$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa File: f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa (raw, json) Hash identifier: Sv5iipagIRh/4tvT5BUS0KtftV9zLA2MgfdXQIejt2Y= Subject key identifier: 11:39:FF:EB:8C:F5:9D:93:B2:95:6A:8D:AE:A1:03:E1:F3:34:6C:37 Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F43285848E2D1172AB477F106289534C0 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 35008 IP address blocks: 23.153.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:17:2a:b4:77:f1:06:28:95:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=48d37038-9fdd-4f58-826b-a55a124c6b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a1:86:c8:a0:66:39:e3:9f:d1:e8:77:4c:0b: 75:18:63:6f:b3:c7:fe:b5:2e:b3:5a:67:4c:2b:66: d2:1f:a2:16:9b:35:54:fe:6e:45:cc:9a:8a:b4:55: 30:02:05:fb:8a:fc:c5:63:f3:0c:4a:c9:89:d1:2e: f6:86:f6:4d:df:2b:df:b0:fc:5c:b3:1b:a0:ec:5b: c5:b9:f5:8b:41:2d:2d:32:95:93:9a:19:90:70:c0: 13:24:ad:87:21:bc:26:24:6c:27:f1:9d:c5:55:8b: 5a:33:33:d1:c2:97:46:1a:fb:dd:93:64:f6:26:42: eb:c4:fd:85:b2:cb:a9:21:9a:6e:87:88:22:f6:f9: b6:07:4e:d6:56:33:71:c8:fd:84:25:8a:86:c1:2d: 5e:9a:ab:c1:ee:7b:84:88:81:90:5e:89:8d:3e:19: 14:87:d7:a6:d8:6f:cb:ee:e8:0a:6e:ee:35:8c:0e: 6f:67:98:84:dc:fc:72:2e:aa:91:72:38:97:2f:d7: ac:e8:54:09:ab:15:71:f0:31:76:8d:44:82:a8:ff: 9d:95:f5:f1:2f:88:69:31:f9:e2:0c:56:e5:db:a2: 99:50:24:2f:15:ed:d8:08:30:56:e9:a2:26:63:25: d9:04:76:5b:4c:99:63:a7:b7:ce:f0:46:1e:a8:3c: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:FF:EB:8C:F5:9D:93:B2:95:6A:8D:AE:A1:03:E1:F3:34:6C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv4: 23.153.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:24:3a:48:33:db:0d:78:ad:89:07:bd:26:8b:70:36:a3:b2: f1:b1:5a:39:68:c1:ae:8a:01:ed:5e:55:bc:92:f6:92:f6:62: e3:a8:d8:54:54:39:75:8f:f2:21:d3:0c:0a:43:0b:f8:38:3b: d0:22:c4:89:eb:0e:09:30:88:d9:3f:b7:90:70:8d:8b:68:97: f6:21:21:20:3a:71:3e:f8:48:98:1c:b2:6b:0c:6c:a0:e6:f6: d2:ff:5a:08:15:7d:db:7b:72:87:4b:67:8c:cc:fc:73:dc:46: 9f:9e:41:8a:f3:76:07:3a:6d:87:c3:6f:47:27:51:dc:ee:14: f1:8a:97:42:bd:c2:1a:34:9d:fa:c9:5a:b3:39:68:76:48:8e: fd:86:87:cc:d1:7e:95:be:72:2a:aa:73:58:7e:c6:ee:24:20: 5f:db:e5:e1:ff:37:00:de:73:9a:79:64:e3:83:02:77:1f:1b: 3c:1e:f6:b0:00:68:31:76:c4:66:8d:02:ff:47:7d:73:b2:be: da:e8:04:db:7f:ff:04:95:1b:5e:09:13:aa:43:d0:93:57:c0: 4c:eb:44:d2:aa:99:a1:96:03:07:37:bb:0b:ef:0c:71:8e:73: e8:e0:db:87:f0:46:2e:d4:a7:4b:5d:74:a0:7d:6c:91:0c:eb: 68:0a:dc:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RcqtHfxBiiVNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NDhkMzcwMzgtOWZkZC00ZjU4LTgyNmItYTU1YTEyNGM2Yjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aGGyKBmOeOf0eh3TAt1GGNvs8f+tS6zWmdM K2bSH6IWmzVU/m5FzJqKtFUwAgX7ivzFY/MMSsmJ0S72hvZN3yvfsPxcsxug7FvF ufWLQS0tMpWTmhmQcMATJK2HIbwmJGwn8Z3FVYtaMzPRwpdGGvvdk2T2JkLrxP2F ssupIZpuh4gi9vm2B07WVjNxyP2EJYqGwS1emqvB7nuEiIGQXomNPhkUh9em2G/L 7ugKbu41jA5vZ5iE3PxyLqqRcjiXL9es6FQJqxVx8DF2jUSCqP+dlfXxL4hpMfni DFbl26KZUCQvFe3YCDBW6aImYyXZBHZbTJljp7fO8EYeqDyvQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE5/+uM9Z2TspVqja6hA+HzNGw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvZjFjNDBmOGYtNGM5Yy0z YWNiLTkzY2QtZjZjOWIyZTlkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4kOkgz2w14rYkHvSaLcDajsvGxWjlowa6KAe1eVbyS9pL2YuOo2FRU OXWP8iHTDApDC/g4O9AixInrDgkwiNk/t5BwjYtol/YhISA6cT74SJgcsmsMbKDm 9tL/WggVfdt7codLZ4zM/HPcRp+eQYrzdgc6bYfDb0cnUdzuFPGKl0K9who0nfrJ WrM5aHZIjv2Gh8zRfpW+ciqqc1h+xu4kIF/b5eH/NwDec5p5ZOODAncfGzwe9rAA aDF2xGaNAv9HfXOyvtroBNt//wSVG14JE6pD0JNXwEzrRNKqmaGWAwc3uwvvDHGO c+jg24fwRi7Up0tddKB9bJEM62gK3PE= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:20 2025 by rpki-client