$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa File: f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa (raw, json) Hash identifier: 8ya//p9pipqrvqmB9ziEm3IlqE7NhHPl/LIEvU8gXso= Subject key identifier: 10:CE:29:AA:4B:31:2E:C3:CE:B8:A5:E3:92:F2:81:DF:73:24:B5:1B Certificate issuer: /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Certificate serial: 010D0C9F43285848BFEBA81E3252DF58029D7040 Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 401297 IP address blocks: 23.142.88.0/24 maxlen: 24 23.142.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a8:1e:32:52:df:58:02:9d:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=23e16166-763e-43de-9399-f86404eb0ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:24:a0:b7:9b:8c:f4:39:42:7b:94:06:b9:b5: 73:61:30:7a:41:6a:d1:b0:da:69:e5:f2:d5:72:9d: d8:fd:18:70:1a:b5:44:2a:fa:d5:26:de:d6:18:b5: 93:d3:84:12:26:0f:33:dd:17:68:e9:27:2c:95:3f: ad:23:97:20:0b:5a:a1:66:07:64:78:3c:26:a4:02: ce:fc:bc:e8:0f:5c:ff:a8:c9:51:3d:32:cc:27:1b: 05:09:2d:b7:2e:65:54:3b:8f:c1:11:15:6a:4c:23: 48:61:6d:8c:d2:a4:41:9d:24:cb:e4:0f:41:0e:44: 19:cb:66:b7:37:e8:46:aa:51:19:13:30:26:a0:e3: 0a:17:37:fe:d0:42:f8:57:38:b2:e5:31:7c:fc:4a: 6a:ec:3e:48:9b:e0:45:7f:eb:dc:d8:e1:c6:46:20: 77:1c:11:e8:20:9a:3e:6f:85:fe:c9:08:a5:79:f6: 70:b9:2f:85:7e:96:d5:6d:dc:80:9d:78:b9:b1:2d: 9f:51:2c:8d:ae:25:bd:04:95:db:3a:cd:77:4f:64: bb:8d:f3:1c:10:9d:53:82:4b:f7:53:0a:98:f4:b9: 47:3e:aa:28:03:cd:d1:b6:33:7f:e9:d6:e3:b5:b7: b7:06:43:41:b5:1b:a9:b0:78:4c:5a:a7:50:22:0b: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CE:29:AA:4B:31:2E:C3:CE:B8:A5:E3:92:F2:81:DF:73:24:B5:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl X509v3 Authority Key Identifier: keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer sbgp-ipAddrBlock: critical IPv4: 23.142.88.0/24 23.142.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a6:e8:5d:bc:f4:f4:cf:05:74:56:f4:6e:9c:7a:b2:b4:19: 30:07:ec:c5:38:a9:c2:e9:82:ee:69:5f:97:25:84:ec:66:16: 0d:67:30:bc:7c:49:b6:e3:cf:ed:1b:a9:d0:ea:79:0f:4e:b2: 96:67:32:98:c4:bf:a4:0f:4e:50:46:d9:99:90:4b:6b:30:2e: 44:e3:6c:bd:f8:6a:14:b3:d8:1c:99:51:f6:46:58:de:4f:88: d5:94:43:cc:66:07:d8:88:46:7b:03:d9:47:0c:34:ed:8e:11: e6:6b:19:f6:e9:13:6d:95:d0:ec:f6:d5:ba:0f:ff:44:c2:52: 18:7b:87:37:88:1e:ce:aa:6c:2c:2a:17:3f:b5:09:7e:7e:d9: e0:21:cf:8b:bf:c6:3e:17:41:fa:d2:e1:7b:65:45:e1:35:95: 6c:30:d7:c6:29:17:b0:f0:f2:db:fe:e8:96:9f:80:bf:bd:47: 35:b0:ee:5e:4d:9c:1f:0a:0d:c1:d7:81:ce:25:64:da:ca:cc: 48:f7:e9:2b:87:48:2d:b1:ec:56:30:f1:07:32:39:15:20:5f: ec:5e:a1:17:2b:ca:b4:49:e1:9d:13:db:1d:bb:fd:56:8e:c3: 9f:0e:da:a7:fd:d3:a0:32:f2:bc:46:6a:ff:a7:f2:fe:b9:9c: c3:ad:47:cc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi/66geMlLfWAKdcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh NjIxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MjNlMTYxNjYtNzYzZS00M2RlLTkzOTktZjg2NDA0ZWIwY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSSgt5uM9DlCe5QGubVzYTB6QWrRsNpp5fLV cp3Y/RhwGrVEKvrVJt7WGLWT04QSJg8z3Rdo6ScslT+tI5cgC1qhZgdkeDwmpALO /LzoD1z/qMlRPTLMJxsFCS23LmVUO4/BERVqTCNIYW2M0qRBnSTL5A9BDkQZy2a3 N+hGqlEZEzAmoOMKFzf+0EL4Vziy5TF8/Epq7D5Im+BFf+vc2OHGRiB3HBHoIJo+ b4X+yQilefZwuS+FfpbVbdyAnXi5sS2fUSyNriW9BJXbOs13T2S7jfMcEJ1Tgkv3 UwqY9LlHPqooA83RtjN/6dbjtbe3BkNBtRupsHhMWqdQIgvBBwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBDOKapLMS7Dzril45Lygd9zJLUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvZjIxOGQwZmEtNGM1Ni0z ODg3LWE2NTgtYjhjOGQxYjBhY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1 MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj MmYzYWE2MjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF45YAwQA F45aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC2m6F289PTPBXRW9G6cerK0GTAH7MU4qcLpgu5pX5clhOxm Fg1nMLx8Sbbjz+0bqdDqeQ9OspZnMpjEv6QPTlBG2ZmQS2swLkTjbL34ahSz2ByZ UfZGWN5PiNWUQ8xmB9iIRnsD2UcMNO2OEeZrGfbpE22V0Oz21boP/0TCUhh7hzeI Hs6qbCwqFz+1CX5+2eAhz4u/xj4XQfrS4XtlReE1lWww18YpF7Dw8tv+6JafgL+9 RzWw7l5NnB8KDcHXgc4lZNrKzEj36SuHSC2x7FYw8QcyORUgX+xeoRcryrRJ4Z0T 2x27/VaOw58O2qf906Ay8rxGav+n8v65nMOtR8w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:57 2025 by rpki-client