$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa File: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (raw, json) Hash identifier: wA9lboYwVu1VJ173c4Nq+b6trl3C9BAFAN/6bgQAcro= Subject key identifier: B6:FF:72:DD:EF:98:13:74:48:27:6C:FF:13:D9:D0:E8:32:CA:DF:BC Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F432858493C09321190BF6347F997B980 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 401370 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:32:11:90:bf:63:47:f9:97:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=99a5f52a-653e-4ece-9833-0cd72528d108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:64:d8:f0:f3:c6:6c:d6:5e:06:a4:02:59:f3: 7e:ea:dd:f6:c4:59:68:1e:55:08:75:1e:1f:99:89: e2:49:10:52:fc:bf:d7:94:d3:04:d5:2e:2d:0c:08: 42:80:39:2d:14:b9:bc:7b:b2:13:18:40:73:d5:50: 5e:7a:31:96:bc:68:d6:3a:38:b4:c8:d7:49:d4:ab: 85:94:8f:4e:e6:f1:31:aa:fc:9f:58:48:7e:ab:9b: 1d:a8:6a:e7:8c:c0:31:35:13:3f:19:d8:a1:80:00: 5a:63:69:7b:1d:5b:b5:81:0c:a5:e8:48:60:39:8d: da:3a:05:06:03:b0:c3:95:b7:c7:2b:67:9f:bf:0e: d5:5c:71:06:60:2e:41:c2:b9:64:a8:88:e4:72:20: f7:9b:ac:97:f2:cc:0e:fe:53:74:c6:e9:0c:42:2f: 90:f6:db:fb:59:24:a7:9d:2f:62:c5:e6:40:7a:5e: 4f:a2:50:c0:a9:f0:43:4c:34:b0:b7:f1:5f:66:27: 9d:1f:23:ec:09:f3:75:e2:40:ba:01:83:de:ac:de: 61:23:a5:e1:77:3a:9c:df:a4:a5:3e:db:d3:e5:2b: b4:1f:55:62:c2:1d:1a:a6:15:47:ab:00:02:d3:8d: 6b:e7:8f:31:b7:87:42:a7:8d:a9:99:e7:70:21:4e: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FF:72:DD:EF:98:13:74:48:27:6C:FF:13:D9:D0:E8:32:CA:DF:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b7:70:26:c6:30:a2:d0:81:02:53:f0:c2:0a:2f:86:55:9e: fa:03:1c:18:bc:0b:b4:8b:0d:a3:ce:d0:28:67:d6:15:db:8f: b7:6b:21:0d:ae:c1:cb:62:45:f7:7b:ad:bc:3c:29:a6:e5:7a: e4:cd:ce:5d:5f:af:0e:c4:9b:87:ff:26:ab:e4:5a:b1:8c:d2: 49:08:d6:67:4c:b7:1e:df:6b:67:5a:bc:a2:3a:b2:63:52:d5: 58:41:78:af:b9:37:e1:2a:e1:c0:77:d6:50:47:80:05:e3:bf: fa:c1:c4:a4:96:8e:85:d6:a2:8b:91:62:25:fd:c2:1d:e3:b8: 5f:c7:8e:2c:b6:31:01:19:0e:0d:c4:e6:07:8c:3d:4e:e2:9f: c4:cb:31:bb:ef:67:fa:bd:c6:97:d9:e1:d6:26:a7:c0:fd:08: df:07:29:99:ee:61:aa:2c:7f:85:6a:f8:89:07:d7:35:63:5f: 24:2c:ce:06:b0:a0:4c:fb:57:2e:42:28:5a:2b:11:0e:7e:f6: 6b:5e:fa:f0:4f:2f:f6:98:d0:29:83:33:32:55:9b:5d:37:ce: 7e:56:1e:a9:96:57:06:37:b0:ab:4f:6c:c3:99:58:8d:84:5e: 72:25:6d:22:db:c2:c8:b9:46:18:68:1b:2b:c2:81:31:5d:bd: dd:37:7a:bc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEk8CTIRkL9jR/mXuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTlhNWY1MmEtNjUzZS00ZWNlLTk4MzMtMGNkNzI1MjhkMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimTY8PPGbNZeBqQCWfN+6t32xFloHlUIdR4f mYniSRBS/L/XlNME1S4tDAhCgDktFLm8e7ITGEBz1VBeejGWvGjWOji0yNdJ1KuF lI9O5vExqvyfWEh+q5sdqGrnjMAxNRM/GdihgABaY2l7HVu1gQyl6EhgOY3aOgUG A7DDlbfHK2efvw7VXHEGYC5BwrlkqIjkciD3m6yX8swO/lN0xukMQi+Q9tv7WSSn nS9ixeZAel5PolDAqfBDTDSwt/FfZiedHyPsCfN14kC6AYPerN5hI6Xhdzqc36Sl PtvT5Su0H1Viwh0aphVHqwAC041r548xt4dCp42pmedwIU5ppQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLb/ct3vmBN0SCds/xPZ0Ogyyt+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvNDRmY2FiZjAtZjg5Yy0z YmIxLWFkYjQtNTk1Y2U3MzAwODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7t3AmxjCi0IECU/DCCi+GVZ76AxwYvAu0 iw2jztAoZ9YV24+3ayENrsHLYkX3e628PCmm5Xrkzc5dX68OxJuH/yar5FqxjNJJ CNZnTLce32tnWryiOrJjUtVYQXivuTfhKuHAd9ZQR4AF47/6wcSklo6F1qKLkWIl /cId47hfx44stjEBGQ4NxOYHjD1O4p/EyzG772f6vcaX2eHWJqfA/QjfBymZ7mGq LH+FaviJB9c1Y18kLM4GsKBM+1cuQihaKxEOfvZrXvrwTy/2mNApgzMyVZtdN85+ Vh6pllcGN7CrT2zDmViNhF5yJW0i28LIuUYYaBsrwoExXb3dN3q8 -----END CERTIFICATE-----Generated at Sun May 11 02:30:51 2025 by rpki-client