$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa File: a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa (raw, json) Hash identifier: vfC5nhTc+vdnuuShU5tNxj72FNje++mMOdB5CbYIucA= Subject key identifier: 2E:82:AF:4B:CE:B7:7B:18:BC:84:50:28:FD:41:94:9B:53:B6:B8:75 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285848DA70FD8B1EC0EBBCDD761840 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 5645 IP address blocks: 23.233.0.0/17 maxlen: 17 23.233.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fd:8b:1e:c0:eb:bc:dd:76:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=3a1b0130-1a04-456c-a7c0-e22af5baaa85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:88:18:e1:73:79:f6:67:4b:19:04:b9:ea: 6f:c4:76:0b:62:79:04:86:d6:21:49:ad:bd:8a:a3: 61:b0:70:26:f1:85:41:6e:9a:21:d1:4c:09:5d:76: 54:34:76:f4:00:39:19:0d:ff:b8:e5:0f:a8:20:35: 91:40:6b:72:7c:ac:bf:a5:32:7e:a8:ec:92:2b:7b: 9f:3a:bf:6f:b4:5c:3c:a7:3a:f4:a3:66:32:83:fb: e4:f9:ac:4b:30:b1:f6:11:46:5d:a6:8b:7d:86:cc: 6a:6f:93:d3:44:08:90:e4:a9:10:ca:62:d0:13:11: e9:e7:64:c3:5d:56:96:61:48:54:91:42:ec:59:f1: 9a:a4:bc:0b:bc:a6:97:dd:2c:c1:83:e1:50:a8:2c: 3f:72:20:29:74:99:43:ec:11:38:db:25:ca:73:9f: 5f:89:e1:d7:9c:38:6b:03:e3:5b:02:13:f6:fe:53: 62:63:8a:c5:41:4e:e6:2a:cf:70:4a:df:72:3e:49: e5:08:de:54:48:61:de:bc:52:cc:68:83:64:fd:8d: b3:87:eb:b2:ed:cb:25:4e:8a:5c:4b:dd:3b:11:f1: 65:c0:00:7d:d6:68:b7:5a:ba:7a:4e:30:89:7f:e5: 9e:e9:87:fd:e1:9d:eb:95:0b:20:d2:fd:41:f5:6c: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:82:AF:4B:CE:B7:7B:18:BC:84:50:28:FD:41:94:9B:53:B6:B8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a6:95:0a:ec:2a:d0:db:3e:97:5b:49:f3:63:9f:cc:b1:e4: fe:a5:64:43:54:1f:5d:00:17:fe:50:ba:00:79:16:d6:4c:27: ff:b8:dd:d4:62:24:90:a9:c7:bf:97:38:ca:a6:f5:1a:e1:fb: 3f:b2:41:74:6f:e8:13:a9:b7:d0:0b:f7:cf:bc:df:e9:8e:c8: 2e:33:10:70:a0:20:f8:de:c8:2a:d8:ec:7f:80:5b:63:54:3c: 3a:51:40:27:53:80:58:95:f7:b5:71:93:41:ed:ea:0f:1f:5c: b2:87:3e:91:03:97:50:23:f7:34:e1:46:ca:75:35:6c:cc:59: 7f:49:33:53:d8:40:e5:15:3f:6d:19:44:38:cd:9a:14:92:a6: 21:a9:5c:fa:8a:af:9c:e4:a3:ea:26:bd:33:17:af:54:2c:5c: 13:55:05:04:68:26:00:fc:7d:57:42:e8:fd:ce:cd:11:4a:6c: e1:37:7e:e3:ff:03:35:8f:97:54:7d:75:df:00:c0:af:82:de: 72:1d:a8:ef:bf:1d:2c:7c:27:e3:e3:ec:89:48:91:80:c7:ae: 48:c5:c7:c9:28:8a:78:62:0f:f3:72:69:4d:5d:c7:fd:7b:87: 79:50:d4:d4:37:f0:69:5f:2f:7d:99:ed:3a:99:8e:06:9a:a7: 77:b3:98:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacP2LHsDrvN12GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk M2ExYjAxMzAtMWEwNC00NTZjLWE3YzAtZTIyYWY1YmFhYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaSIGOFzefZnSxkEuepvxHYLYnkEhtYhSa29 iqNhsHAm8YVBbpoh0UwJXXZUNHb0ADkZDf+45Q+oIDWRQGtyfKy/pTJ+qOySK3uf Or9vtFw8pzr0o2Yyg/vk+axLMLH2EUZdpot9hsxqb5PTRAiQ5KkQymLQExHp52TD XVaWYUhUkULsWfGapLwLvKaX3SzBg+FQqCw/ciApdJlD7BE42yXKc59fieHXnDhr A+NbAhP2/lNiY4rFQU7mKs9wSt9yPknlCN5USGHevFLMaINk/Y2zh+uy7cslTopc S907EfFlwAB91mi3Wrp6TjCJf+We6Yf94Z3rlQsg0v1B9WzaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6Cr0vOt3sYvIRQKP1BlJtTtrh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvYTJjNWViN2QtMzcxNS0z ZWUwLTk4OGMtZTUxY2ZiNTdhOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF+kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOmlQrsKtDbPpdbSfNjn8yx5P6lZENUH10AF/5QugB5FtZMJ/+43dRi JJCpx7+XOMqm9Rrh+z+yQXRv6BOpt9AL98+83+mOyC4zEHCgIPjeyCrY7H+AW2NU PDpRQCdTgFiV97Vxk0Ht6g8fXLKHPpEDl1Aj9zThRsp1NWzMWX9JM1PYQOUVP20Z RDjNmhSSpiGpXPqKr5zko+omvTMXr1QsXBNVBQRoJgD8fVdC6P3OzRFKbOE3fuP/ AzWPl1R9dd8AwK+C3nIdqO+/HSx8J+Pj7IlIkYDHrkjFx8koinhiD/NyaU1dx/17 h3lQ1NQ38GlfL32Z7TqZjgaap3ezmL4= -----END CERTIFICATE-----Generated at Sat Apr 12 10:16:53 2025 by rpki-client