$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa File: 089fd902-9225-391d-ae0e-3c7cd908bf12.roa (raw, json) Hash identifier: HfFTxcfpNANG5xRr2gFbC7MYw9kATb3f80eZF3ryo8E= Subject key identifier: 84:7F:BC:86:00:43:FD:53:74:8C:F0:20:91:C9:34:28:B4:3C:8C:11 Certificate issuer: /CN=a07ba476-e067-424c-814a-2b920e23990d Certificate serial: 010D0C9F43285849B57A202B641CA68D10E63080 Authority key identifier: 3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 399951 IP address blocks: 23.152.120.0/24 maxlen: 24 23.187.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:20:2b:64:1c:a6:8d:10:e6:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07ba476-e067-424c-814a-2b920e23990d Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=c5bad846-4fd7-4950-81b4-ce4fe4119867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:d1:d8:72:bc:41:0f:fb:2a:3d:08:4d:08: 54:3b:c2:ea:07:5e:01:2e:c3:de:5e:62:2e:a1:28: cf:c7:2c:1f:3d:b0:a2:ea:d9:2e:9e:80:2f:b9:7c: 17:a1:33:6a:b9:95:ac:8c:96:e5:9f:25:c7:c9:16: 0e:af:1f:49:56:2b:fc:2b:58:c8:77:8e:c8:41:23: ff:65:9f:fb:55:a1:37:d0:c3:87:38:81:13:ef:e7: fa:35:a9:9b:8f:8a:ec:fe:3e:10:b1:76:56:e1:c8: 60:51:a6:bc:15:23:17:f7:e3:9a:7f:60:f6:b4:6d: 71:b8:32:3f:cd:a7:f0:7a:96:1c:89:cf:13:bf:b0: a5:ed:77:a0:a4:c5:64:63:2b:bd:7b:d8:56:1e:24: c2:c4:a4:19:0e:b7:25:a3:d5:89:ed:c6:b0:8d:e3: f9:cf:52:1c:de:2f:05:d4:90:fe:e3:5c:5d:92:4b: 10:4a:ac:db:66:b7:61:36:71:dd:00:8c:3d:65:13: 98:87:2b:cb:25:a0:f2:32:46:bb:72:e4:70:b6:be: d1:4a:88:ba:a7:53:b1:e9:fb:b7:13:2b:e2:b2:3d: a1:30:9c:0c:37:32:df:70:d3:d4:ed:87:0c:63:ef: 79:da:ef:f3:25:d1:9b:07:5a:33:1b:ef:cb:23:22: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7F:BC:86:00:43:FD:53:74:8C:F0:20:91:C9:34:28:B4:3C:8C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl X509v3 Authority Key Identifier: keyid:3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer sbgp-ipAddrBlock: critical IPv4: 23.152.120.0/24 23.187.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:67:ba:f6:c0:76:bc:37:21:76:5f:80:f7:74:60:2b:d5:e7: 1d:5a:d3:0a:74:a0:f8:fa:12:2a:99:b3:f7:5c:26:b4:e6:88: 2e:b3:6f:29:09:12:f4:dc:9e:99:aa:7e:69:30:0d:b6:18:d0: 7b:de:67:af:03:c2:27:24:62:ce:3b:cd:41:45:3c:8e:95:4d: 0b:d3:9f:46:34:a2:0b:5a:b8:a0:1d:23:22:23:bd:c0:ab:9c: 3a:0d:29:3a:0a:59:11:f9:aa:5e:6b:5b:65:c9:10:61:c9:cc: 9a:3f:57:8f:51:a7:0a:dd:d9:9f:4e:3c:67:8e:74:62:4d:03: fb:7d:71:cc:ed:89:72:9e:24:b6:a3:1a:ce:54:66:29:5a:3d: 80:39:6e:eb:d9:c7:8d:e8:e3:86:58:cb:39:06:a6:99:90:c7: b3:97:8c:c2:0c:99:61:2e:be:a5:0d:cd:e7:dd:bc:9e:db:5c: 8f:8b:b2:78:a3:28:41:a2:94:5c:c4:a4:d0:35:14:dc:06:ca: a1:a4:04:5a:bb:04:27:b6:11:77:2d:30:ac:38:d5:28:f9:f5: 0a:be:f2:63:ac:e4:8e:d2:45:bf:7a:19:46:ab:11:7a:be:ba: 5c:15:b2:58:4c:33:24:a0:7d:d7:93:a3:3e:9f:9e:30:eb:27: b8:9d:e7:76 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEm1eiArZBymjRDmMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3YmE0NzYtZTA2Ny00MjRjLTgxNGEtMmI5MjBlMjM5 OTBkMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YzViYWQ4NDYtNGZkNy00OTUwLTgxYjQtY2U0ZmU0MTE5ODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphDR2HK8QQ/7Kj0ITQhUO8LqB14BLsPeXmIu oSjPxywfPbCi6tkunoAvuXwXoTNquZWsjJblnyXHyRYOrx9JViv8K1jId47IQSP/ ZZ/7VaE30MOHOIET7+f6Nambj4rs/j4QsXZW4chgUaa8FSMX9+Oaf2D2tG1xuDI/ zafwepYcic8Tv7Cl7XegpMVkYyu9e9hWHiTCxKQZDrclo9WJ7cawjeP5z1Ic3i8F 1JD+41xdkksQSqzbZrdhNnHdAIw9ZROYhyvLJaDyMka7cuRwtr7RSoi6p1Ox6fu3 Eyvisj2hMJwMNzLfcNPU7YcMY+952u/zJdGbB1ozG+/LIyKc8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIR/vIYAQ/1TdIzwIJHJNCi0PIwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMDdi YTQ3Ni1lMDY3LTQyNGMtODE0YS0yYjkyMGUyMzk5MGQvMDg5ZmQ5MDItOTIyNS0z OTFkLWFlMGUtM2M3Y2Q5MDhiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTA3YmE0NzYtZTA2Ny00MjRjLTgx NGEtMmI5MjBlMjM5OTBkL2EwN2JhNDc2LWUwNjctNDI0Yy04MTRhLTJiOTIwZTIz OTkwZC5jcmwwHwYDVR0jBBgwFoAUPFkcqi68bjkShuYYZq/zn1XHgggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMDdiYTQ3Ni1lMDY3LTQyNGMtODE0YS0yYjky MGUyMzk5MGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5h4AwQB F7uwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI5nuvbAdrw3IXZfgPd0YCvV5x1a0wp0oPj6EiqZs/dcJrTm iC6zbykJEvTcnpmqfmkwDbYY0HveZ68DwickYs47zUFFPI6VTQvTn0Y0ogtauKAd IyIjvcCrnDoNKToKWRH5ql5rW2XJEGHJzJo/V49Rpwrd2Z9OPGeOdGJNA/t9cczt iXKeJLajGs5UZilaPYA5buvZx43o44ZYyzkGppmQx7OXjMIMmWEuvqUNzefdvJ7b XI+LsnijKEGilFzEpNA1FNwGyqGkBFq7BCe2EXctMKw41Sj59Qq+8mOs5I7SRb96 GUarEXq+ulwVslhMMySgfdeToz6fnjDrJ7id53Y= -----END CERTIFICATE-----Generated at Wed May 14 02:58:00 2025 by rpki-client