$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa File: 4cecb50a-dda5-3206-892f-841e1f8d6994.roa (raw, json) Hash identifier: R7Qoivy9dj9hJ4hA/IJFE1finzJ52jycmM6Mha0gbO4= Subject key identifier: C7:A0:73:18:18:BB:34:2D:A5:B3:3B:CD:0F:39:02:34:A8:EE:6C:AB Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F432858496CE45A35D2BEF373F4BDA0E0 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 23347 IP address blocks: 23.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5a:35:d2:be:f3:73:f4:bd:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=e3053245-eed0-420d-9b06-bd22ebde662f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:2a:56:5c:cd:33:fa:f0:93:ed:d1:79:b3: 76:ab:9e:3e:c7:70:93:44:1d:cc:84:95:3c:cb:ca: 3c:a6:6d:f9:50:82:64:91:fc:72:0c:5c:46:cd:1f: f4:0e:ef:9a:83:f0:72:b4:c7:99:8a:13:81:9a:11: dc:1c:63:85:cd:1a:82:ab:bc:f3:25:e8:87:1d:60: 35:df:60:3c:8c:fd:51:4f:b1:92:d2:f8:f5:6f:ed: 48:54:bb:24:ee:c9:03:eb:e1:55:d1:55:b6:f0:5c: 62:b5:21:ac:3f:36:3e:eb:55:d0:38:fa:29:b3:e4: 6e:1c:39:23:4c:4f:07:b9:36:0d:16:cd:cf:ec:f2: fc:9d:47:15:72:d3:20:33:31:7a:e8:b5:86:b4:df: bf:5a:5b:47:39:d5:cf:3b:98:31:2f:bf:0f:06:3a: d0:b5:f4:bb:9f:1f:23:67:83:3f:44:2a:c6:1e:a8: 26:3e:02:69:4b:c3:20:f1:fb:20:84:d7:4c:a1:4b: 1c:bc:9c:48:49:32:c3:c1:5a:9c:8f:78:9f:f1:b6: 38:3f:de:28:39:dc:3d:12:75:fe:fc:14:2e:a7:b5: 96:0d:a9:db:4d:2a:44:a5:62:ea:c0:71:13:ad:03: e1:56:9d:ed:6a:36:db:c2:60:ec:fd:ba:98:17:70: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A0:73:18:18:BB:34:2D:A5:B3:3B:CD:0F:39:02:34:A8:EE:6C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f2:ff:c0:54:e8:51:44:0e:f6:42:50:e9:92:ea:53:0f:e0: 54:58:ba:96:a7:0d:bf:4b:f2:94:cd:91:b1:55:2b:76:89:c0: f1:99:d4:04:a9:90:46:71:84:89:75:af:c3:3e:ff:bd:4e:18: c0:32:21:bd:97:b9:81:88:01:a6:46:39:2b:0a:80:72:15:d5: ee:ce:21:24:fb:6c:47:2a:b7:2f:ec:48:46:9f:d5:72:11:c8: 77:2e:3b:4a:7a:92:12:d1:0d:6e:58:6a:27:7a:6d:0c:02:8a: 11:f9:e9:10:5f:d1:11:3a:da:67:d5:4a:1d:54:99:d1:1f:5e: 57:8b:86:74:16:3c:f4:10:91:b6:05:c0:e0:7d:27:c9:ee:50: 07:87:fa:ae:65:a1:90:85:86:f9:ac:74:be:5a:79:e1:a9:21: 6b:6c:f0:87:5b:f9:84:87:dc:7a:83:e2:9d:9f:80:34:09:9a: df:63:a3:bc:2e:9b:c7:90:fc:f3:40:01:19:0c:bd:da:79:c0: 58:93:5f:d6:76:b3:d7:4e:8a:d7:e0:96:81:f1:80:60:01:4a: e6:72:de:92:de:ad:da:6a:ef:04:56:2d:cb:bb:ce:81:e8:37: a1:ad:8a:70:fc:6d:02:d9:11:cb:ec:68:a3:5c:61:d6:02:df: ee:17:c5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Fo10r7zc/S9oOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZTMwNTMyNDUtZWVkMC00MjBkLTliMDYtYmQyMmViZGU2NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLMqVlzNM/rwk+3RebN2q54+x3CTRB3MhJU8 y8o8pm35UIJkkfxyDFxGzR/0Du+ag/BytMeZihOBmhHcHGOFzRqCq7zzJeiHHWA1 32A8jP1RT7GS0vj1b+1IVLsk7skD6+FV0VW28FxitSGsPzY+61XQOPops+RuHDkj TE8HuTYNFs3P7PL8nUcVctMgMzF66LWGtN+/WltHOdXPO5gxL78PBjrQtfS7nx8j Z4M/RCrGHqgmPgJpS8Mg8fsghNdMoUscvJxISTLDwVqcj3if8bY4P94oOdw9EnX+ /BQup7WWDanbTSpEpWLqwHETrQPhVp3tajbbwmDs/bqYF3DwOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMegcxgYuzQtpbM7zQ85AjSo7myrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvNGNlY2I1MGEtZGRhNS0z MjA2LTg5MmYtODQxZTFmOGQ2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLy/8BU6FFEDvZCUOmS6lMP4FRYupanDb9L8pTNkbFVK3aJwPGZ1ASp kEZxhIl1r8M+/71OGMAyIb2XuYGIAaZGOSsKgHIV1e7OIST7bEcqty/sSEaf1XIR yHcuO0p6khLRDW5Yaid6bQwCihH56RBf0RE62mfVSh1UmdEfXleLhnQWPPQQkbYF wOB9J8nuUAeH+q5loZCFhvmsdL5aeeGpIWts8Idb+YSH3HqD4p2fgDQJmt9jo7wu m8eQ/PNAARkMvdp5wFiTX9Z2s9dOitfgloHxgGABSuZy3pLerdpq7wRWLcu7zoHo N6GtinD8bQLZEcvsaKNcYdYC3+4XxXE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:43 2025 by rpki-client