$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa File: 200cf835-7710-3227-a110-70619776c894.roa (raw, json) Hash identifier: hwJRCH8aLNeTEk5IDAttd/orttcOps0M5VyppS7G7iU= Subject key identifier: 18:7A:D5:C7:E4:C7:6B:4E:FE:70:67:E7:97:ED:70:80:62:8D:0E:5F Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584900215E480E00EE2BA517C240 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 19257 IP address blocks: 23.252.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5e:48:0e:00:ee:2b:a5:17:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=ac95e1a2-a213-4e3e-97fd-c37929cbb151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:1f:44:3f:2c:f2:56:40:49:26:77:c2:45: c6:54:91:16:50:56:cb:b3:f3:6e:a1:62:c6:9d:2b: 9e:c8:2b:6d:24:3b:2c:4f:fc:2d:76:95:95:92:0d: 4d:8e:e0:b2:ce:cd:66:60:35:02:75:88:c1:68:fb: e2:20:c4:1c:d0:a5:8b:2a:c3:a4:d9:ee:7d:02:f5: de:c3:27:bc:b8:36:53:8b:07:42:f0:86:1a:b8:31: 8e:36:e2:bd:bf:ae:1e:c2:6e:94:10:a2:97:d1:9b: cd:13:af:48:d9:c3:1c:d5:ba:2c:a9:10:ed:28:c5: 93:84:28:3e:35:a5:74:76:2c:a1:e6:02:ee:c8:57: f5:ef:ef:d8:28:8d:93:cf:aa:93:b2:f3:f0:a2:cf: 1e:6c:08:a6:09:02:ce:82:15:07:53:81:ab:64:c7: e6:5b:9d:69:6d:60:9a:6a:db:7c:4a:99:dc:0d:17: 85:bf:75:33:34:01:bb:ad:60:32:18:2e:89:8a:c5: b9:e9:cf:7b:9d:e1:88:6a:05:a1:41:93:93:4b:20: ca:4d:1e:5f:90:8e:fc:49:89:b9:0e:eb:20:d7:5f: 5d:b8:9d:a8:d7:5f:26:30:5f:9e:b0:56:76:b0:ef: d3:1c:e7:01:e2:3a:0a:a6:25:7c:a3:35:74:ba:36: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7A:D5:C7:E4:C7:6B:4E:FE:70:67:E7:97:ED:70:80:62:8D:0E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:62:00:cd:14:8a:ea:7a:5f:8a:5e:78:a3:d1:8d:fa:35:24: 60:54:e4:37:56:ad:ef:f1:c3:37:38:44:7d:a0:05:5d:c2:6c: 18:c6:ca:9b:7b:74:4b:be:6e:99:32:f5:2f:86:d8:d3:cf:26: f7:02:ae:40:57:57:cf:a2:70:70:87:20:8d:0f:22:6e:12:dd: 10:f0:17:f8:4f:f7:ca:a7:ee:17:e9:dc:b0:ad:17:9b:c6:b4: e0:a1:09:50:db:04:86:e1:9a:32:a1:c0:7b:5c:ae:0e:56:cf: 2b:2b:d7:9a:5a:31:ff:b5:58:c7:3e:49:93:80:94:9e:be:29: 16:45:aa:49:b7:65:67:fd:7a:c3:0e:d7:67:f4:c8:78:d7:bf: 92:f5:72:29:4e:26:ec:12:69:8a:4a:6e:eb:23:59:e2:0b:30: 0b:58:46:06:2d:34:71:14:aa:55:b4:ed:94:1b:31:84:42:cf: 3c:96:91:83:75:0c:4d:a9:3c:a6:33:73:7d:db:19:f1:1a:40: dc:76:f7:da:b4:4a:ce:fd:6c:ab:11:d2:53:7f:17:21:84:81: b4:06:71:66:b9:80:3c:ed:6d:64:8b:cf:57:98:f9:6f:b6:6f: a7:9b:ce:46:34:0b:35:34:11:f5:10:63:10:ad:b5:c0:38:8b: eb:4d:8f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV5IDgDuK6UXwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YWM5NWUxYTItYTIxMy00ZTNlLTk3ZmQtYzM3OTI5Y2JiMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI8fRD8s8lZASSZ3wkXGVJEWUFbLs/NuoWLG nSueyCttJDssT/wtdpWVkg1NjuCyzs1mYDUCdYjBaPviIMQc0KWLKsOk2e59AvXe wye8uDZTiwdC8IYauDGONuK9v64ewm6UEKKX0ZvNE69I2cMc1bosqRDtKMWThCg+ NaV0diyh5gLuyFf17+/YKI2Tz6qTsvPwos8ebAimCQLOghUHU4GrZMfmW51pbWCa att8SpncDReFv3UzNAG7rWAyGC6JisW56c97neGIagWhQZOTSyDKTR5fkI78SYm5 Dusg119duJ2o118mMF+esFZ2sO/THOcB4joKpiV8ozV0ujY0EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh61cfkx2tO/nBn55ftcIBijQ5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMjAwY2Y4MzUtNzcxMC0z MjI3LWExMTAtNzA2MTk3NzZjODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIViAM0Uiup6X4peeKPRjfo1JGBU5DdWre/xwzc4RH2gBV3CbBjGypt7 dEu+bpky9S+G2NPPJvcCrkBXV8+icHCHII0PIm4S3RDwF/hP98qn7hfp3LCtF5vG tOChCVDbBIbhmjKhwHtcrg5Wzysr15paMf+1WMc+SZOAlJ6+KRZFqkm3ZWf9esMO 12f0yHjXv5L1cilOJuwSaYpKbusjWeILMAtYRgYtNHEUqlW07ZQbMYRCzzyWkYN1 DE2pPKYzc33bGfEaQNx299q0Ss79bKsR0lN/FyGEgbQGcWa5gDztbWSLz1eY+W+2 b6ebzkY0CzU0EfUQYxCttcA4i+tNj9o= -----END CERTIFICATE-----Generated at Sat Apr 12 15:35:51 2025 by rpki-client