$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa File: a1bc269a-e265-3234-b628-e9d71b3d725d.roa (raw, json) Hash identifier: K30E+Isse8Jg6/ObfQalnIxHsIcUj64sPpCuwz6i2X4= Subject key identifier: 35:CB:3B:1F:ED:B8:A2:08:E5:A1:F7:34:FD:11:9F:6A:7C:87:86:29 Certificate issuer: /CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Certificate serial: 010D0C9F432858492CB20DFB40C2E939A3499880 Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 25639 IP address blocks: 23.152.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:0d:fb:40:c2:e9:39:a3:49:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e382ecb0-c2cd-4646-8cad-2865a55bc1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:61:f7:07:79:08:f1:f8:2d:f1:8d:7c:31: a1:6e:73:d0:8b:ff:27:57:0c:22:5f:b6:75:d2:ca: 79:05:5b:8a:f1:dd:7d:39:8e:86:c0:de:f6:51:d7: d5:1b:e9:a5:20:d4:22:a1:2c:bb:75:24:98:f5:d6: b6:94:55:9b:b7:ea:c1:95:13:3c:cb:94:51:25:55: 25:ab:e7:78:1f:e4:3d:32:24:30:02:65:b6:f5:a6: b3:f4:ef:a3:45:af:b4:4a:4b:c0:c0:98:17:7c:5d: e1:77:48:c2:45:06:bf:97:7d:aa:a0:bd:2d:41:1d: be:ef:73:53:e3:7b:d0:59:9f:07:e0:31:af:c3:78: d7:dd:d6:ba:79:20:a1:3f:2d:fc:1d:66:84:93:32: ef:7d:5c:e7:1a:4d:7a:b5:5c:8e:1d:12:d1:a9:21: df:68:75:70:6b:8b:8d:0b:89:4a:e8:3d:38:aa:e1: 4f:3e:5d:24:89:aa:ee:eb:14:3c:93:cf:6d:34:94: 47:51:e9:a5:3c:71:1e:67:6e:78:af:e0:cf:a9:52: 44:83:a9:57:ce:f5:6d:f6:5d:2b:18:7d:b9:91:7c: 55:91:ad:01:01:33:60:a2:ef:9d:aa:7a:32:9a:f4: d5:f5:91:24:f9:91:54:5e:5a:61:b5:d5:26:c3:e4: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:3B:1F:ED:B8:A2:08:E5:A1:F7:34:FD:11:9F:6A:7C:87:86:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl X509v3 Authority Key Identifier: keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer sbgp-ipAddrBlock: critical IPv4: 23.152.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3d:1f:f6:af:33:ab:19:91:a4:77:6e:93:1b:df:97:34:89: 1c:0c:f9:02:23:68:15:b5:ca:d1:fc:54:3b:fe:c9:08:ba:48: b2:ce:25:94:70:2e:3f:d4:4f:9f:e4:6c:c4:de:3a:d4:b2:90: e3:30:e7:75:d2:b7:cd:51:52:4e:4a:56:00:bc:44:1f:43:36: c0:c9:c5:91:87:ea:9c:0d:2c:b9:8e:37:13:c2:d8:13:30:59: e2:b6:5f:e0:69:85:6d:6a:bc:76:e7:96:21:f8:ed:6c:94:24: ad:f7:1a:0a:21:c2:c7:68:b7:57:ab:66:de:9c:8a:10:73:2d: 46:ec:e9:57:b5:d8:98:77:2f:20:24:cf:63:d0:28:7f:8d:8d: 82:00:be:21:82:4b:c8:c4:9a:c9:26:fd:6d:9c:e6:b1:2a:1e: 87:18:a9:bc:5e:34:39:11:9d:aa:81:14:cc:21:29:39:a8:3b: 8b:c6:1a:45:47:4c:ad:33:98:fe:b7:39:30:11:58:93:b9:12: 24:1d:aa:ba:52:fd:52:90:60:8c:f9:db:c0:3d:69:86:c1:b6: ea:7e:10:4b:06:61:da:84:b6:a3:39:09:c7:17:3a:99:b9:6e: 78:45:90:ce:2b:fa:6d:e5:f5:ab:ec:29:de:cc:c3:ae:57:ea: 44:78:ae:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssg37QMLpOaNJmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzgyNTIyMTQtODhhMy00ODA3LWJiZTItYjM0NGMzYmU3 ZjE5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTM4MmVjYjAtYzJjZC00NjQ2LThjYWQtMjg2NWE1NWJjMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArghh9wd5CPH4LfGNfDGhbnPQi/8nVwwiX7Z1 0sp5BVuK8d19OY6GwN72UdfVG+mlINQioSy7dSSY9da2lFWbt+rBlRM8y5RRJVUl q+d4H+Q9MiQwAmW29aaz9O+jRa+0SkvAwJgXfF3hd0jCRQa/l32qoL0tQR2+73NT 43vQWZ8H4DGvw3jX3da6eSChPy38HWaEkzLvfVznGk16tVyOHRLRqSHfaHVwa4uN C4lK6D04quFPPl0kiaru6xQ8k89tNJRHUemlPHEeZ254r+DPqVJEg6lXzvVt9l0r GH25kXxVka0BATNgou+dqnoymvTV9ZEk+ZFUXlphtdUmw+TEMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXLOx/tuKII5aH3NP0Rn2p8h4YpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1 MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0YzNiZTdmMTkvYTFiYzI2OWEtZTI2NS0z MjM0LWI2MjgtZTlkNzFiM2Q3MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzgyNTIyMTQtODhhMy00ODA3LWJi ZTItYjM0NGMzYmU3ZjE5L2M4MjUyMjE0LTg4YTMtNDgwNy1iYmUyLWIzNDRjM2Jl N2YxOS5jcmwwHwYDVR0jBBgwFoAUYlz5NoMoFKjjBEMWFfWE0PzWzxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0 YzNiZTdmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM9H/avM6sZkaR3bpMb35c0iRwM+QIjaBW1ytH8VDv+yQi6SLLOJZRw Lj/UT5/kbMTeOtSykOMw53XSt81RUk5KVgC8RB9DNsDJxZGH6pwNLLmONxPC2BMw WeK2X+BphW1qvHbnliH47WyUJK33Ggohwsdot1erZt6cihBzLUbs6Ve12Jh3LyAk z2PQKH+NjYIAviGCS8jEmskm/W2c5rEqHocYqbxeNDkRnaqBFMwhKTmoO4vGGkVH TK0zmP63OTARWJO5EiQdqrpS/VKQYIz528A9aYbBtup+EEsGYdqEtqM5CccXOpm5 bnhFkM4r+m3l9avsKd7Mw65X6kR4rqg= -----END CERTIFICATE-----Generated at Fri Apr 11 22:41:03 2025 by rpki-client