$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa File: c53925ff-d700-3546-9f23-98b9543e1426.roa (raw, json) Hash identifier: cUQcXZenSpIV1tMpMCkZAf9BQYyQbGEvdKQZL2kYTy8= Subject key identifier: 4E:35:12:DD:EE:8F:A0:27:36:AD:2B:46:32:6C:79:C8:F8:3C:05:A6 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F432858497114294824CA3A9C81E2F300 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 398741 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:29:48:24:ca:3a:9c:81:e2:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=91aa8c35-a42a-49e5-a958-d6921a051890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:77:c6:ee:a4:4f:ca:38:f9:a0:9e:8d:08: f7:34:e5:fc:3f:8f:67:a0:f5:b3:0a:fd:62:5e:08: b0:59:df:1d:80:cd:4c:91:2e:f8:c0:c0:7c:92:0c: 5d:a4:ae:9e:ad:84:fd:1c:40:e4:8c:39:56:6c:9c: 37:8f:65:61:31:1a:3a:25:c9:89:05:92:a2:00:86: a3:c1:cb:8c:a8:74:93:06:14:f0:0c:00:8f:1c:61: 1a:e1:a6:8d:5a:50:6c:f7:3a:06:e8:ce:8f:dd:20: 62:3b:c6:bd:2c:d4:97:ee:2b:60:d5:05:4b:d1:6b: ee:b5:44:f3:13:d4:9b:df:f3:b2:32:94:0b:fd:e9: fc:dc:79:65:d3:97:d2:1d:4f:92:da:50:45:f5:ec: 01:7f:23:6e:d6:fe:b6:e7:0f:72:7e:b6:1e:cb:00: 7b:dd:02:ad:7d:af:ee:86:15:84:85:80:23:2e:4d: ed:0a:1c:27:1e:50:c8:64:5d:b8:14:b4:bc:f1:bf: 29:ca:c1:b7:65:0d:41:64:b9:95:6b:00:e0:76:b9: 22:51:9a:a1:03:a4:cd:4c:95:89:15:49:49:fc:a4: c6:0a:b3:0a:04:9a:20:8d:c7:c3:14:1b:bd:2c:30: 35:bb:8c:20:87:20:19:eb:de:4a:1e:35:7a:f7:20: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:35:12:DD:EE:8F:A0:27:36:AD:2B:46:32:6C:79:C8:F8:3C:05:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:68:c9:27:c1:c6:2b:95:0f:cb:8d:15:48:3b:99:28:ae:74: c6:98:3b:94:bf:06:f4:66:ac:bd:96:31:61:86:7a:62:8c:24: 58:ae:7c:f5:ad:9d:cb:e0:3f:80:52:f1:16:94:a1:4f:91:b6: b5:ad:74:65:f7:aa:46:a9:75:e6:99:16:7a:78:f5:24:83:5b: 1f:15:11:dc:d4:ed:e8:46:17:83:ee:09:63:5a:7e:b2:f4:a4: 4b:7e:11:87:2e:d0:ea:30:66:3e:8f:28:7c:e6:73:e7:20:19: 53:8f:99:88:c4:e9:07:88:e1:2c:2e:46:49:b6:da:a8:32:12: 50:88:eb:d1:8b:fb:2f:79:27:6b:47:72:54:a6:7c:ab:94:e7: af:d8:14:c6:8a:1e:f5:6b:c4:13:90:34:4d:56:be:ed:ca:dc: 6c:9d:ca:74:e3:8d:e9:3d:0f:0c:97:74:ea:be:a6:91:c7:95: 6e:64:58:f3:85:83:33:9e:a7:99:66:03:89:51:78:60:62:8d: 6f:19:04:ad:2b:c4:34:13:c8:4b:32:df:8c:f4:16:89:93:eb: 88:d0:14:59:e7:2c:d4:6a:26:b9:56:39:83:eb:6f:bc:6e:1e: e2:9c:0a:61:c1:c6:ee:b4:28:2d:37:94:a8:82:f9:fc:34:db: b1:56:ef:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFClIJMo6nIHi8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk OTFhYThjMzUtYTQyYS00OWU1LWE5NTgtZDY5MjFhMDUxODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHt3xu6kT8o4+aCejQj3NOX8P49noPWzCv1i XgiwWd8dgM1MkS74wMB8kgxdpK6erYT9HEDkjDlWbJw3j2VhMRo6JcmJBZKiAIaj wcuMqHSTBhTwDACPHGEa4aaNWlBs9zoG6M6P3SBiO8a9LNSX7itg1QVL0WvutUTz E9Sb3/OyMpQL/en83Hll05fSHU+S2lBF9ewBfyNu1v625w9yfrYeywB73QKtfa/u hhWEhYAjLk3tChwnHlDIZF24FLS88b8pysG3ZQ1BZLmVawDgdrkiUZqhA6TNTJWJ FUlJ/KTGCrMKBJogjcfDFBu9LDA1u4wghyAZ695KHjV69yD7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE41Et3uj6AnNq0rRjJsecj4PAWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvYzUzOTI1ZmYtZDcwMC0z NTQ2LTlmMjMtOThiOTU0M2UxNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFoySfBxiuVD8uNFUg7mSiudMaYO5S/BvRmrL2WMWGGemKMJFiufPWt ncvgP4BS8RaUoU+RtrWtdGX3qkapdeaZFnp49SSDWx8VEdzU7ehGF4PuCWNafrL0 pEt+EYcu0OowZj6PKHzmc+cgGVOPmYjE6QeI4SwuRkm22qgyElCI69GL+y95J2tH clSmfKuU56/YFMaKHvVrxBOQNE1Wvu3K3GydynTjjek9DwyXdOq+ppHHlW5kWPOF gzOep5lmA4lReGBijW8ZBK0rxDQTyEsy34z0FomT64jQFFnnLNRqJrlWOYPrb7xu HuKcCmHBxu60KC03lKiC+fw027FW73E= -----END CERTIFICATE-----Generated at Sat May 10 12:02:33 2025 by rpki-client