$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa File: 9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa (raw, json) Hash identifier: O4wUrrA/zwkQAX2E+2oDZWrGM/WQDNiJqj+E2Rc/4pg= Subject key identifier: 48:55:EF:24:BC:E9:27:51:14:A4:14:36:09:DC:02:58:B6:6F:11:8B Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F43285848D0ABB5BA92058E3393C38480 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 133199 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b5:ba:92:05:8e:33:93:c3:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=398d016e-be44-462c-bfca-dfa3b94bca6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:5a:b4:41:2c:1b:57:ea:86:ce:47:64:6a: 7a:de:aa:98:21:c6:17:4b:46:a5:d4:b3:59:95:32: 68:ed:dc:4e:ba:4e:e5:61:b8:a6:f0:53:6c:c1:d9: 5e:ce:e0:85:1c:6a:59:2a:3a:cd:72:f1:b2:5f:d0: 28:4d:b4:37:b7:f9:61:b8:42:94:4b:4c:3c:db:2d: f8:fa:a6:cb:f1:96:5e:a4:8a:96:f7:c3:aa:37:f7: 28:97:17:72:ff:f3:97:fc:f2:3b:55:44:9d:3e:63: 9b:be:45:47:67:09:ee:cf:38:18:8b:41:2c:14:08: 3d:e7:32:73:d9:a9:9c:41:28:42:92:46:94:f6:fb: 11:19:2a:83:b4:cb:5d:58:05:b0:32:93:d3:85:fc: 19:bd:b8:88:59:d8:e3:33:6c:e6:c3:90:40:1c:97: 4a:ed:a3:61:48:fa:bd:12:6f:ac:b9:d7:3d:2f:50: b2:4b:28:75:d3:8e:b5:66:43:7f:a1:30:a5:60:de: a7:2e:72:5a:c1:c9:7a:72:90:d0:10:7d:99:61:86: 08:19:ed:7e:1d:76:55:a1:aa:f8:8d:a8:f9:04:3a: 45:e8:fc:62:0f:cb:2c:4e:0b:34:b4:21:aa:3d:dd: 13:0f:12:8c:1a:f3:9f:90:08:ad:62:5a:88:a7:2b: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:55:EF:24:BC:E9:27:51:14:A4:14:36:09:DC:02:58:B6:6F:11:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:07:41:5a:65:21:7c:4c:a3:f0:76:11:a2:91:08:00:48:ab: d5:09:59:b0:60:68:61:a8:57:ea:e2:2f:a1:5f:63:69:92:9e: 49:82:01:f7:bf:82:fc:82:91:46:3b:9e:ad:0b:70:c4:0f:d7: 67:32:b8:17:c9:12:ab:de:08:21:c7:3e:2d:1a:a4:41:4f:29: 62:12:44:a1:f6:22:d3:e7:da:9d:fc:2f:48:67:1e:f6:af:3c: 39:4a:25:d5:19:2a:07:46:93:d0:85:8c:d3:d1:7f:54:51:b2: 81:b0:55:c3:da:a3:de:2d:35:94:6b:35:e5:74:0a:bb:fe:2c: 6e:5c:de:93:ab:3f:b8:34:c1:16:19:c2:5f:07:63:ae:2e:61: 86:bc:6c:72:9c:85:39:97:b7:e5:c0:90:fe:e7:d8:e1:7f:26: 81:0e:d5:2b:51:bc:65:c4:a6:27:47:38:94:70:65:44:36:69: 70:8d:6e:3a:93:de:f3:35:c4:cd:8e:24:71:89:c3:89:fe:f2: 9e:0b:db:0f:4b:00:71:d6:1e:40:a7:97:47:89:6c:bb:0d:b9: 04:fe:5b:9a:bf:de:c8:e1:76:99:57:95:4e:b2:f7:bd:76:45: 82:a1:f3:6d:22:a0:13:d8:96:0a:6d:1d:97:bd:49:e3:a0:9f: 60:7f:eb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7W6kgWOM5PDhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk Mzk4ZDAxNmUtYmU0NC00NjJjLWJmY2EtZGZhM2I5NGJjYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6patEEsG1fqhs5HZGp63qqYIcYXS0al1LNZ lTJo7dxOuk7lYbim8FNswdlezuCFHGpZKjrNcvGyX9AoTbQ3t/lhuEKUS0w82y34 +qbL8ZZepIqW98OqN/colxdy//OX/PI7VUSdPmObvkVHZwnuzzgYi0EsFAg95zJz 2amcQShCkkaU9vsRGSqDtMtdWAWwMpPThfwZvbiIWdjjM2zmw5BAHJdK7aNhSPq9 Em+sudc9L1CySyh10461ZkN/oTClYN6nLnJawcl6cpDQEH2ZYYYIGe1+HXZVoar4 jaj5BDpF6PxiD8ssTgs0tCGqPd0TDxKMGvOfkAitYlqIpyuQ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhV7yS86SdRFKQUNgncAli2bxGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvOWJlZjljZTMtZmYzNi0z YzA1LWJhY2UtMWVjYTNmZjNkYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcHQVplIXxMo/B2EaKRCABIq9UJWbBgaGGoV+riL6FfY2mSnkmCAfe/ gvyCkUY7nq0LcMQP12cyuBfJEqveCCHHPi0apEFPKWISRKH2ItPn2p38L0hnHvav PDlKJdUZKgdGk9CFjNPRf1RRsoGwVcPao94tNZRrNeV0Crv+LG5c3pOrP7g0wRYZ wl8HY64uYYa8bHKchTmXt+XAkP7n2OF/JoEO1StRvGXEpidHOJRwZUQ2aXCNbjqT 3vM1xM2OJHGJw4n+8p4L2w9LAHHWHkCnl0eJbLsNuQT+W5q/3sjhdplXlU6y9712 RYKh820ioBPYlgptHZe9SeOgn2B/6w4= -----END CERTIFICATE-----Generated at Sat Apr 12 14:50:47 2025 by rpki-client