$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/4cc8e385-a35a-3137-bb31-ffe001f66d75.roa File: 4cc8e385-a35a-3137-bb31-ffe001f66d75.roa (raw, json) Hash identifier: zMBLO78IuCR6tyg8dAEb7Ohe2Xq+bK7UotlmV0+F1Ac= Subject key identifier: D2:B7:8B:5B:AF:54:9A:DF:69:98:DD:4B:03:C8:42:E6:16:92:37:B9 Certificate issuer: /CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa Certificate serial: 010D0C9F432858494B641D4901762A2482833900 Authority key identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/4cc8e385-a35a-3137-bb31-ffe001f66d75.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 211392 IP address blocks: 23.145.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1d:49:01:76:2a:24:82:83:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=c5b1a2ea-d4eb-4bf2-a46d-6726edeaf9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:b5:c1:35:f4:3e:88:0c:04:09:2a:02:b8: 93:7b:e9:66:4b:32:a4:d9:78:89:db:43:a4:59:1b: 8e:44:8f:26:83:be:c4:3b:6c:94:af:a0:b3:96:74: 9f:56:68:52:8a:e6:9b:ae:4f:12:a9:7a:d9:77:10: d3:84:cd:56:89:0d:ab:f1:6a:d6:07:1c:17:6b:ee: b1:94:92:f7:22:37:64:0d:c9:42:14:44:35:dd:4a: 02:29:bf:67:b4:8b:46:0c:e6:e1:29:b8:79:7c:2a: 70:2c:e5:8d:46:25:1e:eb:f7:30:69:50:04:94:e2: 50:1a:22:05:ea:f0:6d:a4:48:cf:3a:59:32:f4:c5: 80:d8:cc:84:36:fc:ec:a7:03:71:df:09:f4:c0:f4: b6:fb:1c:23:fb:a7:10:c3:a5:ac:5d:50:12:b2:0f: 01:aa:47:83:de:33:0e:d7:7b:65:93:86:aa:91:a1: 77:92:2e:3d:01:4d:21:21:20:ef:ee:50:56:31:ca: 22:b3:e0:ab:25:c3:e4:9f:9b:1e:70:3b:51:2a:f3: 9f:3a:4f:d3:19:f6:7d:68:fb:4e:e0:be:ef:32:dc: 73:1d:3b:90:10:5f:29:b6:18:30:b4:5d:c7:ca:e3: 50:85:e2:e9:ec:75:f3:4d:21:50:80:7f:e5:26:b4: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B7:8B:5B:AF:54:9A:DF:69:98:DD:4B:03:C8:42:E6:16:92:37:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/4cc8e385-a35a-3137-bb31-ffe001f66d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl X509v3 Authority Key Identifier: keyid:AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer sbgp-ipAddrBlock: critical IPv4: 23.145.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f5:2c:35:db:6d:13:b5:46:7b:ab:73:93:44:90:6e:4e:e0: 4a:fe:13:9c:16:a6:e9:5f:b5:3c:e5:d5:f4:4b:c7:f4:6d:ba: 40:66:34:19:92:2f:2f:3c:55:eb:75:d4:b6:66:af:cc:a5:77: 9f:58:8f:ef:3a:3c:66:7b:46:34:99:05:3b:4d:95:a1:40:5b: b1:92:c4:25:64:d3:25:9a:83:d6:e4:58:c0:c0:85:f1:02:ea: 17:f5:0e:e7:59:33:04:a3:db:a0:f3:30:bf:ff:8a:0b:20:7d: 3d:cf:62:e0:94:d5:b0:fe:9f:7e:6d:bc:b4:ab:78:5a:7b:5e: cb:69:c1:a8:5f:d6:93:d8:4d:bc:ff:58:d4:44:b4:09:fb:2e: 97:a2:00:3e:b5:7d:97:87:92:01:0f:b0:ca:45:9e:7d:a6:7c: 02:14:1a:06:67:bd:9a:46:48:8d:ad:d2:16:ca:c1:25:18:4d: f3:cb:1c:44:7e:df:2f:54:c3:d6:05:8a:25:7d:ad:4b:dd:ed: 32:2c:75:e9:24:ac:20:54:6a:80:78:9f:ca:a7:71:65:30:ff: fe:5c:54:79:6e:2a:94:39:aa:13:c6:e7:41:f9:88:ad:37:e3: 16:3e:71:6a:f4:af:dd:79:c7:cc:35:4a:b9:0f:80:8b:37:0c: 17:68:0d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB1JAXYqJIKDOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRmNWE4ZTEtM2QxYS00N2E1LWI2YzgtY2Y2YzEyNDJk MmFhMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YzViMWEyZWEtZDRlYi00YmYyLWE0NmQtNjcyNmVkZWFmOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpO1wTX0PogMBAkqAriTe+lmSzKk2XiJ20Ok WRuORI8mg77EO2yUr6CzlnSfVmhSiuabrk8SqXrZdxDThM1WiQ2r8WrWBxwXa+6x lJL3IjdkDclCFEQ13UoCKb9ntItGDObhKbh5fCpwLOWNRiUe6/cwaVAElOJQGiIF 6vBtpEjPOlky9MWA2MyENvzspwNx3wn0wPS2+xwj+6cQw6WsXVASsg8BqkeD3jMO 13tlk4aqkaF3ki49AU0hISDv7lBWMcois+CrJcPkn5secDtRKvOfOk/TGfZ9aPtO 4L7vMtxzHTuQEF8pthgwtF3HyuNQheLp7HXzTSFQgH/lJrQLjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK3i1uvVJrfaZjdSwPIQuYWkje5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1 YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0MmQyYWEvNGNjOGUzODUtYTM1YS0z MTM3LWJiMzEtZmZlMDAxZjY2ZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTRmNWE4ZTEtM2QxYS00N2E1LWI2 YzgtY2Y2YzEyNDJkMmFhLzE0ZjVhOGUxLTNkMWEtNDdhNS1iNmM4LWNmNmMxMjQy ZDJhYS5jcmwwHwYDVR0jBBgwFoAUr350/HCfq7eqaEboMNLdm/MIMDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZj MTI0MmQyYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz1LDXbbRO1Rnurc5NEkG5O4Er+E5wWpulftTzl1fRLx/RtukBmNBmS Ly88Vet11LZmr8yld59Yj+86PGZ7RjSZBTtNlaFAW7GSxCVk0yWag9bkWMDAhfEC 6hf1DudZMwSj26DzML//igsgfT3PYuCU1bD+n35tvLSreFp7Xstpwahf1pPYTbz/ WNREtAn7LpeiAD61fZeHkgEPsMpFnn2mfAIUGgZnvZpGSI2t0hbKwSUYTfPLHER+ 3y9Uw9YFiiV9rUvd7TIsdekkrCBUaoB4n8qncWUw//5cVHluKpQ5qhPG50H5iK03 4xY+cWr0r915x8w1SrkPgIs3DBdoDcE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:50 2025 by rpki-client