$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa File: 1b6b4554-6168-3529-a377-02cd9bc61653.roa (raw, json) Hash identifier: LzNMA7jagMOaDyrv+dyBM68wRMlMKNLCCdwVt1iwCgs= Subject key identifier: 69:E7:00:ED:7C:80:07:C1:46:A8:0A:2D:35:36:EF:CC:83:2C:0F:37 Certificate issuer: /CN=16a8300a-6b73-42c6-b812-6b49b6587a38 Certificate serial: 010D0C9F43285849A35482AE586ACBA06F6D2D80 Authority key identifier: 99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 395648 IP address blocks: 23.173.248.0/24 maxlen: 24 2602:f946::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:82:ae:58:6a:cb:a0:6f:6d:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a8300a-6b73-42c6-b812-6b49b6587a38 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=cdb7dd4e-6dfb-42eb-aacf-1fc81c47887a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:d0:14:f4:71:bc:59:db:3e:10:c0:12:e4: 8a:a2:36:6a:33:cc:80:bd:67:06:ea:b3:7a:ea:ca: 0e:0b:09:0a:53:35:16:6a:88:cd:0e:1f:0e:f6:2c: 9f:7a:1f:97:39:23:d1:90:bf:e1:5e:e7:03:d7:81: d1:e7:30:28:45:ee:71:e1:13:af:a8:92:a9:d4:0f: f2:9f:25:01:99:27:11:53:4e:ce:67:83:73:61:dc: c7:47:b1:7c:12:5b:f3:37:09:82:ff:42:1c:8c:f6: 5f:b3:45:4e:7e:35:e3:f2:0d:61:35:48:8a:f0:5a: ee:f3:8b:4a:06:c5:d5:75:b3:40:03:87:cf:62:fd: 5d:df:8d:42:04:f6:6f:28:d0:27:2e:dc:c3:fb:08: 9b:5b:5a:6d:6a:e0:0a:93:6b:c5:75:79:f8:cb:57: a0:36:8d:c0:7f:8b:13:9c:bd:dc:58:aa:b5:ab:d3: 4b:af:a2:04:1e:1a:5b:46:47:6c:08:69:cc:85:cc: 6b:d8:b2:dd:c1:fd:b6:9d:04:0a:49:bc:92:79:da: 8d:e2:58:ec:88:cd:24:a2:8c:f9:8b:6d:89:7f:89: 6d:35:79:c2:c0:3d:d3:7f:5e:23:96:ac:54:90:f5: c1:10:1b:31:37:8e:6c:60:b1:82:79:5e:28:ce:bb: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:00:ED:7C:80:07:C1:46:A8:0A:2D:35:36:EF:CC:83:2C:0F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl X509v3 Authority Key Identifier: keyid:99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer sbgp-ipAddrBlock: critical IPv4: 23.173.248.0/24 IPv6: 2602:f946::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b6:ef:b9:a9:53:15:87:62:12:bd:cb:bb:55:ad:c3:27:ce: 22:ea:08:27:c2:a3:fe:0a:9c:cc:b9:d7:fa:18:ba:f5:10:7c: 32:b2:37:a6:06:4a:b4:d1:3e:84:50:a2:aa:a6:b9:ab:ac:b1: be:9a:b7:73:f9:e0:ad:e7:5d:b3:6d:66:6b:75:3d:37:03:73: 87:4b:f0:40:95:60:ae:99:95:42:0c:c6:89:79:e3:47:cf:19: ce:c7:a3:50:93:34:21:e8:22:3a:e6:69:e1:3b:94:97:6a:c2: ae:d3:e1:c1:02:ae:59:b3:c4:fc:56:23:26:c2:7c:02:17:88: 76:12:b4:e4:d6:bd:55:a5:0a:c1:db:c4:5a:53:d4:a1:c4:09: 56:4a:d1:cf:c2:08:39:68:5f:f1:a3:28:9d:61:84:e8:8d:b9: 64:54:d4:32:0a:73:58:eb:a9:05:d9:de:41:5a:68:1e:ed:2f: 85:4a:ea:e3:b3:7d:1d:56:e6:ee:78:8b:81:7b:58:ca:a7:12: 73:1c:22:7b:f4:02:bd:5f:2e:f8:68:e4:e0:3f:89:82:b1:0d: cb:58:5f:e1:c7:76:2a:1a:4b:4f:5d:67:6b:0a:4b:03:e6:a4: 04:bc:07:ac:74:d0:41:1a:f1:c5:dc:87:8f:65:e7:89:bb:2e: bd:b7:44:7f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmjVIKuWGrLoG9tLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZhODMwMGEtNmI3My00MmM2LWI4MTItNmI0OWI2NTg3 YTM4MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk Y2RiN2RkNGUtNmRmYi00MmViLWFhY2YtMWZjODFjNDc4ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR/QFPRxvFnbPhDAEuSKojZqM8yAvWcG6rN6 6soOCwkKUzUWaojNDh8O9iyfeh+XOSPRkL/hXucD14HR5zAoRe5x4ROvqJKp1A/y nyUBmScRU07OZ4NzYdzHR7F8ElvzNwmC/0IcjPZfs0VOfjXj8g1hNUiK8Fru84tK BsXVdbNAA4fPYv1d341CBPZvKNAnLtzD+wibW1ptauAKk2vFdXn4y1egNo3Af4sT nL3cWKq1q9NLr6IEHhpbRkdsCGnMhcxr2LLdwf22nQQKSbySedqN4ljsiM0kooz5 i22Jf4ltNXnCwD3Tf14jlqxUkPXBEBsxN45sYLGCeV4ozrs0XwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGnnAO18gAfBRqgKLTU278yDLA83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNmE4 MzAwYS02YjczLTQyYzYtYjgxMi02YjQ5YjY1ODdhMzgvMWI2YjQ1NTQtNjE2OC0z NTI5LWEzNzctMDJjZDliYzYxNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTZhODMwMGEtNmI3My00MmM2LWI4 MTItNmI0OWI2NTg3YTM4LzE2YTgzMDBhLTZiNzMtNDJjNi1iODEyLTZiNDliNjU4 N2EzOC5jcmwwHwYDVR0jBBgwFoAUmRZTmjW2WvWh4aSSnu+LKx2HQ9swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xNmE4MzAwYS02YjczLTQyYzYtYjgxMi02YjQ5 YjY1ODdhMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF634MA4E AgACMAgDBgAmAvlGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAtu+5qVMVh2ISvcu7Va3DJ84i6ggnwqP+ CpzMudf6GLr1EHwysjemBkq00T6EUKKqprmrrLG+mrdz+eCt512zbWZrdT03A3OH S/BAlWCumZVCDMaJeeNHzxnOx6NQkzQh6CI65mnhO5SXasKu0+HBAq5Zs8T8ViMm wnwCF4h2ErTk1r1VpQrB28RaU9ShxAlWStHPwgg5aF/xoyidYYTojblkVNQyCnNY 66kF2d5BWmge7S+FSurjs30dVubueIuBe1jKpxJzHCJ79AK9Xy74aOTgP4mCsQ3L WF/hx3YqGktPXWdrCksD5qQEvAesdNBBGvHF3IePZeeJuy69t0R/ -----END CERTIFICATE-----Generated at Mon Apr 28 01:19:08 2025 by rpki-client