$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa File: 667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa (raw, json) Hash identifier: pPRJQFxxspDsNAZrYa5RPdWvA0WDYxt0f13Pkb3Ht/U= Subject key identifier: AD:FF:B1:3B:A6:E4:2B:BF:AD:AD:87:BB:62:2C:D1:9B:AF:2A:D2:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582092529B98F2B11346780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 23.251.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:09:25:29:b9:8f:2b:11:34:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=90ab295b-2510-449a-a517-d0f93ce55b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3c:47:a4:22:d2:bc:eb:54:27:c3:ea:fc:fa: ea:6f:2d:93:05:aa:4f:a0:72:47:28:ec:1f:55:66: 4d:31:4a:81:8a:e7:b5:09:fc:1b:7e:47:7c:af:95: 5d:cf:b0:61:8c:47:0d:fc:c6:38:f2:20:55:c2:93: f8:bf:c2:4a:84:ec:3e:1e:d0:a1:ea:a8:af:13:41: d5:c8:c6:f4:e9:24:f8:c9:f9:da:1b:16:f6:1e:7f: 5f:39:c5:85:27:41:4b:29:a4:52:cc:da:67:54:e6: e5:f7:4f:c7:97:9d:c5:c3:13:19:a6:23:c6:69:71: 66:78:24:6e:dc:56:73:89:2c:48:02:85:19:d7:76: 4c:4e:c2:8f:76:45:8c:29:cb:1d:b6:29:bd:ab:da: d7:3c:d4:78:48:70:34:93:0b:7c:eb:9c:f2:99:8c: 55:ba:80:80:cc:43:78:44:63:97:7f:b9:68:c8:b5: 44:91:b4:29:91:0e:50:fe:d6:0c:95:4e:f4:fe:a6: 05:38:d8:23:43:32:a6:f4:d5:b9:6c:73:8a:d7:02: e3:f0:e0:85:40:71:6f:d0:b8:22:31:fd:1f:22:3d: 8e:6b:5a:c7:06:32:e7:34:de:6a:0e:ab:3d:47:f7: 3f:8d:1d:78:cf:4c:b2:63:86:b4:aa:9e:24:23:1c: a9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FF:B1:3B:A6:E4:2B:BF:AD:AD:87:BB:62:2C:D1:9B:AF:2A:D2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5d:4b:ca:02:7a:5a:18:5a:04:cc:6c:8a:89:a6:d0:4b:28: de:e0:08:ef:00:e8:b2:94:80:3b:0c:30:ba:ed:5c:4c:85:2e: 23:6c:a4:d3:d2:c7:1e:ea:f1:6f:9a:1a:00:c2:dd:37:58:0e: fb:fa:f8:5c:79:44:d8:8d:5d:2c:24:a4:95:fb:86:bd:11:24: 86:45:d9:5e:68:fa:33:85:82:e2:2e:65:d2:9b:aa:89:7d:9c: 50:21:a4:6b:3a:90:7e:a7:a9:d7:cd:a3:6a:79:cb:d3:27:06: 49:6a:5d:b2:ba:20:9d:3f:8a:49:fb:5e:58:d7:0e:ce:2e:75: 31:a1:e2:14:ec:a6:98:50:ec:45:f1:0f:d7:4b:b0:e7:a5:95: 75:37:0d:15:31:0e:a8:e6:78:02:0f:1d:a0:23:5f:04:54:f4: 61:d8:dd:d1:7f:ac:7a:59:b5:26:38:61:e5:01:e3:a5:33:95: 2d:9e:28:5e:97:3e:64:ed:75:cc:80:63:a5:b7:a0:1d:65:39: bf:55:79:80:05:3a:a7:a6:d3:67:49:74:6f:a5:73:4d:10:ca: d7:8f:2e:ce:52:ee:1c:b2:f0:f8:a4:81:a5:97:06:ff:9a:7c: a5:03:c1:d0:b2:45:37:db:35:ac:eb:db:cd:9d:6e:c8:22:52: 34:2e:53:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggklKbmPKxE0Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTBhYjI5NWItMjUxMC00NDlhLWE1MTctZDBmOTNjZTU1YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTxHpCLSvOtUJ8Pq/Prqby2TBapPoHJHKOwf VWZNMUqBiue1Cfwbfkd8r5Vdz7BhjEcN/MY48iBVwpP4v8JKhOw+HtCh6qivE0HV yMb06ST4yfnaGxb2Hn9fOcWFJ0FLKaRSzNpnVObl90/Hl53FwxMZpiPGaXFmeCRu 3FZziSxIAoUZ13ZMTsKPdkWMKcsdtim9q9rXPNR4SHA0kwt865zymYxVuoCAzEN4 RGOXf7loyLVEkbQpkQ5Q/tYMlU70/qYFONgjQzKm9NW5bHOK1wLj8OCFQHFv0Lgi Mf0fIj2Oa1rHBjLnNN5qDqs9R/c/jR14z0yyY4a0qp4kIxypHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3/sTum5Cu/ra2Hu2Is0ZuvKtIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY3ZmRjNDAtMTRkYy0z OGUxLTk0NjAtZDRhM2U1ZTMzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGldS8oCeloYWgTMbIqJptBLKN7gCO8A6LKUgDsMMLrtXEyFLiNspNPS xx7q8W+aGgDC3TdYDvv6+Fx5RNiNXSwkpJX7hr0RJIZF2V5o+jOFguIuZdKbqol9 nFAhpGs6kH6nqdfNo2p5y9MnBklqXbK6IJ0/ikn7XljXDs4udTGh4hTspphQ7EXx D9dLsOellXU3DRUxDqjmeAIPHaAjXwRU9GHY3dF/rHpZtSY4YeUB46UzlS2eKF6X PmTtdcyAY6W3oB1lOb9VeYAFOqem02dJdG+lc00QytePLs5S7hyy8PikgaWXBv+a fKUDwdCyRTfbNazr282dbsgiUjQuU0c= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:27 2025 by rpki-client