$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa File: c53925ff-d700-3546-9f23-98b9543e1426.roa (raw, json) Hash identifier: mplIfAg5RF1NikZ490XvsKczBTKIc1cxr4rlrXpD8JE= Subject key identifier: C8:89:8D:21:9F:47:FC:84:23:41:FE:E3:B4:41:FB:80:D5:33:85:B3 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F43285848909655B6B2A21ACB92F39780 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa Signing time: Thu 16 Jan 2025 15:06:12 +0000 ROA not before: Thu 16 Jan 2025 15:06:12 +0000 ROA not after: Wed 16 Apr 2025 14:06:12 +0000 asID: 398741 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:96:55:b6:b2:a2:1a:cb:92:f3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jan 16 15:06:12 2025 GMT Not After : Apr 16 14:06:12 2025 GMT Subject: CN=4ef87666-6577-4665-99e8-00e9485060c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:14:ee:09:36:0b:ed:0a:30:4a:51:87:24: e2:5a:58:a0:b1:f1:07:31:56:f5:18:36:aa:e4:6a: e9:f9:f8:a2:45:6e:f2:19:eb:a6:28:0f:db:1d:2d: c0:3a:ec:f0:f3:4b:53:8d:97:f4:ab:ac:4c:ee:bc: 59:1f:92:fc:c9:60:d5:bd:43:7f:7d:de:93:b8:14: 79:26:6e:50:1b:28:5c:49:9a:1d:90:62:00:63:fd: 96:ed:d5:dd:bd:3b:38:2b:3c:c5:97:30:2e:fb:59: 13:37:4a:91:96:47:5a:54:32:eb:6d:ec:03:81:7b: 8e:ed:a7:fd:bd:73:6e:52:54:a9:77:d6:6f:68:66: 7d:6d:ac:fc:fe:78:ba:b8:99:4e:67:f4:55:80:c2: 2b:93:f9:30:d9:2d:d7:af:83:df:be:d4:13:73:19: e0:0b:ec:8c:d2:22:a2:75:8f:0d:89:8d:37:6f:c4: ab:c3:17:0d:cb:e7:bb:5c:66:f0:da:90:00:1e:94: 1f:bb:58:72:41:78:b4:17:1b:4e:8d:41:1c:f9:ca: 20:a0:89:58:61:7a:9a:d6:55:43:ea:80:17:08:49: be:0d:3e:1f:f5:97:f5:4a:4b:45:60:40:74:03:f1: 56:73:4a:57:1a:eb:98:83:20:5a:6b:80:9d:7b:a9: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:89:8D:21:9F:47:FC:84:23:41:FE:E3:B4:41:FB:80:D5:33:85:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a1:6f:90:45:b3:45:cd:e4:7d:29:85:52:dc:c8:d7:3d:64: da:41:23:67:0c:7a:f2:b5:74:d7:81:23:40:f6:55:5f:66:12: 60:2c:ec:c8:8b:9e:b1:74:ee:a8:39:3c:be:54:dd:fb:40:c0: 21:21:21:69:08:df:c8:cc:1b:4e:51:5b:eb:75:53:5b:5a:f9: 45:1b:a8:e8:75:45:a7:60:f4:e5:2d:cf:43:28:c2:8d:cf:c6: 2a:99:42:05:67:bb:73:d9:f5:4c:b0:59:05:4e:23:11:75:50: de:08:99:8b:9d:8f:16:d6:e8:9c:dc:a0:5d:2d:f9:63:27:fb: cf:9c:16:c0:82:83:14:88:1f:dd:6b:1b:3b:44:fa:ba:29:b9: 73:e5:fe:98:f7:cf:51:de:fc:2b:53:49:eb:80:99:eb:1c:ce: 3d:ec:a2:5b:d2:6d:5a:c3:98:63:2a:8e:3f:2c:d9:c3:ff:06: c0:a2:ee:f6:44:0d:d4:29:3e:7e:eb:8a:43:ae:3c:ab:ac:ea: 25:bd:01:35:ee:3d:87:a6:f2:f7:b3:6e:b5:77:79:70:e9:be: 6c:50:04:1a:eb:ca:d6:c0:04:4c:2e:de:80:29:8b:e8:56:a3: b9:9b:6c:2f:a2:75:e4:0e:3d:ee:9d:7f:f2:6c:3b:0f:76:a8: 0f:d0:6f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQllW2sqIay5Lzl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDExNjE1MDYxMloXDTI1MDQxNjE0MDYxMlowLzEtMCsGA1UEAxMk NGVmODc2NjYtNjU3Ny00NjY1LTk5ZTgtMDBlOTQ4NTA2MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYAU7gk2C+0KMEpRhyTiWligsfEHMVb1GDaq 5Grp+fiiRW7yGeumKA/bHS3AOuzw80tTjZf0q6xM7rxZH5L8yWDVvUN/fd6TuBR5 Jm5QGyhcSZodkGIAY/2W7dXdvTs4KzzFlzAu+1kTN0qRlkdaVDLrbewDgXuO7af9 vXNuUlSpd9ZvaGZ9baz8/ni6uJlOZ/RVgMIrk/kw2S3Xr4PfvtQTcxngC+yM0iKi dY8NiY03b8SrwxcNy+e7XGbw2pAAHpQfu1hyQXi0FxtOjUEc+cogoIlYYXqa1lVD 6oAXCEm+DT4f9Zf1SktFYEB0A/FWc0pXGuuYgyBaa4Cde6m5hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiJjSGfR/yEI0H+47RB+4DVM4WzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvYzUzOTI1ZmYtZDcwMC0z NTQ2LTlmMjMtOThiOTU0M2UxNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGhb5BFs0XN5H0phVLcyNc9ZNpBI2cMevK1dNeBI0D2VV9mEmAs7MiL nrF07qg5PL5U3ftAwCEhIWkI38jMG05RW+t1U1ta+UUbqOh1Radg9OUtz0Mowo3P xiqZQgVnu3PZ9UywWQVOIxF1UN4ImYudjxbW6JzcoF0t+WMn+8+cFsCCgxSIH91r GztE+ropuXPl/pj3z1He/CtTSeuAmesczj3solvSbVrDmGMqjj8s2cP/BsCi7vZE DdQpPn7rikOuPKus6iW9ATXuPYem8vezbrV3eXDpvmxQBBrrytbABEwu3oApi+hW o7mbbC+ideQOPe6df/JsOw92qA/Qb6U= -----END CERTIFICATE-----Generated at Wed Feb 19 20:45:47 2025 by rpki-client