$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa File: 4701df24-d7bf-33a8-aa62-b91271027365.roa (raw, json) Hash identifier: h9kIZwOlKpMMaqO7ayGhlrpk7V6bgSgKbBb8uWXD9hE= Subject key identifier: 15:66:B0:14:1B:CC:2E:E3:99:2C:8A:72:D7:15:0B:97:8B:81:96:86 Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F432858492939D2894B499B7B9FF01980 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa Signing time: Wed 12 Mar 2025 07:18:28 +0000 ROA not before: Wed 12 Mar 2025 07:18:28 +0000 ROA not after: Tue 10 Jun 2025 07:18:28 +0000 asID: 57974 IP address blocks: 23.153.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:39:d2:89:4b:49:9b:7b:9f:f0:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: Mar 12 07:18:28 2025 GMT Not After : Jun 10 07:18:28 2025 GMT Subject: CN=3953c031-5a91-4d78-8614-d614d61654ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:ad:55:dd:0b:d7:d4:a1:dc:35:cd:8e:c7: ce:8f:f5:f2:fb:68:75:4b:2e:7d:bd:78:52:1f:21: d0:1b:53:30:4f:bb:f7:69:79:4e:fd:df:f8:53:02: a2:7e:99:96:1c:4d:18:b9:7e:76:f6:d3:a2:4e:02: cc:17:f0:c3:28:f0:55:d9:a5:f0:28:3a:68:86:14: 83:54:30:2d:99:a2:ea:1c:b3:05:68:75:60:3f:74: 2b:c0:d9:77:8c:99:63:f3:a8:ad:a7:27:8a:34:dc: 1c:7a:a9:13:ac:57:db:2b:77:f7:a7:cb:81:36:9c: 4a:1f:fc:41:9f:b7:03:6d:97:89:03:cb:4e:70:4a: 96:f9:cd:8b:0c:c8:04:d9:aa:70:47:21:66:ae:99: 4c:73:67:8b:3a:49:4c:ae:1b:0d:1f:52:d2:db:c7: de:33:ce:d4:ac:e3:2a:81:40:2b:34:bc:8f:10:b1: e3:53:f8:c0:d2:12:65:de:8d:69:80:9f:2e:d9:2a: b5:1c:27:2b:d8:6e:a5:fa:bf:3b:06:61:9f:e4:7b: 46:7d:51:f7:fa:d9:f0:2e:95:1e:d3:28:4f:b8:f3: 31:d4:d2:6e:a4:a7:4a:92:4e:f8:f0:91:02:39:e2: f5:47:ea:9f:0f:5a:b8:20:64:e6:21:32:18:3d:ce: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:66:B0:14:1B:CC:2E:E3:99:2C:8A:72:D7:15:0B:97:8B:81:96:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv4: 23.153.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:15:72:56:72:8f:36:3a:ed:e9:ef:b4:cf:7a:f2:7c:f2:01: 65:e0:b0:bf:31:3e:20:5a:30:db:89:31:fa:e7:2d:a3:f1:6b: c9:5b:82:fe:04:2c:54:35:73:e3:dd:c8:be:36:05:b7:99:9d: a4:05:c6:6f:c8:36:a3:06:31:2d:e1:af:f3:0d:f3:d3:0c:e6: 9e:81:a3:7b:33:88:a0:f6:bf:eb:a9:92:6f:f0:05:69:17:03: 80:61:60:a2:5b:f0:3a:5e:33:54:4b:10:6a:1b:5a:8e:24:61: 65:a0:c0:4e:6d:2b:5c:37:55:4b:b9:ae:df:b3:1f:19:36:34: 30:22:64:c4:87:4b:02:fc:d3:66:a0:c4:00:84:ac:9a:d7:ed: ca:8f:26:0b:3c:9a:a9:b8:4f:69:8c:1a:df:6e:13:8b:5f:14: cb:89:e3:c9:90:b0:89:db:c7:e3:24:d4:4a:7f:1e:51:8b:e7: be:c8:d3:3b:f1:e9:9b:f9:d1:80:59:da:68:3f:a0:8f:d9:fb: 37:a6:14:f3:3c:78:1b:80:2e:46:a7:11:40:82:68:84:29:5e: 48:66:36:9b:a7:d4:ad:89:ea:99:04:16:1c:18:b4:e3:aa:43: 45:e0:81:9d:e5:2c:72:e3:fe:2f:99:87:da:7a:71:fd:73:10: 25:3a:a5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkpOdKJS0mbe5/wGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI1MDMxMjA3MTgyOFoXDTI1MDYxMDA3MTgyOFowLzEtMCsGA1UEAxMk Mzk1M2MwMzEtNWE5MS00ZDc4LTg2MTQtZDYxNGQ2MTY1NGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2KtVd0L19Sh3DXNjsfOj/Xy+2h1Sy59vXhS HyHQG1MwT7v3aXlO/d/4UwKifpmWHE0YuX529tOiTgLMF/DDKPBV2aXwKDpohhSD VDAtmaLqHLMFaHVgP3QrwNl3jJlj86itpyeKNNwceqkTrFfbK3f3p8uBNpxKH/xB n7cDbZeJA8tOcEqW+c2LDMgE2apwRyFmrplMc2eLOklMrhsNH1LS28feM87UrOMq gUArNLyPELHjU/jA0hJl3o1pgJ8u2Sq1HCcr2G6l+r87BmGf5HtGfVH3+tnwLpUe 0yhPuPMx1NJupKdKkk748JECOeL1R+qfD1q4IGTmITIYPc52AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVmsBQbzC7jmSyKctcVC5eLgZaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNDcwMWRmMjQtZDdiZi0z M2E4LWFhNjItYjkxMjcxMDI3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcVclZyjzY67envtM968nzyAWXgsL8xPiBaMNuJMfrnLaPxa8lbgv4E LFQ1c+PdyL42BbeZnaQFxm/INqMGMS3hr/MN89MM5p6Bo3sziKD2v+upkm/wBWkX A4BhYKJb8DpeM1RLEGobWo4kYWWgwE5tK1w3VUu5rt+zHxk2NDAiZMSHSwL802ag xACErJrX7cqPJgs8mqm4T2mMGt9uE4tfFMuJ48mQsInbx+Mk1Ep/HlGL577I0zvx 6Zv50YBZ2mg/oI/Z+zemFPM8eBuALkanEUCCaIQpXkhmNpun1K2J6pkEFhwYtOOq Q0XggZ3lLHLj/i+Zh9p6cf1zECU6pVk= -----END CERTIFICATE-----Generated at Thu Mar 13 07:09:38 2025 by rpki-client