$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa File: 0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa (raw, json) Hash identifier: 96V6UNZOyG3OR0brmHhoJZVzaEPUvGiEcYeh6tzm9rk= Subject key identifier: 19:D3:52:11:88:BF:2C:21:FE:17:90:7F:09:2D:E3:CF:AD:2C:62:51 Certificate issuer: /CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Certificate serial: 010D0C9F432858499DBF27BE2D5F9312F9283E80 Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 38008 IP address blocks: 23.143.8.0/24 maxlen: 24 2602:27c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:27:be:2d:5f:93:12:f9:28:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=e7972105-008c-4c05-821a-dd08e8f367ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:ea:81:b6:2e:eb:86:3d:b0:f8:09:77:83: 26:94:82:28:90:5f:4c:80:18:34:ab:1f:5d:a7:e2: d7:23:74:04:81:bb:e8:05:6d:2a:84:7f:ce:fe:12: 59:fd:63:b1:44:5a:ed:57:61:c1:0d:d1:e5:53:ba: 78:c1:73:a9:cb:4b:e1:9b:6b:ec:d2:00:b7:44:95: c2:1c:cc:fd:8e:a2:ff:2d:18:b1:50:7b:e1:95:b8: 7f:64:43:0c:2b:46:f7:85:ca:7e:0b:2d:3c:27:1f: b6:d6:b2:30:00:ab:4f:d5:2f:e5:28:68:b0:65:71: 8e:72:83:cc:a6:58:b8:d8:d5:35:b6:b6:87:1a:51: 21:c8:31:2f:59:94:3a:67:0a:ec:2a:81:3b:7a:6b: da:55:d7:ca:76:34:dc:d5:c6:2a:ad:8f:1d:66:45: a1:87:09:ce:30:4b:4a:77:7f:66:b5:3b:4e:6d:f3: 9c:40:c1:85:7e:54:dc:44:0c:03:eb:a7:63:a2:f3: 04:02:11:35:80:ad:19:ce:fa:cb:97:6a:84:ef:da: a5:95:b8:dd:f8:0f:7e:06:7f:5f:4e:3e:58:aa:14: a8:2b:f9:c6:6a:e7:1f:30:63:39:70:cf:f0:05:26: 6e:02:04:e7:55:91:4c:0d:c8:8b:4d:56:79:5d:cd: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D3:52:11:88:BF:2C:21:FE:17:90:7F:09:2D:E3:CF:AD:2C:62:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl X509v3 Authority Key Identifier: keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer sbgp-ipAddrBlock: critical IPv4: 23.143.8.0/24 IPv6: 2602:27c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a2:d2:9c:e2:d7:a0:e3:c4:89:b4:92:dc:dc:16:69:50:f3: 80:40:16:82:13:e3:eb:2e:58:02:79:64:5d:fe:c5:9a:5b:a4: ae:ef:56:2e:84:ab:79:49:03:21:0b:7a:48:89:4e:33:e7:a2: 6a:e9:e1:46:d3:5a:9a:63:2f:69:7c:ff:fa:9a:db:30:78:70: 35:74:6b:53:96:80:1f:66:de:d2:0d:c3:0a:5e:31:0e:aa:21: d3:50:95:0c:63:5a:12:24:95:87:1f:1e:57:13:4b:a4:68:a8: 56:c2:f1:12:5f:c4:4e:f8:6c:80:7a:10:3e:ed:32:21:70:b3: cb:05:cb:a4:b1:9d:4d:e6:2b:ff:94:c2:98:b5:9e:c1:b6:31: 05:c9:23:29:7b:e0:40:3a:08:49:13:29:74:71:f4:97:e2:ce: 6c:34:4e:b3:ad:0a:3e:e6:74:ac:06:7f:7b:c0:9f:8e:4c:30: 05:14:d1:b5:33:9e:37:41:62:04:5d:d8:27:97:c8:1f:67:c7: f5:12:a3:d9:05:e1:6f:02:8a:2e:87:14:65:89:f5:17:99:6a: 40:ee:49:db:b3:6c:bd:1d:81:53:8a:16:c1:e1:bb:36:3d:8a: ba:e6:ff:a3:9a:e6:44:f4:7e:92:3b:db:cc:de:98:21:f8:90: 40:ff:75:ca -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmdvye+LV+TEvkoPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4 MzQwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZTc5NzIxMDUtMDA4Yy00YzA1LTgyMWEtZGQwOGU4ZjM2N2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2rqgbYu64Y9sPgJd4MmlIIokF9MgBg0qx9d p+LXI3QEgbvoBW0qhH/O/hJZ/WOxRFrtV2HBDdHlU7p4wXOpy0vhm2vs0gC3RJXC HMz9jqL/LRixUHvhlbh/ZEMMK0b3hcp+Cy08Jx+21rIwAKtP1S/lKGiwZXGOcoPM pli42NU1traHGlEhyDEvWZQ6ZwrsKoE7emvaVdfKdjTc1cYqrY8dZkWhhwnOMEtK d39mtTtObfOcQMGFflTcRAwD66djovMEAhE1gK0ZzvrLl2qE79qllbjd+A9+Bn9f Tj5YqhSoK/nGaucfMGM5cM/wBSZuAgTnVZFMDciLTVZ5Xc155wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBnTUhGIvywh/heQfwkt48+tLGJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvMGNjZWMxZDktYmRiZi0z OTBmLTg2ZjItYWYxM2Q3YzkxNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1 ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi ZDRkNTgzNDAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF48IMA4E AgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBotKc4teg48SJtJLc3BZpUPOAQBaCE+Pr LlgCeWRd/sWaW6Su71YuhKt5SQMhC3pIiU4z56Jq6eFG01qaYy9pfP/6mtsweHA1 dGtTloAfZt7SDcMKXjEOqiHTUJUMY1oSJJWHHx5XE0ukaKhWwvESX8RO+GyAehA+ 7TIhcLPLBcuksZ1N5iv/lMKYtZ7BtjEFySMpe+BAOghJEyl0cfSX4s5sNE6zrQo+ 5nSsBn97wJ+OTDAFFNG1M543QWIEXdgnl8gfZ8f1EqPZBeFvAoouhxRlifUXmWpA 7knbs2y9HYFTihbB4bs2PYq65v+jmuZE9H6SO9vM3pgh+JBA/3XK -----END CERTIFICATE-----Generated at Mon Apr 28 20:00:06 2025 by rpki-client