$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/632fbc8b-c7e4-3179-b0c2-29368760d968.roa File: 632fbc8b-c7e4-3179-b0c2-29368760d968.roa (raw, json) Hash identifier: TNqu8v2KNd0LHYsAwZyA6YzUg1wrr7bp5ucXD239P3E= Subject key identifier: B0:01:86:30:AD:F7:E3:D7:98:4D:BA:2D:66:C0:1E:FA:5E:4A:A0:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58227051B5B8B1EE9847EA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/632fbc8b-c7e4-3179-b0c2-29368760d968.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 23.251.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:27:05:1b:5b:8b:1e:e9:84:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0ca325b9-4b40-4146-b362-d7dfa705b743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:d9:3d:e0:cd:cf:a8:79:72:b8:c2:2f:89: 5b:6e:00:70:76:a9:9e:cb:98:8e:f0:f1:3e:6c:ed: fd:c2:e2:98:10:4a:45:a7:a6:93:b2:e2:41:50:01: ee:d7:cf:33:84:9e:bb:b8:85:e4:5d:61:3a:5d:5c: c8:46:9e:cb:97:93:3e:dd:1b:08:9e:6d:b2:16:03: c2:de:ad:14:31:81:94:a8:86:7e:1c:2c:d1:9b:72: 69:a4:bb:5e:ca:67:20:46:42:aa:65:3d:33:f3:88: c1:f7:97:0e:f3:45:ab:ac:d9:87:07:31:9b:e1:6a: 55:b0:1f:42:4b:1c:d7:80:f4:37:97:c9:14:78:ba: c5:df:a5:79:5e:36:d4:e7:19:84:e4:a8:42:24:7f: ca:8e:95:17:35:2c:f8:c8:34:28:b7:7e:3f:6c:1d: f0:b9:ea:5c:8e:05:21:69:16:b6:f8:43:72:f3:2f: 2e:7c:4a:57:63:0e:61:1f:37:ea:aa:cc:b5:36:47: 0d:50:e8:4a:72:53:1e:5a:05:79:e4:ee:c4:03:11: ba:05:5e:1c:51:7a:7a:da:50:5f:1e:26:ac:da:a9: fe:b5:0d:1c:b6:74:a7:39:71:c8:94:80:bd:e6:8b: ad:14:c2:c2:6a:77:be:8a:2c:7b:0f:72:da:d3:5e: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:86:30:AD:F7:E3:D7:98:4D:BA:2D:66:C0:1E:FA:5E:4A:A0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/632fbc8b-c7e4-3179-b0c2-29368760d968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:05:04:b3:93:81:ff:17:4b:90:24:d6:39:cd:ac:48:12:04: 39:41:60:df:ea:31:3b:b1:7a:18:cf:6a:17:de:b1:6a:78:7a: 22:f6:59:60:89:c2:11:17:8d:77:c0:df:6d:45:30:7a:95:fd: a2:a9:18:b5:61:a2:c1:15:eb:38:a0:10:1f:40:7e:cd:4b:eb: d3:6e:91:16:e8:3c:08:b4:48:eb:55:b2:6b:10:8a:b6:2c:ff: 41:9c:30:3e:e9:0a:70:0c:84:96:77:23:0a:23:95:4f:59:52: e2:39:00:87:0e:58:95:39:e7:ba:a4:1d:de:32:3d:9d:c6:f9: fd:a3:3c:b4:ab:7c:b0:25:00:36:53:63:5a:bc:b4:48:c1:5f: 8e:78:8d:75:86:5e:6c:e1:44:93:30:02:27:ce:08:9d:05:39: 35:06:c5:dd:8b:cd:a8:0a:7a:6e:fc:27:1d:51:2e:21:47:14: cc:a2:8b:2d:ce:bb:a5:e7:e5:c5:06:4f:66:eb:5c:3f:60:d9: 72:60:c2:2b:1f:a9:02:fe:49:b3:60:87:91:29:6a:a9:a3:9a: 72:90:35:95:b5:d0:87:a8:3b:20:26:0a:dd:b1:c6:00:84:ab: 8f:53:29:0d:b8:2c:75:85:0c:4d:49:9e:ab:31:40:47:09:bc: a7:ff:93:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgicFG1uLHumEfqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGNhMzI1YjktNGI0MC00MTQ2LWIzNjItZDdkZmE3MDViNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ7ZPeDNz6h5crjCL4lbbgBwdqmey5iO8PE+ bO39wuKYEEpFp6aTsuJBUAHu188zhJ67uIXkXWE6XVzIRp7Ll5M+3RsInm2yFgPC 3q0UMYGUqIZ+HCzRm3JppLteymcgRkKqZT0z84jB95cO80WrrNmHBzGb4WpVsB9C SxzXgPQ3l8kUeLrF36V5XjbU5xmE5KhCJH/KjpUXNSz4yDQot34/bB3wuepcjgUh aRa2+ENy8y8ufEpXYw5hHzfqqsy1NkcNUOhKclMeWgV55O7EAxG6BV4cUXp62lBf Hias2qn+tQ0ctnSnOXHIlIC95outFMLCane+iix7D3La015hwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLABhjCt9+PXmE26LWbAHvpeSqCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjMyZmJjOGItYzdlNC0z MTc5LWIwYzItMjkzNjg3NjBkOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/ucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsFBLOTgf8XS5Ak1jnNrEgSBDlBYN/qMTuxehjPahfesWp4eiL2WWCJ whEXjXfA321FMHqV/aKpGLVhosEV6zigEB9Afs1L69NukRboPAi0SOtVsmsQirYs /0GcMD7pCnAMhJZ3IwojlU9ZUuI5AIcOWJU557qkHd4yPZ3G+f2jPLSrfLAlADZT Y1q8tEjBX454jXWGXmzhRJMwAifOCJ0FOTUGxd2LzagKem78Jx1RLiFHFMyiiy3O u6Xn5cUGT2brXD9g2XJgwisfqQL+SbNgh5EpaqmjmnKQNZW10IeoOyAmCt2xxgCE q49TKQ24LHWFDE1JnqsxQEcJvKf/k8g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:10 2025 by rpki-client