$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa File: c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa (raw, json) Hash identifier: nO6Vwfxmjzvs8DBXXDRATCcRnY6fT/QCCPueR5B7i8I= Subject key identifier: 0C:C7:BB:6A:CD:DF:F4:A2:3F:B1:21:1A:F2:B1:3E:2A:0F:C6:CA:F6 Certificate issuer: /CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0 Certificate serial: 010D0C9F43285848FD56BA6A5EA9B0003CC7EE80 Authority key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 26042 IP address blocks: 23.145.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ba:6a:5e:a9:b0:00:3c:c7:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=c686e36e-81e8-484c-aa99-d0726ca9fe8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:5a:a8:42:52:b1:8f:98:b9:c7:94:29:fb: 5f:85:2c:fc:e9:76:7a:14:43:35:f1:61:e5:ee:50: 05:9a:3b:58:24:ea:a2:9f:21:f9:f3:4f:f9:c2:05: 45:fe:80:2d:4f:cf:38:a5:a9:e1:b0:ee:f7:ae:b2: 7b:f8:ad:22:7c:21:ae:d3:10:3b:75:56:9d:5e:fd: 8d:4c:b2:db:b4:5f:d5:dd:c0:df:3a:9f:9a:8f:6a: d8:57:b2:95:0c:63:d5:bb:48:e2:97:a3:60:96:f0: 2d:60:9b:38:2a:f5:57:68:8a:1b:8c:72:e3:0f:23: 73:59:76:b6:ef:d2:8d:f2:0c:d0:33:36:16:00:60: fe:b1:74:17:01:b8:73:45:d4:0f:02:69:43:c1:ee: 1d:b4:53:2b:d2:51:66:c1:af:68:15:b8:1b:93:d6: 41:bb:5e:00:65:f7:bb:4f:90:31:da:96:66:64:d7: 9a:7b:c3:8e:ed:73:37:b1:62:1a:0f:95:0f:49:b7: f6:92:40:7e:c0:65:5e:49:da:8c:47:e4:21:3c:f0: 06:e9:64:94:32:ce:49:99:23:0d:00:8b:c6:5a:1e: ee:45:7b:1d:8d:06:7b:5d:d7:29:12:92:f5:a9:c2: 6d:35:71:bc:0c:3f:17:f7:f4:d7:99:d5:e4:c1:fa: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C7:BB:6A:CD:DF:F4:A2:3F:B1:21:1A:F2:B1:3E:2A:0F:C6:CA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl X509v3 Authority Key Identifier: keyid:50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer sbgp-ipAddrBlock: critical IPv4: 23.145.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cf:ed:c5:d6:9b:a9:7a:71:2a:d2:f4:de:86:0d:ba:0f:31: 86:38:e7:0a:9b:26:33:5a:98:15:97:33:76:dc:2b:58:c1:bc: bd:e6:ae:cf:04:2f:b9:1e:14:19:9f:f8:d0:4c:e0:0b:ef:17: 08:12:af:2c:ca:15:33:f1:36:d9:be:81:5b:98:38:a7:75:ac: 86:e1:4e:06:58:cb:45:42:48:30:7d:8e:98:54:44:dd:23:d0: 1f:8f:30:b9:91:19:ff:42:cd:94:e5:94:53:af:9a:fb:60:80: 86:25:3d:fa:76:90:38:89:0f:5c:e1:cd:34:88:8f:3b:3c:fd: b3:2b:17:b7:d5:6c:09:08:3e:63:71:75:1a:5c:9a:18:c5:18: d5:f8:39:c6:f4:4d:ce:b9:7a:c0:7b:ce:33:85:6f:e4:c7:a4: db:28:84:f8:ed:45:b0:57:f1:e4:78:07:6b:65:82:12:23:08: 20:38:7b:78:b1:53:10:bd:94:52:3b:f4:5a:38:d0:4b:eb:bb: 16:5d:87:e9:51:93:d0:e0:76:43:17:8e:56:b6:2f:6f:9a:41: 80:4c:bc:38:8d:c4:9e:2a:c8:47:9d:ce:fe:7e:8f:a5:a4:21: f3:22:e9:fe:85:ef:47:3f:d1:de:f5:eb:01:79:0f:03:a2:0d: 75:a4:19:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrpqXqmwADzH7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRlOGU5OTAtNTBmNC00Mjg0LWJmYzAtMTg3OGE1ZmJj MGYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzY4NmUzNmUtODFlOC00ODRjLWFhOTktZDA3MjZjYTlmZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOdaqEJSsY+YuceUKftfhSz86XZ6FEM18WHl 7lAFmjtYJOqinyH580/5wgVF/oAtT884panhsO73rrJ7+K0ifCGu0xA7dVadXv2N TLLbtF/V3cDfOp+aj2rYV7KVDGPVu0jil6NglvAtYJs4KvVXaIobjHLjDyNzWXa2 79KN8gzQMzYWAGD+sXQXAbhzRdQPAmlDwe4dtFMr0lFmwa9oFbgbk9ZBu14AZfe7 T5Ax2pZmZNeae8OO7XM3sWIaD5UPSbf2kkB+wGVeSdqMR+QhPPAG6WSUMs5JmSMN AIvGWh7uRXsdjQZ7XdcpEpL1qcJtNXG8DD8X9/TXmdXkwfrDxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzHu2rN3/SiP7EhGvKxPioPxsr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGU4 ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4YTVmYmMwZjAvYzNmZTgzZjgtZDI3Zi0z YjI0LTk3NWUtZDVhYjMwMDBjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRlOGU5OTAtNTBmNC00Mjg0LWJm YzAtMTg3OGE1ZmJjMGYwL2I0ZThlOTkwLTUwZjQtNDI4NC1iZmMwLTE4NzhhNWZi YzBmMC5jcmwwHwYDVR0jBBgwFoAUUFQz1YZtPDtRR5pSFKYsowMULhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGU4ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4 YTVmYmMwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5F4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbP7cXWm6l6cSrS9N6GDboPMYY45wqbJjNamBWXM3bcK1jBvL3mrs8E L7keFBmf+NBM4AvvFwgSryzKFTPxNtm+gVuYOKd1rIbhTgZYy0VCSDB9jphURN0j 0B+PMLmRGf9CzZTllFOvmvtggIYlPfp2kDiJD1zhzTSIjzs8/bMrF7fVbAkIPmNx dRpcmhjFGNX4Ocb0Tc65esB7zjOFb+THpNsohPjtRbBX8eR4B2tlghIjCCA4e3ix UxC9lFI79Fo40EvruxZdh+lRk9DgdkMXjla2L2+aQYBMvDiNxJ4qyEedzv5+j6Wk IfMi6f6F70c/0d716wF5DwOiDXWkGQY= -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:29 2025 by rpki-client