$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa File: 41a63799-17b8-37d9-84b8-f3de51331877.roa (raw, json) Hash identifier: 7kfH/eECYmtEsfITxvI4BHW7PcGzp4FWNwHOGjL9n7M= Subject key identifier: CA:CC:DB:6F:BD:43:2C:FC:77:2D:03:6B:D9:4E:6B:F8:63:26:AA:1B Certificate issuer: /CN=ab1a140b-878b-41cc-864f-08e0177f7325 Certificate serial: 010D0C9F432858490881639FEA45B2C70BCC2980 Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 20473 IP address blocks: 23.150.240.0/24 maxlen: 24 204.238.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:63:9f:ea:45:b2:c7:0b:cc:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ecd3b2a5-3abc-4318-89cf-07c381b681f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:bc:90:4b:2b:03:3c:83:43:0e:8e:de:78: 43:32:13:76:f4:2d:cd:a9:0e:ea:07:19:42:b2:10: 67:29:11:55:ca:45:3d:90:74:7b:80:ea:cd:8c:a3: 5d:24:40:a5:e6:88:b6:c0:5d:57:e8:b6:2f:1e:e8: a3:0c:73:17:c7:17:34:2e:5b:c9:39:2e:17:7a:b8: 00:93:f0:86:08:73:54:66:58:fd:4b:d5:e6:29:9a: 44:da:5f:be:f8:ee:29:64:84:57:73:c0:21:d1:c9: 7d:4e:93:ee:8d:67:23:ab:ae:86:69:31:eb:a5:2d: 1e:4c:de:d6:3a:ef:f3:85:f7:3f:c6:1c:e0:23:e3: f2:e9:5c:53:2f:6b:6b:97:cd:35:97:d2:01:99:66: 79:12:7b:d2:de:8d:50:62:12:06:1a:3b:0f:4f:37: 7e:e2:04:8f:b3:62:65:cb:c0:67:a5:0e:17:e4:22: 94:ea:4b:e3:e4:96:24:51:cd:5a:ee:7f:99:20:c3: 36:a3:52:5b:de:91:85:9c:99:17:ff:2c:ab:a7:f3: d4:31:5e:26:b0:3a:a8:ec:ec:23:ac:0f:fb:50:f4: f0:2a:4d:11:42:05:ad:88:91:dc:bd:53:7f:bd:e5: 79:ad:32:35:ff:fc:e5:83:e9:c9:ae:1b:d6:dc:c0: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CC:DB:6F:BD:43:2C:FC:77:2D:03:6B:D9:4E:6B:F8:63:26:AA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl X509v3 Authority Key Identifier: keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer sbgp-ipAddrBlock: critical IPv4: 23.150.240.0/24 204.238.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:51:56:61:cc:10:11:7b:cb:bc:84:31:0b:55:c4:4e:be:02: c4:e9:7a:01:a2:04:df:09:2e:72:31:03:bc:63:12:1b:bd:fb: 54:24:69:0f:44:8b:6a:1d:67:75:45:28:05:68:1a:95:7a:c9: 16:23:f0:01:04:ba:1d:c7:ae:57:87:9c:f5:27:21:73:61:8f: 5b:60:4a:20:16:25:b0:0f:21:76:dc:83:ae:95:fc:a1:c2:52: e5:ab:0a:0c:cf:ca:f0:b9:9b:3f:fc:14:88:2b:cf:6a:48:91: 12:01:bc:ff:3b:d6:47:41:69:eb:2e:b0:3c:18:e8:9d:21:d5: ff:34:2f:3d:fb:c6:ed:01:bd:c4:1f:d6:e7:b3:01:96:59:85: 04:f0:f1:1d:1b:bb:b9:25:b3:77:d0:2c:48:f4:c2:b6:4a:fa: 41:5d:c9:68:03:9c:64:d2:0a:ba:b2:37:68:bc:af:5d:06:6b: 4d:ad:2e:ac:e7:2e:97:17:00:df:12:61:29:8e:71:f6:c8:a0: 13:c1:6b:0d:d7:f1:9e:72:b1:03:56:3e:e2:60:d2:40:3c:af: 36:c5:57:33:b7:51:8b:3b:e5:3a:21:8d:4a:0f:8d:c0:72:70: 88:d3:82:16:76:c4:27:c8:12:06:55:02:ce:47:0b:e2:6d:fd: 2b:25:79:5a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkIgWOf6kWyxwvMKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxYTE0MGItODc4Yi00MWNjLTg2NGYtMDhlMDE3N2Y3 MzI1MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWNkM2IyYTUtM2FiYy00MzE4LTg5Y2YtMDdjMzgxYjY4MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWi8kEsrAzyDQw6O3nhDMhN29C3NqQ7qBxlC shBnKRFVykU9kHR7gOrNjKNdJECl5oi2wF1X6LYvHuijDHMXxxc0LlvJOS4XergA k/CGCHNUZlj9S9XmKZpE2l+++O4pZIRXc8Ah0cl9TpPujWcjq66GaTHrpS0eTN7W Ou/zhfc/xhzgI+Py6VxTL2trl801l9IBmWZ5EnvS3o1QYhIGGjsPTzd+4gSPs2Jl y8BnpQ4X5CKU6kvj5JYkUc1a7n+ZIMM2o1Jb3pGFnJkX/yyrp/PUMV4msDqo7Owj rA/7UPTwKk0RQgWtiJHcvVN/veV5rTI1//zlg+nJrhvW3MD6CQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMrM22+9Qyz8dy0Da9lOa/hjJqobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFh MTQwYi04NzhiLTQxY2MtODY0Zi0wOGUwMTc3ZjczMjUvNDFhNjM3OTktMTdiOC0z N2Q5LTg0YjgtZjNkZTUxMzMxODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWIxYTE0MGItODc4Yi00MWNjLTg2 NGYtMDhlMDE3N2Y3MzI1L2FiMWExNDBiLTg3OGItNDFjYy04NjRmLTA4ZTAxNzdm NzMyNS5jcmwwHwYDVR0jBBgwFoAUcS17FddH32zbmLHcy+0aLSiUV30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFhMTQwYi04NzhiLTQxY2MtODY0Zi0wOGUw MTc3ZjczMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5bwAwQA zO5GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAABRVmHMEBF7y7yEMQtVxE6+AsTpegGiBN8JLnIxA7xjEhu9 +1QkaQ9Ei2odZ3VFKAVoGpV6yRYj8AEEuh3HrleHnPUnIXNhj1tgSiAWJbAPIXbc g66V/KHCUuWrCgzPyvC5mz/8FIgrz2pIkRIBvP871kdBaesusDwY6J0h1f80Lz37 xu0BvcQf1uezAZZZhQTw8R0bu7kls3fQLEj0wrZK+kFdyWgDnGTSCrqyN2i8r10G a02tLqznLpcXAN8SYSmOcfbIoBPBaw3X8Z5ysQNWPuJg0kA8rzbFVzO3UYs75Toh jUoPjcBycIjTghZ2xCfIEgZVAs5HC+Jt/SsleVo= -----END CERTIFICATE-----Generated at Fri Mar 14 08:05:00 2025 by rpki-client