$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa File: 9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa (raw, json) Hash identifier: xyIJiJnILyP+fDPh5iCPZj5ZV81RLQM3o4tSBxrh2Nw= Subject key identifier: 21:BE:19:EA:08:62:37:6C:41:54:BC:D5:E8:EE:BB:39:9D:DF:E5:18 Certificate issuer: /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Certificate serial: 010D0C9F43285849C4D4C07DD0D070C9C2BC2F00 Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 948 IP address blocks: 23.152.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c0:7d:d0:d0:70:c9:c2:bc:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=366df1c9-1706-469f-88e4-7dbabc77d3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:e8:30:1c:fc:74:42:0a:df:a9:4e:5a:dd: 48:ef:b3:8a:22:0d:2c:70:75:09:15:f6:e7:ea:02: 7f:c1:dc:a7:bb:28:c4:7c:54:86:a0:2e:71:8a:91: d2:76:52:12:c8:4c:ee:97:c2:3a:00:c3:e7:b3:d6: 8d:f3:b5:90:5d:71:e2:cb:e7:87:a8:90:c4:86:6c: 4c:4f:b5:66:0d:52:35:33:b4:5b:d9:15:fc:26:34: 84:d8:d9:c9:41:0b:95:2a:5b:71:71:19:3d:85:99: e2:10:b3:de:19:1a:a7:af:dd:52:d4:19:25:fb:15: 6c:0e:f0:aa:84:af:73:c3:90:e3:60:13:54:85:ed: ae:73:d0:04:78:4c:4f:c9:85:8d:6a:01:2b:13:ac: 29:9c:4b:ff:ec:0e:b7:76:3e:7c:8e:55:1d:04:bc: ac:c5:3b:60:7b:90:79:b8:2d:e0:c0:53:34:d5:ea: a2:b8:f5:cf:c1:67:69:be:6b:aa:76:43:9c:28:cb: 21:0c:07:27:78:80:96:dc:41:ea:15:89:07:07:e7: 54:57:db:95:e2:35:d4:ce:da:e2:ac:9a:ab:60:bd: 8c:88:6e:77:7d:ba:85:23:22:ac:50:e6:0a:43:fa: b5:34:3c:b3:e6:92:90:13:c0:80:31:da:d9:9a:89: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:19:EA:08:62:37:6C:41:54:BC:D5:E8:EE:BB:39:9D:DF:E5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl X509v3 Authority Key Identifier: keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer sbgp-ipAddrBlock: critical IPv4: 23.152.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:25:c1:42:c1:c7:46:23:5d:03:bf:e1:92:86:3f:7d:df:8f: 85:e7:40:95:3b:89:a5:9c:13:95:ef:f7:8c:69:2b:4e:33:7f: 32:fd:9c:c9:e2:9a:43:89:7e:34:e7:51:28:5f:d0:b9:3d:7f: 06:47:d6:2f:be:50:d6:4e:b2:51:75:19:50:26:84:f5:bb:35: 55:fb:a1:29:41:d1:39:30:05:bf:8b:d0:d4:63:24:26:86:22: 4e:99:e8:ce:01:82:6b:58:a8:8d:09:1f:5e:47:d4:d7:34:3b: 98:c3:42:36:58:d3:91:cc:9b:d6:96:b0:74:01:39:1f:f0:96: 30:f4:46:c5:26:cf:89:aa:4e:a1:65:1e:39:4a:b8:9f:bb:c1: 00:a7:c5:46:d4:dc:9f:91:2e:5e:12:c1:94:70:a0:01:04:48: 61:b7:a4:9d:55:fa:ea:bf:5f:69:dd:18:af:08:77:43:79:fd: c1:bd:c0:2d:33:cc:93:3d:f6:3e:77:97:dc:96:32:f9:5d:0c: 02:7d:cc:04:cc:b4:f9:91:18:b4:de:3e:16:4b:df:9f:fe:a6: 40:71:c9:76:fb:36:4e:cf:8a:5f:97:2d:95:a8:90:d1:60:1c: c7:84:d8:69:63:ae:ec:5b:7e:ca:be:46:b2:8c:3d:6c:e5:1e: 51:6c:b6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MB90NBwycK8LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMzNmEyYjgtNDJjMy00MmZhLTgzNWUtNDliMjYxMmNj MjlhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MzY2ZGYxYzktMTcwNi00NjlmLTg4ZTQtN2RiYWJjNzdkM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbDoMBz8dEIK36lOWt1I77OKIg0scHUJFfbn 6gJ/wdynuyjEfFSGoC5xipHSdlISyEzul8I6AMPns9aN87WQXXHiy+eHqJDEhmxM T7VmDVI1M7Rb2RX8JjSE2NnJQQuVKltxcRk9hZniELPeGRqnr91S1Bkl+xVsDvCq hK9zw5DjYBNUhe2uc9AEeExPyYWNagErE6wpnEv/7A63dj58jlUdBLysxTtge5B5 uC3gwFM01eqiuPXPwWdpvmuqdkOcKMshDAcneICW3EHqFYkHB+dUV9uV4jXUztri rJqrYL2MiG53fbqFIyKsUOYKQ/q1NDyz5pKQE8CAMdrZmolIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG+GeoIYjdsQVS81ejuuzmd3+UYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2 YTJiOC00MmMzLTQyZmEtODM1ZS00OWIyNjEyY2MyOWEvOWZiZDc4MTctNzc4NS0z ZThlLWI1ZDgtOWE4YjQxMmEzZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGMzNmEyYjgtNDJjMy00MmZhLTgz NWUtNDliMjYxMmNjMjlhLzhjMzZhMmI4LTQyYzMtNDJmYS04MzVlLTQ5YjI2MTJj YzI5YS5jcmwwHwYDVR0jBBgwFoAUiksEFIeDRSBp0+MZIK/tC2IZO2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2YTJiOC00MmMzLTQyZmEtODM1ZS00OWIy NjEyY2MyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5ioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAlwULBx0YjXQO/4ZKGP33fj4XnQJU7iaWcE5Xv94xpK04zfzL9nMni mkOJfjTnUShf0Lk9fwZH1i++UNZOslF1GVAmhPW7NVX7oSlB0TkwBb+L0NRjJCaG Ik6Z6M4BgmtYqI0JH15H1Nc0O5jDQjZY05HMm9aWsHQBOR/wljD0RsUmz4mqTqFl HjlKuJ+7wQCnxUbU3J+RLl4SwZRwoAEESGG3pJ1V+uq/X2ndGK8Id0N5/cG9wC0z zJM99j53l9yWMvldDAJ9zATMtPmRGLTePhZL35/+pkBxyXb7Nk7Pil+XLZWokNFg HMeE2Gljruxbfsq+RrKMPWzlHlFstjo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:39 2025 by rpki-client