$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/ff9d86b8-cc0e-32f6-88cd-a9487a1c32b3.roa File: ff9d86b8-cc0e-32f6-88cd-a9487a1c32b3.roa (raw, json) Hash identifier: tNQu2Rv3H+6B4hS9NXLHd9GRYX+oEWfcf3I1ooUUTOs= Subject key identifier: CE:BA:75:E2:01:CA:DF:5F:B9:C7:6D:04:60:17:8B:70:57:EC:02:35 Certificate issuer: /CN=63f043cf-2b37-4962-9d5b-bc179102509d Certificate serial: 010D0C9F43285849A4BA11479985D471BF77F280 Authority key identifier: DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/ff9d86b8-cc0e-32f6-88cd-a9487a1c32b3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 23507 IP address blocks: 23.133.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:11:47:99:85:d4:71:bf:77:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f043cf-2b37-4962-9d5b-bc179102509d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=50ec574c-f099-4e4f-a522-e46ac372a0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:d2:f0:07:3f:b3:ef:82:99:48:0f:a4:db: cc:7f:9b:2a:51:96:bd:81:3a:08:c0:74:fa:77:93: 4b:0b:2a:bb:57:5b:be:58:b0:64:b5:63:06:d4:18: 94:1c:05:ac:cd:ae:4d:f5:fc:56:80:d4:77:5d:0d: f5:ce:ff:8d:9e:13:d5:09:76:78:9f:9d:67:ee:85: 3a:76:c8:2e:3c:3b:96:2e:43:8c:c4:68:7a:1b:54: 8f:4e:41:e3:c6:31:aa:58:05:ec:3c:f1:22:6b:ea: f2:0b:43:0f:e8:80:5c:e0:9f:2c:79:6f:b3:7c:c1: a1:33:de:bb:98:c6:b1:39:2e:03:cf:6e:5e:fe:47: e0:c4:e6:02:11:e4:1e:5b:46:81:bc:dc:26:72:c4: be:35:3a:35:c9:09:51:a4:e3:7c:54:1e:9a:67:a5: 7e:08:19:3f:55:a1:77:dd:8e:79:bd:7f:ee:f8:e8: 9d:84:4e:20:66:62:4f:b6:e8:09:7c:a3:38:53:03: 9a:f4:91:8a:49:9b:44:b0:8d:d2:4c:e8:93:a8:85: b7:ef:37:75:a0:69:c7:dc:c2:6b:c5:dd:40:d5:7c: e4:4a:27:09:a9:43:7b:7d:b4:fd:44:e7:ad:cc:58: e2:9e:e3:d2:a7:8d:7a:3b:9b:7f:47:0e:e0:a7:60: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BA:75:E2:01:CA:DF:5F:B9:C7:6D:04:60:17:8B:70:57:EC:02:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/ff9d86b8-cc0e-32f6-88cd-a9487a1c32b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl X509v3 Authority Key Identifier: keyid:DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer sbgp-ipAddrBlock: critical IPv4: 23.133.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f6:1a:d0:48:44:b8:93:8a:77:34:b8:0d:c7:e3:5c:e0:83: 80:5b:c1:6b:26:ba:50:18:ec:38:42:1f:5c:fc:85:7f:39:42: 45:fa:3b:48:6e:cb:b0:94:75:75:cf:fa:1e:29:25:7f:d0:21: cd:69:6e:bd:a7:b2:78:df:7a:c7:94:47:81:70:5b:91:49:3d: 79:aa:81:f9:f2:bb:bc:74:ee:55:7f:4e:21:39:e4:e3:e4:c5: 89:c6:8c:0f:e5:dc:7e:1a:55:f9:8e:e5:b9:b2:f2:35:68:b9: dc:59:b7:8a:2e:7e:a5:c6:be:e5:dc:71:ca:a3:2f:10:eb:6e: 95:25:7e:0a:1a:d3:17:25:c1:6c:65:b3:3b:31:c5:ed:02:4f: e0:93:5d:29:f1:14:c8:bd:50:9f:38:44:42:7a:d0:35:a4:7f: 85:60:20:d6:1b:95:38:24:ed:ad:ba:fb:fa:b1:16:20:e0:0c: 89:45:51:37:42:7e:54:6f:09:66:14:97:97:f9:2a:2a:ad:28: 68:7a:26:60:61:8b:40:50:87:63:d0:10:07:27:60:2b:bd:3e: 8a:e8:13:f0:df:7a:d1:56:89:e1:72:eb:e1:1d:c8:1d:02:2c: 39:b5:98:49:11:17:1d:bb:78:4c:9d:83:4e:09:3d:0c:ed:7a: ae:86:a7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhFHmYXUcb938oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmMDQzY2YtMmIzNy00OTYyLTlkNWItYmMxNzkxMDI1 MDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTBlYzU3NGMtZjA5OS00ZTRmLWE1MjItZTQ2YWMzNzJhMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o7S8Ac/s++CmUgPpNvMf5sqUZa9gToIwHT6 d5NLCyq7V1u+WLBktWMG1BiUHAWsza5N9fxWgNR3XQ31zv+NnhPVCXZ4n51n7oU6 dsguPDuWLkOMxGh6G1SPTkHjxjGqWAXsPPEia+ryC0MP6IBc4J8seW+zfMGhM967 mMaxOS4Dz25e/kfgxOYCEeQeW0aBvNwmcsS+NTo1yQlRpON8VB6aZ6V+CBk/VaF3 3Y55vX/u+OidhE4gZmJPtugJfKM4UwOa9JGKSZtEsI3STOiTqIW37zd1oGnH3MJr xd1A1XzkSicJqUN7fbT9ROetzFjinuPSp416O5t/Rw7gp2ABXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM66deIByt9fucdtBGAXi3BX7AI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82M2Yw NDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3OTEwMjUwOWQvZmY5ZDg2YjgtY2MwZS0z MmY2LTg4Y2QtYTk0ODdhMWMzMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjNmMDQzY2YtMmIzNy00OTYyLTlk NWItYmMxNzkxMDI1MDlkLzYzZjA0M2NmLTJiMzctNDk2Mi05ZDViLWJjMTc5MTAy NTA5ZC5jcmwwHwYDVR0jBBgwFoAU35cSPb49Of84LUcqO9ZkVoGTvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82M2YwNDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3 OTEwMjUwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn2GtBIRLiTinc0uA3H41zgg4BbwWsmulAY7DhCH1z8hX85QkX6O0hu y7CUdXXP+h4pJX/QIc1pbr2nsnjfeseUR4FwW5FJPXmqgfnyu7x07lV/TiE55OPk xYnGjA/l3H4aVfmO5bmy8jVoudxZt4oufqXGvuXcccqjLxDrbpUlfgoa0xclwWxl szsxxe0CT+CTXSnxFMi9UJ84REJ60DWkf4VgINYblTgk7a26+/qxFiDgDIlFUTdC flRvCWYUl5f5KiqtKGh6JmBhi0BQh2PQEAcnYCu9PoroE/DfetFWieFy6+EdyB0C LDm1mEkRFx27eEydg04JPQzteq6Gpw8= -----END CERTIFICATE-----Generated at Tue Apr 29 14:33:45 2025 by rpki-client