$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3634445-6fae-3550-9b92-aed41b9a650d.roa File: e3634445-6fae-3550-9b92-aed41b9a650d.roa (raw, json) Hash identifier: 0RKzWoqTs2HwLc9Eo6lEewa7/A2wxK0W2qunwMaoUfY= Subject key identifier: 97:6D:2B:3F:5A:0D:E8:D9:55:8F:72:93:56:FB:2A:9C:D3:E1:B9:AE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858498E64B2E48FE6D840CDB10480 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3634445-6fae-3550-9b92-aed41b9a650d.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 211373 IP address blocks: 23.26.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b2:e4:8f:e6:d8:40:cd:b1:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=f83ca6b4-8d9b-47cf-85f7-d5f4abdb8bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:7b:60:cd:38:f6:c3:ba:a7:56:3c:00:19: e5:00:01:7a:9b:8a:17:74:4c:6c:a0:ae:d0:d6:ea: c0:31:d9:c5:2a:c0:34:36:82:d2:59:25:68:a3:6e: 20:a4:d7:6c:9d:4b:69:d3:3a:e4:6b:9f:da:81:60: c2:50:7e:36:8d:f2:fa:3a:40:c3:52:b8:09:54:ea: b3:30:15:51:e4:18:99:c2:f4:d6:43:41:50:71:4b: f7:16:57:70:b8:64:9f:b1:a5:4b:65:66:63:db:f0: 71:e6:a9:47:20:f8:0d:98:4d:4c:59:9e:bb:ef:0b: 76:22:fe:0e:ca:bd:72:75:39:40:97:bb:e7:f1:31: e3:b2:4c:57:d6:a4:8f:8c:0b:3a:75:22:2d:e1:c3: 04:36:49:1c:20:30:f2:f0:22:69:e5:44:20:ae:fb: 81:41:32:d6:cf:e5:41:25:25:ea:bb:90:c5:52:48: ed:be:f9:93:c0:af:75:f9:0c:5c:28:cc:19:cb:28: cd:49:19:2a:16:78:8a:57:93:f3:2b:e5:42:90:76: 98:ca:16:dd:03:2c:17:67:c5:61:4f:54:85:bf:b0: eb:fe:ea:fa:9b:23:d0:4c:cb:ab:98:c4:a2:87:32: 03:c8:64:64:8e:95:4d:b9:d3:2e:3b:8d:cd:7b:36: c6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6D:2B:3F:5A:0D:E8:D9:55:8F:72:93:56:FB:2A:9C:D3:E1:B9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3634445-6fae-3550-9b92-aed41b9a650d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c0:d6:0e:42:11:3b:c7:a1:05:5c:28:27:2d:7e:54:95:f2: aa:ce:6c:8b:99:9a:79:ec:6c:87:f8:61:53:62:2d:05:f3:73: 39:21:14:00:30:97:96:4a:47:6e:e5:31:1e:84:e1:c6:d5:07: e2:ad:af:f5:47:19:8a:f9:6e:b0:62:59:27:8b:81:5e:17:df: b9:60:0a:07:e0:f2:d6:fa:9d:1c:72:5c:18:84:ed:c7:df:3a: a1:a2:d6:9a:d5:b6:37:c0:be:39:f0:70:d5:f5:ae:be:07:4a: 40:fa:c5:97:61:c7:db:2e:02:61:d6:b4:09:29:f4:8e:66:a0: bf:4b:a8:e1:86:a2:18:89:15:ec:5c:2d:d7:1e:0d:c5:66:11: 37:28:b3:12:52:f2:2a:30:92:2b:06:78:76:b7:ea:22:ee:cc: 6f:cc:b6:4b:35:dc:1a:02:88:74:e8:64:21:92:e4:fc:61:09: af:30:bf:d4:ca:58:d5:28:8c:b6:8f:f5:10:89:ce:d9:17:bd: 62:a4:b0:f9:27:d9:62:50:47:15:c8:57:dd:15:bc:e1:a0:ef: 36:79:52:14:17:6b:77:8f:98:99:7e:59:80:9b:a4:5c:1f:fc: e8:7d:23:66:84:8d:4d:67:5e:41:a3:4f:d7:22:4e:77:7c:55: 0d:b5:d7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLLkj+bYQM2xBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZjgzY2E2YjQtOGQ5Yi00N2NmLTg1ZjctZDVmNGFiZGI4YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKx7YM049sO6p1Y8ABnlAAF6m4oXdExsoK7Q 1urAMdnFKsA0NoLSWSVoo24gpNdsnUtp0zrka5/agWDCUH42jfL6OkDDUrgJVOqz MBVR5BiZwvTWQ0FQcUv3FldwuGSfsaVLZWZj2/Bx5qlHIPgNmE1MWZ677wt2Iv4O yr1ydTlAl7vn8THjskxX1qSPjAs6dSIt4cMENkkcIDDy8CJp5UQgrvuBQTLWz+VB JSXqu5DFUkjtvvmTwK91+QxcKMwZyyjNSRkqFniKV5PzK+VCkHaYyhbdAywXZ8Vh T1SFv7Dr/ur6myPQTMurmMSihzIDyGRkjpVNudMuO43NezbGEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdtKz9aDejZVY9yk1b7KpzT4bmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTM2MzQ0NDUtNmZhZS0z NTUwLTliOTItYWVkNDFiOWE2NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/A1g5CETvHoQVcKCctflSV8qrObIuZmnnsbIf4YVNiLQXzczkhFAAw l5ZKR27lMR6E4cbVB+Ktr/VHGYr5brBiWSeLgV4X37lgCgfg8tb6nRxyXBiE7cff OqGi1prVtjfAvjnwcNX1rr4HSkD6xZdhx9suAmHWtAkp9I5moL9LqOGGohiJFexc LdceDcVmETcosxJS8iowkisGeHa36iLuzG/Mtks13BoCiHToZCGS5PxhCa8wv9TK WNUojLaP9RCJztkXvWKksPkn2WJQRxXIV90VvOGg7zZ5UhQXa3ePmJl+WYCbpFwf /Oh9I2aEjU1nXkGjT9ciTnd8VQ211+k= -----END CERTIFICATE-----Generated at Sun Apr 27 04:00:49 2025 by rpki-client