$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa File: dbb60073-5b02-33a2-87ca-90890e8164b4.roa (raw, json) Hash identifier: M+MYwbUMbnhgIAzROHOluzx4dIOtpWB0NkAZGVqIFXM= Subject key identifier: 45:64:A3:56:18:CC:B3:DB:A5:DA:54:66:AE:F2:9A:A0:30:A2:C1:42 Certificate issuer: /CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a Certificate serial: 010D0C9F4328584886B07CAB907AE21CA3B17B00 Authority key identifier: 33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 399756 IP address blocks: 23.172.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:7c:ab:90:7a:e2:1c:a3:b1:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=eb41b217-586d-4059-b908-52e7db80980b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:23:ec:04:50:19:5f:be:bd:fc:b5:3a:f0: cb:e5:de:7e:44:26:98:5c:8b:cb:d6:93:d7:b5:f8: 49:e5:3a:59:33:66:41:58:e1:46:83:20:df:ef:68: 49:19:53:df:d9:6c:0a:69:8b:48:0c:f9:29:e0:f8: 44:d8:9c:18:e3:49:59:f7:3b:18:30:30:56:3d:b5: 24:26:d0:db:f3:87:e2:ab:ec:34:6d:d9:d9:6e:6f: 61:b6:29:81:96:d0:d1:c0:83:f5:ac:f1:b2:1b:c8: 70:bc:52:05:ba:fe:7f:ca:bd:11:28:b1:2e:cd:5c: a8:cf:db:e7:22:c4:1a:31:d5:24:a8:f8:b8:d1:c6: ea:34:96:5b:4f:52:5f:e4:63:bd:45:cb:18:f0:6f: 56:59:c9:79:f9:ae:16:b0:00:8a:ca:f6:69:3c:52: e1:e5:3b:90:17:5a:37:0f:2e:38:08:f1:d4:d6:d3: f0:9c:71:67:f7:3a:ba:fa:61:24:b2:4b:73:78:aa: b3:b6:5b:8e:6b:d4:d5:ed:75:f6:94:3b:36:07:38: c6:26:7d:71:09:30:ad:73:ff:3c:a7:35:2c:b2:23: 3b:67:5c:e6:14:b6:24:a7:45:08:51:e8:d9:f7:ca: 60:5b:2f:95:f0:f4:8a:0c:77:1a:3e:04:5a:fc:5e: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:64:A3:56:18:CC:B3:DB:A5:DA:54:66:AE:F2:9A:A0:30:A2:C1:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.crl X509v3 Authority Key Identifier: keyid:33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer sbgp-ipAddrBlock: critical IPv4: 23.172.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:aa:53:d3:ab:b2:d4:63:5e:5a:1d:2d:3e:c0:ce:bb:0a:45: 6e:f3:94:d7:24:8d:36:25:c4:4d:a0:d2:35:d6:46:99:7e:ea: 0d:53:80:ee:06:3b:90:c4:2b:50:44:12:91:ba:12:01:d3:c7: 4d:69:a8:17:3b:fd:62:7f:1c:bb:10:88:7f:d8:42:6d:e1:a4: 86:eb:a9:05:f6:4d:b3:8c:7d:3c:11:3b:7d:1d:26:c1:95:8c: fb:f2:d4:fe:6f:5c:d5:d6:15:fb:a0:45:ba:2c:b0:05:93:fc: 40:ae:81:e6:4c:50:d0:19:db:33:60:ee:1d:34:c8:8f:e7:ca: 2a:50:2b:aa:38:f2:e6:be:99:14:02:16:99:55:ba:7d:2d:70: 91:24:53:63:d0:1f:27:aa:d6:a2:88:68:e4:4f:ba:de:f8:6e: 63:13:f0:6a:d1:0f:83:e9:09:5f:94:33:57:fc:54:97:38:7d: 0f:ba:63:f8:7c:80:40:8c:11:d9:18:82:fa:4c:9d:f8:b8:05: 33:6e:c2:df:a0:09:45:f7:55:8b:87:03:1c:ad:39:2a:16:cc: b5:bc:78:3b:16:a0:82:51:e2:e5:80:c4:1a:d7:83:43:ca:76: dd:c9:b5:3e:31:af:f9:69:7c:c3:5a:53:e9:e5:5b:d0:48:1f: c2:9e:b8:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHyrkHriHKOxewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQwZjBjZDEtZjRlYy00M2I5LWJhNDEtYzk2OWMwZmQ1 MjRhMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk ZWI0MWIyMTctNTg2ZC00MDU5LWI5MDgtNTJlN2RiODA5ODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Yj7ARQGV++vfy1OvDL5d5+RCaYXIvL1pPX tfhJ5TpZM2ZBWOFGgyDf72hJGVPf2WwKaYtIDPkp4PhE2JwY40lZ9zsYMDBWPbUk JtDb84fiq+w0bdnZbm9htimBltDRwIP1rPGyG8hwvFIFuv5/yr0RKLEuzVyoz9vn IsQaMdUkqPi40cbqNJZbT1Jf5GO9RcsY8G9WWcl5+a4WsACKyvZpPFLh5TuQF1o3 Dy44CPHU1tPwnHFn9zq6+mEksktzeKqztluOa9TV7XX2lDs2BzjGJn1xCTCtc/88 pzUssiM7Z1zmFLYkp0UIUejZ98pgWy+V8PSKDHcaPgRa/F7bNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVko1YYzLPbpdpUZq7ymqAwosFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNDBm MGNkMS1mNGVjLTQzYjktYmE0MS1jOTY5YzBmZDUyNGEvZGJiNjAwNzMtNWIwMi0z M2EyLTg3Y2EtOTA4OTBlODE2NGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjQwZjBjZDEtZjRlYy00M2I5LWJh NDEtYzk2OWMwZmQ1MjRhLzI0MGYwY2QxLWY0ZWMtNDNiOS1iYTQxLWM5NjljMGZk NTI0YS5jcmwwHwYDVR0jBBgwFoAUMzzYYlOetKTXzX5H2DXUEtzUoYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNDBmMGNkMS1mNGVjLTQzYjktYmE0MS1jOTY5 YzBmZDUyNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmqU9OrstRjXlodLT7AzrsKRW7zlNckjTYlxE2g0jXWRpl+6g1TgO4G O5DEK1BEEpG6EgHTx01pqBc7/WJ/HLsQiH/YQm3hpIbrqQX2TbOMfTwRO30dJsGV jPvy1P5vXNXWFfugRbossAWT/ECugeZMUNAZ2zNg7h00yI/nyipQK6o48ua+mRQC FplVun0tcJEkU2PQHyeq1qKIaORPut74bmMT8GrRD4PpCV+UM1f8VJc4fQ+6Y/h8 gECMEdkYgvpMnfi4BTNuwt+gCUX3VYuHAxytOSoWzLW8eDsWoIJR4uWAxBrXg0PK dt3JtT4xr/lpfMNaU+nlW9BIH8KeuG8= -----END CERTIFICATE-----Generated at Sat Mar 15 21:14:50 2025 by rpki-client