$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa File: baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa (raw, json) Hash identifier: WLmi+3Xwewnag5QpypITHQ+3vgltW3HSVQ/sO1LyWkE= Subject key identifier: B6:1D:83:AB:60:41:A1:81:AC:E3:E9:73:1C:A3:63:30:76:1A:BC:A3 Certificate issuer: /CN=2db54220-b640-4de5-bf21-207b4ffc20dd Certificate serial: 010D0C9F432858494CC94533BE3D35A2026E6B00 Authority key identifier: E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 198487 IP address blocks: 23.155.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:45:33:be:3d:35:a2:02:6e:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db54220-b640-4de5-bf21-207b4ffc20dd Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=e84c6fc5-49dd-4275-b17f-8b30e709c9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:b9:a1:7c:95:6e:23:22:e3:5a:7e:b6:0c: bf:84:06:85:54:91:c5:60:ea:ff:ad:1c:fa:0b:7b: 6d:ea:20:63:49:77:5c:29:46:66:49:c0:1f:9b:0e: e3:f5:9c:5d:72:97:b9:c9:bf:3e:dc:37:82:9e:7e: 73:47:34:7a:a6:80:c7:b6:d0:cd:ef:43:02:c7:f8: 02:11:fa:8c:54:9b:4b:83:c8:83:57:a6:4b:3e:ca: da:06:7c:08:8f:92:e2:b9:63:75:17:0f:6b:5c:71: 3d:d1:bd:25:8c:ef:63:aa:4e:31:33:dd:14:f3:8f: 6d:13:35:f2:a8:06:f3:b5:a5:10:f8:df:5d:75:11: 6b:f3:2e:01:be:15:be:f9:7a:b9:da:de:3a:6f:7f: b1:26:27:d0:7d:73:8a:a6:95:6a:6f:19:10:f2:2f: f2:2d:df:79:a9:fb:ad:99:7e:e0:6f:bd:f6:70:fe: fa:a8:1d:0e:e2:65:ed:b0:53:57:3f:ef:48:5f:63: 3a:63:77:e5:ef:d1:87:a2:53:e0:8f:8a:ef:90:82: 18:98:e4:fd:a9:be:35:13:65:fc:94:45:d2:c4:73: 73:5a:1b:85:5f:42:a5:cc:66:fb:88:5c:25:34:aa: e3:49:96:aa:9c:04:a8:13:1e:3d:08:87:b3:d9:bf: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:83:AB:60:41:A1:81:AC:E3:E9:73:1C:A3:63:30:76:1A:BC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl X509v3 Authority Key Identifier: keyid:E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer sbgp-ipAddrBlock: critical IPv4: 23.155.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:92:38:57:a5:1c:55:db:43:af:62:46:c6:ce:de:16:38:21: ba:e4:16:7a:b9:4a:0b:af:4b:b4:b0:f4:78:9a:3d:1e:ca:21: a2:6c:ea:56:10:83:18:40:63:b5:28:8c:69:b2:7f:96:78:5d: 53:04:96:98:d8:00:ec:46:5b:4b:89:4e:66:76:4c:a1:e3:31: ba:76:f4:8d:2d:51:03:86:f0:e3:46:a8:a6:79:4a:c0:a5:0d: de:ed:c0:ef:62:23:5d:ad:41:58:0c:0f:b4:45:dc:4c:e8:69: 26:08:ee:d3:27:da:17:4f:44:33:45:16:42:fe:52:1f:3e:c1: b2:48:e2:99:f1:f2:48:f2:2e:98:32:8a:b2:25:c2:18:75:a0: b9:e7:44:b0:f9:8b:d3:95:90:e1:14:ac:ef:8a:a2:23:dd:25: 54:c7:35:38:22:f0:92:9c:14:b7:21:6c:a3:54:9a:19:9f:86: 74:d8:56:6b:bb:4e:2c:9a:ef:20:d8:ff:a0:90:ed:c1:37:8e: b4:4f:91:4f:da:f1:98:38:a6:e8:f8:96:84:c4:c4:28:f0:b5: 46:f7:4a:84:21:1f:74:a3:10:be:31:ca:3d:b3:b5:61:c9:52: 5e:57:93:04:e5:9d:43:e3:d5:58:1f:a0:a8:e5:7f:55:50:63: 5a:2a:39:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUUzvj01ogJuawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiNTQyMjAtYjY0MC00ZGU1LWJmMjEtMjA3YjRmZmMy MGRkMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZTg0YzZmYzUtNDlkZC00Mjc1LWIxN2YtOGIzMGU3MDljOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9y5oXyVbiMi41p+tgy/hAaFVJHFYOr/rRz6 C3tt6iBjSXdcKUZmScAfmw7j9Zxdcpe5yb8+3DeCnn5zRzR6poDHttDN70MCx/gC EfqMVJtLg8iDV6ZLPsraBnwIj5LiuWN1Fw9rXHE90b0ljO9jqk4xM90U849tEzXy qAbztaUQ+N9ddRFr8y4BvhW++Xq52t46b3+xJifQfXOKppVqbxkQ8i/yLd95qfut mX7gb732cP76qB0O4mXtsFNXP+9IX2M6Y3fl79GHolPgj4rvkIIYmOT9qb41E2X8 lEXSxHNzWhuFX0KlzGb7iFwlNKrjSZaqnASoEx49CIez2b+NnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYdg6tgQaGBrOPpcxyjYzB2GryjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1 NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdiNGZmYzIwZGQvYmFhNzA5ODgtN2I1Yy0z NDllLWIxZWUtMjNlMzRkNGM5ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmRiNTQyMjAtYjY0MC00ZGU1LWJm MjEtMjA3YjRmZmMyMGRkLzJkYjU0MjIwLWI2NDAtNGRlNS1iZjIxLTIwN2I0ZmZj MjBkZC5jcmwwHwYDVR0jBBgwFoAU5OOExvrEER43L/Otj/vGu5diA5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdi NGZmYzIwZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6SOFelHFXbQ69iRsbO3hY4IbrkFnq5SguvS7Sw9HiaPR7KIaJs6lYQ gxhAY7UojGmyf5Z4XVMElpjYAOxGW0uJTmZ2TKHjMbp29I0tUQOG8ONGqKZ5SsCl Dd7twO9iI12tQVgMD7RF3EzoaSYI7tMn2hdPRDNFFkL+Uh8+wbJI4pnx8kjyLpgy irIlwhh1oLnnRLD5i9OVkOEUrO+KoiPdJVTHNTgi8JKcFLchbKNUmhmfhnTYVmu7 Tiya7yDY/6CQ7cE3jrRPkU/a8Zg4puj4loTExCjwtUb3SoQhH3SjEL4xyj2ztWHJ Ul5XkwTlnUPj1VgfoKjlf1VQY1oqOZw= -----END CERTIFICATE-----Generated at Sat Apr 12 01:43:30 2025 by rpki-client