$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/313bf06e-6515-30a0-88e8-3eef89644c81.roa File: 313bf06e-6515-30a0-88e8-3eef89644c81.roa (raw, json) Hash identifier: IUe/+dy0yU011duCAyfn7IGvSl94IlHq+e449sSNKqk= Subject key identifier: 36:98:AB:55:00:44:83:2A:B1:E5:FD:14:CD:4D:90:1C:0D:89:9F:C0 Certificate issuer: /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea Certificate serial: 010D0C9F43285848FD56B8CA9510D10D67113670 Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/313bf06e-6515-30a0-88e8-3eef89644c81.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 400861 IP address blocks: 23.153.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b8:ca:95:10:d1:0d:67:11:36:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=8290f459-5316-42cb-ae5a-71c710098817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:f2:d2:50:6a:bc:20:a6:80:03:3e:15:31: ef:86:20:37:ff:d5:6d:fa:9d:62:3f:12:94:c2:ff: 3e:80:c7:b9:df:1e:d9:ac:6b:aa:75:c3:b1:56:d4: f0:3f:d2:86:f2:1f:57:be:5b:24:c3:39:c3:dc:a5: 39:55:c7:57:38:16:1a:4c:c1:ea:33:38:23:26:15: 42:97:81:26:9c:0d:11:85:3e:07:fa:72:0b:af:6f: d0:ef:3a:4d:b5:43:18:6a:9d:8b:13:f5:9f:fa:45: 5f:1a:a4:0b:de:2e:58:40:3a:c4:82:49:d2:d1:66: d8:91:74:4d:65:99:e5:a1:78:d0:be:49:94:71:a2: 7d:dd:f2:98:e2:94:43:68:33:fc:e2:a7:55:4c:41: 6e:a1:70:ba:45:23:30:d3:a3:b0:36:40:51:f7:fc: f3:34:5f:1e:59:ef:64:96:4f:97:87:d0:21:ee:5b: 6d:8d:0a:f4:c2:c3:1c:79:d4:95:54:a8:11:85:6c: 23:76:44:2f:4e:c4:4e:97:ff:31:f4:e3:bf:6b:db: bc:2a:1b:e2:cf:7d:c7:65:ae:96:39:de:be:a6:0b: c5:bf:36:10:18:b1:3f:0f:3c:d1:05:85:21:ce:f8: 38:4d:d9:4b:37:b0:39:06:0b:9b:ca:e3:78:33:fd: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:98:AB:55:00:44:83:2A:B1:E5:FD:14:CD:4D:90:1C:0D:89:9F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/313bf06e-6515-30a0-88e8-3eef89644c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl X509v3 Authority Key Identifier: keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer sbgp-ipAddrBlock: critical IPv4: 23.153.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:68:5d:b4:c4:44:e7:f1:2d:ac:9b:86:b3:6c:aa:e4:fc:98: 9b:3e:bf:24:38:78:2f:18:ea:22:8c:10:26:1f:e2:b1:1b:1d: c0:7d:17:94:00:32:9d:09:0f:f5:3e:f2:ec:11:c5:75:b3:86: cf:59:6f:2c:ec:e6:6a:f1:a5:08:4b:06:a4:64:88:f2:cc:06: b4:df:ba:2b:f0:64:37:29:d0:f7:76:31:7e:e8:35:21:91:7c: 82:82:11:fe:a3:89:67:99:0c:97:c5:99:5f:b6:59:1a:46:d0: 3e:1d:3e:06:aa:74:19:11:dd:39:5b:50:be:5d:93:0f:78:bc: a4:f3:96:b8:29:bb:c7:85:d3:28:69:0f:fa:a5:b3:0d:ca:05: e8:04:3a:6f:12:43:fe:cb:73:f2:35:8e:0a:1b:42:b0:81:fc: e7:e9:ea:b8:dd:c2:50:b2:78:18:3a:5b:9d:2f:7c:86:b2:c1: 75:85:39:7f:47:14:3a:35:de:eb:73:cc:e4:f8:aa:15:bf:84: f7:de:8e:c7:12:be:18:ca:87:8f:5e:36:e3:e2:bc:17:9f:1e: 3d:c7:e8:b9:b5:01:41:ac:09:58:9c:87:86:da:89:46:c9:34: 9a:a1:9c:e0:b8:83:f6:fe:3c:a3:5d:cc:f3:49:18:44:16:00: d3:a8:03:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrjKlRDRDWcRNnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiMTdiZWEtZTY2NS00ZWQxLWFiZTMtZDJhOWFjMzRl MGVhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODI5MGY0NTktNTMxNi00MmNiLWFlNWEtNzFjNzEwMDk4ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA213y0lBqvCCmgAM+FTHvhiA3/9Vt+p1iPxKU wv8+gMe53x7ZrGuqdcOxVtTwP9KG8h9XvlskwznD3KU5VcdXOBYaTMHqMzgjJhVC l4EmnA0RhT4H+nILr2/Q7zpNtUMYap2LE/Wf+kVfGqQL3i5YQDrEgknS0WbYkXRN ZZnloXjQvkmUcaJ93fKY4pRDaDP84qdVTEFuoXC6RSMw06OwNkBR9/zzNF8eWe9k lk+Xh9Ah7lttjQr0wsMcedSVVKgRhWwjdkQvTsROl/8x9OO/a9u8Khviz33HZa6W Od6+pgvFvzYQGLE/DzzRBYUhzvg4TdlLN7A5BgubyuN4M/2DvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaYq1UARIMqseX9FM1NkBwNiZ/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWIx N2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5YWMzNGUwZWEvMzEzYmYwNmUtNjUxNS0z MGEwLTg4ZTgtM2VlZjg5NjQ0YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFiMTdiZWEtZTY2NS00ZWQxLWFi ZTMtZDJhOWFjMzRlMGVhL2FhYjE3YmVhLWU2NjUtNGVkMS1hYmUzLWQyYTlhYzM0 ZTBlYS5jcmwwHwYDVR0jBBgwFoAULaiA1O+1z0U8T5SFN3XGDcEUFSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWIxN2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5 YWMzNGUwZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5n4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVoXbTEROfxLaybhrNsquT8mJs+vyQ4eC8Y6iKMECYf4rEbHcB9F5QA Mp0JD/U+8uwRxXWzhs9Zbyzs5mrxpQhLBqRkiPLMBrTfuivwZDcp0Pd2MX7oNSGR fIKCEf6jiWeZDJfFmV+2WRpG0D4dPgaqdBkR3TlbUL5dkw94vKTzlrgpu8eF0yhp D/qlsw3KBegEOm8SQ/7Lc/I1jgobQrCB/Ofp6rjdwlCyeBg6W50vfIaywXWFOX9H FDo13utzzOT4qhW/hPfejscSvhjKh49eNuPivBefHj3H6Lm1AUGsCVich4baiUbJ NJqhnOC4g/b+PKNdzPNJGEQWANOoA8U= -----END CERTIFICATE-----Generated at Sat Apr 12 13:09:24 2025 by rpki-client