$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/17afa533-2905-3511-89f0-06eacaaa43d5.roa File: 17afa533-2905-3511-89f0-06eacaaa43d5.roa (raw, json) Hash identifier: 02W15FYelHFNN5Ht3mYtsJbFPOzbkvpdBjaof1jB1KI= Subject key identifier: 34:53:B1:3D:7C:7A:46:B5:46:99:3D:8F:CE:3B:59:5A:04:2C:2A:98 Certificate issuer: /CN=791130fd-44cf-4486-92b3-7838b38e49ea Certificate serial: 010D0C9F43285848F3B71633349FB575B7606180 Authority key identifier: F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/17afa533-2905-3511-89f0-06eacaaa43d5.roa Signing time: Fri 21 Feb 2025 03:17:13 +0000 ROA not before: Fri 21 Feb 2025 03:17:13 +0000 ROA not after: Thu 22 May 2025 02:17:13 +0000 asID: 397423 IP address blocks: 23.157.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:b7:16:33:34:9f:b5:75:b7:60:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=791130fd-44cf-4486-92b3-7838b38e49ea Validity Not Before: Feb 21 03:17:13 2025 GMT Not After : May 22 02:17:13 2025 GMT Subject: CN=4a1cd8c9-c378-410c-9474-66a78474c484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:d1:bd:b6:da:06:5f:d9:d0:10:a9:4f:57: c2:7e:6e:8a:d5:44:a6:5d:c4:19:2e:8b:f1:2e:18: 30:77:33:04:2e:62:6a:4a:48:20:76:2e:bb:a7:05: a5:a4:eb:56:dc:e0:6a:f2:74:9d:5d:f7:61:f6:8d: 79:66:0a:7f:e1:2c:f0:92:0c:2d:1a:f2:ee:a8:93: 3c:db:e9:e1:7b:44:5b:67:1d:d7:2a:65:99:92:6c: e3:59:cf:7e:53:0d:e9:2b:25:dc:9c:b0:9f:9a:68: 92:2c:23:40:43:27:ab:0f:18:b8:21:8a:17:7c:e1: 1e:f6:d4:0d:38:9d:f8:07:43:77:28:5b:8a:69:17: 98:ab:4a:03:51:aa:c1:f9:47:a7:ea:2e:38:6d:b7: 7d:50:0b:5e:f1:62:4b:18:89:8f:52:0d:ad:f3:1c: b9:f9:bf:e2:07:49:61:38:12:7e:70:ca:80:8f:09: 13:cc:77:a9:f7:e7:21:61:a4:64:35:ba:90:95:b7: d6:b1:a3:7c:c1:75:72:ec:e8:bd:20:90:6e:ac:4a: da:5f:48:2c:70:ac:eb:ca:40:a8:09:5a:c7:8e:8a: f5:16:ac:57:7d:79:e1:be:40:08:61:f9:98:d9:2f: 6b:53:2e:4d:b2:55:76:89:cb:0b:c7:59:08:b2:d1: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:53:B1:3D:7C:7A:46:B5:46:99:3D:8F:CE:3B:59:5A:04:2C:2A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/17afa533-2905-3511-89f0-06eacaaa43d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl X509v3 Authority Key Identifier: keyid:F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer sbgp-ipAddrBlock: critical IPv4: 23.157.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:37:41:62:4e:39:5f:ab:69:8c:53:26:25:bf:40:08:13:04: 61:bb:c6:85:2f:22:df:96:b5:98:a4:68:60:fc:46:04:f9:a8: d5:07:ca:8a:ca:dd:6c:fe:e3:60:8d:2e:c3:ec:e1:8c:21:cd: 3d:c5:99:73:66:f8:cc:09:67:41:4e:e5:99:5f:69:65:06:e0: 74:25:2b:15:79:46:98:76:01:4e:c5:48:a8:eb:95:83:27:5b: 22:54:6e:d2:90:29:ec:f1:1e:7c:5c:41:b5:a5:11:3d:43:40: ae:ba:28:4a:70:6d:e5:61:65:05:a6:93:be:b9:6c:e1:b8:0f: 17:10:0f:24:1e:f7:40:74:95:5e:9d:a7:99:68:70:9c:0d:3a: 23:12:45:5c:5b:d9:e8:4b:27:35:7e:2a:2f:f7:6d:61:7e:4b: 07:80:6c:f7:6a:e6:9a:39:b6:a3:87:15:5b:89:85:d0:09:92: c4:a3:4d:b5:d8:f6:d5:46:51:5c:09:5c:d1:ac:56:2e:3b:87: 50:d2:6d:01:0d:fe:b5:6d:6d:24:98:63:9a:6b:e9:62:84:49: 7f:1a:e4:98:d1:e3:82:5f:5a:e1:b5:52:56:e8:5a:a8:a0:d6: 78:4d:43:ac:81:00:6a:38:d8:25:09:71:fa:a3:cf:e8:2a:77: d7:b8:2d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjztxYzNJ+1dbdgYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkxMTMwZmQtNDRjZi00NDg2LTkyYjMtNzgzOGIzOGU0 OWVhMB4XDTI1MDIyMTAzMTcxM1oXDTI1MDUyMjAyMTcxM1owLzEtMCsGA1UEAxMk NGExY2Q4YzktYzM3OC00MTBjLTk0NzQtNjZhNzg0NzRjNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk3RvbbaBl/Z0BCpT1fCfm6K1USmXcQZLovx LhgwdzMELmJqSkggdi67pwWlpOtW3OBq8nSdXfdh9o15Zgp/4SzwkgwtGvLuqJM8 2+nhe0RbZx3XKmWZkmzjWc9+Uw3pKyXcnLCfmmiSLCNAQyerDxi4IYoXfOEe9tQN OJ34B0N3KFuKaReYq0oDUarB+Uen6i44bbd9UAte8WJLGImPUg2t8xy5+b/iB0lh OBJ+cMqAjwkTzHep9+chYaRkNbqQlbfWsaN8wXVy7Oi9IJBurEraX0gscKzrykCo CVrHjor1FqxXfXnhvkAIYfmY2S9rUy5NslV2icsLx1kIstFzgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRTsT18eka1Rpk9j847WVoELCqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OTEx MzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4YjM4ZTQ5ZWEvMTdhZmE1MzMtMjkwNS0z NTExLTg5ZjAtMDZlYWNhYWE0M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzkxMTMwZmQtNDRjZi00NDg2LTky YjMtNzgzOGIzOGU0OWVhLzc5MTEzMGZkLTQ0Y2YtNDQ4Ni05MmIzLTc4MzhiMzhl NDllYS5jcmwwHwYDVR0jBBgwFoAU9A8l1MS3LaNVjWYGlZ7x6c+YBM8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83OTExMzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4 YjM4ZTQ5ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQ3QWJOOV+raYxTJiW/QAgTBGG7xoUvIt+WtZikaGD8RgT5qNUHyorK 3Wz+42CNLsPs4YwhzT3FmXNm+MwJZ0FO5ZlfaWUG4HQlKxV5Rph2AU7FSKjrlYMn WyJUbtKQKezxHnxcQbWlET1DQK66KEpwbeVhZQWmk765bOG4DxcQDyQe90B0lV6d p5locJwNOiMSRVxb2ehLJzV+Ki/3bWF+SweAbPdq5po5tqOHFVuJhdAJksSjTbXY 9tVGUVwJXNGsVi47h1DSbQEN/rVtbSSYY5pr6WKESX8a5JjR44JfWuG1UlboWqig 1nhNQ6yBAGo42CUJcfqjz+gqd9e4Lc4= -----END CERTIFICATE-----Generated at Sun Apr 6 02:19:39 2025 by rpki-client