5f:a5: 9b:04:bf:28:e4:34:48:27:0c:07:3f:86:1a:ba:c0: b2:80:dd:56:8d:5f:b7:04:d8:c6:23:14:08:3c:46: fa:36:1b:5e:8f:c5:94:7a:22:43:da:25:0b:7a:25: f8:e2:4f:69:77:03:3b:28:66:1c:74:32:54:73:3f: b3:36:95:8f:07:83:1c:37:fc:a2:5d:75:94:2e:6a: 7c:0a:26:a6:ba:65:33:a4:9a:d0:50:f0:42:15:88: 9e:f0:18:21:d1:96:a2:18:48:78:16:8e:ab:4c:89: 18:f3:ac:40:52:a9:f3:97:61:9f:e3:cd:6d:07:c8: 9a:5e:24:99:b7:1f:8c:af:d6:09:60:69:45:dd:3b: a7:67:17:ee:79:f1:80:0a:a7:5b:42:71:42:02:cb: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:25:52:56:0A:B2:3C:C1:93:A1:9C:57:B0:00:91:0F:CF:A9:C7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2d:d9:39:f2:44:5c:af:6a:39:56:cc:e5:7e:1c:cc:c9:03: b5:0a:b0:b8:a5:c9:bb:a5:d6:ec:d7:2f:da:de:0a:42:2b:d6: 1c:33:f0:21:6e:fc:11:1f:cc:74:ee:d4:af:14:4f:06:24:ed: d7:0f:a0:1e:2d:1c:fa:28:0a:59:40:5f:f2:ba:b9:e4:fe:6a: 85:ce:9f:f6:d5:64:d3:1e:e5:09:cd:e4:a4:10:6d:3e:ed:0b: 24:0c:3b:4b:47:17:6b:4e:70:e6:92:9e:de:38:12:ea:2a:78: 1c:e0:74:71:ee:0b:17:80:bb:cc:4e:5a:21:f9:1b:ce:36:66: 9e:70:7c:1c:82:b2:e8:da:2f:19:10:49:43:16:1c:c6:9d:6b: ab:68:72:5e:a8:d6:71:55:47:3f:59:93:b8:7e:08:8e:c7:da: 37:3c:75:16:0f:3b:ba:ba:bf:e4:00:d1:75:7c:3b:76:a1:10: 5b:23:06:50:c7:9c:8a:ec:ba:4f:16:7a:ba:bf:dc:43:9d:ac: d1:ea:3b:cd:de:b9:3c:54:e9:e7:23:95:4f:9e:b0:ea:e2:42: e9:bc:9c:35:bf:e4:67:03:52:dd:be:70:fc:e5:b4:87:f8:df: 8e:7d:24:37:4b:1e:0f:c3:9e:27:1e:05:d1:ba:c0:e3:74:54: 3b:ca:52:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk6XkSqF9i/XvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTc0MTFmZWItYmExYi00Y2EwLThhYTgtMzllM2Q1NWM4ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisUXT/zK4/Bta/KS/j3qiZYhqOaCHOD66WPJ RMxyFNabdZ2R2fNiwomFwo9Ia1/EzS1VDmCExaCCdmWyVfxjU4/DQV+Ad7Beuc6a KVtACCGfbZeMmvumNPY1WocoOqAItlDCreOLX6WbBL8o5DRIJwwHP4YausCygN1W jV+3BNjGIxQIPEb6Nhtej8WUeiJD2iULeiX44k9pdwM7KGYcdDJUcz+zNpWPB4Mc N/yiXXWULmp8CiamumUzpJrQUPBCFYie8Bgh0ZaiGEh4Fo6rTIkY86xAUqnzl2Gf 481tB8iaXiSZtx+Mr9YJYGlF3TunZxfuefGACqdbQnFCAsv7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwlUlYKsjzBk6GcV7AAkQ/PqccBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvYTIwMjJmNDItMGU3ZS0z NDZkLThkODctZDA3YWYxODY2NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAt2TnyRFyvajlWzOV+HMzJA7UKsLilybul1uzXL9reCkIr1hwz8CFu /BEfzHTu1K8UTwYk7dcPoB4tHPooCllAX/K6ueT+aoXOn/bVZNMe5QnN5KQQbT7t CyQMO0tHF2tOcOaSnt44EuoqeBzgdHHuCxeAu8xOWiH5G842Zp5wfByCsujaLxkQ SUMWHMada6tocl6o1nFVRz9Zk7h+CI7H2jc8dRYPO7q6v+QA0XV8O3ahEFsjBlDH nIrsuk8Werq/3EOdrNHqO83euTxU6ecjlU+esOriQum8nDW/5GcDUt2+cPzltIf4 3459JDdLHg/DniceBdG6wON0VDvKUhs= -----END CERTIFICATE-----Generated at Mon Apr 28 09:15:02 2025 by rpki-client