$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa File: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (raw, json) Hash identifier: nBlpxPNnKgFFQPbftNl99B2V7yEAbLcHsQOQ7w7Uovg= Subject key identifier: D2:4E:A9:0E:CD:35:2C:B6:20:DC:AB:1F:EB:57:60:F2:CF:A0:6A:C9 Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Certificate serial: 010D0C9F4328584902F507B156DCD726416BE9D0 Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa Signing time: Wed 26 Feb 2025 14:19:09 +0000 ROA not before: Wed 26 Feb 2025 14:19:09 +0000 ROA not after: Tue 27 May 2025 13:19:09 +0000 asID: 2914 IP address blocks: 23.133.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:f5:07:b1:56:dc:d7:26:41:6b:e9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Validity Not Before: Feb 26 14:19:09 2025 GMT Not After : May 27 13:19:09 2025 GMT Subject: CN=f180b988-1b68-4b07-a742-4f951f5c7eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:42:79:dc:be:d0:bb:b8:c1:68:2f:a7:77: cb:e9:87:73:78:e4:a5:e8:50:b0:c5:2e:f1:7b:6d: d1:f4:4b:65:1e:aa:83:7f:30:a9:c2:68:09:d5:6f: 71:09:bd:2d:7d:12:b6:e8:dc:62:c4:f1:17:48:b8: c5:4a:e8:d5:96:63:de:7e:1e:fb:c5:cb:a1:96:5f: 01:0f:c7:37:03:46:34:b5:ed:9f:bf:3a:4d:8e:7e: 4a:db:10:2e:0c:74:ea:03:3a:ef:76:c1:50:aa:f2: 09:31:e0:7f:ed:e7:b6:6b:9a:56:cb:d4:4f:74:29: 8b:82:f4:74:45:d4:5c:03:ba:c1:dc:12:2f:9a:a1: 5a:73:fa:2b:07:ca:ff:fa:7d:a1:a7:e5:cc:6e:7a: 49:52:e3:5d:19:b9:39:ca:47:bc:f5:76:b0:07:6b: 66:dc:7e:ac:b5:af:1c:b4:ec:27:f3:fd:e5:30:c9: 0e:a8:81:a6:92:07:a1:7b:ed:f1:a8:a5:6d:84:25: fd:05:4b:6e:b9:8a:6e:a1:98:16:b9:d5:92:fa:77: 78:07:02:a0:36:1c:3a:4c:0a:79:14:b3:e5:27:c6: c9:f8:9a:bc:c0:8e:8f:bb:3e:fa:a0:86:03:9d:46: 9c:b6:47:82:e6:b3:db:c4:a7:ef:b2:71:84:78:44: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4E:A9:0E:CD:35:2C:B6:20:DC:AB:1F:EB:57:60:F2:CF:A0:6A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl X509v3 Authority Key Identifier: keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer sbgp-ipAddrBlock: critical IPv4: 23.133.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6d:bd:ea:e5:4c:b9:b7:e0:9c:b9:a5:5c:ce:5a:b0:e4:0e: 90:55:c6:d3:c2:a3:79:28:00:f5:5d:c5:03:56:be:a2:c1:1f: 01:25:b7:85:94:90:c1:46:bd:68:4b:ec:cb:f9:2c:d1:3e:31: 77:38:ec:7b:72:f2:08:94:ce:01:c1:db:7f:62:4d:54:94:66: 25:bc:71:89:20:65:31:35:70:96:87:f1:ba:45:48:3a:f4:78: ca:1a:8f:80:d3:e7:cc:fd:c6:8a:99:c4:21:cb:f1:79:5f:9a: 55:45:50:5c:0a:48:aa:c1:f8:2a:a8:2d:85:4f:0b:23:61:b2: e4:8e:40:22:30:1a:6a:ff:c6:67:cc:b7:fe:33:64:09:8f:3f: bf:83:a7:8f:95:41:fc:19:eb:bb:16:ba:d2:f1:aa:15:6f:1a: a1:24:bf:00:21:02:86:00:f1:14:4f:b3:cf:54:e7:e6:35:3c: b1:fb:fb:22:7b:96:4c:f8:41:7a:24:81:18:ab:d9:1b:05:dc: ed:97:06:3f:90:ee:32:71:f4:24:67:02:e6:dd:b2:ed:24:9c: d6:94:33:8d:45:52:bb:d7:20:41:3c:8f:ba:23:a8:07:13:a3: 7e:e2:7e:d6:8f:46:af:bc:86:dd:22:ef:61:c0:5e:18:9e:e0: f8:57:07:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC9QexVtzXJkFr6dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4 OGY2MB4XDTI1MDIyNjE0MTkwOVoXDTI1MDUyNzEzMTkwOVowLzEtMCsGA1UEAxMk ZjE4MGI5ODgtMWI2OC00YjA3LWE3NDItNGY5NTFmNWM3ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqVCedy+0Lu4wWgvp3fL6YdzeOSl6FCwxS7x e23R9EtlHqqDfzCpwmgJ1W9xCb0tfRK26NxixPEXSLjFSujVlmPefh77xcuhll8B D8c3A0Y0te2fvzpNjn5K2xAuDHTqAzrvdsFQqvIJMeB/7ee2a5pWy9RPdCmLgvR0 RdRcA7rB3BIvmqFac/orB8r/+n2hp+XMbnpJUuNdGbk5yke89XawB2tm3H6sta8c tOwn8/3lMMkOqIGmkgehe+3xqKVthCX9BUtuuYpuoZgWudWS+nd4BwKgNhw6TAp5 FLPlJ8bJ+Jq8wI6Puz76oIYDnUactkeC5rPbxKfvsnGEeEQpBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJOqQ7NNSy2INyrH+tXYPLPoGrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3 YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvYmQ0YzAxNTYtMWUxMy0z MzY4LWEzOTktNWRjZmM3NWY0ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkN2IzZWEtOGNmNi00NGM0LWI2 ODEtN2I2MjcyZTY4OGY2LzQwZDdiM2VhLThjZjYtNDRjNC1iNjgxLTdiNjI3MmU2 ODhmNi5jcmwwHwYDVR0jBBgwFoAU/SxsTRDJ7FBhwetdhFIkO2J7LkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYy NzJlNjg4ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9tverlTLm34Jy5pVzOWrDkDpBVxtPCo3koAPVdxQNWvqLBHwElt4WU kMFGvWhL7Mv5LNE+MXc47Hty8giUzgHB239iTVSUZiW8cYkgZTE1cJaH8bpFSDr0 eMoaj4DT58z9xoqZxCHL8XlfmlVFUFwKSKrB+CqoLYVPCyNhsuSOQCIwGmr/xmfM t/4zZAmPP7+Dp4+VQfwZ67sWutLxqhVvGqEkvwAhAoYA8RRPs89U5+Y1PLH7+yJ7 lkz4QXokgRir2RsF3O2XBj+Q7jJx9CRnAubdsu0knNaUM41FUrvXIEE8j7ojqAcT o37iftaPRq+8ht0i72HAXhie4PhXB5M= -----END CERTIFICATE-----Generated at Sat Apr 12 08:04:32 2025 by rpki-client