$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2cde8d05-e5d7-30e3-ad36-2a409531c8fc.roa File: 2cde8d05-e5d7-30e3-ad36-2a409531c8fc.roa (raw, json) Hash identifier: ByQ0zabUojcRVtH5g/oe9UA0dEbRVC2IvbN4dQaM2iw= Subject key identifier: 81:63:8D:51:12:8C:B1:CF:1C:B0:D2:64:FE:8D:98:EF:AE:A2:A6:A1 Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F43285849350E9B437D32709F1C988740 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2cde8d05-e5d7-30e3-ad36-2a409531c8fc.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 216435 IP address blocks: 23.157.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9b:43:7d:32:70:9f:1c:98:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=ec158391-10cf-41b8-9590-1e74cd38aa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:05:db:f9:36:b9:41:48:51:21:0d:1b:54: ad:9a:6e:74:8c:92:48:25:21:61:c0:ab:47:e7:dc: bb:5d:01:94:b9:33:eb:df:cb:7e:71:f2:6e:54:a6: 94:15:7e:3e:ec:77:82:e8:a0:b3:1b:60:b1:f7:ca: 1e:44:ff:08:10:37:e6:b6:41:85:d1:44:c1:12:91: 5b:8a:4f:54:d1:67:bb:a9:37:cd:e5:f2:f3:d4:6b: 51:3d:64:8a:dc:8a:ff:49:fd:10:72:ca:eb:33:72: 22:52:85:12:1d:cd:36:89:28:a5:c1:34:44:02:a1: ff:e8:76:dd:c6:40:56:f5:8e:b2:a5:32:9f:f7:37: 11:60:23:ff:c5:6b:d1:37:40:f0:93:4e:40:c4:08: 7a:35:61:f6:47:7c:f4:30:86:12:2a:5b:69:a2:ea: e9:8c:7e:48:0f:e8:3e:7c:2d:7e:12:63:c0:64:bf: b4:e2:25:2f:40:d7:79:78:ed:fd:98:0f:d6:33:8b: cd:2e:6d:32:bb:4b:77:3c:50:64:1c:0d:19:31:7c: 43:35:91:49:4b:c3:f3:e2:2e:be:73:9b:5b:9f:95: da:5c:15:ef:2d:50:bd:85:df:61:f1:fe:8c:6f:26: fb:46:dd:73:57:3e:1d:e5:de:d4:b5:b7:30:a7:d5: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:8D:51:12:8C:B1:CF:1C:B0:D2:64:FE:8D:98:EF:AE:A2:A6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2cde8d05-e5d7-30e3-ad36-2a409531c8fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:dc:ba:4a:c1:31:2c:45:45:6f:3a:a0:0b:30:b6:c3:72:4f: 7f:99:2d:f8:11:88:e4:67:84:ab:1b:d8:dc:7f:55:f1:39:2a: d1:f4:fa:8e:1e:29:8a:14:fb:4f:2d:ef:13:66:c9:0a:53:5b: f8:02:bf:b1:b0:a4:91:dd:41:21:14:ca:05:88:c7:0f:8e:8f: f8:68:e1:0d:8a:f1:c0:77:3c:c5:70:46:61:d9:28:32:43:3f: 86:ce:fd:99:be:df:ef:b2:f7:5b:7a:ef:78:ca:00:46:1d:82: 2a:be:5f:34:71:7b:fe:3f:0f:db:83:dc:e5:8e:98:8a:81:9e: 2e:96:a6:fe:e5:73:f8:9f:3c:e5:95:5e:d4:ad:19:1c:82:06: 57:4f:ef:72:8d:66:d2:9b:76:b1:a0:09:0a:f9:9f:d9:95:62: ee:7e:71:e8:32:dc:3f:3b:3b:0a:51:09:96:2b:82:03:dc:87: 7d:72:81:fb:09:65:8b:a0:11:bf:d7:d6:fa:d3:49:80:3b:6e: 74:92:b5:8f:fe:c2:c8:ca:1a:81:44:fc:1e:bf:ab:0f:db:4c: 78:16:46:0a:b5:99:06:56:d2:d0:c6:62:8d:fd:25:ad:55:cd: f6:18:22:e0:68:4e:a2:63:0c:0f:05:22:fe:b8:a6:27:74:b9: 80:54:7e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DptDfTJwnxyYh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWMxNTgzOTEtMTBjZi00MWI4LTk1OTAtMWU3NGNkMzhhYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLEF2/k2uUFIUSENG1Stmm50jJJIJSFhwKtH 59y7XQGUuTPr38t+cfJuVKaUFX4+7HeC6KCzG2Cx98oeRP8IEDfmtkGF0UTBEpFb ik9U0We7qTfN5fLz1GtRPWSK3Ir/Sf0QcsrrM3IiUoUSHc02iSilwTREAqH/6Hbd xkBW9Y6ypTKf9zcRYCP/xWvRN0Dwk05AxAh6NWH2R3z0MIYSKltpourpjH5ID+g+ fC1+EmPAZL+04iUvQNd5eO39mA/WM4vNLm0yu0t3PFBkHA0ZMXxDNZFJS8Pz4i6+ c5tbn5XaXBXvLVC9hd9h8f6Mbyb7Rt1zVz4d5d7Utbcwp9WEnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFjjVESjLHPHLDSZP6NmO+uoqahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvMmNkZThkMDUtZTVkNy0z MGUzLWFkMzYtMmE0MDk1MzFjOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF524MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvcukrBMSxFRW86oAswtsNyT3+ZLfgRiORnhKsb2Nx/VfE5KtH0+o4e KYoU+08t7xNmyQpTW/gCv7GwpJHdQSEUygWIxw+Oj/ho4Q2K8cB3PMVwRmHZKDJD P4bO/Zm+3++y91t673jKAEYdgiq+XzRxe/4/D9uD3OWOmIqBni6Wpv7lc/ifPOWV XtStGRyCBldP73KNZtKbdrGgCQr5n9mVYu5+cegy3D87OwpRCZYrggPch31ygfsJ ZYugEb/X1vrTSYA7bnSStY/+wsjKGoFE/B6/qw/bTHgWRgq1mQZW0tDGYo39Ja1V zfYYIuBoTqJjDA8FIv64pid0uYBUfls= -----END CERTIFICATE-----Generated at Sun Apr 6 14:36:55 2025 by rpki-client