$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa File: d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa (raw, json) Hash identifier: 1RNFFns/+s8mPIQdoNIH0CTAAJPx46w3XO6xMUSeoNY= Subject key identifier: F8:CA:18:5B:87:B5:F3:BE:BA:5D:34:54:D9:DC:4B:61:97:A1:0B:DC Certificate issuer: /CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Certificate serial: 010D0C9F4328584917DC31B40FDCFB416BD1F780 Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 40081 IP address blocks: 23.175.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:31:b4:0f:dc:fb:41:6b:d1:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=08564fbb-7b17-4aad-87ff-f7f37011803c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:e3:9a:68:b4:18:6f:9e:90:bf:6f:c1:8c: 96:f5:6f:0e:16:ed:dd:66:69:31:1f:df:bd:bd:c1: ab:fc:88:11:e5:a2:6d:3a:39:ae:47:ba:b8:e9:73: b4:39:a1:58:ad:38:8f:44:91:81:fd:b0:42:92:e2: f3:7b:94:4a:1c:59:9d:b5:42:12:20:46:4b:e0:c1: a6:1f:1d:61:48:0c:06:71:ac:41:e1:00:5a:3e:e5: 36:53:c3:33:90:ae:77:9d:c6:6e:1d:35:eb:1b:22: 59:8d:53:a8:a5:51:38:94:71:53:4c:1a:90:6a:f5: d3:e2:2d:f8:22:8e:4a:04:f2:72:ed:e1:1b:df:fa: 98:29:23:07:9b:1c:60:ea:f8:d4:04:b9:2e:f1:1b: 73:3d:f6:33:8b:dc:91:b3:16:5d:4d:ef:c5:54:ec: fb:72:f6:1c:b9:b9:d6:be:bc:ac:d3:d3:04:98:25: e4:14:99:39:41:65:58:c2:1e:86:84:81:85:36:d1: f3:23:3a:9d:b3:1c:4d:f1:52:03:46:e3:3f:ef:24: 4b:de:6b:0d:1c:b0:47:8e:96:4e:ba:68:ac:af:bb: 6c:ca:4b:c8:a9:7d:3f:d8:56:ab:02:c3:19:34:2c: b0:af:d0:f9:22:bc:6b:1c:a5:9b:72:79:6b:2c:24: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:18:5B:87:B5:F3:BE:BA:5D:34:54:D9:DC:4B:61:97:A1:0B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl X509v3 Authority Key Identifier: keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer sbgp-ipAddrBlock: critical IPv4: 23.175.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6b:36:55:f1:91:04:b5:f2:af:b2:6d:ad:84:0f:1f:6c:9c: 5d:cf:9b:20:b5:0d:de:99:a9:69:4b:30:53:4f:54:1c:ab:bd: b0:9b:05:60:11:a8:dc:05:7a:df:2d:03:fa:f9:ef:15:fe:91: c3:b5:90:56:6c:8e:0e:19:a9:94:39:a7:d6:e9:5b:04:b7:64: 80:5a:ff:e4:e5:03:e5:ce:ac:35:85:db:d3:80:1b:91:d8:15: c9:ac:15:8e:1e:df:a9:40:6a:86:23:1f:61:bd:0f:05:73:67: 83:04:78:d1:54:ea:a6:ea:f6:5d:d2:f1:8c:99:b7:be:55:fc: 3f:a0:a1:80:da:f6:46:73:2d:b8:e0:0f:99:c4:bf:a1:a1:66: 22:ba:e5:6f:d1:8f:6f:26:23:6c:10:a6:6d:3d:c8:45:12:70: 87:94:c2:a8:57:63:04:31:f7:4f:c9:b8:d9:0d:e3:31:3d:de: 92:3e:f9:b1:b5:38:78:81:eb:24:f7:70:b7:36:84:16:a7:fb: e4:df:0a:13:32:95:ed:7f:b5:75:d7:ff:aa:29:9c:d8:d2:96: 60:3f:00:e7:c9:b5:f6:e9:72:ac:fa:41:28:24:a8:d7:26:de: f9:82:38:e1:93:fd:f4:b2:c0:f8:55:b2:f0:0b:b2:f1:8e:3e: 41:66:4b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DG0D9z7QWvR94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh MTc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MDg1NjRmYmItN2IxNy00YWFkLTg3ZmYtZjdmMzcwMTE4MDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS/jmmi0GG+ekL9vwYyW9W8OFu3dZmkxH9+9 vcGr/IgR5aJtOjmuR7q46XO0OaFYrTiPRJGB/bBCkuLze5RKHFmdtUISIEZL4MGm Hx1hSAwGcaxB4QBaPuU2U8MzkK53ncZuHTXrGyJZjVOopVE4lHFTTBqQavXT4i34 Io5KBPJy7eEb3/qYKSMHmxxg6vjUBLku8RtzPfYzi9yRsxZdTe/FVOz7cvYcubnW vrys09MEmCXkFJk5QWVYwh6GhIGFNtHzIzqdsxxN8VIDRuM/7yRL3msNHLBHjpZO umisr7tsykvIqX0/2FarAsMZNCywr9D5IrxrHKWbcnlrLCRc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjKGFuHtfO+ul00VNncS2GXoQvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5 ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvZDY4OWUxZDQtYTU1ZS0z NzFlLWJhOWEtNGExMmFkNGJlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2 YjU5YWExNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIprNlXxkQS18q+yba2EDx9snF3PmyC1Dd6ZqWlLMFNPVByrvbCbBWAR qNwFet8tA/r57xX+kcO1kFZsjg4ZqZQ5p9bpWwS3ZIBa/+TlA+XOrDWF29OAG5HY FcmsFY4e36lAaoYjH2G9DwVzZ4MEeNFU6qbq9l3S8YyZt75V/D+goYDa9kZzLbjg D5nEv6GhZiK65W/Rj28mI2wQpm09yEUScIeUwqhXYwQx90/JuNkN4zE93pI++bG1 OHiB6yT3cLc2hBan++TfChMyle1/tXXX/6opnNjSlmA/AOfJtfbpcqz6QSgkqNcm 3vmCOOGT/fSywPhVsvALsvGOPkFmSxQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:59:02 2025 by rpki-client