$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa File: 4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa (raw, json) Hash identifier: LXVlixY2y3Ip83cUZaTqcMl/fGP/aERIO8ed1ESFIls= Subject key identifier: 38:99:D3:35:C9:E3:BB:85:C0:43:1C:A4:D3:B4:7F:66:20:33:6E:84 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584900215E7C1C21FB48E08AD180 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 19257 IP address blocks: 23.252.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5e:7c:1c:21:fb:48:e0:8a:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=45a6cf8a-4914-42ac-ac88-7c56a400a29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:6a:ee:ab:75:2c:56:9b:f1:c8:95:7c:a1: 99:79:6b:15:7f:7b:49:d6:10:d2:3d:f3:69:a5:be: cc:34:b9:b0:17:3f:0c:0f:0e:76:af:6e:38:0c:ac: 52:ec:46:7b:e1:3d:18:45:87:b8:0d:72:54:44:3b: ac:4d:99:6f:56:25:4a:ac:03:fa:f3:71:62:91:25: 4e:da:22:4e:37:c9:2a:40:f6:10:62:e3:39:31:b9: cd:39:3a:4d:37:cf:fa:50:f3:5f:6d:ff:7f:76:dd: 10:af:36:e3:be:d9:5a:4e:3d:e3:2c:84:a1:73:2c: 6c:3c:2d:4b:ed:ec:98:64:9c:b1:8b:0d:e9:c8:ab: f6:1b:bb:3e:b2:28:6b:fc:43:83:56:67:5c:a0:f2: 59:dd:81:8d:57:55:92:d2:a8:50:c9:b7:40:39:0f: 6e:67:68:cc:be:da:eb:1d:dd:ef:61:8f:93:8f:86: 17:68:79:39:f6:13:68:c7:7c:3a:6e:50:76:52:b6: ee:c1:c5:c5:cc:88:8c:3a:f9:ca:41:58:7c:82:01: c7:b0:7f:28:66:19:32:3e:e2:17:ab:74:46:03:13: db:41:5f:05:f1:3a:f1:f4:96:31:f2:08:d8:d2:ea: b9:62:63:18:0b:b8:10:12:b5:34:cd:dd:81:0e:1c: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:99:D3:35:C9:E3:BB:85:C0:43:1C:A4:D3:B4:7F:66:20:33:6E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cd:65:b6:ed:0d:63:1a:80:97:30:df:28:c0:29:09:90:17: eb:53:03:db:cb:b1:5f:8f:6a:a9:b6:7e:91:a6:18:ac:17:fb: 11:86:ec:67:c3:d3:19:55:7c:51:e1:f1:9c:ae:0b:4c:d2:17: 7b:be:7c:51:26:77:9d:05:f4:9a:ee:5f:fc:7e:9f:28:30:5f: f5:4c:fb:02:b5:86:0b:78:8d:eb:01:7f:b1:94:72:fe:97:79: 2a:91:02:6d:5c:51:83:53:56:a5:28:aa:e9:b7:9d:d1:ff:20: ce:08:67:4d:9d:d7:43:07:0b:f1:42:01:62:41:90:05:9b:9e: dc:6f:43:10:01:26:4d:93:b6:f9:40:99:1a:eb:2b:e0:53:3e: 47:77:6e:2c:38:80:6c:a6:c7:5c:2c:df:0a:b5:e2:81:ba:bf: e6:ac:c5:b7:99:2b:00:bd:a5:fa:e3:9d:90:c4:0e:dd:b6:ab: a2:1b:87:09:59:fe:2d:32:ae:ea:41:b1:f0:a1:94:01:0a:1d: fc:6c:b2:db:60:73:db:a1:55:63:96:2d:d8:61:72:1c:b5:93: 45:84:30:8d:78:61:ed:43:30:ae:7f:b8:3d:73:f0:4b:aa:9c: d9:67:d1:28:5d:8b:1f:e8:08:a1:21:d2:3e:84:76:c8:7f:85: 8a:10:51:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV58HCH7SOCK0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NDVhNmNmOGEtNDkxNC00MmFjLWFjODgtN2M1NmE0MDBhMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo9q7qt1LFab8ciVfKGZeWsVf3tJ1hDSPfNp pb7MNLmwFz8MDw52r244DKxS7EZ74T0YRYe4DXJURDusTZlvViVKrAP683FikSVO 2iJON8kqQPYQYuM5MbnNOTpNN8/6UPNfbf9/dt0QrzbjvtlaTj3jLIShcyxsPC1L 7eyYZJyxiw3pyKv2G7s+sihr/EODVmdcoPJZ3YGNV1WS0qhQybdAOQ9uZ2jMvtrr Hd3vYY+Tj4YXaHk59hNox3w6blB2UrbuwcXFzIiMOvnKQVh8ggHHsH8oZhkyPuIX q3RGAxPbQV8F8Trx9JYx8gjY0uq5YmMYC7gQErU0zd2BDhx66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiZ0zXJ47uFwEMcpNO0f2YgM26EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvNGNiZWQ4ODUtNjUyMi0z ZGJlLTlhMzUtZWJjNGI5YjNkYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3NZbbtDWMagJcw3yjAKQmQF+tTA9vLsV+Paqm2fpGmGKwX+xGG7GfD 0xlVfFHh8ZyuC0zSF3u+fFEmd50F9JruX/x+nygwX/VM+wK1hgt4jesBf7GUcv6X eSqRAm1cUYNTVqUoqum3ndH/IM4IZ02d10MHC/FCAWJBkAWbntxvQxABJk2TtvlA mRrrK+BTPkd3biw4gGymx1ws3wq14oG6v+asxbeZKwC9pfrjnZDEDt22q6IbhwlZ /i0yrupBsfChlAEKHfxssttgc9uhVWOWLdhhchy1k0WEMI14Ye1DMK5/uD1z8Euq nNln0Shdix/oCKEh0j6Edsh/hYoQUbs= -----END CERTIFICATE-----Generated at Sat Apr 12 15:29:51 2025 by rpki-client