$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa File: f2d111b6-824d-3b08-af7b-3f301d73f479.roa (raw, json) Hash identifier: xN7MZEbbBvizvElvV3nQA9AGmn2IvMRCym4iMvNChY0= Subject key identifier: 2C:2C:EC:8B:AC:2B:5A:68:C1:C5:C3:28:7C:79:6C:84:50:80:29:5A Certificate issuer: /CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Certificate serial: 010D0C9F43285848E9CBE384DF7EB87282D72D80 Authority key identifier: 83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 30344 IP address blocks: 23.152.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e3:84:df:7e:b8:72:82:d7:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=1cd44631-a0cc-435e-b358-2db08e2875f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:69:4e:55:13:d0:69:61:af:90:44:2c:5f: 8f:8a:0c:03:4a:08:91:8c:7d:2a:23:73:70:b5:61: a4:4b:95:69:28:a7:b4:be:2e:f8:f9:5e:ca:26:98: 49:d0:0a:f1:4a:cf:46:c3:74:c8:71:37:cb:64:e8: ae:b2:a7:47:66:e7:65:03:d8:ae:83:a8:bb:29:52: ca:a8:67:4e:06:18:31:65:08:0d:0d:a2:22:b4:ef: 40:0e:b7:7a:05:86:72:00:8e:03:18:9f:63:aa:d3: e5:12:49:8f:c5:71:85:3d:a4:8c:7a:3e:92:44:0f: 27:9a:b1:ff:92:77:ee:9b:76:22:c6:58:9e:6c:72: 4b:0d:25:43:9f:79:03:70:03:17:0c:56:9d:9b:70: a8:68:6f:be:3a:e4:3d:87:df:e5:e1:af:78:53:89: f9:6d:24:a1:ee:06:90:f8:b5:23:4b:53:fd:53:c0: d7:29:b2:db:56:12:6a:c2:16:1b:db:07:d9:3d:d4: aa:7c:34:d9:bf:1d:87:16:c7:7a:ff:20:46:8b:b7: ef:69:35:88:73:04:3d:2e:f8:e1:57:18:48:14:f7: 6a:35:f7:47:f3:7f:cd:a3:72:3c:68:7a:06:23:71: 6a:2b:09:bc:17:2b:ed:fd:ba:7e:7c:09:40:bb:cf: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2C:EC:8B:AC:2B:5A:68:C1:C5:C3:28:7C:79:6C:84:50:80:29:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl X509v3 Authority Key Identifier: keyid:83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer sbgp-ipAddrBlock: critical IPv4: 23.152.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b0:5f:4e:0c:25:ad:52:3a:af:0e:6e:2b:71:24:80:16:0c: 24:97:ca:74:21:0a:31:22:84:97:c5:5f:88:4d:9f:f5:80:e8: 81:ec:9f:cc:81:95:3c:3d:57:b5:97:39:e1:ec:fa:7d:a4:db: e0:fd:dd:bb:1a:dc:68:59:08:da:32:4d:80:40:32:d6:66:7b: 70:0a:27:9a:c9:0a:4f:9a:db:4d:08:8f:4d:3e:3e:ad:df:a9: f1:12:e8:c4:b3:14:1e:18:df:03:98:fc:2d:22:92:02:41:0d: fa:fb:c1:34:84:25:d1:c1:fd:1d:c2:de:eb:f9:21:98:b1:b6: f9:e1:0d:4a:17:a9:2f:d8:05:4c:ac:16:69:bb:e5:49:65:0a: 6d:e2:82:16:09:df:b4:8b:25:a2:e6:56:e4:6f:04:8e:5b:92: c6:5c:b6:3e:27:eb:ae:8f:4d:5e:84:15:de:92:bf:e3:ad:12: f8:7c:1a:66:0f:c5:61:7f:33:77:68:7c:6c:1a:6b:19:4c:5f: 5a:c3:15:42:5b:90:a0:29:80:0e:cb:5a:27:82:9e:84:8d:40: 6a:e4:58:3b:f4:73:de:2c:09:8b:4e:f8:af:6c:37:5f:97:17: 67:3b:6c:ed:87:3e:89:af:c0:b0:e8:ef:6d:34:65:66:8b:90: ea:5b:0d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+OE3364coLXLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA5MWM0YzctYmY0Yy00NTAyLWJjMTktMmUzZjg0YjIw ZTZkMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MWNkNDQ2MzEtYTBjYy00MzVlLWIzNTgtMmRiMDhlMjg3NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrhpTlUT0Glhr5BELF+PigwDSgiRjH0qI3Nw tWGkS5VpKKe0vi74+V7KJphJ0ArxSs9Gw3TIcTfLZOiusqdHZudlA9iug6i7KVLK qGdOBhgxZQgNDaIitO9ADrd6BYZyAI4DGJ9jqtPlEkmPxXGFPaSMej6SRA8nmrH/ knfum3YixliebHJLDSVDn3kDcAMXDFadm3CoaG++OuQ9h9/l4a94U4n5bSSh7gaQ +LUjS1P9U8DXKbLbVhJqwhYb2wfZPdSqfDTZvx2HFsd6/yBGi7fvaTWIcwQ9Lvjh VxhIFPdqNfdH83/No3I8aHoGI3FqKwm8Fyvt/bp+fAlAu89xcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCws7IusK1powcXDKHx5bIRQgClaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDkx YzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNmODRiMjBlNmQvZjJkMTExYjYtODI0ZC0z YjA4LWFmN2ItM2YzMDFkNzNmNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzA5MWM0YzctYmY0Yy00NTAyLWJj MTktMmUzZjg0YjIwZTZkLzcwOTFjNGM3LWJmNGMtNDUwMi1iYzE5LTJlM2Y4NGIy MGU2ZC5jcmwwHwYDVR0jBBgwFoAUg7ionw+GRPGuMzkBA5Iz+UizmecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDkxYzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNm ODRiMjBlNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFawX04MJa1SOq8ObitxJIAWDCSXynQhCjEihJfFX4hNn/WA6IHsn8yB lTw9V7WXOeHs+n2k2+D93bsa3GhZCNoyTYBAMtZme3AKJ5rJCk+a200Ij00+Pq3f qfES6MSzFB4Y3wOY/C0ikgJBDfr7wTSEJdHB/R3C3uv5IZixtvnhDUoXqS/YBUys Fmm75UllCm3ighYJ37SLJaLmVuRvBI5bksZctj4n666PTV6EFd6Sv+OtEvh8GmYP xWF/M3dofGwaaxlMX1rDFUJbkKApgA7LWieCnoSNQGrkWDv0c94sCYtO+K9sN1+X F2c7bO2HPomvwLDo7200ZWaLkOpbDVk= -----END CERTIFICATE-----Generated at Fri Apr 11 21:01:31 2025 by rpki-client