$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa File: b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa (raw, json) Hash identifier: WnZFmMa6iluqOjnQk+DvYrfsCzEcE+oxXPdz2Z530Tg= Subject key identifier: 15:3B:8A:F8:DF:7F:E6:E1:EC:A5:9B:EA:0C:DF:F7:B8:F6:72:D1:73 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584855D59D1766B9F722CEB1C694 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 14618 IP address blocks: 23.150.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:9d:17:66:b9:f7:22:ce:b1:c6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=3a87e7f2-70ba-4e14-a5d9-b278944623a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:85:83:ac:b6:e4:27:53:0e:d8:5a:f8:ff: db:3a:04:02:d8:62:02:72:fd:53:2c:34:14:6a:f6: cd:85:67:6b:01:7b:00:f6:4c:d6:5f:ea:b9:66:d7: 07:f5:41:38:ab:27:26:f6:cf:00:4c:2c:81:d6:f8: 46:f6:40:e9:d7:df:91:9e:b0:f3:9e:ea:cc:f0:e1: f3:b3:33:c1:c5:3f:c4:16:49:82:3d:f1:2a:18:fb: b9:15:32:db:4a:79:7d:3f:7b:31:c8:1d:ec:60:70: 42:d7:2c:42:a0:5c:eb:07:f0:2f:3a:95:22:7e:c0: e7:d1:16:a0:6e:fe:b2:40:7f:5b:4b:62:09:f1:23: 1b:f4:7e:2e:a6:db:97:6f:6d:e0:0e:5b:ff:36:87: 5d:8c:04:bf:a4:d7:23:a1:cc:93:60:5d:6c:c3:c9: 28:41:e6:78:eb:1f:58:c4:09:e2:db:10:3a:31:6e: 16:94:b1:37:73:b5:98:f8:78:4f:06:06:27:72:04: 79:d3:a0:dc:93:89:3c:07:2f:f8:71:d5:3f:a4:83: 13:fa:2c:89:eb:dc:82:d8:d0:d3:80:ca:a0:5f:2a: 4a:98:9e:c5:47:1e:b7:b2:9a:40:d4:79:5f:c9:28: 78:06:1f:bd:97:9c:a6:bf:b4:94:f5:20:cd:0b:63: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3B:8A:F8:DF:7F:E6:E1:EC:A5:9B:EA:0C:DF:F7:B8:F6:72:D1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 23.150.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:13:4b:5d:38:a8:2f:a6:fb:60:50:da:46:67:05:79:df:b2: 31:cb:43:6f:04:c4:7a:0e:22:3e:58:a7:ab:d9:c0:18:a8:a3: b0:aa:52:3f:87:48:b7:8f:4a:eb:89:b7:da:86:8c:37:af:c4: f5:30:5d:e4:ec:20:11:11:c6:45:4d:60:dc:16:a4:f5:55:f6: 1d:6f:ed:62:21:f2:b1:3f:7f:47:1d:cf:0f:bf:7a:44:2a:10: b2:7e:72:41:ed:d8:11:fd:7d:e1:3d:c7:34:c1:1c:3a:54:bc: 9d:19:01:1b:36:09:14:42:6b:6b:43:e4:44:36:e9:4a:91:b2: 1e:5f:7e:61:9d:9b:99:36:a3:16:46:0e:91:d0:21:63:e3:cc: 51:6b:d7:e5:23:cc:77:a7:4d:dd:60:ea:15:41:a3:0b:fb:84: 98:d4:3d:9e:03:f2:94:b4:b8:04:5b:eb:25:9a:18:ff:19:86: 8a:72:fd:80:4b:05:17:5d:3c:b3:61:9a:b7:cd:38:88:84:5e: cc:17:4a:3f:e0:b7:4f:03:3e:0a:e3:d7:6f:14:b3:c3:d6:99: c2:58:b8:bb:d3:b8:42:44:69:c9:c2:5f:06:20:68:71:5d:21: 64:e0:34:5e:56:67:36:99:76:8e:30:ed:ce:e2:b0:e8:46:c0: ec:eb:69:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1Z0XZrn3Is6xxpQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk M2E4N2U3ZjItNzBiYS00ZTE0LWE1ZDktYjI3ODk0NDYyM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbyFg6y25CdTDtha+P/bOgQC2GICcv1TLDQU avbNhWdrAXsA9kzWX+q5ZtcH9UE4qycm9s8ATCyB1vhG9kDp19+RnrDznurM8OHz szPBxT/EFkmCPfEqGPu5FTLbSnl9P3sxyB3sYHBC1yxCoFzrB/AvOpUifsDn0Rag bv6yQH9bS2IJ8SMb9H4uptuXb23gDlv/NoddjAS/pNcjocyTYF1sw8koQeZ46x9Y xAni2xA6MW4WlLE3c7WY+HhPBgYncgR506Dck4k8By/4cdU/pIMT+iyJ69yC2NDT gMqgXypKmJ7FRx63sppA1HlfySh4Bh+9l5ymv7SU9SDNC2O7IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU7ivjff+bh7KWb6gzf97j2ctFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYjVjNDk5YjItNWJlNi0z Y2M1LWFhZTktNzJkNGZhYTMzNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5boMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0TS104qC+m+2BQ2kZnBXnfsjHLQ28ExHoOIj5Yp6vZwBioo7CqUj+H SLePSuuJt9qGjDevxPUwXeTsIBERxkVNYNwWpPVV9h1v7WIh8rE/f0cdzw+/ekQq ELJ+ckHt2BH9feE9xzTBHDpUvJ0ZARs2CRRCa2tD5EQ26UqRsh5ffmGdm5k2oxZG DpHQIWPjzFFr1+UjzHenTd1g6hVBowv7hJjUPZ4D8pS0uARb6yWaGP8Zhopy/YBL BRddPLNhmrfNOIiEXswXSj/gt08DPgrj128Us8PWmcJYuLvTuEJEacnCXwYgaHFd IWTgNF5WZzaZdo4w7c7isOhGwOzraR0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:28 2025 by rpki-client