$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa File: 0dd95984-d9ac-3818-b720-6721242d6420.roa (raw, json) Hash identifier: 4NaEGiSqzv6A6tjqVPwiRNZq91xS5y77z6BR7mc/Fb0= Subject key identifier: B8:9E:BD:2F:77:8B:BD:44:C9:BF:9F:43:F0:BE:48:5D:98:E5:CE:4B Certificate issuer: /CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Certificate serial: 010D0C9F43285848F5C3DD720D8912918A2D2900 Authority key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa Signing time: Fri 21 Feb 2025 20:54:35 +0000 ROA not before: Fri 21 Feb 2025 20:54:35 +0000 ROA not after: Thu 22 May 2025 19:54:35 +0000 asID: 213993 IP address blocks: 23.134.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:c3:dd:72:0d:89:12:91:8a:2d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Validity Not Before: Feb 21 20:54:35 2025 GMT Not After : May 22 19:54:35 2025 GMT Subject: CN=f5c60de7-cd2d-4429-ac2e-6d99ccbf8ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f1:e1:08:d3:ac:d3:06:9f:0f:1e:31:8c:63: 40:59:c3:b7:40:9a:27:2b:a2:80:0c:c3:39:99:ac: b6:fd:be:7e:de:15:d6:65:a9:e8:ee:a5:31:96:0d: 84:09:df:29:f3:3a:f6:89:4d:b3:52:8d:5c:f9:55: d4:df:a5:7f:ca:62:aa:5d:6a:e0:31:39:89:20:64: 8c:b3:66:78:8f:23:0b:ac:05:a3:73:0f:94:5b:c4: e7:7e:c2:3f:08:87:25:f2:4f:ca:aa:c4:bd:87:91: 83:cc:c4:9e:33:07:c6:34:d5:06:3e:b5:b4:ad:c7: b6:dc:5c:70:b7:e2:28:16:a6:0d:ea:b1:d4:53:62: 10:66:29:56:68:9a:5e:ce:25:10:64:51:22:d3:ae: 8e:76:16:ab:b1:c4:73:40:23:58:36:3d:b0:87:a0: 23:c7:63:22:a4:de:61:41:38:1a:cb:5a:29:1b:63: f1:4f:42:fd:0a:bf:6d:68:21:ac:53:b7:47:27:52: bd:53:c4:27:d1:72:cb:9b:f1:50:1a:79:9f:96:7d: 90:4a:15:6c:aa:59:33:e1:3c:88:d9:58:b0:00:ee: 43:67:93:a8:ab:31:37:fd:28:4b:d8:1b:28:47:37: 76:ad:05:51:db:fc:fe:45:bf:67:90:ae:2b:5d:80: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:BD:2F:77:8B:BD:44:C9:BF:9F:43:F0:BE:48:5D:98:E5:CE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl X509v3 Authority Key Identifier: keyid:4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer sbgp-ipAddrBlock: critical IPv4: 23.134.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ca:8e:79:e0:29:f6:2a:1a:77:97:d1:6f:44:d9:6a:e2:f4: 69:ff:ec:b1:81:90:3d:0d:dd:c0:b1:f3:8b:5d:8f:12:d4:cc: 36:12:43:da:c1:ee:3c:20:f1:32:e5:21:ee:f7:75:f6:18:dc: 96:03:d0:5f:80:a3:c1:c2:cb:ea:11:bd:4c:e7:d5:70:d2:e8: 7b:a1:09:62:e2:34:78:e2:4e:85:7b:57:bf:e4:08:7b:cd:dd: 97:e1:b8:62:14:03:84:10:91:cf:a2:9e:8e:61:de:90:3a:18: 69:77:36:7b:7c:23:e7:ab:ba:d2:65:db:27:88:f2:07:3f:1e: 32:21:0d:8d:96:5d:ca:27:4d:70:6f:f8:51:5d:06:ba:75:5b: 08:0d:3f:da:e7:ce:a2:c5:ca:24:02:c0:63:15:69:6b:84:7c: 79:7f:1b:f3:7f:0a:c1:51:44:09:b8:e7:12:ff:01:1d:63:d5: 30:5a:3e:5d:f1:81:fc:41:4d:be:aa:f7:c9:47:91:75:92:df: 89:12:ec:40:50:a9:ed:b3:25:1e:79:ef:79:9e:0a:cb:59:54: 82:c1:9d:81:3b:19:87:51:84:bd:f7:0b:19:30:3d:6f:d8:c8: 13:73:4a:a0:fb:8c:47:27:bb:3f:21:d6:d1:70:0f:5c:37:e2: 99:4a:23:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj1w91yDYkSkYotKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4 M2U3MB4XDTI1MDIyMTIwNTQzNVoXDTI1MDUyMjE5NTQzNVowLzEtMCsGA1UEAxMk ZjVjNjBkZTctY2QyZC00NDI5LWFjMmUtNmQ5OWNjYmY4Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/HhCNOs0wafDx4xjGNAWcO3QJonK6KADMM5 may2/b5+3hXWZano7qUxlg2ECd8p8zr2iU2zUo1c+VXU36V/ymKqXWrgMTmJIGSM s2Z4jyMLrAWjcw+UW8TnfsI/CIcl8k/KqsS9h5GDzMSeMwfGNNUGPrW0rce23Fxw t+IoFqYN6rHUU2IQZilWaJpeziUQZFEi066OdharscRzQCNYNj2wh6Ajx2MipN5h QTgay1opG2PxT0L9Cr9taCGsU7dHJ1K9U8Qn0XLLm/FQGnmfln2QShVsqlkz4TyI 2ViwAO5DZ5OoqzE3/ShL2BsoRzd2rQVR2/z+Rb9nkK4rXYACDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLievS93i71Eyb+fQ/C+SF2Y5c5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iY2Iz YjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvMGRkOTU5ODQtZDlhYy0z ODE4LWI3MjAtNjcyMTI0MmQ2NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmNiM2I1OTgtOGQ4My00ODY0LTgx OGItZjU4MzNiNzU4M2U3L2JjYjNiNTk4LThkODMtNDg2NC04MThiLWY1ODMzYjc1 ODNlNy5jcmwwHwYDVR0jBBgwFoAUTwH1eiacjpGp9CgLU9cqPEl4Q6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgz M2I3NTgzZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4a0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPKjnngKfYqGneX0W9E2Wri9Gn/7LGBkD0N3cCx84tdjxLUzDYSQ9rB 7jwg8TLlIe73dfYY3JYD0F+Ao8HCy+oRvUzn1XDS6HuhCWLiNHjiToV7V7/kCHvN 3ZfhuGIUA4QQkc+ino5h3pA6GGl3Nnt8I+erutJl2yeI8gc/HjIhDY2WXconTXBv +FFdBrp1WwgNP9rnzqLFyiQCwGMVaWuEfHl/G/N/CsFRRAm45xL/AR1j1TBaPl3x gfxBTb6q98lHkXWS34kS7EBQqe2zJR5573meCstZVILBnYE7GYdRhL33CxkwPW/Y yBNzSqD7jEcnuz8h1tFwD1w34plKI6k= -----END CERTIFICATE-----Generated at Sat Apr 26 20:27:04 2025 by rpki-client