$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/5ec16511-2f61-3aa8-bd18-faed8790d3a7.roa File: 5ec16511-2f61-3aa8-bd18-faed8790d3a7.roa (raw, json) Hash identifier: LXJDVEU3jhvTZJ8VxKPmIC1G0HgQ0TqxW91iIdKDJ8A= Subject key identifier: 22:6F:8E:1E:0A:CA:96:B1:A4:6D:91:A6:90:AE:26:86:D8:E0:36:47 Certificate issuer: /CN=2db54220-b640-4de5-bf21-207b4ffc20dd Certificate serial: 010D0C9F43285849B149F358A826B448EE5E9740 Authority key identifier: E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/5ec16511-2f61-3aa8-bd18-faed8790d3a7.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 133199 IP address blocks: 23.155.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f3:58:a8:26:b4:48:ee:5e:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db54220-b640-4de5-bf21-207b4ffc20dd Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=cbf916ab-a42d-4c6b-b6bb-6fe1a62b4298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:e6:59:31:e0:d6:81:5c:d8:81:75:0a:ce: bb:10:fb:46:06:2e:a5:eb:97:ba:24:b4:37:cd:a3: 39:f3:7c:43:87:9e:90:2e:91:ab:4c:ae:9f:6f:19: 6f:96:bc:38:2a:b1:b5:14:d0:35:56:c8:da:d1:91: 6e:0d:08:89:19:b1:d6:d7:c5:b0:2a:78:2e:d7:97: e8:a7:c1:e8:9e:9a:87:3c:29:59:27:38:f9:0e:22: 56:fb:7b:16:31:7f:ff:17:2a:3e:d0:fc:44:79:66: b2:ab:91:79:bb:48:cb:af:bb:58:c3:c4:e4:50:82: 78:90:5d:11:33:34:bc:36:cc:f3:f8:cf:6d:94:33: e8:84:f0:c6:ef:ca:37:c7:5b:63:ea:9a:df:af:01: 51:4e:8d:02:02:6c:37:a9:b3:69:58:6e:6f:3a:a1: 97:cd:3b:8d:74:22:5e:4c:26:35:e2:59:01:77:78: 84:0e:45:94:d9:73:f5:e9:5a:50:cd:9c:2f:5d:4a: 1c:9e:37:95:ee:f8:7e:85:20:44:ae:53:c4:c3:42: 22:54:f0:d8:5e:40:99:4e:64:1d:d9:83:e4:b8:15: d5:e3:87:96:24:4f:d4:41:09:97:99:e8:55:2e:b5: e2:f0:86:e0:68:75:8f:72:9e:b0:dd:90:6e:45:e8: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6F:8E:1E:0A:CA:96:B1:A4:6D:91:A6:90:AE:26:86:D8:E0:36:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/5ec16511-2f61-3aa8-bd18-faed8790d3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl X509v3 Authority Key Identifier: keyid:E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer sbgp-ipAddrBlock: critical IPv4: 23.155.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:20:bc:1b:48:bb:16:e5:c0:eb:a6:c9:81:70:76:10:8c:4c: ae:db:bb:bc:d4:da:f2:86:35:25:07:8d:60:6c:9d:90:c7:da: fc:de:0e:bc:ee:25:8f:00:25:02:fb:ff:1e:20:33:40:fd:2f: e7:3b:3d:fc:a0:04:c9:ea:16:b7:db:c5:16:c3:dd:a5:10:60: cf:24:50:00:7d:86:9f:f3:1d:5f:3e:5d:f1:1b:fa:d4:1b:72: b9:fc:94:f7:fd:69:3a:74:a3:51:49:c4:19:c3:e8:86:6b:3a: 6e:80:9e:6b:99:3a:77:69:79:11:35:57:b7:4a:e8:fb:24:08: 5a:fd:09:ad:c1:6a:69:67:42:09:81:11:d2:8b:f4:02:33:80: 72:fd:6d:d5:ae:cc:a6:92:73:23:e0:49:56:d2:27:e2:f1:56: ef:42:76:9c:b1:d6:70:0e:b5:fd:fb:19:7f:0d:7a:d3:1a:00: ed:ff:1e:33:38:b5:b5:ab:7e:fb:84:c4:25:4d:e2:2e:ce:c1: 9e:05:42:8a:12:bd:06:a0:10:60:46:f1:e7:d8:c7:65:28:b8: fc:9f:59:82:b1:13:ef:2b:fc:b6:e3:f6:52:cc:f4:1f:7f:cd: eb:5d:b5:2f:32:c5:8d:cb:94:e7:75:38:0f:c7:bb:9d:d8:ad: e0:9f:cf:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfNYqCa0SO5el0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiNTQyMjAtYjY0MC00ZGU1LWJmMjEtMjA3YjRmZmMy MGRkMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2JmOTE2YWItYTQyZC00YzZiLWI2YmItNmZlMWE2MmI0Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6TmWTHg1oFc2IF1Cs67EPtGBi6l65e6JLQ3 zaM583xDh56QLpGrTK6fbxlvlrw4KrG1FNA1Vsja0ZFuDQiJGbHW18WwKngu15fo p8HonpqHPClZJzj5DiJW+3sWMX//Fyo+0PxEeWayq5F5u0jLr7tYw8TkUIJ4kF0R MzS8Nszz+M9tlDPohPDG78o3x1tj6prfrwFRTo0CAmw3qbNpWG5vOqGXzTuNdCJe TCY14lkBd3iEDkWU2XP16VpQzZwvXUocnjeV7vh+hSBErlPEw0IiVPDYXkCZTmQd 2YPkuBXV44eWJE/UQQmXmehVLrXi8IbgaHWPcp6w3ZBuReiOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJvjh4KypaxpG2RppCuJobY4DZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1 NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdiNGZmYzIwZGQvNWVjMTY1MTEtMmY2MS0z YWE4LWJkMTgtZmFlZDg3OTBkM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmRiNTQyMjAtYjY0MC00ZGU1LWJm MjEtMjA3YjRmZmMyMGRkLzJkYjU0MjIwLWI2NDAtNGRlNS1iZjIxLTIwN2I0ZmZj MjBkZC5jcmwwHwYDVR0jBBgwFoAU5OOExvrEER43L/Otj/vGu5diA5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdi NGZmYzIwZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMgvBtIuxblwOumyYFwdhCMTK7bu7zU2vKGNSUHjWBsnZDH2vzeDrzu JY8AJQL7/x4gM0D9L+c7PfygBMnqFrfbxRbD3aUQYM8kUAB9hp/zHV8+XfEb+tQb crn8lPf9aTp0o1FJxBnD6IZrOm6AnmuZOndpeRE1V7dK6PskCFr9Ca3BamlnQgmB EdKL9AIzgHL9bdWuzKaScyPgSVbSJ+LxVu9Cdpyx1nAOtf37GX8NetMaAO3/HjM4 tbWrfvuExCVN4i7OwZ4FQooSvQagEGBG8efYx2UouPyfWYKxE+8r/Lbj9lLM9B9/ zetdtS8yxY3LlOd1OA/Hu53YreCfz90= -----END CERTIFICATE-----Generated at Tue May 6 17:43:49 2025 by rpki-client