$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa File: 2c9db57d-cb56-3111-ad11-10c62203b5ca.roa (raw, json) Hash identifier: zWJPRLQRLNfYhYkH1csicHy1mj6IJsHqVd2KF2PR+04= Subject key identifier: AE:EB:8B:41:63:A9:EB:0A:FD:FA:3D:C4:EA:FA:FA:6B:D1:A3:07:FB Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584900215E888D044611EF1AC3F0 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 19257 IP address blocks: 23.252.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5e:88:8d:04:46:11:ef:1a:c3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=0a0c84da-3e4f-43ff-b3de-2968d7337ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:d8:27:6a:8e:27:41:ab:7b:b4:f9:56:e5: 62:b7:c6:3c:22:00:7c:74:2b:f5:cd:59:10:1b:01: e4:00:7d:04:7d:5d:88:5c:c2:ee:83:c3:d6:1e:fa: 7e:a8:73:87:f2:5e:c8:f5:c8:89:1f:64:f3:26:88: 34:25:ae:17:50:16:32:38:cf:05:eb:87:5c:96:08: 97:a4:07:ec:4c:f7:20:bd:42:ae:ff:c5:c0:c6:2d: 45:2c:b8:36:a4:dc:b4:95:c4:4e:bc:ba:8b:90:00: 21:c3:77:cc:2d:3a:a2:3b:d6:51:b9:d1:10:2e:87: ba:4a:9b:dd:90:ef:a0:b9:14:55:7a:de:71:61:35: fc:d7:1b:e5:38:8e:45:c5:85:77:4e:95:11:29:d7: e9:05:7a:01:c8:3b:82:7c:52:7a:6c:7c:0b:f0:71: 02:1c:d0:62:49:07:3f:0c:ab:2c:2d:9a:0a:3a:b3: c5:12:37:87:0b:04:8e:2c:4a:62:3b:73:4e:72:6c: 92:78:3f:5e:00:45:68:d9:90:6a:20:12:4d:fe:d7: b0:da:b3:a2:f7:92:7b:23:ea:00:c7:df:8f:a2:a7: 6f:55:c4:25:96:37:65:37:49:28:b8:18:f0:ab:2d: b5:23:c0:f2:e4:d9:78:5b:8f:21:76:b3:2e:3c:e0: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:8B:41:63:A9:EB:0A:FD:FA:3D:C4:EA:FA:FA:6B:D1:A3:07:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:be:c2:2f:cd:22:1c:b5:aa:c6:3f:d1:29:9f:fa:83:75:17: 78:53:52:f6:99:c0:18:a7:7c:0b:bb:16:ce:2c:2d:a4:5a:50: 43:36:bc:33:35:44:86:8b:7c:d8:db:8f:2b:bb:f1:7f:6a:49: 83:26:6b:e0:a6:a8:a1:b7:c3:69:c6:a5:57:e4:12:99:d5:a8: ca:31:3c:b1:d2:5a:51:4f:7a:a1:58:c1:f2:ea:e5:2c:58:05: 8f:78:e5:b0:de:75:a8:bc:ce:96:c2:c1:0d:a4:36:6e:ab:56: 5f:80:3f:c5:39:7b:2d:8e:3f:6a:01:df:3a:e2:10:2f:82:92: 62:1e:f2:3e:85:4d:5f:70:0c:83:1c:ed:9c:f0:32:cd:37:ca: 5a:d0:a6:61:08:13:57:4b:da:fe:6f:15:76:cd:10:e0:05:36: eb:d4:b3:06:53:34:ec:f6:42:0e:da:9e:ed:af:92:ec:64:bc: cb:1d:bf:d5:ee:28:99:20:6d:73:a7:43:46:8e:f3:79:8f:7e: db:15:9b:91:73:1d:3f:32:69:ab:53:58:4f:71:2e:35:f0:97: 93:91:1a:ce:44:a3:39:6c:43:53:ee:ec:2a:43:57:c0:9d:7b: f0:1d:67:53:a3:c2:53:d5:23:02:c9:fc:5e:fb:8e:18:86:fc: ae:57:39:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV6IjQRGEe8aw/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MGEwYzg0ZGEtM2U0Zi00M2ZmLWIzZGUtMjk2OGQ3MzM3YWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9bYJ2qOJ0Gre7T5VuVit8Y8IgB8dCv1zVkQ GwHkAH0EfV2IXMLug8PWHvp+qHOH8l7I9ciJH2TzJog0Ja4XUBYyOM8F64dclgiX pAfsTPcgvUKu/8XAxi1FLLg2pNy0lcROvLqLkAAhw3fMLTqiO9ZRudEQLoe6Spvd kO+guRRVet5xYTX81xvlOI5FxYV3TpURKdfpBXoByDuCfFJ6bHwL8HECHNBiSQc/ DKssLZoKOrPFEjeHCwSOLEpiO3NOcmySeD9eAEVo2ZBqIBJN/tew2rOi95J7I+oA x9+PoqdvVcQlljdlN0kouBjwqy21I8Dy5Nl4W48hdrMuPOC6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7ri0FjqesK/fo9xOr6+mvRowf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMmM5ZGI1N2QtY2I1Ni0z MTExLWFkMTEtMTBjNjIyMDNiNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKy+wi/NIhy1qsY/0Smf+oN1F3hTUvaZwBinfAu7Fs4sLaRaUEM2vDM1 RIaLfNjbjyu78X9qSYMma+CmqKG3w2nGpVfkEpnVqMoxPLHSWlFPeqFYwfLq5SxY BY945bDedai8zpbCwQ2kNm6rVl+AP8U5ey2OP2oB3zriEC+CkmIe8j6FTV9wDIMc 7ZzwMs03ylrQpmEIE1dL2v5vFXbNEOAFNuvUswZTNOz2Qg7anu2vkuxkvMsdv9Xu KJkgbXOnQ0aO83mPftsVm5FzHT8yaatTWE9xLjXwl5ORGs5EozlsQ1Pu7CpDV8Cd e/AdZ1OjwlPVIwLJ/F77jhiG/K5XOfg= -----END CERTIFICATE-----Generated at Sat Apr 12 15:23:33 2025 by rpki-client