$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa File: 5e1fab74-1778-30f0-833e-7e9606d6d74e.roa (raw, json) Hash identifier: tKDqZmHIBnRgo12fWKJCfXGWSE0QsBEJ/x2PlznB1bk= Subject key identifier: 2D:97:90:F1:63:AC:54:2A:69:C9:DA:F4:25:A0:59:9A:EB:F5:E6:E5 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F43285848FEBBD7ED37BCCFF6B70EEF8A Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa Signing time: Tue 25 Feb 2025 02:00:39 +0000 ROA not before: Tue 25 Feb 2025 02:00:39 +0000 ROA not after: Mon 26 May 2025 01:00:39 +0000 asID: 401538 IP address blocks: 23.130.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:bb:d7:ed:37:bc:cf:f6:b7:0e:ef:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Feb 25 02:00:39 2025 GMT Not After : May 26 01:00:39 2025 GMT Subject: CN=539468e9-7334-48a0-9827-8823e3734176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:c0:17:e9:61:76:9e:21:7d:44:f1:66:66: 2d:38:9c:45:14:ee:bb:1a:b5:fe:95:c4:a8:2c:32: 96:de:05:07:aa:f2:c9:18:20:36:97:cf:84:4e:44: ba:55:a8:a6:6d:be:df:9c:e6:60:b9:aa:0a:8d:97: 86:a0:71:1b:90:08:e6:72:71:c1:58:63:63:5e:c2: ff:a6:ae:b2:f0:d9:9b:53:01:2e:0f:3b:3e:c4:21: 5e:12:9e:10:0e:34:a2:9c:e3:04:2d:4c:f0:70:77: a5:b0:71:bd:79:07:ad:c6:3b:41:0c:60:51:da:92: 7b:42:bd:a3:4a:ae:b4:52:62:5c:b8:1d:de:e2:97: 3a:35:4c:73:66:10:b2:9b:e6:17:d9:f5:59:5d:83: 3b:3e:a6:de:1f:40:f2:20:77:7f:e8:98:e9:64:9a: 52:ac:e1:fc:c2:a7:1c:ba:37:97:e2:8b:f7:02:27: 2f:f6:34:22:e3:27:b1:cf:85:93:cf:ae:8a:e7:ea: a2:de:73:8a:3a:72:dd:f1:be:bf:4f:00:3d:e1:a9: 7d:11:83:9a:37:12:42:10:c6:68:fe:6e:86:89:cc: 5b:1f:d0:a7:0c:56:95:5b:62:20:a7:03:12:ea:87: e2:05:57:39:f0:ad:fc:1e:d4:a6:f3:56:44:db:55: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:97:90:F1:63:AC:54:2A:69:C9:DA:F4:25:A0:59:9A:EB:F5:E6:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 23.130.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:fd:03:11:19:49:9f:6d:34:75:0f:8a:42:ed:b0:76:dd:d0: 06:bc:c3:c7:18:81:a6:18:34:6e:46:00:b6:1b:60:2b:0a:65: a4:d4:74:38:de:34:a4:41:91:e9:f0:82:7e:24:aa:1f:40:84: 2d:59:7b:5a:f7:55:8f:ff:13:2b:ad:3e:cd:95:3a:20:28:4f: 16:e7:90:e1:9e:4e:21:9d:aa:81:b1:68:15:b6:90:98:9b:79: ab:f8:ba:9d:03:0a:6e:c1:53:9a:83:20:31:f8:dd:ac:64:8a: 5b:03:0f:d2:ae:2e:9a:2a:ed:19:8c:e6:6b:f7:28:33:d4:28: 19:30:72:bb:57:49:8a:9a:5d:54:5b:be:e5:92:f5:17:d0:2f: 36:34:91:cc:99:56:52:86:27:7c:64:eb:d6:6c:29:89:86:44: e3:4a:f1:8a:38:e1:69:fe:42:a0:e0:27:9b:34:32:1a:47:09: 25:95:39:a3:ed:ae:e9:cf:28:0d:24:7f:e6:ae:0b:93:1f:53: 22:a8:7e:23:7d:78:e5:47:ef:70:3b:37:95:58:20:a6:e3:8b: a0:fb:0a:0a:46:ff:c5:be:98:f8:ee:07:2d:d9:4b:b8:b1:2f: 4b:27:f0:49:fd:71:d6:71:eb:9d:66:fb:12:29:dc:d5:88:67: b7:46:f1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+u9ftN7zP9rcO74owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk NTM5NDY4ZTktNzMzNC00OGEwLTk4MjctODgyM2UzNzM0MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYDAF+lhdp4hfUTxZmYtOJxFFO67GrX+lcSo LDKW3gUHqvLJGCA2l8+ETkS6Vaimbb7fnOZguaoKjZeGoHEbkAjmcnHBWGNjXsL/ pq6y8NmbUwEuDzs+xCFeEp4QDjSinOMELUzwcHelsHG9eQetxjtBDGBR2pJ7Qr2j Sq60UmJcuB3e4pc6NUxzZhCym+YX2fVZXYM7PqbeH0DyIHd/6JjpZJpSrOH8wqcc ujeX4ov3Aicv9jQi4yexz4WTz66K5+qi3nOKOnLd8b6/TwA94al9EYOaNxJCEMZo /m6GicxbH9CnDFaVW2IgpwMS6ofiBVc58K38HtSm81ZE21UBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2XkPFjrFQqacna9CWgWZrr9eblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvNWUxZmFiNzQtMTc3OC0z MGYwLTgzM2UtN2U5NjA2ZDZkNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4KcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn9AxEZSZ9tNHUPikLtsHbd0Aa8w8cYgaYYNG5GALYbYCsKZaTUdDje NKRBkenwgn4kqh9AhC1Ze1r3VY//EyutPs2VOiAoTxbnkOGeTiGdqoGxaBW2kJib eav4up0DCm7BU5qDIDH43axkilsDD9KuLpoq7RmM5mv3KDPUKBkwcrtXSYqaXVRb vuWS9RfQLzY0kcyZVlKGJ3xk69ZsKYmGRONK8Yo44Wn+QqDgJ5s0MhpHCSWVOaPt runPKA0kf+auC5MfUyKofiN9eOVH73A7N5VYIKbji6D7CgpG/8W+mPjuBy3ZS7ix L0sn8En9cdZx651m+xIp3NWIZ7dG8Q0= -----END CERTIFICATE-----Generated at Fri Apr 11 21:49:02 2025 by rpki-client