$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa File: fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (raw, json) Hash identifier: XS0+Pfm//3a/Ksbaz7TkKD0ZuKZkoEG+4s1pk2RiUpE= Subject key identifier: 28:5E:38:D3:6F:33:2E:4D:4E:D4:42:32:39:FF:D4:49:46:87:69:60 Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Certificate serial: 010D0C9F432858486D9051D1AE08B88963006540 Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 198487 IP address blocks: 23.156.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:51:d1:ae:08:b8:89:63:00:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=b4ef4362-fa9d-4fad-b537-5434f48249b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:23:7f:06:8e:75:dd:e7:d0:fa:0e:83:ab: 41:ed:58:78:4f:3c:cf:dd:72:b5:99:22:60:ca:3b: 90:84:ab:c2:ea:fc:d7:79:5b:9d:f7:20:56:8b:41: 93:bb:d6:b6:0e:00:03:5e:5d:e4:44:63:89:af:6d: c2:07:a2:39:97:ed:37:dc:7b:df:07:34:7a:83:6c: ed:df:f4:b5:ed:ff:02:06:ca:46:37:f3:d2:0a:e8: cc:37:22:e9:90:2d:e8:91:9f:20:d6:6c:2d:e4:b9: 4a:4a:c9:74:6a:91:db:ff:73:35:76:95:6e:5b:6c: f7:ac:38:97:a9:4e:a1:c5:06:92:34:63:e4:65:98: 4a:fd:6a:06:54:84:44:c7:60:34:fb:c8:e7:27:67: 82:13:93:77:24:c9:f9:81:0d:34:ce:c7:8d:78:c3: 66:5a:42:9d:fe:02:1d:22:fc:60:5b:15:f3:41:53: 98:a0:06:2a:43:ad:bb:fe:5f:49:47:b9:6b:f7:9c: 7e:0b:7e:b0:38:58:d7:60:0d:99:44:72:96:1e:21: 63:b8:1a:7e:5d:22:26:a7:3f:4d:af:dd:b0:76:96: fb:d5:ee:ac:f1:96:2d:0f:f4:3d:72:cc:2c:ce:6a: da:c8:94:9b:e3:78:9a:1e:d9:e0:44:d2:21:45:6a: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5E:38:D3:6F:33:2E:4D:4E:D4:42:32:39:FF:D4:49:46:87:69:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl X509v3 Authority Key Identifier: keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer sbgp-ipAddrBlock: critical IPv4: 23.156.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cb:fc:83:e6:cc:18:e2:1d:02:95:56:4f:d5:3e:8f:bb:02: e3:4a:5b:e8:6c:fb:71:df:8e:84:c6:a0:9d:52:47:b0:06:6e: af:0c:88:43:ce:e9:33:93:50:5f:0e:5b:4c:34:aa:e9:1d:26: 2c:d2:b8:16:91:70:59:5e:b9:f2:1f:52:ca:cd:51:ff:b4:18: 59:83:7c:25:0a:27:54:e4:f1:4b:91:dd:3b:8a:9f:73:18:36: 75:56:3c:ef:cc:99:77:aa:cd:14:cd:38:41:cc:00:26:20:31: b6:ef:0e:ae:6e:be:ba:ac:74:c4:cf:75:8c:ea:10:a0:39:11: 53:79:6b:ec:13:9a:d4:23:7b:72:05:6d:ab:4b:e9:68:1d:4a: 0f:e3:b5:70:20:05:53:28:78:41:f0:6d:97:e6:e6:8b:90:63: 73:cd:df:d8:bb:98:08:9f:5d:ed:51:a9:ff:b3:c4:26:c4:de: 7a:f6:ca:61:8a:4b:33:ba:da:f6:dd:da:4f:73:99:ae:8d:06: 96:05:23:bc:da:b1:b8:fd:2e:ea:a1:a1:a5:c1:e7:e0:e1:7c: ab:fb:30:f6:4e:4d:64:4e:8b:9d:ab:d1:94:5f:d1:ff:d8:74: c7:d2:68:57:79:f1:a6:57:71:f2:b3:26:f8:f7:6d:79:dd:e9: 01:76:86:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFHRrgi4iWMAZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy ZmVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk YjRlZjQzNjItZmE5ZC00ZmFkLWI1MzctNTQzNGY0ODI0OWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IkjfwaOdd3n0PoOg6tB7Vh4TzzP3XK1mSJg yjuQhKvC6vzXeVud9yBWi0GTu9a2DgADXl3kRGOJr23CB6I5l+033HvfBzR6g2zt 3/S17f8CBspGN/PSCujMNyLpkC3okZ8g1mwt5LlKSsl0apHb/3M1dpVuW2z3rDiX qU6hxQaSNGPkZZhK/WoGVIREx2A0+8jnJ2eCE5N3JMn5gQ00zseNeMNmWkKd/gId IvxgWxXzQVOYoAYqQ627/l9JR7lr95x+C36wOFjXYA2ZRHKWHiFjuBp+XSImpz9N r92wdpb71e6s8ZYtD/Q9cswszmrayJSb43iaHtngRNIhRWr5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCheONNvMy5NTtRCMjn/1ElGh2lgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3 MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvZmRhODkyOWMtODg1My0z ZGViLTk5MzctNmFjMmE0ZDk3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0 ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1 MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnL/IPmzBjiHQKVVk/VPo+7AuNKW+hs+3HfjoTGoJ1SR7AGbq8MiEPO 6TOTUF8OW0w0qukdJizSuBaRcFleufIfUsrNUf+0GFmDfCUKJ1Tk8UuR3TuKn3MY NnVWPO/MmXeqzRTNOEHMACYgMbbvDq5uvrqsdMTPdYzqEKA5EVN5a+wTmtQje3IF batL6WgdSg/jtXAgBVMoeEHwbZfm5ouQY3PN39i7mAifXe1Rqf+zxCbE3nr2ymGK SzO62vbd2k9zma6NBpYFI7zasbj9LuqhoaXB5+DhfKv7MPZOTWROi52r0ZRf0f/Y dMfSaFd58aZXcfKzJvj3bXnd6QF2hhU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:57 2025 by rpki-client