$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa File: 3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa (raw, json) Hash identifier: HgcGYTnD9CpawCkv7wGBGFxaHKOfLs0L4GfsFDItznk= Subject key identifier: F9:7D:99:5A:51:5A:3A:AE:81:17:31:C8:78:69:D6:EF:EC:44:A4:1E Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab Certificate serial: 010D0C9F432858495ABEE14FC98F0CE65E626480 Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 395585 IP address blocks: 23.171.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e1:4f:c9:8f:0c:e6:5e:62:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=92f7360a-59bf-43d6-bfd8-feb21d52bca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:37:1d:ad:58:03:e4:ab:94:51:c4:02:89:bb: 54:92:2e:3c:14:6c:c5:30:b2:35:be:a6:4a:a4:91: f9:2a:e5:5b:68:52:5b:5a:da:f7:5a:ed:4c:ce:92: 51:89:67:d7:13:e2:f3:db:e5:12:56:10:d5:8f:bd: 7f:5e:e1:ae:e0:82:2b:9d:b0:d5:ce:94:40:75:71: 32:f5:b0:55:52:1e:98:f7:9a:1d:12:7f:38:84:72: 40:72:0e:cc:e6:62:a9:87:a7:b5:3f:8d:2e:15:d6: 3a:41:ce:6d:0a:47:9b:a6:22:ec:0f:05:86:43:09: cf:3a:2e:78:a2:47:06:5e:4a:fb:ba:43:86:c7:34: dc:81:ad:ff:b6:8f:8e:ab:a8:bd:a5:d3:4c:21:27: e5:98:25:04:05:cc:23:e4:27:ab:7a:67:6b:41:c0: c1:bd:e4:95:b4:f7:25:e9:e1:b4:af:47:5c:79:c2: ba:2d:2d:c3:7d:56:10:6f:7d:ed:f6:85:20:52:4a: 58:55:c7:24:47:92:33:1d:f3:1d:13:b4:93:f8:f2: f3:55:41:51:b1:a6:8a:01:18:b0:4b:b5:d2:0d:71: df:f7:57:bd:fd:4c:d2:5d:2c:86:b9:e9:00:0e:ba: ac:51:db:86:70:26:3f:f9:f5:91:6d:02:d2:ad:9a: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7D:99:5A:51:5A:3A:AE:81:17:31:C8:78:69:D6:EF:EC:44:A4:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl X509v3 Authority Key Identifier: keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer sbgp-ipAddrBlock: critical IPv4: 23.171.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fb:ee:b2:53:50:68:2b:84:1a:95:0b:48:c0:39:d2:7b:b2: 73:57:27:cc:46:fe:99:94:1a:ab:c7:16:8c:ea:49:59:6d:7c: f0:5c:1b:8f:ab:e5:57:ff:47:92:3a:9c:6b:c8:6a:65:77:c3: 0b:69:53:82:47:22:58:91:63:5a:7a:43:8b:2a:62:e8:29:9a: cd:42:5a:db:a9:49:0a:27:8a:22:41:3f:39:c8:77:bd:c7:79: 6f:d7:1c:53:80:c2:da:07:94:6c:33:04:e7:68:23:f2:e0:d7: f2:bf:87:c3:af:89:f3:cb:a0:95:40:2c:df:ee:4c:d9:7c:11: 81:d6:9b:bf:e7:32:01:6f:c5:61:9c:b0:64:a9:2e:f1:74:1b: aa:cf:4b:67:bb:4e:37:15:8a:de:16:96:cc:4c:a5:bd:cd:44: 24:02:1c:63:d8:57:05:b5:8e:eb:08:f3:8a:6f:c9:2f:87:58: 85:8e:18:c0:0b:c7:15:2f:5d:83:9c:26:96:1b:75:d0:f9:28: ca:81:51:25:cb:2c:33:ea:a0:1e:8f:6f:71:19:5d:99:51:fd: 40:19:d3:8e:ae:ff:1b:90:f2:57:d2:23:40:d2:b3:32:f6:f6: fe:88:50:06:7a:dd:48:04:c9:d3:e7:29:08:48:b7:24:02:69: 06:41:77:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuFPyY8M5l5iZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4 M2FiMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk OTJmNzM2MGEtNTliZi00M2Q2LWJmZDgtZmViMjFkNTJiY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DcdrVgD5KuUUcQCibtUki48FGzFMLI1vqZK pJH5KuVbaFJbWtr3Wu1MzpJRiWfXE+Lz2+USVhDVj71/XuGu4IIrnbDVzpRAdXEy 9bBVUh6Y95odEn84hHJAcg7M5mKph6e1P40uFdY6Qc5tCkebpiLsDwWGQwnPOi54 okcGXkr7ukOGxzTcga3/to+Oq6i9pdNMISflmCUEBcwj5CeremdrQcDBveSVtPcl 6eG0r0dcecK6LS3DfVYQb33t9oUgUkpYVcckR5IzHfMdE7ST+PLzVUFRsaaKARiw S7XSDXHf91e9/UzSXSyGuekADrqsUduGcCY/+fWRbQLSrZpo5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl9mVpRWjqugRcxyHhp1u/sRKQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvM2RjMTY0N2MtNDRkOC0z NWZhLTkzYzUtM2MwYTlhZWJkYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0 ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk YzNjNDgzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG377rJTUGgrhBqVC0jAOdJ7snNXJ8xG/pmUGqvHFozqSVltfPBcG4+r 5Vf/R5I6nGvIamV3wwtpU4JHIliRY1p6Q4sqYugpms1CWtupSQoniiJBPznId73H eW/XHFOAwtoHlGwzBOdoI/Lg1/K/h8OvifPLoJVALN/uTNl8EYHWm7/nMgFvxWGc sGSpLvF0G6rPS2e7TjcVit4WlsxMpb3NRCQCHGPYVwW1jusI84pvyS+HWIWOGMAL xxUvXYOcJpYbddD5KMqBUSXLLDPqoB6Pb3EZXZlR/UAZ046u/xuQ8lfSI0DSszL2 9v6IUAZ63UgEydPnKQhItyQCaQZBd5o= -----END CERTIFICATE-----Generated at Mon Apr 28 08:32:06 2025 by rpki-client