$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa File: 3f25a7a7-5bbb-336a-a266-855eadcb523f.roa (raw, json) Hash identifier: BA72ESKi8wEWh4HavXzZTopC27Nt9fn0LFaFb6g7ZQU= Subject key identifier: CA:83:BA:47:3D:23:20:5C:0A:BE:0B:06:95:1B:AF:49:98:BA:BA:04 Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F43285848F4F69CCF27AA7467FAFFB680 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 16611 IP address blocks: 23.153.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9c:cf:27:aa:74:67:fa:ff:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fc4dfea7-1446-419e-9c42-72d47b9f9660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:0a:cd:59:d5:ce:9f:ee:c3:d9:62:d7:7a: f2:83:3d:4f:9b:ee:09:b5:f0:01:4e:d6:5a:57:03: ba:cd:90:b3:13:e1:35:d9:95:77:64:02:7a:a5:f1: 88:ed:91:0d:4f:bd:18:d6:03:92:82:3a:7a:b4:3f: 8f:4d:b0:d3:c6:a6:6e:e3:6a:26:ad:ed:64:66:c7: d8:e5:cc:a8:36:db:ae:60:68:be:9e:4d:b4:25:88: e0:d2:93:ec:1e:96:3b:3d:5e:ca:b2:ab:9f:68:9d: b9:9c:b0:63:ba:9e:9a:58:45:1e:0f:64:51:77:8e: 4f:4c:f1:60:cb:fa:7e:81:9c:03:2c:0f:1a:71:f1: ae:b3:69:3a:71:dc:2f:e7:72:48:9e:90:2d:f0:f3: e0:4f:20:99:a3:b3:eb:0a:0d:5a:41:55:45:29:e6: 2a:a2:5f:ad:62:60:64:2f:b4:90:6c:44:36:4e:c9: 2a:b2:3b:28:14:ab:16:27:0f:31:fe:0c:03:81:d0: 2a:58:45:9e:7b:94:39:f4:6a:fa:2f:92:ce:78:a1: 48:14:2c:29:bd:67:60:90:08:de:8e:42:48:d9:32: 6c:f5:3a:b7:2d:26:9f:12:b7:54:9e:5b:c9:8f:da: 7b:89:fb:88:de:16:fb:d2:f2:ba:57:a0:46:f8:dc: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:83:BA:47:3D:23:20:5C:0A:BE:0B:06:95:1B:AF:49:98:BA:BA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fb:15:d9:b1:e2:1e:0e:3c:b3:37:ba:f9:c5:10:2a:99:e0: 9f:96:b1:27:37:a6:b0:f3:dc:74:88:10:8c:1d:be:68:ca:ae: dd:71:ee:48:1c:b3:7e:32:0c:5e:ea:f4:49:cc:93:56:f2:58: 2f:25:0a:94:7c:fc:fe:48:0d:b3:14:21:0f:ad:ed:c4:64:8a: da:9d:0f:40:b9:8b:a7:e6:65:22:c5:53:bc:71:79:b8:a9:c7: ce:da:89:45:30:f6:e6:68:bb:11:81:d8:ab:1f:01:24:bb:e4: c6:1d:bb:a8:c0:e8:82:52:56:51:8d:5f:02:86:91:c8:2c:d2: b6:1f:2e:95:89:89:ca:fa:de:2f:a3:77:97:15:0f:26:1b:86: 4c:5e:f9:96:67:8e:ce:25:ec:f3:e6:06:a8:78:96:72:cb:e7: d1:f9:d5:60:65:2f:56:b3:67:f9:e4:89:42:3a:8d:87:04:f7: 40:f6:e4:f3:9e:a6:42:72:64:7f:9f:89:89:49:89:2e:15:42: bb:19:9b:92:ff:ba:f4:cd:48:d5:49:2b:d7:72:8a:e3:e6:be: 85:e7:9b:20:7b:fb:d6:ba:86:8c:26:c4:b3:88:24:c8:14:d4: 60:89:6b:a6:c0:2c:01:7e:1d:e6:cc:59:2f:b7:76:8e:13:31: 4a:33:1e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pzPJ6p0Z/r/toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmM0ZGZlYTctMTQ0Ni00MTllLTljNDItNzJkNDdiOWY5NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSQKzVnVzp/uw9li13rygz1Pm+4JtfABTtZa VwO6zZCzE+E12ZV3ZAJ6pfGI7ZENT70Y1gOSgjp6tD+PTbDTxqZu42omre1kZsfY 5cyoNtuuYGi+nk20JYjg0pPsHpY7PV7KsqufaJ25nLBjup6aWEUeD2RRd45PTPFg y/p+gZwDLA8acfGus2k6cdwv53JInpAt8PPgTyCZo7PrCg1aQVVFKeYqol+tYmBk L7SQbEQ2TskqsjsoFKsWJw8x/gwDgdAqWEWee5Q59Gr6L5LOeKFIFCwpvWdgkAje jkJI2TJs9Tq3LSafErdUnlvJj9p7ifuI3hb70vK6V6BG+NztewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqDukc9IyBcCr4LBpUbr0mYuroEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvM2YyNWE3YTctNWJiYi0z MzZhLWEyNjYtODU1ZWFkY2I1MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf7Fdmx4h4OPLM3uvnFECqZ4J+WsSc3prDz3HSIEIwdvmjKrt1x7kgc s34yDF7q9EnMk1byWC8lCpR8/P5IDbMUIQ+t7cRkitqdD0C5i6fmZSLFU7xxebip x87aiUUw9uZouxGB2KsfASS75MYdu6jA6IJSVlGNXwKGkcgs0rYfLpWJicr63i+j d5cVDyYbhkxe+ZZnjs4l7PPmBqh4lnLL59H51WBlL1azZ/nkiUI6jYcE90D25POe pkJyZH+fiYlJiS4VQrsZm5L/uvTNSNVJK9dyiuPmvoXnmyB7+9a6howmxLOIJMgU 1GCJa6bALAF+HebMWS+3do4TMUozHuc= -----END CERTIFICATE-----Generated at Mon Apr 28 11:13:54 2025 by rpki-client