$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa File: 8160f0e3-2d6f-3b91-9726-f47e80235128.roa (raw, json) Hash identifier: mDgZ6e5CX2JRn6RBlGbBGUhi4gnrhP71RHn4h6yXiYI= Subject key identifier: 01:20:2F:03:89:19:96:B4:36:96:67:F8:2B:CE:D2:5D:62:63:7E:2D Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Certificate serial: 010D0C9F43285848D0ABB5CBF284F1EF80EFDB00 Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 133199 IP address blocks: 23.156.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b5:cb:f2:84:f1:ef:80:ef:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=58f0a578-112f-44ab-b9d6-8bacdef119fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:80:e0:2a:6a:4f:c8:d8:17:7e:1f:ff:34: f9:e4:ac:16:3a:69:f2:b4:52:64:db:48:e8:12:f0: b7:9e:12:44:c4:e9:f6:51:ef:1b:74:2a:81:56:4d: 6f:83:02:32:7a:83:b8:92:9a:00:4a:ff:bb:04:ce: 15:cc:67:64:08:68:11:da:33:5b:8d:50:27:10:04: 28:19:d5:29:6f:02:b1:46:e1:ff:fb:62:41:13:47: b1:7b:d1:75:ab:9c:42:4a:d3:b2:a4:73:27:3e:be: 25:13:e1:f5:a2:be:b7:11:c5:0a:8e:d9:8f:b2:37: b8:4e:61:4b:50:28:77:14:1d:55:b6:09:2f:8c:cc: a7:79:bf:a8:8f:1b:7a:63:03:a4:d7:d8:64:c4:cb: 36:a0:ff:92:5d:76:3b:54:6f:37:91:2f:25:05:22: c9:78:25:14:85:d8:82:b1:fb:c5:28:b1:61:c4:95: 5b:9d:24:f1:2b:93:db:f7:02:1c:ad:d4:0a:e3:34: 42:42:a6:67:2b:58:be:f1:22:7b:91:5e:65:fb:0b: 21:68:4a:3f:b8:30:1f:4c:62:f3:78:c3:d6:f1:88: 97:26:d6:54:e2:c1:3d:dc:8a:81:ed:73:bb:28:0a: 46:17:5b:ff:9e:e0:31:09:64:d7:9c:7a:ac:4b:67: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:20:2F:03:89:19:96:B4:36:96:67:F8:2B:CE:D2:5D:62:63:7E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl X509v3 Authority Key Identifier: keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer sbgp-ipAddrBlock: critical IPv4: 23.156.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b1:38:60:c2:7c:d9:a6:21:85:e4:a6:8e:fd:76:19:3f:02: 62:f3:41:69:5f:43:90:41:dd:3b:57:45:c1:fc:3b:14:e9:96: 5e:54:eb:08:5c:2d:2d:08:eb:6b:52:1d:75:24:82:68:e6:c8: 9b:b6:22:8b:ec:85:ec:21:d8:29:fc:e3:80:4e:83:09:55:08: 73:de:c0:b8:e9:3b:64:18:a4:ba:62:73:56:05:d6:8f:da:33: 3b:7e:a2:db:cf:60:18:02:bc:8f:c1:92:47:c7:16:cd:4b:8d: da:63:b9:c0:3c:5e:c9:8e:6d:45:a5:ed:39:b8:d1:22:05:d3: 9c:53:97:58:43:4f:a8:b7:8b:3e:6a:45:03:b1:8c:64:0e:a8: 68:ca:26:bf:e0:90:fe:60:31:99:63:fb:04:ac:89:eb:57:d2: 58:56:d0:a1:82:b2:86:cd:5b:11:21:b6:f9:1d:fd:dd:6d:2e: b2:db:dc:67:a4:a2:30:34:14:40:47:8e:59:c7:59:b7:99:4c: ca:da:0f:e0:5f:36:8f:e0:5c:93:e4:82:8b:71:2a:e6:5b:9c: 6e:89:56:b3:86:a3:5a:13:c0:9a:33:1e:8c:0f:67:ce:42:aa: f5:10:d3:6d:da:28:7e:44:b2:ab:e2:e8:cc:36:64:3f:a6:08: 0c:37:fa:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7XL8oTx74Dv2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy ZmVhMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NThmMGE1NzgtMTEyZi00NGFiLWI5ZDYtOGJhY2RlZjExOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3qA4CpqT8jYF34f/zT55KwWOmnytFJk20jo EvC3nhJExOn2Ue8bdCqBVk1vgwIyeoO4kpoASv+7BM4VzGdkCGgR2jNbjVAnEAQo GdUpbwKxRuH/+2JBE0exe9F1q5xCStOypHMnPr4lE+H1or63EcUKjtmPsje4TmFL UCh3FB1VtgkvjMyneb+ojxt6YwOk19hkxMs2oP+SXXY7VG83kS8lBSLJeCUUhdiC sfvFKLFhxJVbnSTxK5Pb9wIcrdQK4zRCQqZnK1i+8SJ7kV5l+wshaEo/uDAfTGLz eMPW8YiXJtZU4sE93IqB7XO7KApGF1v/nuAxCWTXnHqsS2f/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEgLwOJGZa0NpZn+CvO0l1iY34tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3 MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvODE2MGYwZTMtMmQ2Zi0z YjkxLTk3MjYtZjQ3ZTgwMjM1MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0 ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1 MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmxOGDCfNmmIYXkpo79dhk/AmLzQWlfQ5BB3TtXRcH8OxTpll5U6whc LS0I62tSHXUkgmjmyJu2Iovshewh2Cn844BOgwlVCHPewLjpO2QYpLpic1YF1o/a Mzt+otvPYBgCvI/BkkfHFs1LjdpjucA8XsmObUWl7Tm40SIF05xTl1hDT6i3iz5q RQOxjGQOqGjKJr/gkP5gMZlj+wSsietX0lhW0KGCsobNWxEhtvkd/d1tLrLb3Gek ojA0FEBHjlnHWbeZTMraD+BfNo/gXJPkgotxKuZbnG6JVrOGo1oTwJozHowPZ85C qvUQ023aKH5Esqvi6Mw2ZD+mCAw3+hA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:29 2025 by rpki-client