$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa File: 2973c52c-5659-3596-8301-dc3e576e7381.roa (raw, json) Hash identifier: lhdJIXQmzL1BGeJAyxff8YU+42yS8U7pYwzm/68oLog= Subject key identifier: 51:E4:B0:F4:2B:B5:A1:BD:7C:90:C2:C5:B6:EA:FC:A5:FC:CC:0E:2E Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584944694522CCD64C4218A3B980 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 216435 IP address blocks: 23.157.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:45:22:cc:d6:4c:42:18:a3:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=a6a8b548-49b1-4209-b5d8-cc0d6a4fe6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:e5:9a:e7:55:42:b1:17:ae:eb:8d:41:43: d2:4d:42:10:d8:7f:ca:2d:32:c1:95:ab:a6:d2:30: a6:34:3d:73:19:ed:83:2d:57:73:af:4d:16:08:e9: 23:5a:c0:68:45:37:f8:04:58:b6:31:c8:c8:a2:6b: b1:49:9c:98:7f:ec:1c:b4:a9:e5:ea:6f:da:55:3b: 8d:6f:cc:22:df:66:bf:c8:60:30:15:9c:b8:0e:1c: 4b:74:58:c7:9e:8b:2d:b7:01:6d:3d:04:bf:5d:3f: b3:5a:bb:eb:45:fb:7f:e0:58:48:6c:6b:13:9a:f6: 02:f5:51:d7:95:70:9f:db:cb:60:bf:29:d3:ef:f8: c4:8c:e8:71:0a:8d:72:cb:1e:8f:a7:74:75:04:e3: fc:e4:fc:05:fc:0e:b7:3f:59:19:4e:84:42:df:cc: 03:11:11:1a:87:ff:63:25:b9:95:b2:42:2f:4d:36: 54:1e:e4:c9:29:47:85:99:4f:c6:bc:19:5b:2d:35: 67:2b:00:1c:b9:78:05:67:70:54:39:42:40:6a:46: 67:21:e3:6f:7d:bb:2e:9f:4e:e9:6b:bb:15:66:aa: 25:57:b6:4c:9c:87:18:b5:72:31:6f:7b:8c:4b:db: da:45:a6:fc:70:f9:c8:e2:5b:21:8a:eb:25:47:7d: ce:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E4:B0:F4:2B:B5:A1:BD:7C:90:C2:C5:B6:EA:FC:A5:FC:CC:0E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:84:e4:ca:8b:65:94:a3:cd:04:26:b4:9b:5d:68:83:e9:75: ea:bd:e7:dc:e9:56:2c:1f:bf:ed:ba:5f:04:7b:4e:95:c5:77: f4:18:4e:c2:ae:32:e4:3a:a9:be:d1:9d:2d:d3:92:e2:22:ef: 5b:f2:0d:18:3b:8a:4d:87:c6:d2:92:6d:96:f6:18:26:85:be: 87:cc:92:27:de:87:29:d3:8f:61:17:91:55:00:3a:24:e6:d9: 57:d9:fd:0f:3b:24:dc:e3:9f:6a:2b:e4:2b:79:ec:dd:5f:c1: ac:69:b4:18:d1:b9:b4:e4:fe:05:b0:ae:d8:fb:d9:94:b8:e8: cd:6c:94:29:64:4b:ed:ac:c6:2e:5e:b8:ad:ee:f0:91:af:94: cd:fc:eb:0c:21:2b:f9:44:01:75:d5:d9:01:bc:26:9a:04:57: ba:23:23:a9:60:99:e5:8c:a6:64:0e:8f:34:de:df:c4:fa:02: 33:5b:85:79:0c:70:50:81:22:0d:32:42:54:f7:80:8a:91:bf: fc:76:d1:48:ec:a4:33:20:b2:e9:0c:11:d1:67:59:9c:ba:b2: 23:4a:1b:73:48:bc:2c:f9:d6:d5:d8:44:a0:60:aa:fa:7b:d7: 18:4d:99:a0:1c:24:61:12:2e:e3:98:88:f1:d8:89:df:c7:77: 7b:ae:f9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUUizNZMQhijuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YTZhOGI1NDgtNDliMS00MjA5LWI1ZDgtY2MwZDZhNGZlNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSXlmudVQrEXruuNQUPSTUIQ2H/KLTLBlaum 0jCmND1zGe2DLVdzr00WCOkjWsBoRTf4BFi2McjIomuxSZyYf+wctKnl6m/aVTuN b8wi32a/yGAwFZy4DhxLdFjHnosttwFtPQS/XT+zWrvrRft/4FhIbGsTmvYC9VHX lXCf28tgvynT7/jEjOhxCo1yyx6Pp3R1BOP85PwF/A63P1kZToRC38wDEREah/9j JbmVskIvTTZUHuTJKUeFmU/GvBlbLTVnKwAcuXgFZ3BUOUJAakZnIeNvfbsun07p a7sVZqolV7ZMnIcYtXIxb3uMS9vaRab8cPnI4lshiuslR33OQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHksPQrtaG9fJDCxbbq/KX8zA4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvMjk3M2M1MmMtNTY1OS0z NTk2LTgzMDEtZGMzZTU3NmU3MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF525MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2E5MqLZZSjzQQmtJtdaIPpdeq959zpViwfv+26XwR7TpXFd/QYTsKu MuQ6qb7RnS3TkuIi71vyDRg7ik2HxtKSbZb2GCaFvofMkifehynTj2EXkVUAOiTm 2VfZ/Q87JNzjn2or5Ct57N1fwaxptBjRubTk/gWwrtj72ZS46M1slClkS+2sxi5e uK3u8JGvlM386wwhK/lEAXXV2QG8JpoEV7ojI6lgmeWMpmQOjzTe38T6AjNbhXkM cFCBIg0yQlT3gIqRv/x20UjspDMgsukMEdFnWZy6siNKG3NIvCz51tXYRKBgqvp7 1xhNmaAcJGESLuOYiPHYid/Hd3uu+aw= -----END CERTIFICATE-----Generated at Sun Apr 6 10:52:53 2025 by rpki-client