$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa File: 69d68907-27fa-324f-9d10-081d4279bbc0.roa (raw, json) Hash identifier: Rt6pmI+i7V7IAu3aGXFWdJ9EKhmaJupNK8+rXbsQY7s= Subject key identifier: 39:64:95:AD:B1:F7:AA:69:76:3C:94:D7:FC:07:D9:8D:42:DF:72:35 Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F43285848DCE68BF47839E54C27B6BC40 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa Signing time: Wed 12 Feb 2025 23:09:15 +0000 ROA not before: Wed 12 Feb 2025 23:09:15 +0000 ROA not after: Tue 13 May 2025 22:09:15 +0000 asID: 400304 IP address blocks: 23.147.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dc:e6:8b:f4:78:39:e5:4c:27:b6:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Feb 12 23:09:15 2025 GMT Not After : May 13 22:09:15 2025 GMT Subject: CN=ac64a94d-a312-48dd-a1f4-3b263773c4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a7:d9:0a:ea:43:ae:f5:59:41:d5:6c:04:5e: 38:04:55:62:55:b1:0e:8e:78:54:0e:25:21:88:3e: 72:96:07:ac:1a:c8:f8:c9:8c:3b:09:0d:11:2f:50: 56:32:8a:8a:36:88:3f:2b:fd:b1:a2:99:9a:f0:5c: 19:a6:f0:9a:bb:60:03:a7:fd:14:75:95:06:0a:09: 3d:b9:84:6c:66:0e:00:18:27:a4:a2:f0:2a:89:e8: cf:5a:71:ff:1d:db:04:27:3f:2d:66:e6:78:5c:f9: cc:c9:29:ea:5b:af:a0:50:92:35:cb:0f:f4:b7:b6: e2:27:e8:d0:bb:8b:9e:fe:b6:9a:b2:2e:58:07:f9: 09:9c:f4:bb:05:c8:7c:26:58:e8:a1:34:90:8f:6b: 85:06:eb:4b:4a:72:c1:82:de:12:f5:f2:e8:0e:4e: 31:32:7a:9f:1f:a2:78:25:e8:e5:6d:70:97:76:79: c4:70:cd:37:ce:31:d9:27:e8:8b:ee:a2:78:32:57: 5d:21:31:6e:92:f1:58:9a:ec:25:03:ad:2d:86:67: ef:d3:1f:5d:4c:c5:98:a2:10:23:df:23:94:3b:fa: fc:05:18:28:88:57:c5:ba:6d:e3:83:13:ec:7a:40: 94:12:76:4c:85:cf:17:fd:6f:1a:b1:f8:40:39:b6: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:64:95:AD:B1:F7:AA:69:76:3C:94:D7:FC:07:D9:8D:42:DF:72:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 23.147.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b4:06:1a:e0:d5:7b:ca:f6:5c:7c:f4:0d:c2:cc:20:70:5f: 1f:bf:e4:62:60:26:e3:b0:70:74:af:f5:ec:8c:08:08:9c:22: 85:67:c4:1b:68:d5:62:f9:9d:3d:a0:3c:79:e8:f8:1d:7b:7e: 26:92:36:2c:12:3c:91:9f:e9:b7:14:d4:a8:cb:72:47:6a:42: 78:ed:cb:64:4e:d2:b1:2d:1e:27:a2:8e:41:ee:6b:44:64:81: aa:1e:a0:77:c4:1e:46:b0:08:05:44:e9:bb:c0:5d:25:db:c5: 1c:ae:99:44:7b:9b:cb:c9:84:be:99:54:ed:30:bb:5c:37:8d: 37:57:7e:22:2f:67:f6:14:47:61:fd:70:bd:5a:1a:c6:d7:3a: fa:bd:34:c2:d7:6e:28:4b:b2:f1:b1:85:4d:62:a9:58:eb:09: e4:53:a4:6e:a6:18:0f:0d:ce:f2:bd:90:78:80:ff:15:44:ee: 15:89:73:cd:cd:21:3f:b8:5a:56:ab:c5:58:43:8b:04:a2:b2: c5:d1:65:d0:39:b0:42:8f:23:92:11:19:81:12:4c:f6:4e:1f: 31:a4:12:d4:52:0b:2f:12:76:23:38:6a:1d:4c:0a:b3:8e:80: a4:8f:c4:04:41:3b:ae:47:9d:95:b9:e9:9b:c9:0c:ac:a5:93: 1a:25:73:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjc5ov0eDnlTCe2vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI1MDIxMjIzMDkxNVoXDTI1MDUxMzIyMDkxNVowLzEtMCsGA1UEAxMk YWM2NGE5NGQtYTMxMi00OGRkLWExZjQtM2IyNjM3NzNjNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6fZCupDrvVZQdVsBF44BFViVbEOjnhUDiUh iD5ylgesGsj4yYw7CQ0RL1BWMoqKNog/K/2xopma8FwZpvCau2ADp/0UdZUGCgk9 uYRsZg4AGCekovAqiejPWnH/HdsEJz8tZuZ4XPnMySnqW6+gUJI1yw/0t7biJ+jQ u4ue/raasi5YB/kJnPS7Bch8JljooTSQj2uFButLSnLBgt4S9fLoDk4xMnqfH6J4 JejlbXCXdnnEcM03zjHZJ+iL7qJ4MlddITFukvFYmuwlA60thmfv0x9dTMWYohAj 3yOUO/r8BRgoiFfFum3jgxPsekCUEnZMhc8X/W8asfhAObZxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlkla2x96ppdjyU1/wH2Y1C33I1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvNjlkNjg5MDctMjdmYS0z MjRmLTlkMTAtMDgxZDQyNzliYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+0Bhrg1XvK9lx89A3CzCBwXx+/5GJgJuOwcHSv9eyMCAicIoVnxBto 1WL5nT2gPHno+B17fiaSNiwSPJGf6bcU1KjLckdqQnjty2RO0rEtHieijkHua0Rk gaoeoHfEHkawCAVE6bvAXSXbxRyumUR7m8vJhL6ZVO0wu1w3jTdXfiIvZ/YUR2H9 cL1aGsbXOvq9NMLXbihLsvGxhU1iqVjrCeRTpG6mGA8NzvK9kHiA/xVE7hWJc83N IT+4WlarxVhDiwSissXRZdA5sEKPI5IRGYESTPZOHzGkEtRSCy8SdiM4ah1MCrOO gKSPxARBO65HnZW56ZvJDKylkxolcx0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:13 2025 by rpki-client