$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa File: 95f72258-e028-38f3-9aa4-eb809a802750.roa (raw, json) Hash identifier: jR7w8ToGXcgKA9bMNbjTducgF6OkGSJEgJ4TgRsJvjo= Subject key identifier: 02:3E:D5:B6:F8:39:4C:D7:A2:FA:26:08:9F:7E:CC:E8:F9:26:EC:C4 Certificate issuer: /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Certificate serial: 010D0C9F4328584908815E74A8C42ADF7A1A56C0 Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 32217 IP address blocks: 23.156.192.0/24 maxlen: 24 23.174.112.0/24 maxlen: 24 142.202.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5e:74:a8:c4:2a:df:7a:1a:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=5b4a52e3-42ec-45bd-a04d-77458d77ac80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:41:a0:a4:5f:a9:b8:b1:b1:91:c4:de:bc:6d: b4:a2:a4:f4:50:ce:0e:0b:98:7d:7a:51:b3:f6:b1: 8d:10:a6:b1:1d:50:bc:8d:32:4c:e9:30:66:f5:c9: d9:93:6a:a1:b6:91:b1:40:64:c5:2c:bd:02:a7:6c: 1d:ec:77:1c:14:3e:87:0c:ff:9e:f4:b5:86:e3:63: 01:0d:00:c1:43:64:70:67:5e:a1:f3:98:b5:dc:a4: d3:bf:27:6b:ee:6d:b7:17:20:d2:44:b4:32:70:18: 65:c6:64:cb:cf:d4:62:14:18:5c:8c:80:a2:3c:95: 1f:9b:d6:5a:cb:8f:44:12:7f:74:8d:8b:72:99:d5: 1c:24:5d:e6:9c:8b:22:48:80:1d:66:4f:d6:57:54: 2a:af:cd:7b:be:6d:3b:a3:57:58:b3:f6:09:d9:17: f7:10:ef:32:4b:9e:38:df:25:5c:2c:0f:50:0b:9b: 94:93:a8:fd:cd:35:45:41:d2:b1:e1:a1:38:37:a0: ac:56:d0:80:46:6d:dc:8f:b5:e2:3b:31:3f:bb:1a: df:ec:89:83:ca:bc:69:13:52:99:99:83:71:6e:f7: 65:fb:ed:34:62:07:29:56:dc:19:24:95:d6:68:66: 6c:19:ea:b4:6c:14:0e:41:cd:5d:ea:89:de:02:3e: 35:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:D5:B6:F8:39:4C:D7:A2:FA:26:08:9F:7E:CC:E8:F9:26:EC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl X509v3 Authority Key Identifier: keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer sbgp-ipAddrBlock: critical IPv4: 23.156.192.0/24 23.174.112.0/24 142.202.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:38:54:84:6c:bf:56:9a:6e:90:24:c3:2a:7b:6e:90:d1:8b: 30:29:8b:2e:24:06:94:27:de:cd:09:df:16:4f:9a:44:d7:bb: 4c:c4:3c:b5:c7:a0:3d:0a:f7:ae:f7:2b:23:aa:56:c5:ee:df: 81:d3:7d:47:86:e3:12:ab:2a:52:46:46:53:4e:52:c9:e3:3d: fd:6f:96:e8:15:c3:c9:39:8b:b2:ed:9c:71:0e:62:a8:16:dc: 68:fa:67:9b:33:1d:47:76:81:0b:66:6e:2d:12:05:32:04:34: f0:94:83:fc:23:2f:dd:06:b6:e7:6d:43:d4:5d:88:cd:84:e4: 0d:64:1f:a8:89:5b:e1:60:ad:30:e6:9a:16:c9:c5:72:dc:a9: 4b:1b:1a:0d:37:0f:9b:21:ce:d0:1f:4f:42:59:be:24:29:79: 64:63:24:6a:a0:80:4c:5b:79:49:c2:31:d1:b0:23:d2:76:14: 9d:b6:94:d4:b5:27:5f:4e:ba:06:48:a8:50:f5:21:fc:5b:21: 71:0b:cf:31:08:8f:67:8b:bd:c5:60:ba:86:f8:55:06:2a:7e: 7a:6e:aa:64:64:d3:f1:80:d3:04:8b:fb:09:c8:bb:05:ff:6e: 2d:71:64:29:be:b3:44:ed:8d:e9:5d:83:ea:c8:81:48:23:25: cb:1e:72:54 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkIgV50qMQq33oaVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4 MTljMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NWI0YTUyZTMtNDJlYy00NWJkLWEwNGQtNzc0NThkNzdhYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0GgpF+puLGxkcTevG20oqT0UM4OC5h9elGz 9rGNEKaxHVC8jTJM6TBm9cnZk2qhtpGxQGTFLL0Cp2wd7HccFD6HDP+e9LWG42MB DQDBQ2RwZ16h85i13KTTvydr7m23FyDSRLQycBhlxmTLz9RiFBhcjICiPJUfm9Za y49EEn90jYtymdUcJF3mnIsiSIAdZk/WV1Qqr817vm07o1dYs/YJ2Rf3EO8yS544 3yVcLA9QC5uUk6j9zTVFQdKx4aE4N6CsVtCARm3cj7XiOzE/uxrf7ImDyrxpE1KZ mYNxbvdl++00YgcpVtwZJJXWaGZsGeq0bBQOQc1d6oneAj41jQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAI+1bb4OUzXovomCJ9+zOj5JuzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvOTVmNzIyNTgtZTAyOC0z OGYzLTlhYTQtZWI4MDlhODAyNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky NWQ1YTgxOWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF5zAAwQA F65wAwQBjsp0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABI4VIRsv1aabpAkwyp7bpDRizApiy4kBpQn3s0J 3xZPmkTXu0zEPLXHoD0K9673KyOqVsXu34HTfUeG4xKrKlJGRlNOUsnjPf1vlugV w8k5i7LtnHEOYqgW3Gj6Z5szHUd2gQtmbi0SBTIENPCUg/wjL90GtudtQ9RdiM2E 5A1kH6iJW+FgrTDmmhbJxXLcqUsbGg03D5shztAfT0JZviQpeWRjJGqggExbeUnC MdGwI9J2FJ22lNS1J19OugZIqFD1IfxbIXELzzEIj2eLvcVguob4VQYqfnpuqmRk 0/GA0wSL+wnIuwX/bi1xZCm+s0Ttjeldg+rIgUgjJcseclQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:00:24 2025 by rpki-client