$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa File: ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa (raw, json) Hash identifier: OlWjHNWJY4JI9Xq4i2QdWvUq1pJo7PKiRUzW76O6V/o= Subject key identifier: 51:05:A6:91:DC:C9:81:CB:35:03:A1:78:52:FB:B7:DF:46:2C:4A:DE Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584953C449614E6A2B8B07B77700 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 17045 IP address blocks: 23.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:49:61:4e:6a:2b:8b:07:b7:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=08b7a06f-25aa-46d6-92e3-09680cc4a748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d6:b7:92:5c:ef:f8:90:1b:e7:c3:ba:15:25: b9:28:dc:82:fe:06:43:1a:12:0b:5d:4d:57:0a:c7: 47:07:8d:b0:92:ce:17:3b:b6:f6:be:e9:2d:b0:97: fd:67:d3:d0:a6:0d:d0:71:f1:db:60:80:9f:2a:38: 38:cb:57:5a:1b:ab:2c:19:1e:eb:01:7c:2b:de:83: a4:5f:67:ef:4d:f9:f0:67:33:f9:ab:d0:58:d0:db: 17:9b:9c:a7:6a:75:cd:3c:3e:df:09:d1:62:21:05: 57:71:a0:b2:59:ac:69:13:dd:92:2d:b8:8c:e2:df: 70:1d:d0:46:c6:75:3f:d6:9a:22:ef:41:7a:8c:2b: e5:fc:a8:9f:a8:68:23:6c:9d:7d:1a:ad:33:f0:f2: 2e:76:e4:14:e9:a3:ba:d3:87:95:f2:9d:cc:03:27: 58:8c:5c:dc:da:78:6f:84:2e:61:98:6b:5b:73:76: dc:1a:83:7e:bd:11:93:b5:a9:c6:c5:5d:2a:2b:4f: e9:44:77:57:06:03:23:92:8e:f9:18:4c:79:4b:a3: 1a:e8:ff:2e:7b:80:ff:4b:3c:93:2a:ac:d3:1f:b2: 52:4e:48:ec:8e:d6:91:32:8d:8f:a4:5c:87:67:32: ac:28:7f:03:7f:63:19:31:0b:29:dc:00:85:e3:d9: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:05:A6:91:DC:C9:81:CB:35:03:A1:78:52:FB:B7:DF:46:2C:4A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv4: 23.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d3:5c:9d:15:19:b9:11:99:a8:19:77:39:9f:49:ae:de:0e: f1:10:9e:4e:cb:3e:94:90:13:03:ae:a6:bd:a3:a7:c5:1f:17: f4:e4:06:19:35:24:1a:3c:d0:3f:ac:01:62:d9:af:4a:4a:1a: 1a:7c:e1:6f:da:e3:0c:59:9e:48:56:56:03:ba:9f:7a:df:ed: ab:57:87:38:e1:44:57:02:1f:db:bb:76:f3:db:d1:0c:e9:bf: b8:72:26:cf:a6:3b:d6:b2:2d:2a:46:99:d4:d8:66:be:19:b7: b2:55:25:c5:dc:73:8a:e1:e6:c5:27:55:5c:1e:3d:41:3f:14: cc:17:9e:33:18:24:dd:57:ca:ca:3b:66:47:3c:43:40:e9:d9: 52:85:9c:8b:44:96:bd:95:90:40:72:8e:98:e6:19:c6:a4:a9: 7b:a7:1b:a0:7b:96:ef:6b:51:75:68:dd:b0:79:d0:1e:91:9c: 70:1f:47:b1:c8:5d:f2:0e:b6:06:2d:81:b8:f4:60:c1:34:62: 6b:4e:43:ad:58:01:99:4b:97:11:77:bd:76:b3:ea:f0:e2:e1: 47:65:d5:c4:13:40:dd:2b:cf:84:0f:af:25:35:80:76:56:ac: 70:e2:95:fc:36:76:c2:67:84:b2:a5:34:4d:58:92:78:87:1d: 97:d7:9f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxElhTmoriwe3dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDhiN2EwNmYtMjVhYS00NmQ2LTkyZTMtMDk2ODBjYzRhNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNa3klzv+JAb58O6FSW5KNyC/gZDGhILXU1X CsdHB42wks4XO7b2vuktsJf9Z9PQpg3QcfHbYICfKjg4y1daG6ssGR7rAXwr3oOk X2fvTfnwZzP5q9BY0NsXm5ynanXNPD7fCdFiIQVXcaCyWaxpE92SLbiM4t9wHdBG xnU/1poi70F6jCvl/KifqGgjbJ19Gq0z8PIuduQU6aO604eV8p3MAydYjFzc2nhv hC5hmGtbc3bcGoN+vRGTtanGxV0qK0/pRHdXBgMjko75GEx5S6Ma6P8ue4D/SzyT KqzTH7JSTkjsjtaRMo2PpFyHZzKsKH8Df2MZMQsp3ACF49kQGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEFppHcyYHLNQOheFL7t99GLEreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvZWQzZGFmYjktZmUxOS0z NzdkLTgwYWEtMGUyYTliNDc5YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3TXJ0VGbkRmagZdzmfSa7eDvEQnk7LPpSQEwOupr2jp8UfF/TkBhk1 JBo80D+sAWLZr0pKGhp84W/a4wxZnkhWVgO6n3rf7atXhzjhRFcCH9u7dvPb0Qzp v7hyJs+mO9ayLSpGmdTYZr4Zt7JVJcXcc4rh5sUnVVwePUE/FMwXnjMYJN1Xyso7 Zkc8Q0Dp2VKFnItElr2VkEByjpjmGcakqXunG6B7lu9rUXVo3bB50B6RnHAfR7HI XfIOtgYtgbj0YME0YmtOQ61YAZlLlxF3vXaz6vDi4Udl1cQTQN0rz4QPryU1gHZW rHDilfw2dsJnhLKlNE1YkniHHZfXn5E= -----END CERTIFICATE-----Generated at Sun Apr 6 09:40:20 2025 by rpki-client