$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa File: ba711ba1-3e0a-374c-a397-d36ec265248d.roa (raw, json) Hash identifier: Z5yHNoLiVZnUqZe41aBTACSYCMEKbvnifomDH+4rrAw= Subject key identifier: A0:98:EC:3A:58:88:9E:BF:F6:E7:49:2B:09:FF:96:DD:04:54:D1:CB Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F43285849D42FAD7E3EDF174EE4E500C0 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 32159 IP address blocks: 23.153.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ad:7e:3e:df:17:4e:e4:e5:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=b797740b-7941-45e8-828a-9c9c51819ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f5:d6:ba:03:fa:3a:d7:5d:f7:c6:88:d6:50: a4:94:55:b0:c8:b4:cf:74:8b:3c:d6:04:d4:67:09: 57:c5:72:80:ac:9c:4e:0b:e6:e8:86:1c:ef:88:2d: d3:79:06:75:06:2b:1c:32:f9:c6:4d:40:bc:69:dc: 9b:00:67:c7:c0:c0:44:5e:ce:62:46:20:58:28:af: a5:0e:1d:c1:88:9d:c8:52:3b:5b:f6:1f:33:c4:e4: 29:84:df:00:4a:70:a5:2d:61:38:27:fb:4d:7d:74: aa:ca:87:ff:f2:c4:d5:c0:7d:f8:ba:e0:c4:df:9f: 1a:9b:10:bc:c1:e6:27:40:f0:24:03:a5:d4:0c:fc: 3a:07:f2:1e:33:4c:fe:4e:e4:79:8b:b5:22:d8:0c: 5d:d7:47:f2:a4:72:ed:91:91:7f:76:36:47:84:26: 5a:95:6c:40:bc:55:d9:bf:a3:36:e2:04:2a:99:f6: 21:70:c3:a5:01:e0:37:b9:1a:3c:7d:fe:9d:9a:70: 39:da:eb:51:e2:08:38:9e:69:36:8f:2a:e4:a9:53: e2:49:e7:9d:c7:b0:ac:e0:ce:f3:24:aa:c8:e8:6d: 44:9c:b6:fb:7f:81:c1:ca:21:24:51:be:cc:df:c7: 6b:16:8f:46:01:a4:e5:a1:8a:76:eb:18:00:8a:a8: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:98:EC:3A:58:88:9E:BF:F6:E7:49:2B:09:FF:96:DD:04:54:D1:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:73:9b:7e:ca:cf:24:47:68:d8:f5:d4:3f:86:44:d6:51:c8: 71:bc:fd:e5:6f:4a:a4:28:99:d9:f5:a5:78:b8:5c:e3:c9:c4: f4:ac:18:d4:c2:51:01:e3:71:94:b9:9d:c6:0f:51:23:9a:0a: 4e:58:db:0e:63:db:3c:21:3d:98:e3:60:14:ac:03:f2:ff:50: 10:73:8c:19:65:7f:ee:0d:8d:5f:5e:1e:1f:83:25:f0:98:46: dd:a1:eb:bf:b3:71:0b:9f:40:8c:13:a9:87:05:d1:bd:7b:87: 5a:89:51:bc:9a:a2:a0:04:7f:a6:45:0d:44:d6:ec:ba:60:43: 43:b6:a4:cd:1b:02:9b:e9:30:3c:cd:24:00:47:f9:33:8b:65: a8:42:ce:aa:30:74:c2:69:fc:ff:71:bc:b5:f1:74:7d:c2:9c: f9:a5:f2:66:46:13:55:9c:8c:66:46:05:1b:dd:28:5e:7c:ae: 90:88:21:12:91:2c:73:b4:b0:16:ba:dd:06:41:eb:59:52:5c: 84:55:ff:a1:02:c1:ac:79:39:78:36:4e:06:67:4a:cc:4b:42: 64:92:bb:a5:63:35:20:33:a6:79:76:6a:6d:ff:d5:99:18:ba: 23:8c:b2:61:6f:0c:0a:91:6f:f3:b5:0d:8c:d9:aa:83:fd:59: de:80:6e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL61+Pt8XTuTlAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Yjc5Nzc0MGItNzk0MS00NWU4LTgyOGEtOWM5YzUxODE5Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PXWugP6Otdd98aI1lCklFWwyLTPdIs81gTU ZwlXxXKArJxOC+bohhzviC3TeQZ1BiscMvnGTUC8adybAGfHwMBEXs5iRiBYKK+l Dh3BiJ3IUjtb9h8zxOQphN8ASnClLWE4J/tNfXSqyof/8sTVwH34uuDE358amxC8 weYnQPAkA6XUDPw6B/IeM0z+TuR5i7Ui2Axd10fypHLtkZF/djZHhCZalWxAvFXZ v6M24gQqmfYhcMOlAeA3uRo8ff6dmnA52utR4gg4nmk2jyrkqVPiSeedx7Cs4M7z JKrI6G1EnLb7f4HByiEkUb7M38drFo9GAaTloYp26xgAiqgj2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCY7DpYiJ6/9udJKwn/lt0EVNHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvYmE3MTFiYTEtM2UwYS0z NzRjLWEzOTctZDM2ZWMyNjUyNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFzm37KzyRHaNj11D+GRNZRyHG8/eVvSqQomdn1pXi4XOPJxPSsGNTC UQHjcZS5ncYPUSOaCk5Y2w5j2zwhPZjjYBSsA/L/UBBzjBllf+4NjV9eHh+DJfCY Rt2h67+zcQufQIwTqYcF0b17h1qJUbyaoqAEf6ZFDUTW7LpgQ0O2pM0bApvpMDzN JABH+TOLZahCzqowdMJp/P9xvLXxdH3CnPml8mZGE1WcjGZGBRvdKF58rpCIIRKR LHO0sBa63QZB61lSXIRV/6ECwax5OXg2TgZnSsxLQmSSu6VjNSAzpnl2am3/1ZkY uiOMsmFvDAqRb/O1DYzZqoP9Wd6Absg= -----END CERTIFICATE-----Generated at Mon Jun 16 01:25:58 2025 by rpki-client