$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa File: 5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa (raw, json) Hash identifier: K9YjG/1tgHaGHw6r7lmyEURkLp2lI/T3rAlUr7KocNg= Subject key identifier: 1A:D2:58:ED:DA:4F:09:A0:8D:21:D5:5E:34:7B:F0:46:C8:56:61:71 Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F43285848E59BC148A5022B69964E57C0 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 14618 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c1:48:a5:02:2b:69:96:4e:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=bf6a5f36-df6a-491c-8da7-863ea54ceaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:ff:77:04:52:87:d7:e2:eb:6c:14:8b:09: 18:b6:2d:a4:ce:62:96:2a:d4:91:7b:4d:03:28:f5: b8:a0:c4:b5:20:05:b9:2b:33:79:90:f1:da:0d:1c: e9:6c:5b:2c:b2:3f:5f:d1:ee:10:88:7c:23:c2:5c: 99:31:0a:12:ba:03:3b:78:d7:70:24:09:ed:3b:f0: 30:ec:cb:55:06:9e:ab:6f:c2:c9:6e:a2:32:05:09: ef:c9:5e:21:72:06:89:05:44:9c:13:79:0c:ea:76: 52:36:46:d7:78:a9:e5:f9:c4:c3:2c:11:72:92:b6: c3:6a:7c:a4:0a:5a:b2:65:92:bd:0b:47:9e:1f:39: a5:30:ec:13:76:46:d2:0f:5b:b2:46:67:98:f1:d8: 0c:d3:ed:1b:0d:f5:fe:ae:a4:3b:1e:73:0d:a7:0a: 70:5e:2d:5f:0f:be:6b:3d:35:b2:b0:ee:dc:be:46: b8:4c:3f:14:8f:4c:a7:72:1b:30:2f:ba:0a:f4:51: b4:eb:d9:d9:ea:76:12:1f:fe:db:37:ab:54:60:14: 8c:f2:ef:a8:68:56:ba:33:12:61:96:36:11:2c:e5: f0:1c:d3:7d:cf:a8:f8:06:33:bc:b5:6a:90:11:25: 22:c8:73:c5:47:b2:88:1e:2b:b8:74:8f:d2:62:8c: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D2:58:ED:DA:4F:09:A0:8D:21:D5:5E:34:7B:F0:46:C8:56:61:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4c:66:dd:19:c3:81:4a:04:cc:6c:0e:f6:96:bf:af:cd:a0: c7:5d:4c:98:9a:9d:e3:be:cf:49:ac:db:06:e4:7d:d4:a6:71: e9:da:bc:85:f7:3a:2c:06:8e:f9:82:5b:4a:ae:fa:e2:7b:cc: a5:38:0e:89:9d:97:77:a2:63:dd:90:92:fe:74:e6:47:02:cf: f7:ea:31:51:8c:cb:4c:ab:5c:be:08:f6:a9:06:4a:b3:57:c6: 3d:f1:7f:90:26:84:18:28:e5:4e:9a:3b:bc:51:22:42:2e:dc: 36:f9:68:4d:a9:f6:e4:03:e1:d4:83:89:44:c6:a2:e1:70:56: f5:3c:ff:95:37:42:50:a3:78:f0:6e:2b:b1:cc:fc:11:b7:21: 44:45:64:d9:c8:eb:f7:fc:44:35:ae:a0:a7:99:ac:b2:75:42: 84:26:2c:29:27:7d:23:8e:1d:4f:90:28:ff:8a:da:b1:f8:3a: 48:d5:f9:ff:80:58:1e:5a:14:0b:64:8a:0b:32:b3:2b:77:6b: 2f:0b:9f:e2:b0:a4:ba:cc:ee:53:19:3f:4b:fc:d6:91:83:9e: af:ad:63:9a:57:4d:e6:7a:bc:3a:52:6b:03:2d:93:69:bd:e6: 16:cf:43:6b:83:52:02:6c:38:d6:9f:d3:5a:b5:71:0c:88:44: 42:d6:b6:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8FIpQIraZZOV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmY2YTVmMzYtZGY2YS00OTFjLThkYTctODYzZWE1NGNlYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx3/dwRSh9fi62wUiwkYti2kzmKWKtSRe00D KPW4oMS1IAW5KzN5kPHaDRzpbFsssj9f0e4QiHwjwlyZMQoSugM7eNdwJAntO/Aw 7MtVBp6rb8LJbqIyBQnvyV4hcgaJBUScE3kM6nZSNkbXeKnl+cTDLBFykrbDanyk ClqyZZK9C0eeHzmlMOwTdkbSD1uyRmeY8dgM0+0bDfX+rqQ7HnMNpwpwXi1fD75r PTWysO7cvka4TD8Uj0ynchswL7oK9FG069nZ6nYSH/7bN6tUYBSM8u+oaFa6MxJh ljYRLOXwHNN9z6j4BjO8tWqQESUiyHPFR7KIHiu4dI/SYoyA8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrSWO3aTwmgjSHVXjR78EbIVmFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvNWY1Yzk3N2QtYzhmNy0z NWRkLThmNjgtM2JhNmUzYWEyMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChMZt0Zw4FKBMxsDvaWv6/NoMddTJianeO+z0ms2wbkfdSmcenavIX3 OiwGjvmCW0qu+uJ7zKU4Domdl3eiY92Qkv505kcCz/fqMVGMy0yrXL4I9qkGSrNX xj3xf5AmhBgo5U6aO7xRIkIu3Db5aE2p9uQD4dSDiUTGouFwVvU8/5U3QlCjePBu K7HM/BG3IURFZNnI6/f8RDWuoKeZrLJ1QoQmLCknfSOOHU+QKP+K2rH4OkjV+f+A WB5aFAtkigsysyt3ay8Ln+KwpLrM7lMZP0v81pGDnq+tY5pXTeZ6vDpSawMtk2m9 5hbPQ2uDUgJsONaf01q1cQyIRELWtjw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:35 2025 by rpki-client