$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/51abe917-e3bc-3ee8-9a29-03a5f1f84921.roa File: 51abe917-e3bc-3ee8-9a29-03a5f1f84921.roa (raw, json) Hash identifier: KSOIsVVvUPU0fSMpcYA9Xhno+NYUGTjV2HBztqMUedM= Subject key identifier: BB:C6:33:00:AF:EB:4F:BA:96:C6:74:12:B0:C8:E5:1D:6A:CD:6D:57 Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F43285849350E9A74EFF57509E16B9740 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/51abe917-e3bc-3ee8-9a29-03a5f1f84921.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 64289 IP address blocks: 23.155.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9a:74:ef:f5:75:09:e1:6b:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=d1dc5151-9d94-4901-8ae9-a96478bf92de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:11:7e:ce:99:aa:1b:35:42:57:16:96:3b: fc:e7:ec:61:b0:eb:eb:44:74:bb:0d:4d:2a:e4:4f: d2:c1:51:2f:aa:f2:f7:d3:e7:ad:f7:63:1c:a4:4d: 83:f2:b6:68:67:12:99:60:d8:2f:4a:21:3e:b9:4a: d9:a0:ee:7a:7e:93:cb:b5:64:bc:d0:58:11:3a:86: 93:e6:1a:7a:e2:d4:17:06:04:ec:24:fc:03:5e:cd: 37:24:0f:ef:2d:2a:0c:57:5f:fa:df:9e:8d:52:cf: 1b:bb:a4:d0:f9:a8:f2:35:45:af:cb:82:b4:68:b5: 1c:9f:00:ef:04:4b:94:4f:be:73:46:3f:04:13:cb: 61:11:3d:2c:ce:a0:cf:9c:0a:48:20:7e:1e:8c:8e: 6c:ec:3c:4c:63:9f:08:35:5b:b4:34:e1:e4:02:b6: e6:87:de:31:b4:39:fa:ad:3b:eb:6b:74:b5:ed:b9: c9:60:b9:b6:49:7a:ee:ea:0b:7b:e1:be:fa:6f:23: 69:bc:d0:3e:4b:1a:4d:47:7d:34:78:0c:9b:22:bd: e5:48:8e:a8:1c:9e:21:3f:9a:17:16:64:68:46:80: 5e:97:2c:da:60:16:ba:47:53:ef:ea:91:ea:06:48: d6:52:70:cd:2b:25:b8:e2:ee:0f:78:88:af:0a:59: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C6:33:00:AF:EB:4F:BA:96:C6:74:12:B0:C8:E5:1D:6A:CD:6D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/51abe917-e3bc-3ee8-9a29-03a5f1f84921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv4: 23.155.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d5:29:ec:46:d9:74:84:69:2a:3a:44:b5:e6:e8:c4:94:7f: 6b:c8:08:41:7e:29:e2:2c:c1:b3:3c:b6:e0:70:4c:82:ae:7e: 86:e6:ae:71:49:0d:b7:05:09:96:2f:85:5d:39:92:33:a8:81: 17:7c:66:55:20:21:3d:a7:8e:4e:4e:c7:a8:cc:c1:63:f7:2b: 8f:d0:1d:5c:25:10:83:dd:32:db:d2:26:b7:71:18:5c:fe:02: 4f:98:63:38:85:07:d8:5b:6a:ee:f3:4e:fd:2d:e4:ab:81:1f: 50:e0:72:3f:31:fb:18:f2:66:c2:0b:a7:69:1f:1a:75:06:74: ef:f5:28:04:c5:5f:51:83:84:ec:6e:7c:08:a2:f2:92:5c:67: 6f:12:4f:16:19:f4:1a:ee:b2:af:5a:9d:7a:e8:68:4e:a8:a6: fa:de:67:b9:54:4d:a8:bc:e5:3f:12:d0:7b:37:0f:c4:24:25: 93:f5:74:dc:05:42:71:c3:23:eb:71:92:33:dd:84:2f:54:08: 4c:a0:41:dd:6b:bb:77:1e:b3:6e:4c:c4:29:2a:a4:b5:12:58: 96:18:39:03:06:11:c5:86:aa:a3:d4:14:e8:e2:a2:7a:65:96: 43:ae:aa:bf:f1:57:b4:95:8c:4f:ec:af:03:a8:da:ab:ba:30: 78:44:b0:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dpp07/V1CeFrl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDFkYzUxNTEtOWQ5NC00OTAxLThhZTktYTk2NDc4YmY5MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY4Rfs6Zqhs1QlcWljv85+xhsOvrRHS7DU0q 5E/SwVEvqvL30+et92McpE2D8rZoZxKZYNgvSiE+uUrZoO56fpPLtWS80FgROoaT 5hp64tQXBgTsJPwDXs03JA/vLSoMV1/6356NUs8bu6TQ+ajyNUWvy4K0aLUcnwDv BEuUT75zRj8EE8thET0szqDPnApIIH4ejI5s7DxMY58INVu0NOHkArbmh94xtDn6 rTvra3S17bnJYLm2SXru6gt74b76byNpvNA+SxpNR300eAybIr3lSI6oHJ4hP5oX FmRoRoBelyzaYBa6R1Pv6pHqBkjWUnDNKyW44u4PeIivClntYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvGMwCv60+6lsZ0ErDI5R1qzW1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvNTFhYmU5MTctZTNiYy0z ZWU4LTlhMjktMDNhNWYxZjg0OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHVKexG2XSEaSo6RLXm6MSUf2vICEF+KeIswbM8tuBwTIKufobmrnFJ DbcFCZYvhV05kjOogRd8ZlUgIT2njk5Ox6jMwWP3K4/QHVwlEIPdMtvSJrdxGFz+ Ak+YYziFB9hbau7zTv0t5KuBH1Dgcj8x+xjyZsILp2kfGnUGdO/1KATFX1GDhOxu fAii8pJcZ28STxYZ9Brusq9anXroaE6opvreZ7lUTai85T8S0Hs3D8QkJZP1dNwF QnHDI+txkjPdhC9UCEygQd1ru3ces25MxCkqpLUSWJYYOQMGEcWGqqPUFOjionpl lkOuqr/xV7SVjE/srwOo2qu6MHhEsNs= -----END CERTIFICATE-----Generated at Sat Apr 5 20:27:33 2025 by rpki-client