$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa File: 802bfd1a-4325-38af-be6f-64950728b155.roa (raw, json) Hash identifier: oQ1zRTH25Ln6xtQhKGY/Uwmpe8TEe31UoOdWWLyob6A= Subject key identifier: 13:86:88:76:E5:F5:2A:79:EB:1C:F0:24:69:5E:35:AA:B9:90:EF:14 Certificate issuer: /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Certificate serial: 010D0C9F43285848F22C7165CC53692D51589540 Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 13737 IP address blocks: 23.189.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:71:65:cc:53:69:2d:51:58:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=26d12250-8f70-48a2-8a6f-f2e246879e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:0e:38:34:b5:c1:73:5a:02:dc:82:72:8c: 3e:83:f9:c3:78:81:ce:a6:b7:56:b3:01:96:a3:05: fc:cf:1d:ff:e4:d4:87:ad:72:f2:90:b1:01:b8:5c: 61:62:d6:4a:38:49:6f:b5:a2:a4:19:13:e6:18:73: 83:b6:a8:bc:37:f7:12:ac:6b:8b:e6:1e:a4:aa:9c: 30:2b:19:92:2b:c7:fd:7f:d9:e0:97:35:89:dd:6b: 34:ec:85:22:2c:c4:bc:b6:99:04:25:f6:76:dc:39: 16:49:4d:60:6b:fe:1b:52:e1:70:77:63:72:82:61: e7:1c:45:8d:71:ee:98:42:31:d7:e5:37:05:98:3e: ae:fa:e2:a7:e1:da:5a:9d:7f:1f:2c:1f:7d:35:f3: b3:4f:d1:8a:65:c4:a4:23:fc:91:a8:74:f9:83:d5: 41:a8:b4:98:d3:fe:bc:b4:63:29:a1:c5:c6:6a:9d: 3f:c4:46:1b:1f:65:74:ae:f3:a9:ac:ab:e0:01:09: fc:5c:c8:1d:73:0f:b8:8f:0d:18:26:cc:cc:6d:b2: 59:88:b4:e9:52:09:ce:25:3b:1a:a2:74:3b:c4:34: cf:d9:9a:2e:2d:af:ad:b6:e0:74:78:b2:78:49:57: fb:c3:48:ae:30:4f:8d:ae:09:ef:fb:38:6f:c8:3b: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:86:88:76:E5:F5:2A:79:EB:1C:F0:24:69:5E:35:AA:B9:90:EF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl X509v3 Authority Key Identifier: keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer sbgp-ipAddrBlock: critical IPv4: 23.189.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:b9:44:79:af:c7:7a:48:66:d2:f1:cd:e8:7c:cc:45:85:56: ff:f8:8f:1c:e5:1a:2f:66:d2:f4:c5:b5:42:4d:26:8a:9a:a2: e1:30:59:17:60:6d:0c:7d:60:5e:44:b7:85:2c:89:86:32:05: e6:ea:f2:9d:3d:0c:47:20:61:9b:73:22:1d:8a:82:f6:b7:bd: ea:9f:85:22:b1:28:fc:46:c8:c7:da:66:ae:fa:7c:11:d1:ad: 8c:f6:fd:fa:64:3c:bc:16:83:4f:59:a8:fe:6e:50:64:2d:fd: 4f:25:1f:9a:c9:0d:a6:95:5d:6c:e8:a1:22:26:98:a6:e1:4f: ed:df:fe:bb:1d:47:7d:74:25:e4:d1:cb:3c:af:58:d4:20:3c: c4:88:a8:64:5a:04:52:bb:b7:ef:5e:49:c0:c2:af:9c:3f:b3: ec:b4:6d:72:3a:53:fc:44:5c:3b:8f:90:6b:00:24:2f:4a:a9: 66:00:ee:34:fe:cb:be:0c:a5:fc:57:bb:96:9d:40:9a:ec:a3: 01:af:3c:cb:fb:36:82:71:a5:af:60:aa:82:9d:27:12:f6:5b: cf:c8:97:43:d0:c0:0a:7e:82:57:32:ce:87:95:51:a3:4b:58: 42:52:c8:9c:87:4d:f9:5e:82:38:72:79:7a:de:2a:ff:e9:80: 27:69:88:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHFlzFNpLVFYlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY0ZGMyYWItMWU2ZS00MTQzLTk1ZjUtZDYzZGIwYTc2 MjRiMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MjZkMTIyNTAtOGY3MC00OGEyLThhNmYtZjJlMjQ2ODc5ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB0OODS1wXNaAtyCcow+g/nDeIHOprdWswGW owX8zx3/5NSHrXLykLEBuFxhYtZKOElvtaKkGRPmGHODtqi8N/cSrGuL5h6kqpww KxmSK8f9f9nglzWJ3Ws07IUiLMS8tpkEJfZ23DkWSU1ga/4bUuFwd2NygmHnHEWN ce6YQjHX5TcFmD6u+uKn4dpanX8fLB99NfOzT9GKZcSkI/yRqHT5g9VBqLSY0/68 tGMpocXGap0/xEYbH2V0rvOprKvgAQn8XMgdcw+4jw0YJszMbbJZiLTpUgnOJTsa onQ7xDTP2ZouLa+ttuB0eLJ4SVf7w0iuME+Nrgnv+zhvyDtyXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOGiHbl9Sp56xzwJGleNaq5kO8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZjRk YzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNkYjBhNzYyNGIvODAyYmZkMWEtNDMyNS0z OGFmLWJlNmYtNjQ5NTA3MjhiMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWY0ZGMyYWItMWU2ZS00MTQzLTk1 ZjUtZDYzZGIwYTc2MjRiLzVmNGRjMmFiLTFlNmUtNDE0My05NWY1LWQ2M2RiMGE3 NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP2kd3H3TxnZMU00rUA9X6WR08p4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZjRkYzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNk YjBhNzYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM65RHmvx3pIZtLxzeh8zEWFVv/4jxzlGi9m0vTFtUJNJoqaouEwWRdg bQx9YF5Et4UsiYYyBebq8p09DEcgYZtzIh2Kgva3veqfhSKxKPxGyMfaZq76fBHR rYz2/fpkPLwWg09ZqP5uUGQt/U8lH5rJDaaVXWzooSImmKbhT+3f/rsdR310JeTR yzyvWNQgPMSIqGRaBFK7t+9eScDCr5w/s+y0bXI6U/xEXDuPkGsAJC9KqWYA7jT+ y74MpfxXu5adQJrsowGvPMv7NoJxpa9gqoKdJxL2W8/Il0PQwAp+glcyzoeVUaNL WEJSyJyHTflegjhyeXreKv/pgCdpiBg= -----END CERTIFICATE-----Generated at Tue Apr 29 01:54:56 2025 by rpki-client