$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa File: bedc2541-9f1d-3098-ad90-8907351a956b.roa (raw, json) Hash identifier: FhnF58S3lAnl9bgyIzwKVIWTPb7HIpK8Y7w+AzGQY2g= Subject key identifier: F8:13:DD:24:C0:D5:E2:63:90:CB:CB:6A:4E:99:DA:17:70:A0:37:45 Certificate issuer: /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Certificate serial: 010D0C9F43285849A231C57F7CB5DFFA948F9800 Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa Signing time: Thu 24 Apr 2025 15:15:04 +0000 ROA not before: Thu 24 Apr 2025 15:15:04 +0000 ROA not after: Wed 23 Jul 2025 15:15:04 +0000 asID: 8095 IP address blocks: 23.154.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:31:c5:7f:7c:b5:df:fa:94:8f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Validity Not Before: Apr 24 15:15:04 2025 GMT Not After : Jul 23 15:15:04 2025 GMT Subject: CN=08add1ee-c955-4a99-ad00-bc3a1e937323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:c2:8c:a8:2d:17:73:85:6e:29:06:24:df: 20:f8:ed:d1:00:4b:02:60:bf:16:29:85:a1:af:a6: 2f:21:d7:54:01:a0:31:72:a4:e2:81:94:e8:b3:68: 52:57:24:96:8a:07:c5:90:d0:ab:da:cd:0c:4d:55: 41:e1:4a:96:74:88:4a:af:d8:a8:95:80:57:c1:0a: f5:38:ee:9f:98:86:e1:56:51:c1:0f:05:e7:b8:86: d7:f5:a3:fb:ef:16:6f:ef:87:08:67:19:d7:3a:ff: 0c:02:55:44:bd:85:b6:20:10:5d:ee:0b:c6:bc:7a: e5:34:b7:a6:99:32:93:50:50:79:69:27:73:b4:4e: b0:d2:ae:10:04:eb:ab:3c:a1:c6:30:c0:72:d5:42: 16:4c:13:b0:b4:e8:ba:59:ca:5b:c1:0a:be:e7:73: 27:71:63:59:78:f5:79:4a:8f:49:7e:68:c3:21:36: bd:fb:a8:2e:99:84:35:29:cf:72:5c:5f:11:4e:79: 80:7e:10:6b:a6:97:e0:a5:74:5f:92:ac:5f:70:c2: 88:6e:fb:fa:14:55:21:8c:74:e9:8b:9d:1e:1c:fc: 3f:0d:00:73:70:d7:17:2e:95:0c:a0:e6:3c:97:ca: 02:6a:32:7b:98:45:09:11:45:bf:c3:c6:15:a9:4f: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:13:DD:24:C0:D5:E2:63:90:CB:CB:6A:4E:99:DA:17:70:A0:37:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl X509v3 Authority Key Identifier: keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer sbgp-ipAddrBlock: critical IPv4: 23.154.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:bd:55:3a:6f:e6:18:b5:d7:61:04:43:ca:ef:4b:c7:27:5d: 93:fc:ca:cc:05:c6:9d:8a:54:17:68:d2:d4:9e:50:59:0f:be: 5f:e7:42:a9:cd:bd:56:78:81:d7:64:e0:75:26:8f:2e:f7:a1: 0c:96:3f:38:28:b5:8d:b7:92:e4:23:13:cf:cd:95:6e:24:d9: b6:8d:a9:99:12:a3:00:03:bf:f2:1b:6e:46:a5:f3:5e:d9:05: 00:ef:62:07:3a:a4:89:ff:8b:19:21:81:61:ff:6b:93:d9:8f: 01:62:73:31:bf:41:21:e6:c6:ce:a4:83:b5:18:9e:40:72:3d: b9:fe:ff:35:13:86:fb:11:4c:d8:5a:cb:52:5a:f4:67:17:0c: ec:65:10:a6:71:95:af:7b:42:21:ea:77:f5:f7:4a:d8:03:e7: 8c:f2:78:e4:08:ad:40:48:c3:86:64:4c:4d:ef:1e:cd:78:a0: 6e:83:10:44:e8:73:d0:31:f7:e6:55:d6:eb:85:d7:f5:f1:f7: 9e:3e:73:93:07:b8:00:06:a2:37:03:34:86:13:f6:f0:7a:92: 27:d6:4f:05:66:26:35:b3:24:f6:cd:cc:02:ac:c2:c8:e6:09: 30:02:07:5f:e0:19:62:a5:1b:65:10:f2:1f:32:fc:b1:2d:ac: 42:3e:3b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiMcV/fLXf+pSPmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhkZTg5YWItY2E4Yy00ZWE1LWI4YjktYjc5MzEzZjBk NDhkMB4XDTI1MDQyNDE1MTUwNFoXDTI1MDcyMzE1MTUwNFowLzEtMCsGA1UEAxMk MDhhZGQxZWUtYzk1NS00YTk5LWFkMDAtYmMzYTFlOTM3MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAzCjKgtF3OFbikGJN8g+O3RAEsCYL8WKYWh r6YvIddUAaAxcqTigZTos2hSVySWigfFkNCr2s0MTVVB4UqWdIhKr9iolYBXwQr1 OO6fmIbhVlHBDwXnuIbX9aP77xZv74cIZxnXOv8MAlVEvYW2IBBd7gvGvHrlNLem mTKTUFB5aSdztE6w0q4QBOurPKHGMMBy1UIWTBOwtOi6WcpbwQq+53MncWNZePV5 So9JfmjDITa9+6gumYQ1Kc9yXF8RTnmAfhBrppfgpXRfkqxfcMKIbvv6FFUhjHTp i50eHPw/DQBzcNcXLpUMoOY8l8oCajJ7mEUJEUW/w8YVqU8vLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgT3STA1eJjkMvLak6Z2hdwoDdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRl ODlhYi1jYThjLTRlYTUtYjhiOS1iNzkzMTNmMGQ0OGQvYmVkYzI1NDEtOWYxZC0z MDk4LWFkOTAtODkwNzM1MWE5NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjhkZTg5YWItY2E4Yy00ZWE1LWI4 YjktYjc5MzEzZjBkNDhkL2Y4ZGU4OWFiLWNhOGMtNGVhNS1iOGI5LWI3OTMxM2Yw ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUJpZFpHlshpE8Cz01ojuiNX+BGMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRlODlhYi1jYThjLTRlYTUtYjhiOS1iNzkz MTNmMGQ0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL69VTpv5hi112EEQ8rvS8cnXZP8yswFxp2KVBdo0tSeUFkPvl/nQqnN vVZ4gddk4HUmjy73oQyWPzgotY23kuQjE8/NlW4k2baNqZkSowADv/Ibbkal817Z BQDvYgc6pIn/ixkhgWH/a5PZjwFiczG/QSHmxs6kg7UYnkByPbn+/zUThvsRTNha y1Ja9GcXDOxlEKZxla97QiHqd/X3StgD54zyeOQIrUBIw4ZkTE3vHs14oG6DEETo c9Ax9+ZV1uuF1/Xx954+c5MHuAAGojcDNIYT9vB6kifWTwVmJjWzJPbNzAKswsjm CTACB1/gGWKlG2UQ8h8y/LEtrEI+O4Q= -----END CERTIFICATE-----Generated at Mon Apr 28 21:54:10 2025 by rpki-client