$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa File: 82a310ab-4fc3-33b8-b133-f7cf904aa294.roa (raw, json) Hash identifier: vGwRnBdVWRyL3s6/xLX3BFHCS8xGO54mIS092r8EGb0= Subject key identifier: E4:16:26:76:83:A7:DD:4F:0B:1C:96:00:E2:B5:46:37:0A:FE:25:BB Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F432858499203C36C7B70728537393900 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa Signing time: Fri 18 Apr 2025 20:09:26 +0000 ROA not before: Fri 18 Apr 2025 20:09:26 +0000 ROA not after: Thu 17 Jul 2025 20:09:26 +0000 asID: 400688 IP address blocks: 23.172.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:03:c3:6c:7b:70:72:85:37:39:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Apr 18 20:09:26 2025 GMT Not After : Jul 17 20:09:26 2025 GMT Subject: CN=391b51c4-1d56-4cfd-8900-693590c25792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:a6:b4:6c:2e:e2:83:79:6f:45:98:e3:c3: fb:db:7a:3b:f9:8c:56:a7:e0:9b:d0:a0:a5:f9:92: d5:00:25:9b:ef:0f:4f:99:8a:af:c9:d0:46:57:fa: be:e5:2b:4c:a4:69:33:4d:a1:0b:ac:52:d4:6c:33: ec:81:9f:4b:52:c8:6e:a3:bb:7e:31:af:50:51:72: 0e:70:72:32:3b:04:4d:41:30:35:6a:a3:ff:82:ce: 38:07:72:ad:fd:73:4a:3e:9a:c9:76:6a:54:74:b5: cd:92:9b:82:00:ef:bf:91:b6:86:b3:b1:09:f2:62: 3c:94:1a:25:40:20:38:55:cf:a9:c3:d4:cb:4c:1a: a8:37:51:a3:6e:3a:da:b3:52:b6:11:d5:e8:3d:66: db:15:cc:83:49:ba:53:b1:c7:c4:f5:71:3c:ad:43: 4e:82:cb:53:38:5b:46:8e:8d:4c:95:1d:55:c2:1a: cf:11:6a:de:f1:90:04:ae:08:07:c8:39:ca:9c:59: e5:d0:e4:88:a0:f5:d0:2f:40:57:84:4c:6d:6e:48: 8a:21:61:dc:4b:2a:5b:21:76:61:72:c5:58:0f:55: 7b:4b:b8:53:de:b3:45:4c:3e:8e:97:6b:22:02:6c: 34:06:f9:84:ea:80:75:a0:6c:0e:c0:6a:2b:f0:fb: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:16:26:76:83:A7:DD:4F:0B:1C:96:00:E2:B5:46:37:0A:FE:25:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv4: 23.172.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4a:23:fd:3b:8c:75:18:38:af:13:22:5e:d9:56:fa:8a:c3: c9:43:65:e6:1e:ac:2b:df:66:58:65:75:10:36:34:e5:54:e4: bf:05:09:92:d4:5d:69:d9:15:38:24:84:64:ac:80:f9:bd:97: ab:1a:e4:5c:69:6b:23:38:f5:5d:ab:b1:41:03:4c:f5:a0:a9: c8:31:a2:12:3c:fa:41:fc:17:f9:6b:a4:7e:36:89:91:78:2f: ab:1a:f8:ce:75:87:03:55:42:67:2e:9e:aa:84:92:c0:c1:e9: 66:68:39:67:9c:a6:57:c7:4f:ca:98:0e:d7:aa:86:28:8b:3a: bc:f5:c9:dc:b8:a3:ab:2f:a2:91:3a:55:c6:43:17:31:09:59: 8d:e3:85:dc:c9:36:81:94:62:20:d3:43:a3:14:7a:c5:94:97: 49:d4:6e:37:13:c1:ec:7a:d5:02:df:a0:ad:be:f1:e8:cd:42: a2:68:a1:5f:10:d0:ab:95:15:21:17:b2:7f:14:b0:f9:f3:a5: ae:12:3a:09:84:0e:5d:9f:f1:78:df:4f:30:1f:94:75:c6:96: b2:c1:9a:b1:e4:da:63:93:27:95:76:fe:a7:8f:3d:1c:fd:27: 77:2f:e6:22:1f:e6:34:79:e9:d5:df:3a:83:3e:18:81:44:ba: 0d:cb:ae:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSA8Nse3ByhTc5OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI1MDQxODIwMDkyNloXDTI1MDcxNzIwMDkyNlowLzEtMCsGA1UEAxMk MzkxYjUxYzQtMWQ1Ni00Y2ZkLTg5MDAtNjkzNTkwYzI1NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI6mtGwu4oN5b0WY48P723o7+YxWp+Cb0KCl +ZLVACWb7w9PmYqvydBGV/q+5StMpGkzTaELrFLUbDPsgZ9LUshuo7t+Ma9QUXIO cHIyOwRNQTA1aqP/gs44B3Kt/XNKPprJdmpUdLXNkpuCAO+/kbaGs7EJ8mI8lBol QCA4Vc+pw9TLTBqoN1Gjbjras1K2EdXoPWbbFcyDSbpTscfE9XE8rUNOgstTOFtG jo1MlR1VwhrPEWre8ZAErggHyDnKnFnl0OSIoPXQL0BXhExtbkiKIWHcSypbIXZh csVYD1V7S7hT3rNFTD6Ol2siAmw0BvmE6oB1oGwOwGor8Pv1RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQWJnaDp91PCxyWAOK1RjcK/iW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvODJhMzEwYWItNGZjMy0z M2I4LWIxMzMtZjdjZjkwNGFhMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlKI/07jHUYOK8TIl7ZVvqKw8lDZeYerCvfZlhldRA2NOVU5L8FCZLU XWnZFTgkhGSsgPm9l6sa5FxpayM49V2rsUEDTPWgqcgxohI8+kH8F/lrpH42iZF4 L6sa+M51hwNVQmcunqqEksDB6WZoOWecplfHT8qYDteqhiiLOrz1ydy4o6svopE6 VcZDFzEJWY3jhdzJNoGUYiDTQ6MUesWUl0nUbjcTwex61QLfoK2+8ejNQqJooV8Q 0KuVFSEXsn8UsPnzpa4SOgmEDl2f8XjfTzAflHXGlrLBmrHk2mOTJ5V2/qePPRz9 J3cv5iIf5jR56dXfOoM+GIFEug3LrvU= -----END CERTIFICATE-----Generated at Tue Apr 29 02:37:42 2025 by rpki-client