$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa File: ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa (raw, json) Hash identifier: CU2bAe21XSHRfpUuFGrky5/4c6VxYHQ7LcxN9CE4Vz0= Subject key identifier: 31:0A:EB:20:72:8C:20:7E:FF:F1:DD:0C:45:15:7B:A3:C8:89:A8:8E Certificate issuer: /CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5 Certificate serial: 010D0C9F43285848B78B84F7BC514D2D9483CE80 Authority key identifier: A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 32797 IP address blocks: 23.156.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:84:f7:bc:51:4d:2d:94:83:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=deb56166-81c3-4f6b-99e4-82a68f139e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:57:f2:04:8a:73:5b:0c:06:47:a4:c4:dc: a4:69:88:fd:c1:3b:ca:e9:11:8f:5c:df:09:ad:74: 88:75:30:1f:50:91:f0:58:5d:82:5d:a8:a1:d9:aa: 9b:77:dd:1e:63:ec:fc:e1:51:bd:a2:fe:d8:03:c4: 04:81:70:aa:b1:cd:6f:0d:04:88:32:a9:da:d5:4c: 98:d6:4f:f2:32:7b:62:44:c4:69:07:5f:ef:d1:2b: 24:9d:75:29:79:d3:ea:4b:ef:bd:59:a3:67:4e:f2: 1e:ec:27:94:81:7a:28:e6:48:07:5a:9e:85:23:fc: 85:5e:aa:07:1d:38:6d:d4:cb:64:0e:50:97:68:10: 52:93:a1:0a:3e:da:b1:8f:5f:11:c5:df:ee:2a:46: bc:9f:df:39:8a:5c:b2:bc:54:65:39:c6:ab:f2:05: 69:65:95:04:06:82:60:53:93:24:13:9c:dc:d8:e7: f4:ea:df:b9:05:f2:ec:ba:4a:91:74:59:8f:2a:51: 25:34:d5:e7:2b:1b:78:4d:b8:bc:59:8d:59:c9:8b: 19:05:77:c6:82:d2:c9:cb:3a:a5:bf:31:ea:de:76: 69:12:06:3d:9d:2b:6c:02:4e:37:11:08:9e:56:83: 18:65:8b:40:63:41:3e:33:e6:98:9d:f0:73:8c:25: 63:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:EB:20:72:8C:20:7E:FF:F1:DD:0C:45:15:7B:A3:C8:89:A8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl X509v3 Authority Key Identifier: keyid:A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer sbgp-ipAddrBlock: critical IPv4: 23.156.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1c:e9:52:4c:38:e6:b1:ec:5b:b7:91:3c:c0:c5:ec:d8:84: 3d:33:2f:13:a9:47:1e:90:8d:20:b9:21:3b:d9:c8:b4:2d:51: 71:c1:ce:17:1b:31:2d:27:c3:b1:16:5e:d6:d6:4e:ff:f8:d2: 8b:e9:d2:bf:6d:a9:ec:b5:63:d7:5d:ac:4a:ce:09:a6:c5:e6: 8a:b0:89:70:8a:a5:42:43:5d:b1:03:fa:fa:74:b9:2e:e4:f6: 02:14:e2:de:ef:3e:05:61:ac:1f:9f:90:17:92:6e:32:d0:2d: ed:dc:2f:8a:c7:ec:60:b1:33:10:de:98:93:66:3d:2f:fe:85: 7e:27:5f:09:0f:8c:d4:c6:66:7f:2c:96:32:00:6b:1d:c4:84: fb:68:77:f2:24:5b:f8:d8:f9:4e:24:03:27:0d:71:28:4c:07: c2:f1:3f:9c:58:52:9a:fd:f6:74:aa:ad:c6:cc:75:d9:4a:08: be:65:b5:55:e5:55:f3:e9:c1:7e:ef:4e:c2:dc:63:d2:c9:90: 36:6b:55:54:db:c1:36:9f:4e:63:b0:28:87:bb:2a:c4:c0:81: 11:05:62:7d:ac:62:28:d5:8d:7f:8c:83:d3:82:29:4e:a5:d1: c6:96:47:9e:79:73:5d:d7:6d:e5:82:74:a9:01:a5:22:cc:4c: 89:3a:49:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4T3vFFNLZSDzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3MjkzNWMtYWMxYi00YWEwLWI0MDgtOWMzMjcxYThh MmE1MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk ZGViNTYxNjYtODFjMy00ZjZiLTk5ZTQtODJhNjhmMTM5ZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb5X8gSKc1sMBkekxNykaYj9wTvK6RGPXN8J rXSIdTAfUJHwWF2CXaih2aqbd90eY+z84VG9ov7YA8QEgXCqsc1vDQSIMqna1UyY 1k/yMntiRMRpB1/v0SsknXUpedPqS++9WaNnTvIe7CeUgXoo5kgHWp6FI/yFXqoH HTht1MtkDlCXaBBSk6EKPtqxj18Rxd/uKka8n985ilyyvFRlOcar8gVpZZUEBoJg U5MkE5zc2Of06t+5BfLsukqRdFmPKlElNNXnKxt4Tbi8WY1ZyYsZBXfGgtLJyzql vzHq3nZpEgY9nStsAk43EQieVoMYZYtAY0E+M+aYnfBzjCVjVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEK6yByjCB+//HdDEUVe6PIiaiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Yjcy OTM1Yy1hYzFiLTRhYTAtYjQwOC05YzMyNzFhOGEyYTUvZWQ3MWU1N2MtMmJmYi0z NGRlLThhOWUtOGU1M2M5NTg2ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGI3MjkzNWMtYWMxYi00YWEwLWI0 MDgtOWMzMjcxYThhMmE1LzhiNzI5MzVjLWFjMWItNGFhMC1iNDA4LTljMzI3MWE4 YTJhNS5jcmwwHwYDVR0jBBgwFoAUoJxiO21k/U8IAWCX+NuPRN+Xud8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YjcyOTM1Yy1hYzFiLTRhYTAtYjQwOC05YzMy NzFhOGEyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcc6VJMOOax7Fu3kTzAxezYhD0zLxOpRx6QjSC5ITvZyLQtUXHBzhcb MS0nw7EWXtbWTv/40ovp0r9tqey1Y9ddrErOCabF5oqwiXCKpUJDXbED+vp0uS7k 9gIU4t7vPgVhrB+fkBeSbjLQLe3cL4rH7GCxMxDemJNmPS/+hX4nXwkPjNTGZn8s ljIAax3EhPtod/IkW/jY+U4kAycNcShMB8LxP5xYUpr99nSqrcbMddlKCL5ltVXl VfPpwX7vTsLcY9LJkDZrVVTbwTafTmOwKIe7KsTAgREFYn2sYijVjX+Mg9OCKU6l 0caWR555c13XbeWCdKkBpSLMTIk6ST0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:48 2025 by rpki-client