$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa File: 98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa (raw, json) Hash identifier: nBjZRTEp5sB4sCU38+kWp4xVCxWTHIf3B7iLRF3SLas= Subject key identifier: 05:07:BA:18:CE:C8:20:E7:CC:3F:00:8F:6B:74:94:FF:FC:B4:10:F2 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584900215E55A1561AE86F8F4C80 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 19257 IP address blocks: 23.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5e:55:a1:56:1a:e8:6f:8f:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=c4fb64a0-d951-4065-b6b0-964f8aca4fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:11:ca:bc:77:d0:ac:19:40:57:d8:53:0c:70: 6f:5c:b7:88:5f:58:78:d7:4a:a8:e9:25:74:c0:5c: f3:9f:de:e5:06:44:24:67:a1:b5:76:a7:2b:ce:39: 58:60:a1:a9:27:77:e0:95:3b:bf:f5:18:be:dd:4a: 42:88:41:61:21:5c:35:56:15:17:4d:4e:7b:27:cb: 0d:02:31:01:9a:37:3d:0e:25:dc:bd:85:4f:d0:97: 80:fd:50:f6:38:08:24:82:5d:67:83:18:7c:50:c6: ff:18:20:94:98:12:d7:4a:2d:b3:ae:7d:cb:3e:f0: 81:05:f1:78:87:bf:9d:49:d5:be:68:ab:85:40:fe: ec:12:5a:bb:41:24:a8:1d:73:39:ce:c7:b8:f8:3c: f6:d0:b9:0d:68:ea:a4:35:99:41:21:01:0d:de:e9: 64:b7:35:2f:3a:13:cf:83:36:61:24:1f:b5:b7:3c: 6e:85:36:42:d0:bd:5f:6a:b1:a8:c2:6c:4f:c6:ac: 03:61:d9:7c:13:1b:80:dd:2d:7a:29:a9:3e:cb:67: 9a:d1:36:cf:1c:0b:c7:10:0f:76:a5:ce:2d:b8:fa: 71:b0:7d:ff:3c:5e:ef:c1:10:92:ff:6d:38:24:55: 4e:1a:1f:a2:9d:22:8b:c2:9a:ad:08:5b:48:17:ae: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:07:BA:18:CE:C8:20:E7:CC:3F:00:8F:6B:74:94:FF:FC:B4:10:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:dc:ab:a1:97:a1:33:dd:02:2f:57:10:9e:69:0f:41:5d:95: 57:e2:4d:37:39:fa:47:e3:10:c0:06:84:2e:99:a3:f0:32:65: e8:e4:60:02:db:77:2d:72:db:db:2d:99:4c:b5:93:9d:6d:10: 7f:21:fd:ad:19:33:86:3a:03:59:c0:07:9d:0d:91:ec:cf:4f: 67:34:bb:3c:2e:25:23:2e:c8:d1:21:c8:17:71:5d:a7:6d:92: 8b:ca:96:67:3d:14:c8:59:6e:2d:c8:29:e7:df:ae:88:5a:0f: 47:b5:e4:23:ef:0b:f6:10:59:32:4b:87:ef:de:63:16:bb:47: af:e2:43:94:48:88:f9:4d:08:67:c6:2d:ef:72:65:f3:d4:7c: c5:dd:2d:cc:ae:7b:32:bd:ea:91:26:df:fa:ef:40:3d:13:33: 96:b7:23:f0:9e:0e:a8:af:e6:05:d2:80:65:db:6d:5a:64:97: bb:54:36:f8:85:df:fb:d1:ea:f0:93:36:fe:99:35:94:f8:6b: 73:63:c4:e1:54:e5:00:f2:a4:a4:39:1d:cc:5d:4b:8f:11:12: 81:b3:56:cd:32:a3:23:be:c7:c1:41:5f:0e:a4:84:84:6c:6c: de:8f:b5:a9:ff:4d:db:67:06:de:56:25:05:8b:88:be:42:f3: 75:e7:58:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV5VoVYa6G+PTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YzRmYjY0YTAtZDk1MS00MDY1LWI2YjAtOTY0ZjhhY2E0ZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhHKvHfQrBlAV9hTDHBvXLeIX1h410qo6SV0 wFzzn97lBkQkZ6G1dqcrzjlYYKGpJ3fglTu/9Ri+3UpCiEFhIVw1VhUXTU57J8sN AjEBmjc9DiXcvYVP0JeA/VD2OAgkgl1ngxh8UMb/GCCUmBLXSi2zrn3LPvCBBfF4 h7+dSdW+aKuFQP7sElq7QSSoHXM5zse4+Dz20LkNaOqkNZlBIQEN3ulktzUvOhPP gzZhJB+1tzxuhTZC0L1farGowmxPxqwDYdl8ExuA3S16Kak+y2ea0TbPHAvHEA92 pc4tuPpxsH3/PF7vwRCS/204JFVOGh+inSKLwpqtCFtIF67powIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUHuhjOyCDnzD8Aj2t0lP/8tBDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvOThkMWFmMzctOTBkNy0z NTQ4LThkYTgtYzQxZjVjY2YxYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHcq6GXoTPdAi9XEJ5pD0FdlVfiTTc5+kfjEMAGhC6Zo/AyZejkYALb dy1y29stmUy1k51tEH8h/a0ZM4Y6A1nAB50NkezPT2c0uzwuJSMuyNEhyBdxXadt kovKlmc9FMhZbi3IKeffrohaD0e15CPvC/YQWTJLh+/eYxa7R6/iQ5RIiPlNCGfG Le9yZfPUfMXdLcyuezK96pEm3/rvQD0TM5a3I/CeDqiv5gXSgGXbbVpkl7tUNviF 3/vR6vCTNv6ZNZT4a3NjxOFU5QDypKQ5HcxdS48REoGzVs0yoyO+x8FBXw6khIRs bN6Ptan/TdtnBt5WJQWLiL5C83XnWGw= -----END CERTIFICATE-----Generated at Sat Apr 12 14:56:12 2025 by rpki-client