$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa File: 32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa (raw, json) Hash identifier: 0PrzCUXwb/rtwSDgqlQ975kpK/kIpwMl8Mez/WzdrEE= Subject key identifier: 4D:5D:7C:6C:F9:89:A0:C1:BC:42:74:3F:56:30:93:62:10:87:C5:86 Certificate issuer: /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d Certificate serial: 48606EAFEA9F56C933E5B14462EF21E91032D3A2 Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa Signing time: Wed 01 Jan 2025 03:07:01 +0000 ROA not before: Wed 01 Jan 2025 03:02:01 +0000 ROA not after: Wed 31 Dec 2025 03:07:01 +0000 asID: 215907 IP address blocks: 23.170.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Apr 2025 14:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:60:6e:af:ea:9f:56:c9:33:e5:b1:44:62:ef:21:e9:10:32:d3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d Validity Not Before: Jan 1 03:02:01 2025 GMT Not After : Dec 31 03:07:01 2025 GMT Subject: CN=4D5D7C6CF989A0C1BC42743F563093621087C586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:9e:06:16:08:0d:d1:b9:7b:bc:93:6c:ab: 5a:40:f9:26:89:e4:67:57:1a:d6:37:58:20:ef:d7: 65:b8:4a:0e:5d:79:95:a6:a8:b9:d5:ef:0e:93:e3: 8f:40:a9:c3:49:e0:bc:47:34:b4:ec:20:28:ef:ab: 06:a3:27:42:b1:93:d5:58:2d:9c:fd:7d:05:d4:08: 93:7f:b3:d9:5d:84:fc:0b:56:61:20:9b:5f:da:2b: b4:17:1e:f3:11:a6:c8:77:53:d0:45:8c:51:82:e8: dd:cc:e9:e8:b6:6a:3d:aa:3c:82:d5:f1:76:11:16: 37:88:06:f0:25:56:fa:4e:f4:b5:1a:8a:4e:e3:8e: 1c:92:18:aa:c6:a9:f5:b9:c2:04:21:c9:a2:76:e0: ce:6e:d7:d8:7c:dd:48:1d:5f:f8:60:4f:c9:1f:58: 18:ba:8b:88:7c:14:06:19:62:17:c7:df:7b:1f:a6: 92:98:d1:a1:5d:d3:6c:f1:a3:d4:db:a5:90:4a:47: 55:2a:ae:8b:8f:19:e8:1b:2d:ca:58:c3:6b:9b:ce: 1b:e5:42:95:5e:b8:79:e4:47:79:9d:50:93:fb:54: 7f:97:d4:21:66:cf:7e:20:cd:6c:6f:3d:7d:68:84: 25:83:12:d9:32:21:bd:d6:db:7b:bd:56:af:cf:c4: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5D:7C:6C:F9:89:A0:C1:BC:42:74:3F:56:30:93:62:10:87:C5:86 X509v3 Authority Key Identifier: keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.170.120.0/24 Signature Algorithm: sha256WithRSAEncryption 52:3f:76:ba:3f:36:d7:ea:5f:2e:0a:e5:92:7e:3d:01:7d:e3: 90:15:11:e2:07:94:70:b4:1b:15:a3:6d:3a:cc:a3:e1:c2:00: 29:74:e1:10:32:78:bd:1a:ad:80:82:2f:76:5b:ab:15:47:ec: ad:13:45:dc:b1:d5:00:76:a8:65:89:c7:a0:15:4b:a4:fd:d7: fe:ca:80:0e:fa:3a:a9:a8:63:7a:41:fb:1a:e3:9a:fa:cf:81: 2c:94:10:d3:52:2d:ba:2d:ab:60:3b:32:01:cf:66:f2:c3:b1: 26:e9:00:d6:45:11:5e:6c:bb:d8:e9:4d:8c:39:99:65:52:1a: 05:79:77:91:08:ed:75:df:7c:2b:5a:50:bd:7a:28:02:f9:0f: cb:ce:f2:6d:b1:c7:81:c1:58:6a:df:ca:63:1d:3a:6f:33:a2: 0a:c7:b0:eb:c8:f5:cb:59:24:eb:5a:05:04:1e:64:51:d5:05: 62:f4:b6:6f:98:6a:c3:ab:36:2e:65:42:7b:6c:9f:32:d9:f1: 79:73:9c:1f:ce:ef:a0:6c:e3:8c:0e:83:00:d4:c1:70:35:5f: f9:6b:6e:3b:ec:13:55:00:8f:ba:a8:c5:df:36:4c:57:6b:17: ab:8c:7c:67:72:e5:02:8f:74:8b:b2:fc:14:e3:16:55:4e:bc: 33:b8:6d:4b -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUSGBur+qfVskz5bFEYu8h6RAy06IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTdkZGViZjFhZDM3ZDdjYmNhMzAzM2E2MGU3ZjAzMDJk NjI2Yjk2YTBmY2Y5N2ZmM2QwHhcNMjUwMTAxMDMwMjAxWhcNMjUxMjMxMDMwNzAx WjAzMTEwLwYDVQQDEyg0RDVEN0M2Q0Y5ODlBMEMxQkM0Mjc0M0Y1NjMwOTM2MjEw ODdDNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb2eBhYIDdG5 e7yTbKtaQPkmieRnVxrWN1gg79dluEoOXXmVpqi51e8Ok+OPQKnDSeC8RzS07CAo 76sGoydCsZPVWC2c/X0F1AiTf7PZXYT8C1ZhIJtf2iu0Fx7zEabId1PQRYxRgujd zOnotmo9qjyC1fF2ERY3iAbwJVb6TvS1GopO444ckhiqxqn1ucIEIcmiduDObtfY fN1IHV/4YE/JH1gYuouIfBQGGWIXx997H6aSmNGhXdNs8aPU26WQSkdVKq6Ljxno Gy3KWMNrm84b5UKVXrh55Ed5nVCT+1R/l9QhZs9+IM1sbz19aIQlgxLZMiG91tt7 vVavz8TXTQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFE1dfGz5iaDBvEJ0P1Ywk2IQ h8WGMB8GA1UdIwQYMBaAFEa5/bwgGWKKgFXQOrgnyefkAHO/MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThjZGNmMmM4MzU0YjUyLzAv NDZCOUZEQkMyMDE5NjI4QTgwNTVEMDNBQjgyN0M5RTdFNDAwNzNCRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3LzhiN2I4ZjIyLTU4N2QtNDFlOS1hNzk4LTkzYzQ3NzVmN2ZhMS9lN2Rk ZWJmMWFkMzdkN2NiY2EzMDMzYTYwZTdmMDMwMmQ2MjZiOTZhMGZjZjk3ZmYzZC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2Rj ZjJjODM1NGI1Mi8wLzMyMzMyZTMxMzczMDJlMzEzMjMwMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzMTM1MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6p4MA0GCSqGSIb3DQEB CwUAA4IBAQBSP3a6PzbX6l8uCuWSfj0BfeOQFRHiB5RwtBsVo206zKPhwgApdOEQ Mni9Gq2Agi92W6sVR+ytE0XcsdUAdqhlicegFUuk/df+yoAO+jqpqGN6Qfsa45r6 z4EslBDTUi26LatgOzIBz2byw7Em6QDWRRFebLvY6U2MOZllUhoFeXeRCO1133wr WlC9eigC+Q/LzvJtsceBwVhq38pjHTpvM6IKx7DryPXLWSTrWgUEHmRR1QVi9LZv mGrDqzYuZUJ7bJ8y2fF5c5wfzu+gbOOMDoMA1MFwNV/5a2477BNVAI+6qMXfNkxX axerjHxncuUCj3SLsvwU4xZVTrwzuG1L -----END CERTIFICATE-----Generated at Tue Apr 22 21:57:53 2025 by rpki-client