$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa File: 2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa (raw, json) Hash identifier: belMxQjsnj7s5JE3L4S0qNlLkTaTE6oqugtUYmb4k+s= Subject key identifier: 0E:1E:99:DD:AD:E6:A6:4F:59:51:EE:44:79:EF:E1:11:2C:99:48:9A Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F432858494B6416CAEDA6B6E888F29580 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 208504 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:16:ca:ed:a6:b6:e8:88:f2:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=8d5f42e2-439e-4b7f-b7fe-ef0f660cabb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:20:0d:92:ab:0a:a2:16:ba:a5:ab:a2:36: b0:dc:c3:df:ff:2a:0c:3f:25:d9:dd:a3:47:34:09: 96:55:8a:44:9b:98:41:03:f7:70:7a:43:96:80:72: a7:ba:44:7b:3f:33:be:aa:0c:1c:90:9a:80:e5:23: 9a:e0:90:57:6f:02:30:ba:eb:df:87:82:84:74:d7: ba:19:9a:82:36:4d:d8:bd:9c:41:32:51:cd:e2:c6: b7:d7:e6:f0:e3:68:25:ed:77:85:98:9f:1b:5c:29: 97:5b:e5:39:15:2a:de:f2:78:4b:e2:2f:ee:9b:ad: f4:e8:8b:f4:79:79:40:98:f8:b1:d7:ee:fc:79:3d: e4:e2:cc:d1:01:15:7b:e7:c1:5e:18:9d:18:45:7a: c9:25:e4:6f:e9:b6:38:9e:05:34:af:52:e6:a1:40: ca:36:8d:6f:24:0b:a6:8c:6b:e9:11:fd:70:fb:3e: 83:8a:71:ea:4a:25:86:37:0e:c0:3a:9a:69:49:22: a3:8e:97:09:72:b2:9f:7a:ae:1b:c4:8e:f0:60:f4: 24:09:88:52:04:a2:73:77:be:44:cf:cf:c3:29:e7: 18:5b:3f:c2:9d:8b:24:9b:ad:4c:2f:6e:5a:b3:4a: f8:d3:71:1b:75:16:0b:97:15:2e:2e:fa:6b:c1:8c: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1E:99:DD:AD:E6:A6:4F:59:51:EE:44:79:EF:E1:11:2C:99:48:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:17:6b:e8:72:30:c9:e2:2e:6f:22:8b:28:28:75:e5:8c:a1: 8d:0f:cc:86:53:a6:d8:45:55:06:25:0c:60:b3:7a:0a:e6:eb: 01:5f:94:e0:6b:9d:36:1c:cf:a7:2d:8d:74:b6:9f:1d:f6:24: da:f8:93:63:d3:c7:0c:cd:c8:80:9e:15:41:79:67:45:35:9c: 1c:65:a1:73:c9:57:08:87:86:0a:52:93:6e:aa:aa:c7:4f:bc: 84:54:87:19:05:26:f1:6c:ea:0d:00:80:03:4e:29:5b:cd:23: 34:39:c1:bb:3a:b0:64:0b:fa:d3:1d:d9:1d:cc:1b:da:f2:ea: 4d:e0:2f:9c:55:24:6e:2d:15:08:aa:e9:26:2f:ba:53:26:28: 27:14:ea:87:5d:08:9b:fa:60:8f:1f:21:b6:f1:d9:de:a1:ea: d3:15:e9:2d:45:77:23:e5:af:c2:e4:7b:8b:66:eb:e2:3b:3b: 99:bc:ce:eb:31:bd:a4:e0:5f:7c:06:23:c8:80:af:5b:c1:62: 54:5d:7f:98:18:53:04:7f:e5:3e:87:88:25:38:18:7b:ec:04: c4:b6:62:ef:a3:c5:88:aa:27:29:7b:9b:2e:3c:26:9d:39:5f: 42:15:68:b3:9e:4f:5c:d0:0e:5e:e4:f2:c2:f0:c2:cf:05:18: ef:1b:9a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBbK7aa26IjylYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OGQ1ZjQyZTItNDM5ZS00YjdmLWI3ZmUtZWYwZjY2MGNhYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshEgDZKrCqIWuqWrojaw3MPf/yoMPyXZ3aNH NAmWVYpEm5hBA/dwekOWgHKnukR7PzO+qgwckJqA5SOa4JBXbwIwuuvfh4KEdNe6 GZqCNk3YvZxBMlHN4sa31+bw42gl7XeFmJ8bXCmXW+U5FSre8nhL4i/um6306Iv0 eXlAmPix1+78eT3k4szRARV758FeGJ0YRXrJJeRv6bY4ngU0r1LmoUDKNo1vJAum jGvpEf1w+z6DinHqSiWGNw7AOpppSSKjjpcJcrKfeq4bxI7wYPQkCYhSBKJzd75E z8/DKecYWz/CnYskm61ML25as0r403EbdRYLlxUuLvprwYwqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4emd2t5qZPWVHuRHnv4REsmUiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvMmQxN2NkNGYtNmI4Yy0z YmM2LWE4MTYtYTJmMmFkZDU4Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkXa+hyMMniLm8iiygodeWMoY0PzIZTpthFVQYlDGCzegrm6wFflOBr nTYcz6ctjXS2nx32JNr4k2PTxwzNyICeFUF5Z0U1nBxloXPJVwiHhgpSk26qqsdP vIRUhxkFJvFs6g0AgANOKVvNIzQ5wbs6sGQL+tMd2R3MG9ry6k3gL5xVJG4tFQiq 6SYvulMmKCcU6oddCJv6YI8fIbbx2d6h6tMV6S1FdyPlr8Lke4tm6+I7O5m8zusx vaTgX3wGI8iAr1vBYlRdf5gYUwR/5T6HiCU4GHvsBMS2Yu+jxYiqJyl7my48Jp05 X0IVaLOeT1zQDl7k8sLwws8FGO8bmi4= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:31 2025 by rpki-client