$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa File: 8e5abe26-35c1-3b16-9b96-323c165f8420.roa (raw, json) Hash identifier: wEJn70p0Y6AFCSuambRJVSgYn2EV6XCqCxYDbLS1Iys= Subject key identifier: 58:00:EB:AC:24:BD:C5:78:23:D8:6D:72:23:28:90:CF:C3:2D:72:40 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F43285848C580F78F5678E5F505647F80 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 11870 IP address blocks: 167.23.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f7:8f:56:78:e5:f5:05:64:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7be7d3d0-eda0-492b-b67e-2d7867e7c204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:49:8b:91:f6:b9:5f:08:c7:fe:71:4d:11: 4c:3d:5a:c1:4e:bf:f0:16:9f:d1:bd:99:c0:d5:f1: 01:69:a1:b8:4b:19:d2:05:ca:b7:8c:c5:22:e0:77: ed:59:b2:ae:7a:12:90:44:69:83:2a:40:a5:97:8f: f7:26:35:ea:d4:fc:d7:d5:03:4a:4d:36:10:f2:4e: bf:99:65:d7:9e:4d:a4:a1:ad:5b:7a:f2:83:0a:b9: 37:b7:15:3f:8e:c3:b5:e4:ae:0a:5d:f7:95:b8:2c: aa:e1:9a:59:e6:bc:d0:b6:f5:93:e7:c5:b9:5b:ca: 7f:bb:eb:53:7e:7b:33:0f:85:71:14:6f:dd:93:6c: ba:4f:4f:32:1e:16:82:c4:3d:e0:35:9a:18:00:3c: e0:5e:3a:19:8e:55:c0:a5:1c:a0:c8:72:03:6b:02: 59:77:b4:55:9a:2e:16:d2:83:97:8d:57:39:03:23: 13:4f:27:a1:94:ea:13:eb:66:49:f0:0f:b8:11:fb: 8d:8a:98:0a:c6:05:d2:c1:58:4c:10:7a:fa:f0:92: 69:37:a0:2f:2a:49:da:65:33:c0:b3:05:a6:69:60: a4:60:95:c0:76:94:98:3f:94:8a:3d:91:44:b0:5d: e1:e7:50:a2:cf:7a:ee:38:7a:d9:60:7a:e8:7b:b9: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:00:EB:AC:24:BD:C5:78:23:D8:6D:72:23:28:90:CF:C3:2D:72:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a1:8d:56:c0:6d:0b:6c:1c:80:36:eb:3d:92:1b:27:87:5d: ad:26:09:74:af:d1:eb:fd:cb:f5:86:8c:f1:a1:3b:09:ab:39: 4d:5f:c0:37:0b:c8:67:43:8d:e2:b1:1f:f5:e8:bf:5b:84:87: 70:2a:69:81:2f:21:36:21:55:40:6d:52:81:99:f5:73:61:4a: 02:31:45:7b:9e:7e:f3:32:b1:2d:61:80:7b:fc:85:d3:c2:84: ee:60:55:f9:eb:c4:47:a6:24:23:d4:e7:d3:ff:06:ed:63:cb: 48:06:64:1f:6e:15:1c:3e:b0:5b:ad:a5:e7:36:8a:a3:d7:43: ed:35:34:de:1a:b7:41:85:80:c6:a0:9d:76:55:9d:20:f8:c8: b3:c4:bf:aa:01:15:e4:c0:f4:90:1c:c9:06:e6:20:33:15:ff: f5:a7:8a:ce:85:16:6e:84:50:a7:36:48:55:b0:1d:ed:f2:76: 77:7d:eb:80:d6:ea:30:db:89:8c:29:c5:2b:d6:01:49:d3:66: 0a:3c:91:d1:a3:20:59:e8:45:7c:43:98:26:9d:78:8a:d3:27: 9e:d5:a0:a1:70:ee:2c:95:e9:28:fe:17:41:28:a0:77:4c:5f: 4e:26:db:ca:0a:b0:dd:d0:fa:7c:a3:7f:1a:15:37:8b:57:55: 77:72:35:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPePVnjl9QVkf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2JlN2QzZDAtZWRhMC00OTJiLWI2N2UtMmQ3ODY3ZTdjMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ZJi5H2uV8Ix/5xTRFMPVrBTr/wFp/RvZnA 1fEBaaG4SxnSBcq3jMUi4HftWbKuehKQRGmDKkCll4/3JjXq1PzX1QNKTTYQ8k6/ mWXXnk2koa1bevKDCrk3txU/jsO15K4KXfeVuCyq4ZpZ5rzQtvWT58W5W8p/u+tT fnszD4VxFG/dk2y6T08yHhaCxD3gNZoYADzgXjoZjlXApRygyHIDawJZd7RVmi4W 0oOXjVc5AyMTTyehlOoT62ZJ8A+4EfuNipgKxgXSwVhMEHr68JJpN6AvKknaZTPA swWmaWCkYJXAdpSYP5SKPZFEsF3h51Ciz3ruOHrZYHroe7nnyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgA66wkvcV4I9htciMokM/DLXJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvOGU1YWJlMjYtMzVjMS0z YjE2LTliOTYtMzIzYzE2NWY4NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmhjVbAbQtsHIA26z2SGyeHXa0mCXSv0ev9y/WGjPGhOwmrOU1fwDcL yGdDjeKxH/Xov1uEh3AqaYEvITYhVUBtUoGZ9XNhSgIxRXuefvMysS1hgHv8hdPC hO5gVfnrxEemJCPU59P/Bu1jy0gGZB9uFRw+sFutpec2iqPXQ+01NN4at0GFgMag nXZVnSD4yLPEv6oBFeTA9JAcyQbmIDMV//Wnis6FFm6EUKc2SFWwHe3ydnd964DW 6jDbiYwpxSvWAUnTZgo8kdGjIFnoRXxDmCadeIrTJ57VoKFw7iyV6Sj+F0EooHdM X04m28oKsN3Q+nyjfxoVN4tXVXdyNec= -----END CERTIFICATE-----Generated at Fri Apr 4 16:19:37 2025 by rpki-client