$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa File: 685b8c27-a767-3702-ae11-c7cb2ff820be.roa (raw, json) Hash identifier: XU1hGu3Du8kKjpHRapnYMvVCv19/IpmHeTiNn05XD60= Subject key identifier: 49:4E:B3:5C:8F:95:B7:F8:32:99:EB:8C:FE:9E:82:94:5A:34:83:F7 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F43285849A4BA4EE2649663E10B8F8B00 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 11870 IP address blocks: 167.23.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4e:e2:64:96:63:e1:0b:8f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fd40f95d-5e60-4a8b-9f13-082d7574d8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:10:13:cc:65:a7:44:25:7d:87:17:a3:e7: c3:76:32:61:fe:ef:46:d9:72:b3:33:86:21:19:aa: ab:c8:18:07:36:8f:6f:ed:39:87:71:93:72:eb:d6: 01:74:b7:8d:bf:36:a1:55:01:9c:fa:f6:87:aa:6c: 94:e5:19:7e:bb:e4:e8:dd:95:48:99:13:35:1a:1b: 6a:0a:5f:fd:68:12:e4:dd:e8:a2:d5:3e:9f:5b:cd: 66:bb:86:ff:08:ef:b3:3a:4b:b3:34:68:ad:fa:b0: 57:33:cb:ff:73:15:cc:2d:cc:f6:f8:01:18:bc:bd: 5a:f9:20:89:c2:33:3c:f8:59:1f:51:d0:3c:22:c9: 65:e4:92:96:74:59:0c:50:82:1b:70:0d:46:9b:62: 3d:43:c7:aa:24:09:8d:8b:80:b6:29:52:29:80:38: a6:8f:82:b1:4c:87:d2:95:1e:6e:a6:46:53:ca:8f: c7:9c:17:d1:0d:80:7f:c5:55:46:65:01:30:bb:7e: 81:e2:23:03:fe:39:44:9f:12:7b:88:50:c5:6f:fd: 93:34:71:92:3a:38:dd:0a:d3:0f:3f:7b:b2:d1:30: 26:cc:0c:bc:22:4e:36:58:e5:a9:58:0d:f7:27:bf: 19:0d:3b:86:b1:d0:8b:96:7b:97:2f:3f:fc:e2:2f: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4E:B3:5C:8F:95:B7:F8:32:99:EB:8C:FE:9E:82:94:5A:34:83:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:02:45:3b:af:61:01:7c:2e:bf:bd:d0:95:5c:67:46:a0:62: 3b:4d:94:e0:04:81:22:d6:8f:d3:c9:60:34:7c:35:b4:36:ad: ab:c4:bb:2f:ec:2a:17:2e:7e:e7:fa:8c:95:1e:6e:68:ab:86: 22:ac:3e:57:41:ae:73:bc:8b:17:05:61:e0:61:d7:af:bb:28: 12:0f:14:09:b5:cd:d5:cc:62:e0:f2:d2:28:ec:3c:eb:27:d8: 81:77:22:06:4f:e9:61:cc:f1:d6:66:d2:9c:9e:4b:fa:bd:00: 4d:b4:d9:97:9e:73:7e:d8:67:ae:6b:35:4b:96:0f:2c:77:ac: 28:db:3e:75:58:65:95:04:ab:e1:23:f5:30:25:fc:58:8e:e3: 94:63:a6:38:f1:66:7d:52:7a:df:cc:1f:47:7b:3f:59:c1:1b: 14:e1:6b:5a:3f:f4:6a:5e:aa:2d:f2:65:c9:ec:6e:6c:94:e0: 14:ad:d6:cb:a6:c6:a5:70:ca:48:4f:16:53:d1:bb:85:b5:33: 84:9d:08:49:37:a8:20:31:e6:ac:96:dd:3d:2f:52:cf:ed:39: b4:da:aa:0a:ab:31:dd:b0:6e:38:80:cb:26:3f:0d:b1:41:99: 05:f6:bb:28:9f:e1:a1:c3:1b:8e:de:ef:a8:82:bc:45:42:49: b4:c3:51:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk7iZJZj4QuPiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmQ0MGY5NWQtNWU2MC00YThiLTlmMTMtMDgyZDc1NzRkOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGoQE8xlp0QlfYcXo+fDdjJh/u9G2XKzM4Yh GaqryBgHNo9v7TmHcZNy69YBdLeNvzahVQGc+vaHqmyU5Rl+u+To3ZVImRM1Ghtq Cl/9aBLk3eii1T6fW81mu4b/CO+zOkuzNGit+rBXM8v/cxXMLcz2+AEYvL1a+SCJ wjM8+FkfUdA8Isll5JKWdFkMUIIbcA1Gm2I9Q8eqJAmNi4C2KVIpgDimj4KxTIfS lR5upkZTyo/HnBfRDYB/xVVGZQEwu36B4iMD/jlEnxJ7iFDFb/2TNHGSOjjdCtMP P3uy0TAmzAy8Ik42WOWpWA33J78ZDTuGsdCLlnuXLz/84i/IhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElOs1yPlbf4MpnrjP6egpRaNIP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvNjg1YjhjMjctYTc2Ny0z NzAyLWFlMTEtYzdjYjJmZjgyMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpxcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkCRTuvYQF8Lr+90JVcZ0agYjtNlOAEgSLWj9PJYDR8NbQ2ravEuy/s Khcufuf6jJUebmirhiKsPldBrnO8ixcFYeBh16+7KBIPFAm1zdXMYuDy0ijsPOsn 2IF3IgZP6WHM8dZm0pyeS/q9AE202Zeec37YZ65rNUuWDyx3rCjbPnVYZZUEq+Ej 9TAl/FiO45RjpjjxZn1Set/MH0d7P1nBGxTha1o/9Gpeqi3yZcnsbmyU4BSt1sum xqVwykhPFlPRu4W1M4SdCEk3qCAx5qyW3T0vUs/tObTaqgqrMd2wbjiAyyY/DbFB mQX2uyif4aHDG47e76iCvEVCSbTDUQI= -----END CERTIFICATE-----Generated at Mon Apr 28 07:20:10 2025 by rpki-client