$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa File: 223fffd8-e55c-39f5-883b-add44fcafd45.roa (raw, json) Hash identifier: SwNWBNQFSiONEmSgwm1DjxBrGKHMNCx101tap1/oIis= Subject key identifier: 17:4A:B1:99:72:1C:E6:D0:7A:10:EC:A1:EF:0F:84:61:44:4D:69:D7 Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Certificate serial: 010D0C9F43285848E8666377551C3C83C5081920 Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 133073 IP address blocks: 23.154.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:63:77:55:1c:3c:83:c5:08:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=aaf91d50-694d-4e8c-bcce-7f40cbe271da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:42:c6:51:f5:34:76:62:9c:6d:d2:88:f2: f7:1a:77:dc:9f:dd:5d:3e:e4:ef:38:1e:1a:cc:c2: 6b:cc:ef:84:ed:61:08:7e:58:77:99:cb:51:54:2c: 96:3e:f0:2f:23:ee:13:08:5e:69:e4:6e:97:dd:19: b4:52:4c:1b:c3:56:5b:50:cb:11:e0:8f:3c:8a:1d: 23:ac:d9:49:03:b1:a2:9f:4e:d0:bc:8b:cf:68:eb: d4:b5:f9:70:c8:c1:7d:f4:11:e2:5a:b9:13:96:73: e3:68:5e:74:7b:4d:fe:7a:34:29:68:e1:2f:82:f7: 78:38:41:2f:db:06:59:4c:db:de:b9:2a:07:b0:81: 1d:b3:72:c0:e3:52:60:68:a1:c7:24:be:4b:76:9c: 16:b3:f3:4c:6d:70:4f:50:3e:6a:3d:9b:20:c6:83: 09:9d:67:05:b5:ca:5d:3e:18:7c:b8:bf:20:b7:7e: be:db:c3:1a:b2:6b:4a:aa:f9:ca:f7:89:26:9b:d9: 65:58:07:fa:43:c0:d7:7d:6e:f5:4c:68:85:ef:3f: 00:ea:65:7d:02:7f:93:5b:ad:7b:f6:e3:05:e7:04: c1:63:dc:bf:17:8f:b8:b7:00:0f:20:ea:60:5a:37: 49:22:a3:aa:80:81:cf:97:b3:97:ed:d4:a3:79:4d: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4A:B1:99:72:1C:E6:D0:7A:10:EC:A1:EF:0F:84:61:44:4D:69:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl X509v3 Authority Key Identifier: keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer sbgp-ipAddrBlock: critical IPv4: 23.154.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:79:79:5d:6e:92:93:ae:62:c9:ba:da:5a:ce:82:e4:ab:3f: 07:b0:d9:d9:d1:fa:e1:a5:92:72:c8:c4:69:de:c4:d4:90:ec: 22:71:d9:3a:68:51:d9:4a:e4:b6:f8:40:e4:07:27:43:cd:89: ac:13:fa:9a:66:bc:47:a3:92:78:aa:5d:5b:79:10:83:9a:a2: 90:8f:92:5e:ed:be:2a:01:47:00:31:87:55:36:99:14:5f:d4: bb:74:5b:d3:f6:c2:ce:ae:31:49:88:99:21:c2:90:df:56:4d: 83:21:7c:21:3c:78:ec:60:ed:40:62:75:f3:73:40:17:28:2b: 55:5b:c8:2d:5b:19:c8:85:b4:c3:e6:be:04:ce:15:9f:fa:07: 22:6d:8b:9d:db:e8:6a:4e:75:13:21:e2:e5:a7:28:8d:c5:eb: c1:fc:4d:26:0e:5d:d2:ef:8e:46:98:36:e9:04:0a:ae:41:6c: da:a3:f9:ee:e2:53:e9:5e:7b:d1:2f:4f:78:fb:43:ca:fc:e5: d1:b0:da:c2:80:d5:2b:0f:69:43:69:1c:08:5e:3f:6b:db:dc: e2:ad:87:06:36:7b:76:94:ad:03:54:85:cf:50:e3:a1:f8:b5: d2:14:5f:32:09:20:7a:3a:87:6f:3e:98:c3:53:8c:8e:ac:a0: bb:d2:3c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmN3VRw8g8UIGSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTliNDliYjYtMjc4Mi00YTgyLTgyOWMtZDRiOTRlYjY0 NmYxMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YWFmOTFkNTAtNjk0ZC00ZThjLWJjY2UtN2Y0MGNiZTI3MWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUJCxlH1NHZinG3SiPL3Gnfcn91dPuTvOB4a zMJrzO+E7WEIflh3mctRVCyWPvAvI+4TCF5p5G6X3Rm0Ukwbw1ZbUMsR4I88ih0j rNlJA7Gin07QvIvPaOvUtflwyMF99BHiWrkTlnPjaF50e03+ejQpaOEvgvd4OEEv 2wZZTNveuSoHsIEds3LA41JgaKHHJL5LdpwWs/NMbXBPUD5qPZsgxoMJnWcFtcpd Phh8uL8gt36+28MasmtKqvnK94kmm9llWAf6Q8DXfW71TGiF7z8A6mV9An+TW617 9uMF5wTBY9y/F4+4twAPIOpgWjdJIqOqgIHPl7OX7dSjeU2GWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdKsZlyHObQehDsoe8PhGFETWnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OWI0 OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5NGViNjQ2ZjEvMjIzZmZmZDgtZTU1Yy0z OWY1LTg4M2ItYWRkNDRmY2FmZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTliNDliYjYtMjc4Mi00YTgyLTgy OWMtZDRiOTRlYjY0NmYxLzk5YjQ5YmI2LTI3ODItNGE4Mi04MjljLWQ0Yjk0ZWI2 NDZmMS5jcmwwHwYDVR0jBBgwFoAU1mm0D12iTNZq/ycK6P7yzPnobCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OWI0OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5 NGViNjQ2ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN5eV1ukpOuYsm62lrOguSrPwew2dnR+uGlknLIxGnexNSQ7CJx2Tpo UdlK5Lb4QOQHJ0PNiawT+ppmvEejkniqXVt5EIOaopCPkl7tvioBRwAxh1U2mRRf 1Lt0W9P2ws6uMUmImSHCkN9WTYMhfCE8eOxg7UBidfNzQBcoK1VbyC1bGciFtMPm vgTOFZ/6ByJti53b6GpOdRMh4uWnKI3F68H8TSYOXdLvjkaYNukECq5BbNqj+e7i U+lee9EvT3j7Q8r85dGw2sKA1SsPaUNpHAheP2vb3OKthwY2e3aUrQNUhc9Q46H4 tdIUXzIJIHo6h28+mMNTjI6soLvSPI0= -----END CERTIFICATE-----Generated at Sun Apr 6 17:40:17 2025 by rpki-client