$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa File: 394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa (raw, json) Hash identifier: 95JNiEHBFWN9hg/UXfqEUrEcLL5w/AXHljRGDyQ/WhM= Subject key identifier: 46:52:25:3E:36:60:D2:FE:D4:E2:3C:04:C0:64:FD:EC:1F:D4:44:98 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F4328584902EC2906B9DFCDC90B48D100 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 63072 IP address blocks: 23.135.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:29:06:b9:df:cd:c9:0b:48:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=79651e1c-c8f5-4f6f-aa77-f855b06fd181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e2:46:a5:87:86:8e:33:48:3b:bc:0c:7a:27: 87:63:2c:ef:28:a2:79:22:e5:fd:6b:b2:dd:dd:ae: d7:83:76:dc:94:60:e0:01:eb:c0:f2:2a:68:64:be: 9d:f1:b7:8c:bd:75:49:e4:a7:27:5b:07:5f:80:6e: b5:01:e6:85:7b:3a:ca:3f:65:ef:a7:eb:1d:ca:c4: cb:c9:5a:bb:56:19:ef:12:6d:aa:88:48:6c:68:97: ca:ba:01:bd:8b:74:c8:f5:43:3b:4d:74:3c:5a:65: 98:fd:8a:a9:9e:b1:4e:ce:18:e3:2f:88:0e:19:19: 2c:c0:33:a6:e1:6a:1a:ce:5f:e9:03:ce:9e:94:11: 1c:23:e2:cf:1b:99:fd:30:74:bc:f7:ee:64:f6:6f: ae:fb:e3:dc:7c:6e:8c:22:3c:f1:94:cf:56:3f:1d: 45:de:4d:f4:5e:ed:c1:b3:0a:1c:e2:72:70:17:db: 7d:24:9b:10:8c:e0:10:c2:b4:fe:91:c3:75:ac:36: 2b:87:48:37:48:44:1e:93:6d:80:5e:70:e4:bf:8b: a7:94:c3:5a:a8:91:3c:e5:dd:8b:20:d0:c0:64:b6: a9:90:8e:15:32:08:bb:c5:e1:8d:74:1f:ff:a7:82: 79:ef:72:82:7f:24:bd:75:e1:79:c4:c0:4e:08:7c: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:52:25:3E:36:60:D2:FE:D4:E2:3C:04:C0:64:FD:EC:1F:D4:44:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a1:af:ae:72:ad:20:74:45:62:ef:91:0b:30:c3:40:2b:da: 17:38:6a:dd:4c:73:87:76:d9:49:77:b0:51:53:e1:a7:2a:1f: 6f:0c:21:13:4d:eb:71:d0:23:fe:44:95:b2:75:c4:cc:10:bd: 90:f0:21:4e:de:f2:d1:70:d4:08:bb:a2:df:73:8c:5f:09:88: 90:e0:70:ec:1e:13:cf:cf:9e:59:28:5e:c9:fb:a0:56:63:ae: e7:68:a1:35:de:52:dd:22:bc:25:02:f6:52:92:c0:40:c5:a3: 92:d7:c6:36:b2:6a:e9:2b:ec:f5:1c:b3:4c:22:de:8f:06:50: c8:2b:ad:ce:4f:a9:b5:81:53:2e:0f:38:3f:50:17:53:b2:58: 55:fc:fe:81:47:10:27:6a:ca:46:b1:4e:32:ae:f5:6e:14:6d: 0d:6b:3e:23:ba:0a:4c:56:eb:ab:b8:0c:38:43:a7:dd:cb:b6: f2:f0:30:83:9a:28:2d:2a:22:67:7b:dd:18:38:38:6a:f9:a5: 31:2a:31:1d:9f:90:d5:a0:d6:9a:d3:af:e3:22:40:28:12:59: 77:4c:a8:e7:8c:11:fb:a3:3c:f0:9e:73:57:f4:8c:a3:4d:18: 98:2b:2f:c5:45:02:c3:41:aa:04:35:90:13:19:9e:85:6c:95: 20:2b:4e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CkGud/NyQtI0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk Nzk2NTFlMWMtYzhmNS00ZjZmLWFhNzctZjg1NWIwNmZkMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+JGpYeGjjNIO7wMeieHYyzvKKJ5IuX9a7Ld 3a7Xg3bclGDgAevA8ipoZL6d8beMvXVJ5KcnWwdfgG61AeaFezrKP2Xvp+sdysTL yVq7VhnvEm2qiEhsaJfKugG9i3TI9UM7TXQ8WmWY/YqpnrFOzhjjL4gOGRkswDOm 4Woazl/pA86elBEcI+LPG5n9MHS89+5k9m+u++PcfG6MIjzxlM9WPx1F3k30Xu3B swoc4nJwF9t9JJsQjOAQwrT+kcN1rDYrh0g3SEQek22AXnDkv4unlMNaqJE85d2L INDAZLapkI4VMgi7xeGNdB//p4J573KCfyS9deF5xMBOCHyD8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZSJT42YNL+1OI8BMBk/ewf1ESYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMzk0ZDg3ODYtMTg1Yy0z YmZiLTllNWEtMmE0YTU3MTQ2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOhr65yrSB0RWLvkQsww0Ar2hc4at1Mc4d22Ul3sFFT4acqH28MIRNN 63HQI/5ElbJ1xMwQvZDwIU7e8tFw1Ai7ot9zjF8JiJDgcOweE8/PnlkoXsn7oFZj rudooTXeUt0ivCUC9lKSwEDFo5LXxjayaukr7PUcs0wi3o8GUMgrrc5PqbWBUy4P OD9QF1OyWFX8/oFHECdqykaxTjKu9W4UbQ1rPiO6CkxW66u4DDhDp93LtvLwMIOa KC0qImd73Rg4OGr5pTEqMR2fkNWg1prTr+MiQCgSWXdMqOeMEfujPPCec1f0jKNN GJgrL8VFAsNBqgQ1kBMZnoVslSArTrM= -----END CERTIFICATE-----Generated at Fri Mar 14 09:22:21 2025 by rpki-client