$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa File: 2517d6e9-9680-3eb3-a47b-2325fa06189c.roa (raw, json) Hash identifier: m1A8psMh54sYV4I8tIwdWS+M9ZsjTWU/LGFQbHqLqgQ= Subject key identifier: F4:44:7A:25:5C:08:96:35:EF:AB:7E:96:0C:77:31:B8:DB:1B:2B:FF Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F432858494E2EAC50F0546C2B12202BC0 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 394625 IP address blocks: 23.154.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ac:50:f0:54:6c:2b:12:20:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=fe3d04bc-feca-4ca6-9fcc-3a230865e264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:9f:22:21:5b:dd:cd:3e:2c:63:60:98:c0: 8f:03:c8:a6:b0:86:44:a6:c8:ad:fe:03:85:a8:84: 85:e0:bc:9e:26:4c:57:f4:31:c2:c0:27:bd:8d:9e: 44:d6:2c:03:e1:f7:e7:0b:17:80:8d:ba:13:8a:80: 13:d8:24:5c:dc:65:4e:7f:ca:69:86:c1:a7:ba:fc: 17:d8:ea:0a:41:36:9f:d4:6b:25:b7:e8:8e:29:5e: 15:cd:a6:eb:09:a9:71:78:c3:a4:ea:62:96:11:43: 9f:7b:7b:8d:d7:ca:bc:79:60:e1:bd:5a:0c:5f:3c: 82:bd:2a:a8:0f:c5:c9:d1:52:99:1c:1d:36:95:ab: cc:c5:1b:4f:e8:57:a6:37:06:05:37:34:e6:32:9d: e9:81:c2:e3:f9:31:c6:c2:c1:ff:ec:3b:d7:9d:bf: 54:ba:37:64:a9:b0:d3:21:5b:43:30:4d:ab:7d:08: 52:fd:02:c3:1c:30:ae:b0:89:96:f6:db:7d:74:ca: c1:1b:76:e3:33:a6:29:21:c9:12:df:26:2c:d1:4a: ea:f8:68:ef:c8:b9:0a:fc:4a:45:6a:3f:a1:cd:08: 78:6f:6d:9c:1f:5d:3e:72:69:3f:25:ec:e5:22:30: 13:e1:09:ac:a4:3e:b9:9e:6d:ca:d8:4a:f8:11:9b: 26:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:7A:25:5C:08:96:35:EF:AB:7E:96:0C:77:31:B8:DB:1B:2B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 23.154.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e2:bc:54:30:38:c3:7d:95:09:23:66:bb:9f:60:1b:dc:83: ad:23:e0:d5:28:be:e6:82:ba:51:d9:1b:8e:d2:c9:23:44:e8: 92:7c:ac:1d:2d:ff:6e:ec:e7:0c:5d:5a:5d:55:74:19:73:26: 06:40:1b:2c:d7:cb:53:46:26:95:c0:56:7f:a9:0a:05:bc:a5: d6:f0:73:04:bc:f7:c8:f3:76:0c:3b:61:ff:af:aa:5d:6e:5b: 95:84:b0:f5:21:b4:31:c3:01:09:9d:43:6a:ae:c6:23:dc:e4: c3:06:4c:86:25:ca:eb:57:0e:ea:a0:3b:ec:e1:2b:c3:a7:1d: bb:68:89:b0:4d:48:6a:93:f9:02:35:20:8e:cd:b1:80:a0:95: ce:28:23:49:22:cd:40:e0:6c:90:c3:ca:d1:28:c3:d7:41:06: 90:bd:3d:90:0b:44:aa:b3:0d:d9:40:d3:28:2c:38:0f:19:c1: 47:5a:f2:46:62:d6:d6:3a:ac:ce:27:4f:e2:9e:df:28:44:c9: 97:5e:7e:83:23:23:96:02:f0:55:43:80:f2:f9:ac:1d:4a:2a: 35:9b:1e:d3:ad:8d:da:f5:44:a9:86:b9:29:08:94:7d:8a:72: e6:a6:2e:0d:95:70:27:7a:0c:0f:89:43:f6:1e:ee:09:7f:55: 22:74:76:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLqxQ8FRsKxIgK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZmUzZDA0YmMtZmVjYS00Y2E2LTlmY2MtM2EyMzA4NjVlMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra2fIiFb3c0+LGNgmMCPA8imsIZEpsit/gOF qISF4LyeJkxX9DHCwCe9jZ5E1iwD4ffnCxeAjboTioAT2CRc3GVOf8pphsGnuvwX 2OoKQTaf1Gslt+iOKV4VzabrCalxeMOk6mKWEUOfe3uN18q8eWDhvVoMXzyCvSqo D8XJ0VKZHB02lavMxRtP6FemNwYFNzTmMp3pgcLj+THGwsH/7DvXnb9UujdkqbDT IVtDME2rfQhS/QLDHDCusImW9tt9dMrBG3bjM6YpIckS3yYs0Urq+GjvyLkK/EpF aj+hzQh4b22cH10+cmk/JezlIjAT4QmspD65nm3K2Er4EZsm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPREeiVcCJY176t+lgx3MbjbGyv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvMjUxN2Q2ZTktOTY4MC0z ZWIzLWE0N2ItMjMyNWZhMDYxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5oRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbivFQwOMN9lQkjZrufYBvcg60j4NUovuaCulHZG47SySNE6JJ8rB0t /27s5wxdWl1VdBlzJgZAGyzXy1NGJpXAVn+pCgW8pdbwcwS898jzdgw7Yf+vql1u W5WEsPUhtDHDAQmdQ2quxiPc5MMGTIYlyutXDuqgO+zhK8OnHbtoibBNSGqT+QI1 II7NsYCglc4oI0kizUDgbJDDytEow9dBBpC9PZALRKqzDdlA0ygsOA8ZwUda8kZi 1tY6rM4nT+Ke3yhEyZdefoMjI5YC8FVDgPL5rB1KKjWbHtOtjdr1RKmGuSkIlH2K cuamLg2VcCd6DA+JQ/Ye7gl/VSJ0drc= -----END CERTIFICATE-----Generated at Mon Apr 7 15:43:28 2025 by rpki-client