$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa File: ea53e097-aa5e-3666-96a2-1268be35db5c.roa (raw, json) Hash identifier: bmfeMrDVW6ZxpfEvLxlRRhHhEvUPWMxCYFSAD81sOVo= Subject key identifier: 5A:A1:B6:C0:89:67:3D:1B:38:45:EF:45:97:35:6D:16:EB:F5:61:A1 Certificate issuer: /CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754 Certificate serial: 010D0C9F43285849A4BA4F7BCF09F6C909661780 Authority key identifier: B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 399693 IP address blocks: 23.174.24.0/24 maxlen: 24 165.140.232.0/22 maxlen: 24 2602:fe87::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4f:7b:cf:09:f6:c9:09:66:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9a2ba8f0-02e6-4dab-a1da-48b8680ef69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:63:a7:c2:38:b5:fa:36:ae:4a:8c:f7:60: 52:93:54:8f:2c:d0:7a:88:09:c1:58:0c:40:db:3c: ff:08:8f:d0:b1:cd:84:05:cf:00:6a:94:1e:1b:39: 36:e1:55:79:e4:79:9e:87:71:21:c1:ab:2e:7a:47: 1a:45:6e:3f:25:60:48:fe:40:1d:02:4a:a8:b9:eb: d4:3f:d8:29:14:d3:f2:b8:19:ab:d9:f4:98:8f:cb: 42:fa:19:3c:d0:13:ed:4b:9a:79:e5:80:36:d2:b7: b6:be:88:95:9e:02:f1:3b:b9:47:12:57:20:e3:54: b9:37:35:4e:95:e6:ed:82:a7:87:96:c9:ff:3a:36: ba:62:92:f5:cc:fc:11:3e:0e:db:67:f7:77:47:4f: 06:7e:6e:d9:ce:dc:dc:20:31:2f:b8:43:4f:ef:c1: d5:72:33:dd:7f:f4:50:e0:22:28:0f:e6:71:e9:65: 67:f7:df:96:f8:d4:4c:70:40:2d:18:19:50:bf:29: 98:85:76:09:00:3e:04:68:df:e0:6f:c9:9d:38:d0: 36:0c:77:de:ac:69:f9:7d:9c:4e:05:02:da:fb:68: cf:68:58:bc:ac:d8:81:ca:fb:d5:38:23:4b:49:3c: fc:b0:16:bd:01:73:bb:ae:c7:bf:53:73:8e:70:3c: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:B6:C0:89:67:3D:1B:38:45:EF:45:97:35:6D:16:EB:F5:61:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.crl X509v3 Authority Key Identifier: keyid:B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer sbgp-ipAddrBlock: critical IPv4: 23.174.24.0/24 165.140.232.0/22 IPv6: 2602:fe87::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:76:3d:9d:d3:7f:2f:2a:4f:9b:e2:b3:e2:3a:07:34:df:fc: 07:f8:6d:a8:df:7d:1f:38:93:be:af:58:7a:23:58:9c:89:39: 6c:91:36:4b:fb:61:bd:eb:5c:a3:83:48:99:0a:4b:2e:eb:e4: f5:ef:af:33:33:21:31:ff:0a:b9:69:1c:3e:4d:10:fe:0d:5d: 1e:27:0e:ae:38:c6:00:58:4e:a9:13:20:ed:ca:52:55:c3:81: 9d:06:b5:03:60:b3:7b:80:a4:95:fd:10:19:f3:ba:a2:36:66: 19:0b:34:f8:b6:db:fe:b5:5d:9c:57:43:c3:63:ea:06:f5:c2: 3d:7d:65:63:ac:c6:fe:c8:b1:3c:e1:ef:5a:9d:3a:5f:b3:b2: f1:c7:da:c0:fd:9f:e6:58:fa:57:8b:83:0b:ab:bf:a6:27:3c: 13:3b:a1:5f:66:85:ea:e0:5a:a4:1e:22:45:e0:19:2e:5b:97: 19:a3:30:2e:e7:93:cf:26:fa:2c:36:6a:99:d6:4a:a1:9d:f8: 3b:35:f1:1d:fa:ad:b4:9d:53:d1:e7:51:dc:06:be:99:14:c1: 65:a1:f2:82:8a:d4:d7:2f:71:83:ed:8e:fe:3b:47:ee:4f:3f: 7d:5c:c6:d6:a8:ab:54:0a:60:5c:c7:fc:c5:b9:1d:38:ad:39: bd:55:b9:e8 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEmkuk97zwn2yQlmF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlhODAxNjUtOGYzMS00ZmIzLTkxNDQtYmNiNDVjZmQy NzU0MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWEyYmE4ZjAtMDJlNi00ZGFiLWExZGEtNDhiODY4MGVmNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH1jp8I4tfo2rkqM92BSk1SPLNB6iAnBWAxA 2zz/CI/Qsc2EBc8AapQeGzk24VV55Hmeh3EhwasuekcaRW4/JWBI/kAdAkqouevU P9gpFNPyuBmr2fSYj8tC+hk80BPtS5p55YA20re2voiVngLxO7lHElcg41S5NzVO lebtgqeHlsn/Oja6YpL1zPwRPg7bZ/d3R08Gfm7ZztzcIDEvuENP78HVcjPdf/RQ 4CIoD+Zx6WVn99+W+NRMcEAtGBlQvymYhXYJAD4EaN/gb8mdONA2DHferGn5fZxO BQLa+2jPaFi8rNiByvvVOCNLSTz8sBa9AXO7rse/U3OOcDy60wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFqhtsCJZz0bOEXvRZc1bRbr9WGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mOWE4 MDE2NS04ZjMxLTRmYjMtOTE0NC1iY2I0NWNmZDI3NTQvZWE1M2UwOTctYWE1ZS0z NjY2LTk2YTItMTI2OGJlMzVkYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjlhODAxNjUtOGYzMS00ZmIzLTkx NDQtYmNiNDVjZmQyNzU0L2Y5YTgwMTY1LThmMzEtNGZiMy05MTQ0LWJjYjQ1Y2Zk Mjc1NC5jcmwwHwYDVR0jBBgwFoAUsAL06lDMDVyioweJ43ubUqbvdF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mOWE4MDE2NS04ZjMxLTRmYjMtOTE0NC1iY2I0 NWNmZDI3NTQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF64YAwQC pYzoMA0EAgACMAcDBQAmAv6HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKh2PZ3Tfy8qT5vis+I6BzTf/Af4 bajffR84k76vWHojWJyJOWyRNkv7Yb3rXKODSJkKSy7r5PXvrzMzITH/CrlpHD5N EP4NXR4nDq44xgBYTqkTIO3KUlXDgZ0GtQNgs3uApJX9EBnzuqI2ZhkLNPi22/61 XZxXQ8Nj6gb1wj19ZWOsxv7IsTzh71qdOl+zsvHH2sD9n+ZY+leLgwurv6YnPBM7 oV9mhergWqQeIkXgGS5blxmjMC7nk88m+iw2apnWSqGd+Ds18R36rbSdU9HnUdwG vpkUwWWh8oKK1NcvcYPtjv47R+5PP31cxtaoq1QKYFzH/MW5HTitOb1Vueg= -----END CERTIFICATE-----Generated at Tue Apr 29 21:08:06 2025 by rpki-client