$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa File: 9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa (raw, json) Hash identifier: E0fg82Xblf6WWNBYm/WC9bAsSSzyxXCBzBMC35xWq6Q= Subject key identifier: 5C:7A:AD:F3:FA:70:1D:22:51:01:F3:F5:6F:8E:95:E9:90:C1:A3:CB Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F43285849B149F3B2AD8442A798AF3400 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 133199 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f3:b2:ad:84:42:a7:98:af:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fce6670d-a6dd-49c0-8f39-7a9953332a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:c8:67:f9:0c:7a:a5:81:10:d8:8e:26:cd: 44:14:0c:4e:5e:21:f9:57:f1:38:c0:80:ee:1c:c1: d4:a6:0b:9b:d2:75:c9:3c:84:69:b2:62:7c:9f:cf: 76:f0:c7:b5:80:c0:9c:d5:cf:dc:c7:11:9f:39:f3: 5b:14:15:02:80:1f:cf:20:c0:b9:10:0c:68:35:af: b3:69:bb:0f:02:b5:8b:9e:f9:f6:22:71:ed:17:7f: a7:0e:91:3c:c3:1a:a0:89:72:1f:0e:47:84:10:36: 22:c8:1f:31:26:b7:8e:93:bc:f5:32:a1:8b:b6:1e: 6d:16:c8:fd:be:99:56:c1:6a:3f:5e:68:65:8c:a8: ff:b1:bb:ba:79:4a:14:75:ca:cc:97:d2:f0:da:53: 93:55:89:e7:bb:b3:48:c9:ca:a3:0e:be:8f:11:6e: 6b:82:97:14:e5:91:04:5e:75:10:ed:27:6c:68:ec: 29:74:67:a4:9d:70:04:d7:22:a9:71:a9:b1:45:5a: 6c:8b:b7:60:13:82:11:a8:ad:f3:e9:f3:a6:ef:f4: d4:73:4a:b2:50:80:1c:6e:56:93:8c:09:72:5c:63: f8:2d:1c:04:a4:fd:f0:9f:3f:3d:07:6e:11:0b:29: e4:b0:66:11:06:24:5d:55:2c:d9:52:47:6d:80:13: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7A:AD:F3:FA:70:1D:22:51:01:F3:F5:6F:8E:95:E9:90:C1:A3:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9b:33:87:26:79:8b:02:59:1f:ea:0b:4f:6b:fa:c8:70:1f: 50:4a:4e:51:85:e3:c5:de:86:3c:7d:fe:eb:fe:1c:d9:97:86: 2d:1f:13:0c:f5:34:a0:f9:fe:98:33:c3:06:47:d2:40:de:49: 04:6e:73:c7:a4:bf:81:5a:b9:12:a3:6d:df:88:95:ac:0b:14: 6d:ac:fc:2e:73:4b:7d:c1:ca:08:75:6f:5e:c3:c9:c9:8f:1c: 68:a0:9a:9d:c1:cf:58:50:f0:b2:a3:e2:49:0f:0d:04:a3:5a: 0b:14:3f:fa:31:d4:d0:a6:17:59:7f:6b:a4:1c:86:e2:02:00: 96:c8:84:fb:cd:7b:9f:f9:81:11:0e:27:05:32:4f:ea:c7:35: 0c:32:ed:3c:05:4c:3c:42:91:5d:e4:70:ce:92:cd:80:25:54: 7c:69:7a:4d:cc:d7:cd:0b:27:82:b9:80:65:28:79:ea:0e:dc: 26:35:06:89:b9:24:36:87:72:1e:90:a2:0f:a0:53:df:b5:3a: 9d:5f:0b:f9:8d:51:65:e4:52:ea:2e:c6:db:7d:f1:ae:82:7b: 6f:9d:f3:68:8b:4c:42:7a:bd:a1:65:f2:c3:ee:0a:bc:a5:2c: d6:a8:71:1f:39:02:82:51:07:08:11:14:07:46:3e:72:f7:1e: 9e:0c:09:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfOyrYRCp5ivNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmNlNjY3MGQtYTZkZC00OWMwLThmMzktN2E5OTUzMzMyYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVPIZ/kMeqWBENiOJs1EFAxOXiH5V/E4wIDu HMHUpgub0nXJPIRpsmJ8n8928Me1gMCc1c/cxxGfOfNbFBUCgB/PIMC5EAxoNa+z absPArWLnvn2InHtF3+nDpE8wxqgiXIfDkeEEDYiyB8xJreOk7z1MqGLth5tFsj9 vplWwWo/XmhljKj/sbu6eUoUdcrMl9Lw2lOTVYnnu7NIycqjDr6PEW5rgpcU5ZEE XnUQ7SdsaOwpdGeknXAE1yKpcamxRVpsi7dgE4IRqK3z6fOm7/TUc0qyUIAcblaT jAlyXGP4LRwEpP3wnz89B24RCynksGYRBiRdVSzZUkdtgBNCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFx6rfP6cB0iUQHz9W+OlemQwaPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvOWJlZjljZTMtZmYzNi0z YzA1LWJhY2UtMWVjYTNmZjNkYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADibM4cmeYsCWR/qC09r+shwH1BKTlGF48Xehjx9/uv+HNmXhi0fEwz1 NKD5/pgzwwZH0kDeSQRuc8ekv4FauRKjbd+IlawLFG2s/C5zS33Bygh1b17DycmP HGigmp3Bz1hQ8LKj4kkPDQSjWgsUP/ox1NCmF1l/a6QchuICAJbIhPvNe5/5gREO JwUyT+rHNQwy7TwFTDxCkV3kcM6SzYAlVHxpek3M180LJ4K5gGUoeeoO3CY1Bom5 JDaHch6Qog+gU9+1Op1fC/mNUWXkUuouxtt98a6Ce2+d82iLTEJ6vaFl8sPuCryl LNaocR85AoJRBwgRFAdGPnL3Hp4MCRw= -----END CERTIFICATE-----Generated at Thu May 8 06:28:43 2025 by rpki-client