$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: LWbEf7vROvsHbqFWKGjd2UMqyI+YmqJFZWG8hht1B20= Subject key identifier: 29:98:4C:54:46:89:64:ED:39:9F:EF:44:39:05:21:E0:EE:2D:6A:04 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F4328584988CF1F2E99DF77AD14B3B878 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1f:2e:99:df:77:ad:14:b3:b8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=56e4cd2e-60ba-4201-a2d4-ba86154417a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:bc:ae:29:59:31:91:a9:b0:68:e8:ef:8c: 11:cc:1a:54:90:10:f1:e6:22:e2:8b:49:fd:d3:bb: b3:92:c2:3d:60:61:94:0c:ec:04:2c:4a:b0:7b:81: 0c:f4:ba:d1:b7:8a:4a:d8:80:e0:cb:65:34:88:3c: 8e:28:a5:7e:9a:3f:77:46:e5:69:a4:b7:c0:2a:0f: 6c:00:5e:03:bd:5a:48:eb:2f:18:00:44:25:c8:5b: 70:3b:76:44:5b:a1:4f:25:ae:c3:7c:aa:63:4a:aa: 5f:9a:6f:84:eb:f1:42:2f:42:3c:da:38:a2:b6:44: 6e:d7:32:5f:3b:c3:b3:d3:38:d4:1f:44:b2:22:80: cf:1d:2a:33:0f:60:3c:8e:ff:8b:1b:2f:f6:09:4c: 4c:6a:cf:3a:af:56:9e:51:21:89:e4:5d:5c:0a:55: 05:07:ea:fe:6f:c1:c8:53:71:9c:bc:98:05:cc:fe: 10:e5:42:cf:bf:a7:8a:49:ec:21:3f:d8:c6:c7:6a: 00:d5:34:5e:af:cc:c2:f1:17:aa:17:bb:6e:b4:61: ca:af:9a:a3:69:ad:3f:52:a5:a7:97:fb:91:fd:55: 71:09:0a:dd:08:98:12:8e:cb:54:15:c0:56:66:71: 64:88:11:4e:95:1f:28:76:bd:a1:95:a6:0f:56:2f: 8e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:98:4C:54:46:89:64:ED:39:9F:EF:44:39:05:21:E0:EE:2D:6A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f5:a1:d7:78:4b:70:db:76:4a:03:27:53:2b:a8:73:ed:80: 5e:2d:05:71:55:a9:33:70:6b:7c:6a:e6:8a:bb:57:34:9b:ba: 7a:80:d2:23:0b:e2:90:95:04:e8:29:64:93:31:8f:ba:d5:83: e3:8d:d3:ae:a5:b0:65:ec:34:95:01:6d:d9:c3:4b:5d:7e:90: a9:4e:23:14:78:ae:cd:cf:96:52:9e:4d:14:2d:dc:a5:94:c8: 3d:b0:bd:99:0c:b2:9d:3d:37:a3:e0:4f:8a:5b:12:28:be:ef: 7b:ab:32:a6:86:1e:c4:4b:51:15:04:6e:e9:87:c4:ec:99:9f: 85:d2:99:d7:b6:5f:fc:18:17:c7:c9:b5:83:3a:e6:41:cd:57: 83:c4:b8:42:1b:ca:14:1d:b5:35:7a:76:a0:92:59:cd:05:31: c0:7c:37:40:06:1c:2a:73:7e:c2:26:63:d1:ff:04:7e:c6:08: f2:fb:a3:4c:1f:c6:b6:b8:7c:05:a5:5c:30:e5:d4:f3:2d:fb: eb:05:52:eb:49:8e:5e:d3:35:d1:48:ce:a5:0e:97:00:0e:f6: 6e:18:2b:c0:49:18:d3:f3:4f:df:d7:d3:09:f1:fa:e8:a3:cf: 52:c0:87:79:fb:20:c3:da:57:fc:0d:8d:4c:83:c7:a1:4c:62: f6:85:0b:b5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmIzx8umd93rRSzuHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTZlNGNkMmUtNjBiYS00MjAxLWEyZDQtYmE4NjE1NDQxN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUG8rilZMZGpsGjo74wRzBpUkBDx5iLii0n9 07uzksI9YGGUDOwELEqwe4EM9LrRt4pK2IDgy2U0iDyOKKV+mj93RuVppLfAKg9s AF4DvVpI6y8YAEQlyFtwO3ZEW6FPJa7DfKpjSqpfmm+E6/FCL0I82jiitkRu1zJf O8Oz0zjUH0SyIoDPHSozD2A8jv+LGy/2CUxMas86r1aeUSGJ5F1cClUFB+r+b8HI U3GcvJgFzP4Q5ULPv6eKSewhP9jGx2oA1TRer8zC8ReqF7tutGHKr5qjaa0/UqWn l/uR/VVxCQrdCJgSjstUFcBWZnFkiBFOlR8odr2hlaYPVi+O0QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCmYTFRGiWTtOZ/vRDkFIeDuLWoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU9aHXeEtw23ZKAydTK6hz7YBeLQVxVakz cGt8auaKu1c0m7p6gNIjC+KQlQToKWSTMY+61YPjjdOupbBl7DSVAW3Zw0tdfpCp TiMUeK7Nz5ZSnk0ULdyllMg9sL2ZDLKdPTej4E+KWxIovu97qzKmhh7ES1EVBG7p h8TsmZ+F0pnXtl/8GBfHybWDOuZBzVeDxLhCG8oUHbU1enagklnNBTHAfDdABhwq c37CJmPR/wR+xgjy+6NMH8a2uHwFpVww5dTzLfvrBVLrSY5e0zXRSM6lDpcADvZu GCvASRjT80/f19MJ8froo89SwId5+yDD2lf8DY1Mg8ehTGL2hQu1 -----END CERTIFICATE-----Generated at Sun Apr 27 23:55:39 2025 by rpki-client