$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5df85eb0-eb92-3954-bb9e-1101158388f2.roa File: 5df85eb0-eb92-3954-bb9e-1101158388f2.roa (raw, json) Hash identifier: CprBV7muRX9MaaZh1THGRRip9NEylcaxAjkv1r/4IdA= Subject key identifier: 43:5E:C5:39:5D:7E:D1:22:82:95:3B:A0:A6:36:D3:E4:C5:F1:DC:B1 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848FDE6F6B9015DFDFD8BC6C680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5df85eb0-eb92-3954-bb9e-1101158388f2.roa Signing time: Mon 24 Feb 2025 18:51:46 +0000 ROA not before: Mon 24 Feb 2025 18:51:46 +0000 ROA not after: Sun 25 May 2025 17:51:46 +0000 asID: 401152 IP address blocks: 23.26.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:e6:f6:b9:01:5d:fd:fd:8b:c6:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 24 18:51:46 2025 GMT Not After : May 25 17:51:46 2025 GMT Subject: CN=3c2a8533-596d-45b7-8fa2-d0bb9639c6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ae:84:3b:23:0a:e1:40:d6:8b:0b:97:bc:0a: 5e:da:8c:e7:c9:a4:af:e1:95:79:24:b1:4f:62:20: 17:af:a2:44:7a:27:04:5d:84:f1:e5:03:b0:da:b9: a0:61:68:72:90:b9:dc:b9:95:76:18:8c:0a:6f:60: de:c4:45:92:3f:18:0e:11:fe:92:5d:38:08:2d:1a: a5:3d:83:6e:ed:bc:d9:f8:7b:5c:bc:19:ba:69:07: 7e:5e:53:fc:94:ee:91:48:d0:f8:0d:75:60:76:a0: 81:8c:4d:3c:24:e8:9d:ef:ff:40:71:06:f2:3f:2f: 2f:3d:1b:e1:6a:69:ea:7b:54:03:85:f1:74:59:ad: 8b:28:e3:c0:e9:06:dc:6a:a0:53:b3:a6:cc:a8:51: 33:d6:7e:92:fb:88:7c:de:1e:c6:fd:1d:6a:1e:40: 3a:41:f3:bf:19:e2:3a:c8:65:25:44:a2:80:56:15: 37:fe:8c:1a:f3:60:fa:85:0b:7e:72:a1:63:f7:46: cb:14:80:dd:92:19:f6:9d:d9:17:f4:18:68:28:56: 03:15:c1:09:27:de:74:f4:2f:91:1d:cc:71:9a:5f: c2:9e:57:87:c7:76:7e:35:9e:78:4a:a5:06:a3:11: f2:0f:bb:e0:e3:55:ff:2f:93:7e:8a:e7:cb:48:e0: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5E:C5:39:5D:7E:D1:22:82:95:3B:A0:A6:36:D3:E4:C5:F1:DC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5df85eb0-eb92-3954-bb9e-1101158388f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:28:85:50:9b:84:b6:bd:bf:b3:9a:4a:6a:87:e2:f1:86:6b: 42:80:84:3d:d8:35:42:54:51:cc:d7:15:36:71:f9:95:53:76: 14:45:e1:1f:29:7e:eb:a1:6a:59:1d:83:56:f7:87:ad:a3:43: 9b:79:55:15:5f:09:f2:bd:44:a5:31:59:28:f6:48:53:ef:66: c9:f1:ec:db:93:fb:ba:d4:06:82:30:10:0b:dc:19:fe:9a:9c: 78:35:14:64:47:ee:50:e4:80:ca:c9:b6:20:e9:bb:ae:4b:6b: d0:70:c7:2c:83:7f:7e:b8:43:fd:27:25:8c:3f:ec:55:5c:2d: f8:bf:f0:82:5f:64:ed:38:17:3e:ba:6a:95:e2:33:6d:f5:57: ff:63:ba:42:35:68:59:7f:e8:2d:5d:3f:c6:99:d8:3f:db:34: 09:be:5b:03:35:7c:79:ac:a0:d8:c5:9f:03:dc:30:f7:7c:b8: 47:7f:b7:3d:60:59:f9:17:73:d4:0c:22:49:36:e8:d3:5f:bc: 69:ca:7a:57:be:22:b3:8a:6d:5d:72:92:51:63:f3:7d:fd:95: 13:fe:20:7f:8c:c1:d8:27:98:e6:49:65:f4:71:29:ae:fd:f9: b3:74:7e:a3:bb:16:85:c8:74:52:2f:0d:5b:cd:72:86:88:74: de:44:77:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj95va5AV39/YvGxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIyNDE4NTE0NloXDTI1MDUyNTE3NTE0NlowLzEtMCsGA1UEAxMk M2MyYTg1MzMtNTk2ZC00NWI3LThmYTItZDBiYjk2MzljNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K6EOyMK4UDWiwuXvApe2oznyaSv4ZV5JLFP YiAXr6JEeicEXYTx5QOw2rmgYWhykLncuZV2GIwKb2DexEWSPxgOEf6SXTgILRql PYNu7bzZ+HtcvBm6aQd+XlP8lO6RSND4DXVgdqCBjE08JOid7/9AcQbyPy8vPRvh amnqe1QDhfF0Wa2LKOPA6QbcaqBTs6bMqFEz1n6S+4h83h7G/R1qHkA6QfO/GeI6 yGUlRKKAVhU3/owa82D6hQt+cqFj90bLFIDdkhn2ndkX9BhoKFYDFcEJJ9509C+R Hcxxml/CnleHx3Z+NZ54SqUGoxHyD7vg41X/L5N+iufLSOAxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENexTldftEigpU7oKY20+TF8dyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWRmODVlYjAtZWI5Mi0z OTU0LWJiOWUtMTEwMTE1ODM4OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxp0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoohVCbhLa9v7OaSmqH4vGGa0KAhD3YNUJUUczXFTZx+ZVTdhRF4R8p fuuhalkdg1b3h62jQ5t5VRVfCfK9RKUxWSj2SFPvZsnx7NuT+7rUBoIwEAvcGf6a nHg1FGRH7lDkgMrJtiDpu65La9BwxyyDf364Q/0nJYw/7FVcLfi/8IJfZO04Fz66 apXiM231V/9jukI1aFl/6C1dP8aZ2D/bNAm+WwM1fHmsoNjFnwPcMPd8uEd/tz1g WfkXc9QMIkk26NNfvGnKele+IrOKbV1yklFj8339lRP+IH+MwdgnmOZJZfRxKa79 +bN0fqO7FoXIdFIvDVvNcoaIdN5Ed48= -----END CERTIFICATE-----Generated at Thu May 1 20:24:52 2025 by rpki-client