$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f1533d4b-0abd-30b4-bf41-ff2b02037383.roa File: f1533d4b-0abd-30b4-bf41-ff2b02037383.roa (raw, json) Hash identifier: HEoWTrZ55JVHpcdVAkuGBX8tF4Gnb0WzI+05l0LtLA4= Subject key identifier: 09:40:33:38:CD:4B:ED:AD:B4:A8:BC:EF:46:91:B4:9E:2F:C3:EC:03 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584992B14A0F6EFA3E2FF658B300 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f1533d4b-0abd-30b4-bf41-ff2b02037383.roa Signing time: Sat 19 Apr 2025 01:59:04 +0000 ROA not before: Sat 19 Apr 2025 01:59:04 +0000 ROA not after: Fri 18 Jul 2025 01:59:04 +0000 asID: 63150 IP address blocks: 23.150.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:b1:4a:0f:6e:fa:3e:2f:f6:58:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Apr 19 01:59:04 2025 GMT Not After : Jul 18 01:59:04 2025 GMT Subject: CN=bf4c0b62-620c-495e-afd4-7d990bf40517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:72:f0:36:3e:5f:82:15:ce:7d:18:89:3a: 52:bc:ef:7f:7f:95:ba:1b:97:38:e3:93:22:68:12: 37:d3:0f:f4:b6:b4:17:87:ac:2a:69:47:83:ce:6d: af:ab:db:22:af:ed:02:6e:ca:42:24:10:18:60:1d: 5c:34:7f:f4:92:92:f5:04:b1:02:8d:f6:61:df:d9: d6:51:d8:fc:6a:e5:ee:5d:f4:28:f3:40:91:63:d1: 7d:d7:11:02:10:72:ae:9e:15:e6:76:22:4f:86:ea: 82:6d:ed:f2:18:3e:db:15:14:f3:44:fc:e2:90:c2: a7:55:7b:c6:d9:68:65:e5:44:e4:5e:97:fc:9f:10: c5:73:f2:80:e4:6c:18:af:f5:4c:19:08:11:8f:30: 6f:8c:e9:86:09:c3:da:44:6a:78:1a:76:50:39:ab: 4d:44:3f:56:45:3a:cd:26:3d:9a:27:8e:00:0f:40: e0:fb:1d:9a:fc:db:e3:ca:14:f8:4f:2b:65:57:95: 29:33:51:ec:c3:b5:2a:3b:51:f9:d2:74:25:9b:f0: 6b:09:23:60:56:ea:58:b7:a1:af:74:d0:93:4b:83: ff:76:c1:77:95:9a:f3:c9:d0:46:df:89:96:54:be: 3a:c5:ec:e3:69:fe:da:d9:ae:c3:80:08:dd:6c:8d: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:33:38:CD:4B:ED:AD:B4:A8:BC:EF:46:91:B4:9E:2F:C3:EC:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f1533d4b-0abd-30b4-bf41-ff2b02037383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 23.150.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a1:02:94:39:ee:85:0f:f3:99:a7:a9:8a:09:cc:d1:9c:10: 49:f3:4a:9e:79:47:95:cf:e1:c3:ca:bf:c5:06:36:85:1a:88: 5d:ff:3c:8a:d5:1a:9f:1b:9c:0c:74:2e:e6:96:14:a5:79:8d: 44:b7:df:97:41:de:13:7e:2b:a2:01:9e:b4:6e:f9:7e:23:e3: 31:10:02:2a:72:ba:87:08:05:64:c8:49:80:9d:1d:9f:26:37: e9:31:1e:8a:ae:ee:d8:97:0f:25:c6:ac:b1:07:de:22:e1:7b: cf:f8:6c:4c:ac:56:a5:a6:3f:98:ea:a4:2b:c9:5d:11:30:da: 68:4b:03:57:4c:ea:0c:d8:99:55:5c:d8:3e:0d:ee:b1:b6:ad: 46:36:a6:0a:96:a1:11:d1:c3:66:70:d0:7b:2a:90:b1:85:61: 45:4d:af:0c:29:b8:e7:10:29:ef:bb:d0:05:cc:3f:45:64:e0: 0e:37:6d:4d:71:1d:88:7e:2c:f7:dc:da:56:c9:54:ef:6a:d7: 8e:d6:6a:32:d7:e8:73:b4:dc:e8:d2:9f:79:f8:e4:8d:81:a0: e9:6e:62:3b:af:8c:09:c2:7b:ab:a9:1c:e8:11:3e:5e:b6:f2: 8b:b4:20:9a:e4:d6:ce:3e:cc:94:ee:b6:9b:66:e0:b4:cd:ad: 68:3a:88:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSsUoPbvo+L/ZYswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDQxOTAxNTkwNFoXDTI1MDcxODAxNTkwNFowLzEtMCsGA1UEAxMk YmY0YzBiNjItNjIwYy00OTVlLWFmZDQtN2Q5OTBiZjQwNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys5y8DY+X4IVzn0YiTpSvO9/f5W6G5c445Mi aBI30w/0trQXh6wqaUeDzm2vq9sir+0CbspCJBAYYB1cNH/0kpL1BLECjfZh39nW Udj8auXuXfQo80CRY9F91xECEHKunhXmdiJPhuqCbe3yGD7bFRTzRPzikMKnVXvG 2Whl5UTkXpf8nxDFc/KA5GwYr/VMGQgRjzBvjOmGCcPaRGp4GnZQOatNRD9WRTrN Jj2aJ44AD0Dg+x2a/NvjyhT4TytlV5UpM1Hsw7UqO1H50nQlm/BrCSNgVupYt6Gv dNCTS4P/dsF3lZrzydBG34mWVL46xezjaf7a2a7DgAjdbI2y9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlAMzjNS+2ttKi870aRtJ4vw+wDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZjE1MzNkNGItMGFiZC0z MGI0LWJmNDEtZmYyYjAyMDM3MzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2hApQ57oUP85mnqYoJzNGcEEnzSp55R5XP4cPKv8UGNoUaiF3/PIrV Gp8bnAx0LuaWFKV5jUS335dB3hN+K6IBnrRu+X4j4zEQAipyuocIBWTISYCdHZ8m N+kxHoqu7tiXDyXGrLEH3iLhe8/4bEysVqWmP5jqpCvJXREw2mhLA1dM6gzYmVVc 2D4N7rG2rUY2pgqWoRHRw2Zw0HsqkLGFYUVNrwwpuOcQKe+70AXMP0Vk4A43bU1x HYh+LPfc2lbJVO9q147WajLX6HO03OjSn3n45I2BoOluYjuvjAnCe6upHOgRPl62 8ou0IJrk1s4+zJTutptm4LTNrWg6iF0= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:25 2025 by rpki-client