$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa File: df871159-6ea6-31a7-9d8c-875a3108e463.roa (raw, json) Hash identifier: 4MyotSdkPN4lnGeMCLIcGb98gyFDUods/aHQk2B+TX0= Subject key identifier: A6:73:6D:A4:88:E9:9C:41:CD:55:5F:01:51:09:B3:CC:CC:40:8E:1C Certificate issuer: /CN=9725766d-5d42-4fa1-a253-80bd88dabc8d Certificate serial: 010D0C9F43285848A13615F4A6034EE1B9330380 Authority key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 25942 IP address blocks: 23.156.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:15:f4:a6:03:4e:e1:b9:33:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=c7ab92af-8716-4f08-a73a-737e83484aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5c:fb:94:6d:66:99:5c:2b:91:10:c0:a9:19: f4:ea:e1:ae:42:07:7b:81:65:92:02:e2:9a:45:6f: 54:65:46:9f:93:6e:1b:2f:58:29:d8:c8:9e:12:f3: f5:95:9f:53:08:28:93:8a:18:70:cd:c8:85:7c:4f: f3:51:11:21:86:7a:e2:ae:e1:f5:5f:35:1f:9d:ac: 71:f2:e5:c5:9a:12:61:2b:42:07:4e:80:76:f3:31: 1d:dc:25:d9:31:3a:e1:36:59:7c:8f:9f:17:de:0a: 54:a3:65:2d:d1:14:cc:a6:c4:fc:90:26:37:ae:cc: 8a:f6:d2:9a:5f:07:05:3d:02:8e:05:a5:4b:74:86: e7:28:55:b2:f3:a8:93:53:80:7e:62:0e:2b:91:e6: 67:bd:a4:9d:21:6b:0c:13:f3:e2:65:28:f9:d4:8b: 6e:ab:f5:7a:d6:d6:3e:1c:b5:9a:38:c0:1d:e0:00: 3d:23:0a:ed:7f:c3:6c:5c:59:ec:b6:93:fd:1e:ab: 18:47:d4:f0:19:a5:92:ea:2c:00:53:72:82:87:bf: f3:43:ab:51:4f:55:62:80:87:f3:90:03:69:9b:1c: 37:10:df:3f:83:f3:8c:4d:de:93:f1:16:ab:74:c2: d1:87:85:e6:ea:a2:f2:55:b6:3f:19:61:b6:26:90: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:73:6D:A4:88:E9:9C:41:CD:55:5F:01:51:09:B3:CC:CC:40:8E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl X509v3 Authority Key Identifier: keyid:E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer sbgp-ipAddrBlock: critical IPv4: 23.156.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:07:58:b9:76:eb:ae:44:22:3d:33:17:46:f5:45:a4:88:9a: 2e:a2:13:f4:99:87:e0:97:f7:17:f6:26:b4:67:83:fc:85:12: cd:34:4b:36:0f:bc:9e:a9:77:38:9a:87:72:11:45:aa:b5:4d: cd:12:53:b8:fc:51:19:fd:64:2a:44:8a:d3:bb:f7:3a:5a:27: 49:ec:f5:1b:8a:d3:3a:0d:71:08:95:65:a7:a2:f5:a0:68:30: e0:9d:f4:13:8b:5a:76:94:7d:01:64:4e:22:d5:5c:18:a4:11: 41:06:58:8c:f9:09:44:16:4c:f5:ef:d4:af:a4:be:64:8a:04: f8:9f:4c:bd:91:d5:61:ca:12:e9:08:90:39:27:6e:85:f2:3b: d2:19:f5:ed:1e:4c:fc:a5:d4:35:f8:26:27:02:ea:94:75:70: 62:8d:dc:dc:02:0a:71:80:23:c3:b1:3f:8b:00:2f:1a:7f:86: 53:dd:ec:fb:90:7b:1e:18:27:ec:c6:34:aa:3c:d0:35:7f:70: c0:1f:1c:de:2d:a6:f8:52:ed:d9:5b:29:d2:27:37:d2:28:c3: 20:06:8d:7b:9a:29:10:13:8e:b4:64:7f:80:06:2b:76:77:f0: 27:2e:42:d6:0b:38:b0:d5:7b:fb:4e:5c:46:99:76:87:43:da: 37:c0:7d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhX0pgNO4bkzA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcyNTc2NmQtNWQ0Mi00ZmExLWEyNTMtODBiZDg4ZGFi YzhkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YzdhYjkyYWYtODcxNi00ZjA4LWE3M2EtNzM3ZTgzNDg0YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1z7lG1mmVwrkRDAqRn06uGuQgd7gWWSAuKa RW9UZUafk24bL1gp2MieEvP1lZ9TCCiTihhwzciFfE/zUREhhnriruH1XzUfnaxx 8uXFmhJhK0IHToB28zEd3CXZMTrhNll8j58X3gpUo2Ut0RTMpsT8kCY3rsyK9tKa XwcFPQKOBaVLdIbnKFWy86iTU4B+Yg4rkeZnvaSdIWsME/PiZSj51Ituq/V61tY+ HLWaOMAd4AA9Iwrtf8NsXFnstpP9HqsYR9TwGaWS6iwAU3KCh7/zQ6tRT1VigIfz kANpmxw3EN8/g/OMTd6T8RardMLRh4Xm6qLyVbY/GWG2JpApywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZzbaSI6ZxBzVVfAVEJs8zMQI4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1 NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJkODhkYWJjOGQvZGY4NzExNTktNmVhNi0z MWE3LTlkOGMtODc1YTMxMDhlNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTcyNTc2NmQtNWQ0Mi00ZmExLWEy NTMtODBiZDg4ZGFiYzhkLzk3MjU3NjZkLTVkNDItNGZhMS1hMjUzLTgwYmQ4OGRh YmM4ZC5jcmwwHwYDVR0jBBgwFoAU4V2JhHBvD8fCC3IWTsDbmgxg5RUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJk ODhkYWJjOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQHWLl2665EIj0zF0b1RaSImi6iE/SZh+CX9xf2JrRng/yFEs00SzYP vJ6pdziah3IRRaq1Tc0SU7j8URn9ZCpEitO79zpaJ0ns9RuK0zoNcQiVZaei9aBo MOCd9BOLWnaUfQFkTiLVXBikEUEGWIz5CUQWTPXv1K+kvmSKBPifTL2R1WHKEukI kDknboXyO9IZ9e0eTPyl1DX4JicC6pR1cGKN3NwCCnGAI8OxP4sALxp/hlPd7PuQ ex4YJ+zGNKo80DV/cMAfHN4tpvhS7dlbKdInN9IowyAGjXuaKRATjrRkf4AGK3Z3 8CcuQtYLOLDVe/tOXEaZdodD2jfAfbM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:42 2025 by rpki-client