$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa File: ba711ba1-3e0a-374c-a397-d36ec265248d.roa (raw, json) Hash identifier: MTbBdAUTXN6Pil+5cLeSbhhrWq8/CLVsQp2K7eeRV3c= Subject key identifier: 45:C3:84:1A:44:A9:58:4B:08:20:F8:49:6D:3B:9E:71:3F:26:9D:E4 Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F43285848F4F69CDCB50A9551C1B00980 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 32159 IP address blocks: 23.153.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9c:dc:b5:0a:95:51:c1:b0:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1641bdb0-56cf-4f14-80d7-26c96f171f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:15:73:f7:90:a6:99:cf:3c:6a:2c:98:e5: 89:96:cc:55:5f:25:0a:e6:4d:63:7f:16:c1:0d:b0: 32:7e:47:e5:67:f1:80:88:86:ad:10:5b:ac:1e:0b: f4:93:db:0c:a6:b5:7c:cf:1d:e1:47:bb:3a:3d:4b: 19:32:6b:ce:45:ba:df:3a:64:bf:03:36:26:ba:9d: 7b:a5:5a:4f:32:3d:47:a0:01:f2:16:f0:e7:57:49: e9:1a:ac:ca:c3:67:f3:d1:4d:2e:95:87:66:7a:e3: d0:ec:48:35:6f:0e:44:34:01:4d:e7:d3:f3:e2:1c: 79:1b:34:cc:f8:14:a3:5e:e8:99:86:5e:e7:b0:c4: b3:97:1a:99:12:b7:b4:a3:d8:90:68:5f:10:52:87: 12:86:f7:bb:65:ba:6e:60:85:01:19:cf:d3:bf:82: 7d:74:b2:35:8c:82:de:93:e8:a9:1c:0f:b8:a9:5d: 44:8f:59:33:99:9e:f8:e1:65:79:e3:79:6d:f2:49: 35:33:86:9b:41:ca:97:31:c1:4c:c2:f9:e8:7b:78: fd:65:10:4e:6a:b3:fa:6c:dd:d5:3e:78:0f:22:cd: 78:2b:23:3d:50:99:70:71:c4:f5:7e:2c:87:7d:10: 28:57:59:d1:4c:6b:19:c5:e0:e9:2b:56:3f:48:62: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C3:84:1A:44:A9:58:4B:08:20:F8:49:6D:3B:9E:71:3F:26:9D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:96:5f:15:f4:c5:61:67:09:9d:a7:3f:33:dc:a9:8d:be:be: 5e:9e:1e:a1:0d:fd:b7:71:ac:13:fc:f3:aa:56:3b:02:48:08: 0c:75:ed:48:bd:8e:b4:26:45:c4:e4:34:37:87:ba:75:ec:ad: 97:6b:eb:7d:73:45:3e:29:d4:54:e2:fa:3f:78:3d:82:9d:af: 52:ce:31:76:2c:0d:23:f9:bf:40:20:a9:51:f8:c9:d8:02:4d: 42:d8:73:67:25:75:58:77:a8:d7:f3:69:51:06:28:26:9a:91: 08:0b:61:28:21:ff:89:a4:02:15:23:27:ff:04:06:80:ce:48: 21:b8:f5:03:13:3e:b2:e1:59:c2:16:4a:b3:1b:58:f1:23:b1: e2:2a:bf:48:c0:68:e2:39:e1:59:a7:59:a9:25:d3:1d:f7:33: 54:57:2c:b7:2d:d4:f0:2d:7b:0a:56:7d:91:9a:d1:94:e0:72: f2:9f:03:bb:1e:3a:96:75:a5:a8:66:b3:9e:33:c2:2f:87:58: 3c:bb:db:c2:5d:16:0d:a8:3b:d9:eb:de:a2:55:35:b1:c0:0d: 9c:8f:9b:01:9a:b2:a7:bf:92:09:d0:b1:9f:a0:77:7c:61:33: 70:78:97:44:e7:59:a6:4f:ec:bd:85:30:27:b7:d2:9c:05:87: b7:43:de:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pzctQqVUcGwCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MTY0MWJkYjAtNTZjZi00ZjE0LTgwZDctMjZjOTZmMTcxZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzwVc/eQppnPPGosmOWJlsxVXyUK5k1jfxbB DbAyfkflZ/GAiIatEFusHgv0k9sMprV8zx3hR7s6PUsZMmvORbrfOmS/AzYmup17 pVpPMj1HoAHyFvDnV0npGqzKw2fz0U0ulYdmeuPQ7Eg1bw5ENAFN59Pz4hx5GzTM +BSjXuiZhl7nsMSzlxqZEre0o9iQaF8QUocShve7ZbpuYIUBGc/Tv4J9dLI1jILe k+ipHA+4qV1Ej1kzmZ744WV543lt8kk1M4abQcqXMcFMwvnoe3j9ZRBOarP6bN3V PngPIs14KyM9UJlwccT1fiyHfRAoV1nRTGsZxeDpK1Y/SGLAxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXDhBpEqVhLCCD4SW07nnE/Jp3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvYmE3MTFiYTEtM2UwYS0z NzRjLWEzOTctZDM2ZWMyNjUyNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmWXxX0xWFnCZ2nPzPcqY2+vl6eHqEN/bdxrBP886pWOwJICAx17Ui9 jrQmRcTkNDeHunXsrZdr631zRT4p1FTi+j94PYKdr1LOMXYsDSP5v0AgqVH4ydgC TULYc2cldVh3qNfzaVEGKCaakQgLYSgh/4mkAhUjJ/8EBoDOSCG49QMTPrLhWcIW SrMbWPEjseIqv0jAaOI54VmnWakl0x33M1RXLLct1PAtewpWfZGa0ZTgcvKfA7se OpZ1pahms54zwi+HWDy728JdFg2oO9nr3qJVNbHADZyPmwGasqe/kgnQsZ+gd3xh M3B4l0TnWaZP7L2FMCe30pwFh7dD3nk= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:13 2025 by rpki-client