$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa File: 847d4837-dad4-36ec-a86b-505d52bdaacb.roa (raw, json) Hash identifier: 8fBixUd/lsMRROGc3DzPC0jeiJEM3UtUcBt4h6BJ+/w= Subject key identifier: 7E:72:01:04:85:1C:B9:59:2B:80:C3:41:D9:4D:79:FE:1C:D4:2E:BD Certificate issuer: /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Certificate serial: 010D0C9F43285849756972DCD562D80FD33C6780 Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa Signing time: Tue 08 Apr 2025 14:15:52 +0000 ROA not before: Tue 08 Apr 2025 14:15:52 +0000 ROA not after: Mon 07 Jul 2025 14:15:52 +0000 asID: 33628 IP address blocks: 23.144.128.0/24 maxlen: 24 69.171.160.0/19 maxlen: 19 2604:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:69:72:dc:d5:62:d8:0f:d3:3c:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Validity Not Before: Apr 8 14:15:52 2025 GMT Not After : Jul 7 14:15:52 2025 GMT Subject: CN=56952ffa-0de5-4dec-8e1a-a128b6b902a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:5d:1a:36:7b:53:10:0c:4e:b3:c2:e9:23: 8d:46:2a:5c:75:5a:08:57:40:eb:5b:67:88:81:39: fd:f5:bd:f5:19:7d:c4:89:b7:17:35:02:ba:d0:08: 5b:ef:e8:ec:d7:65:4f:ba:d5:b7:5e:f8:71:2a:5b: 78:d5:0b:ef:ef:05:d9:da:c7:44:d3:03:08:2f:05: 45:bb:81:2a:e0:ff:ac:90:e3:98:0d:f8:0b:a2:94: a3:41:3f:8b:37:ce:25:e3:5b:27:96:59:d5:10:f7: 26:fa:05:ce:51:ec:b8:b4:fb:ed:87:b8:fc:f9:a3: 20:55:6c:3a:60:df:b2:89:2a:47:6b:03:e2:a4:b8: 3c:22:67:5c:97:5e:29:58:fc:99:50:1d:a0:cd:d4: 6c:e5:ef:51:b2:50:fb:77:4b:38:fe:80:4b:20:15: a3:12:e8:dc:81:53:e8:44:6c:eb:3b:91:10:4f:46: 50:0d:e6:ae:22:b1:7a:9e:b9:9e:a5:a7:fa:a9:84: c4:a4:a9:6b:6f:41:95:68:97:9f:ad:82:54:76:1e: 3a:c1:23:10:e8:71:a5:29:77:a1:9c:58:ef:fa:02: 10:07:10:33:ed:27:87:86:4f:87:06:de:90:11:19: ab:3e:d3:a3:9a:7d:a7:9f:92:e0:98:f4:2e:9a:52: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:72:01:04:85:1C:B9:59:2B:80:C3:41:D9:4D:79:FE:1C:D4:2E:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl X509v3 Authority Key Identifier: keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer sbgp-ipAddrBlock: critical IPv4: 23.144.128.0/24 69.171.160.0/19 IPv6: 2604:840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:86:90:bb:9d:67:f1:20:ee:66:5c:ed:aa:c8:81:ab:95:6c: b4:7e:4f:2a:33:bf:ee:47:52:dd:e7:05:0b:1d:11:08:8b:ee: 57:68:8c:f6:25:4e:0e:d6:e0:6b:a7:f4:2f:7f:49:3c:67:f3: 98:6b:2a:80:39:a1:d7:4f:ee:c0:fb:26:f0:8f:12:eb:b7:0f: 8e:d1:5b:da:2a:d1:f2:6c:95:22:ae:51:62:05:15:27:1d:2b: 10:36:21:70:09:c4:d7:ec:2a:10:5f:00:32:90:8d:57:d5:7a: 77:13:4e:24:6e:29:1c:25:8a:35:d1:6b:08:2d:e2:d9:e8:85: 94:c6:7e:cf:08:01:04:8a:4f:0b:e2:1e:d2:79:44:01:73:a5: 46:fe:c3:20:ac:46:db:ec:19:af:3a:ff:1f:e2:83:82:92:19: 1d:ca:0b:a7:d2:f1:4c:bb:74:bf:c6:b8:1d:97:cd:26:ca:6b: 51:04:ed:e7:8d:5f:c7:a0:88:b1:51:fc:fa:55:cf:a4:4e:8c: ac:6d:d7:39:10:59:ca:49:78:f8:66:a6:5b:47:7b:e6:5e:02: 1c:66:43:cc:03:5c:a2:85:81:11:a6:92:1f:46:af:31:2c:35: e8:ef:f0:55:6f:53:73:2d:20:7b:b6:d8:82:ac:07:47:41:bb: 0b:ec:61:84 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEl1aXLc1WLYD9M8Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhY2MxNTUtNmFkOS00M2Y1LWFkMmMtMmQ4ZGRiMGNh NzhhMB4XDTI1MDQwODE0MTU1MloXDTI1MDcwNzE0MTU1MlowLzEtMCsGA1UEAxMk NTY5NTJmZmEtMGRlNS00ZGVjLThlMWEtYTEyOGI2YjkwMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOJdGjZ7UxAMTrPC6SONRipcdVoIV0DrW2eI gTn99b31GX3EibcXNQK60Ahb7+js12VPutW3XvhxKlt41Qvv7wXZ2sdE0wMILwVF u4Eq4P+skOOYDfgLopSjQT+LN84l41snllnVEPcm+gXOUey4tPvth7j8+aMgVWw6 YN+yiSpHawPipLg8Imdcl14pWPyZUB2gzdRs5e9RslD7d0s4/oBLIBWjEujcgVPo RGzrO5EQT0ZQDeauIrF6nrmepaf6qYTEpKlrb0GVaJefrYJUdh46wSMQ6HGlKXeh nFjv+gIQBxAz7SeHhk+HBt6QERmrPtOjmn2nn5LgmPQumlIZZwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFH5yAQSFHLlZK4DDQdlNef4c1C69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ZmFj YzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhkZGIwY2E3OGEvODQ3ZDQ4MzctZGFkNC0z NmVjLWE4NmItNTA1ZDUyYmRhYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWZhY2MxNTUtNmFkOS00M2Y1LWFk MmMtMmQ4ZGRiMGNhNzhhLzlmYWNjMTU1LTZhZDktNDNmNS1hZDJjLTJkOGRkYjBj YTc4YS5jcmwwHwYDVR0jBBgwFoAU4cHTekycnFuIqlkcSXBgm0dIahIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ZmFjYzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhk ZGIwY2E3OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5CAAwQF RaugMA0EAgACMAcDBQAmBAhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAGGkLudZ/Eg7mZc7arIgauVbLR+ Tyozv+5HUt3nBQsdEQiL7ldojPYlTg7W4Gun9C9/STxn85hrKoA5oddP7sD7JvCP Euu3D47RW9oq0fJslSKuUWIFFScdKxA2IXAJxNfsKhBfADKQjVfVencTTiRuKRwl ijXRawgt4tnohZTGfs8IAQSKTwviHtJ5RAFzpUb+wyCsRtvsGa86/x/ig4KSGR3K C6fS8Uy7dL/GuB2XzSbKa1EE7eeNX8egiLFR/PpVz6ROjKxt1zkQWcpJePhmpltH e+ZeAhxmQ8wDXKKFgRGmkh9GrzEsNejv8FVvU3MtIHu22IKsB0dBuwvsYYQ= -----END CERTIFICATE-----Generated at Sun Apr 27 22:05:06 2025 by rpki-client