$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa File: fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (raw, json) Hash identifier: S3KIxJy894BwbKIuN4BBDLHy7XdmuNHAfqmRlc9DKLI= Subject key identifier: B0:EA:79:74:60:F6:BF:BE:E5:13:04:35:9C:38:37:0C:2C:7F:F8:D4 Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Certificate serial: 010D0C9F432858494CC94543FA2C0A6076F749C0 Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 198487 IP address blocks: 23.156.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:45:43:fa:2c:0a:60:76:f7:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=eaaaafab-f757-4527-bbea-a9eead5ec286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e0:2f:b8:52:23:84:7d:f6:0d:af:d3:27:fb: 6b:3d:29:43:0c:aa:e5:fa:16:31:14:50:c2:5b:a4: 6e:7a:d8:5a:b9:5c:bb:1f:ca:04:9c:bd:80:cb:e3: 42:7d:73:df:b0:50:ee:63:2e:4c:e7:2a:0b:06:c9: d3:ad:a5:c6:82:b1:c7:7b:e8:8f:72:ea:ee:d1:47: 70:38:12:f2:16:e4:71:77:da:3a:b2:8b:9a:2b:d4: cb:24:65:09:fa:b3:ac:cf:21:66:47:a4:bb:61:6a: ca:c3:07:72:2b:ce:97:af:9e:3a:f3:64:ca:42:f4: cf:90:c9:38:63:9f:cd:73:4c:d7:2f:cf:ae:bd:21: 3b:9b:e3:ed:e3:9e:56:0f:e0:f2:24:fa:2a:54:20: 29:8a:a6:83:3d:30:d0:8e:e8:7a:3c:2c:82:d8:02: 84:f8:58:e0:34:e3:db:35:d5:87:3f:52:d8:8e:f2: 6d:61:ce:ca:ef:4d:8a:c0:35:b4:35:70:24:f8:2a: 5e:7e:40:15:4a:95:d8:0a:ff:a6:71:3a:85:16:ee: 16:ad:02:2d:b6:77:7e:c8:32:68:6f:dd:1f:2f:09: 3a:80:39:62:ec:f7:62:f8:95:1d:14:42:3d:33:b5: 36:9e:38:02:88:48:fb:01:17:86:b9:be:fd:35:53: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EA:79:74:60:F6:BF:BE:E5:13:04:35:9C:38:37:0C:2C:7F:F8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl X509v3 Authority Key Identifier: keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer sbgp-ipAddrBlock: critical IPv4: 23.156.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3d:46:e6:05:1e:f3:25:23:79:75:06:79:c2:c1:6f:1a:b6: b0:6e:99:e1:c0:a6:54:2c:99:1a:96:bc:b0:f8:ad:4f:dd:ee: 1d:60:4c:33:a6:c2:99:bb:e2:6b:4c:cb:bb:9f:94:2d:ae:ad: 63:87:44:2d:1b:2b:b3:30:51:13:a3:fa:ac:60:6a:be:c3:87: e1:a6:bb:75:11:af:37:c6:9c:38:3d:98:2c:18:56:9b:3f:03: b6:9d:ad:fa:b3:a2:7d:a5:f8:2e:ca:c8:bb:4d:48:fe:47:2e: be:fd:44:86:cf:0b:ae:08:33:74:a5:c4:33:20:7d:ee:7c:3e: 72:d0:7a:7d:ac:2d:2a:24:a2:c0:23:5d:c0:cd:45:bb:be:cb: 15:92:ca:c1:22:dd:df:58:2b:69:04:0b:35:22:cf:47:e8:25: 59:01:08:79:a0:86:ab:61:35:4f:ca:b5:a1:86:f2:15:a2:80: 4f:38:56:88:a1:91:b5:1f:b4:25:d5:a3:e1:70:4d:9f:f2:6f: 42:fd:bc:c2:a2:1f:c9:9b:67:82:63:d7:11:c6:e3:63:d1:d6: 5e:7e:40:95:d8:de:d2:53:9a:4d:78:77:81:5a:a9:0b:41:6e: 92:e7:01:1b:34:07:e0:2c:94:55:4f:04:05:66:e4:81:c8:16: ad:0a:c8:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUVD+iwKYHb3ScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy ZmVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZWFhYWFmYWItZjc1Ny00NTI3LWJiZWEtYTllZWFkNWVjMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOAvuFIjhH32Da/TJ/trPSlDDKrl+hYxFFDC W6RuethauVy7H8oEnL2Ay+NCfXPfsFDuYy5M5yoLBsnTraXGgrHHe+iPcuru0Udw OBLyFuRxd9o6souaK9TLJGUJ+rOszyFmR6S7YWrKwwdyK86Xr54682TKQvTPkMk4 Y5/Nc0zXL8+uvSE7m+Pt455WD+DyJPoqVCApiqaDPTDQjuh6PCyC2AKE+FjgNOPb NdWHP1LYjvJtYc7K702KwDW0NXAk+CpefkAVSpXYCv+mcTqFFu4WrQIttnd+yDJo b90fLwk6gDli7Pdi+JUdFEI9M7U2njgCiEj7AReGub79NVOEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDqeXRg9r++5RMENZw4Nwwsf/jUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3 MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvZmRhODkyOWMtODg1My0z ZGViLTk5MzctNmFjMmE0ZDk3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0 ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1 MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA49RuYFHvMlI3l1BnnCwW8atrBumeHAplQsmRqWvLD4rU/d7h1gTDOm wpm74mtMy7uflC2urWOHRC0bK7MwUROj+qxgar7Dh+Gmu3URrzfGnDg9mCwYVps/ A7adrfqzon2l+C7KyLtNSP5HLr79RIbPC64IM3SlxDMgfe58PnLQen2sLSokosAj XcDNRbu+yxWSysEi3d9YK2kECzUiz0foJVkBCHmghqthNU/KtaGG8hWigE84Voih kbUftCXVo+FwTZ/yb0L9vMKiH8mbZ4Jj1xHG42PR1l5+QJXY3tJTmk14d4FaqQtB bpLnARs0B+AslFVPBAVm5IHIFq0KyOA= -----END CERTIFICATE-----Generated at Mon Apr 21 05:27:16 2025 by rpki-client