$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d97ee865-1f02-3f65-9877-a6064187b157.roa File: d97ee865-1f02-3f65-9877-a6064187b157.roa (raw, json) Hash identifier: nqUZ8vc0WbzBeg5YUXnjslWAhVSgldvnORYhP0Jrn8Q= Subject key identifier: 02:36:5F:5A:2F:18:B2:35:FC:89:90:25:EE:F5:A0:2B:4E:0B:9A:E7 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F43285849DF5A77BD1B24BD8A0DA44980 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d97ee865-1f02-3f65-9877-a6064187b157.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 33039 IP address blocks: 23.173.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:77:bd:1b:24:bd:8a:0d:a4:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=ae92d2cc-02b3-4c8d-a10b-caa9cf32c571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:8a:d4:22:fe:56:ca:dc:91:6f:57:eb:01: a5:af:65:5a:38:37:5c:43:45:75:e3:f7:38:39:6c: 36:68:7f:25:1a:65:6f:ca:22:57:bf:d7:36:4a:c4: 96:b1:ba:5d:fb:2c:5e:95:3e:5a:c8:5b:f8:cc:27: 6c:18:40:2d:f9:40:47:76:a5:96:30:bf:c5:a4:eb: 64:d1:a5:7c:c1:03:4d:7e:2d:3c:92:58:0c:be:b9: 4f:c1:81:76:83:44:4f:6d:b9:51:f5:4f:df:b8:51: 63:5a:92:ff:cc:cb:4d:fd:7e:bb:a5:0f:b8:7d:ca: 19:d9:d2:47:5a:f5:a1:6b:fb:bf:32:62:94:23:ae: 92:3c:78:cf:c5:96:37:45:f0:bd:9a:21:4e:e8:92: b8:45:90:a5:9b:16:a9:50:bf:86:d8:91:24:ab:a0: 1c:d6:03:58:56:14:0d:d9:f2:88:59:05:ed:88:e9: ee:c2:72:cb:b0:33:be:f4:d4:3b:98:30:bf:72:d0: 47:ab:2f:7a:e9:9a:6b:10:0c:85:17:af:9d:33:09: a8:83:01:43:d0:bd:12:ea:ce:71:a1:e1:37:cd:b6: 22:ae:22:ee:86:25:be:cb:ba:1a:c2:b5:07:b0:c7: c2:75:60:93:95:39:db:c3:1d:d2:0c:0a:20:d8:ba: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:36:5F:5A:2F:18:B2:35:FC:89:90:25:EE:F5:A0:2B:4E:0B:9A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d97ee865-1f02-3f65-9877-a6064187b157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 23.173.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:54:f4:a0:5a:8b:8b:f3:7c:97:fe:b3:b5:16:0e:74:3e:d4: 26:cc:b9:cf:5a:c0:d8:b8:86:f3:cf:a8:6b:29:e5:c7:01:7c: bf:b1:8d:ba:4c:81:15:b0:48:c6:33:7c:6e:e8:ca:c0:c8:4b: 21:5a:c9:05:da:fe:51:de:87:94:58:64:43:d2:a4:2b:5b:92: be:96:33:ca:e8:da:67:a6:4a:01:09:83:ed:40:c4:49:93:59: 3c:f4:8e:df:19:5a:ea:95:1a:13:0b:27:e1:52:13:05:1b:7d: e0:0f:00:b4:71:b6:19:2d:39:93:43:11:b1:73:5d:b2:54:7e: 30:d0:8b:e4:58:e1:b9:6a:8b:61:ed:ae:12:d7:61:a3:f5:25: 0f:e8:c3:53:f6:32:44:25:fb:00:b0:07:f2:33:fc:03:e4:3f: c1:2b:ea:fc:05:5b:c4:24:7b:a0:b8:53:45:75:64:b7:64:95: 2d:ba:92:e6:2f:76:57:d2:5f:1a:41:4a:5a:36:64:09:45:a9: e4:ee:c5:72:80:77:e5:a5:b0:04:80:4e:f0:81:0c:89:a2:cf: d2:17:71:c5:f2:07:f7:14:84:ea:87:a3:6b:29:40:1c:23:c5: e9:08:28:4b:e4:32:12:99:3a:55:44:dd:ac:07:11:05:81:06: 89:5b:35:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWne9GyS9ig2kSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YWU5MmQyY2MtMDJiMy00YzhkLWExMGItY2FhOWNmMzJjNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljaK1CL+VsrckW9X6wGlr2VaODdcQ0V14/c4 OWw2aH8lGmVvyiJXv9c2SsSWsbpd+yxelT5ayFv4zCdsGEAt+UBHdqWWML/FpOtk 0aV8wQNNfi08klgMvrlPwYF2g0RPbblR9U/fuFFjWpL/zMtN/X67pQ+4fcoZ2dJH WvWha/u/MmKUI66SPHjPxZY3RfC9miFO6JK4RZClmxapUL+G2JEkq6Ac1gNYVhQN 2fKIWQXtiOnuwnLLsDO+9NQ7mDC/ctBHqy966ZprEAyFF6+dMwmogwFD0L0S6s5x oeE3zbYiriLuhiW+y7oawrUHsMfCdWCTlTnbwx3SDAog2LoJNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI2X1ovGLI1/ImQJe71oCtOC5rnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZDk3ZWU4NjUtMWYwMi0z ZjY1LTk4NzctYTYwNjQxODdiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINU9KBai4vzfJf+s7UWDnQ+1CbMuc9awNi4hvPPqGsp5ccBfL+xjbpM gRWwSMYzfG7oysDISyFayQXa/lHeh5RYZEPSpCtbkr6WM8ro2memSgEJg+1AxEmT WTz0jt8ZWuqVGhMLJ+FSEwUbfeAPALRxthktOZNDEbFzXbJUfjDQi+RY4blqi2Ht rhLXYaP1JQ/ow1P2MkQl+wCwB/Iz/APkP8Er6vwFW8Qke6C4U0V1ZLdklS26kuYv dlfSXxpBSlo2ZAlFqeTuxXKAd+WlsASATvCBDImiz9IXccXyB/cUhOqHo2spQBwj xekIKEvkMhKZOlVE3awHEQWBBolbNUs= -----END CERTIFICATE-----Generated at Mon Jun 16 19:40:12 2025 by rpki-client