$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa File: 25017e4e-9850-38bf-a8e4-a96d2341037c.roa (raw, json) Hash identifier: 1XoUHQGMCby+bADF/d/0zQhpmxnvowGlp+18pYo8/Os= Subject key identifier: 24:14:72:11:79:B3:40:0D:DD:0F:84:CE:E1:DA:2A:13:32:FA:E0:A9 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F432858496A19AC23452A2D11528D4300 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 201217 IP address blocks: 23.172.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:ac:23:45:2a:2d:11:52:8d:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=975d8318-8357-425d-b447-ea35e7e253b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:b2:e3:3f:ef:ab:be:9b:a1:fe:7a:5b:6d: 5a:85:03:c8:f6:a7:9d:0f:6e:41:8a:12:59:31:84: 89:5e:f0:50:5d:2e:e7:fd:5e:31:89:e2:cd:b0:d5: dd:48:a7:21:b1:2b:48:38:47:85:66:09:43:bf:34: 39:ea:87:1d:38:00:1e:35:c8:26:a9:d1:ed:f0:c8: c6:57:b3:7b:29:89:3c:b4:43:81:81:3d:e9:46:37: 2d:15:d4:fd:55:af:bc:bf:56:77:c4:1e:ef:e5:6a: 9b:1a:01:9b:f6:a4:9d:68:8c:66:c0:86:1e:e4:8e: fc:f5:80:93:32:27:c2:0e:b1:a6:7e:8d:17:85:60: 0e:db:88:ce:47:8f:f4:0b:45:7c:be:4a:84:fa:88: be:f6:9c:1e:6e:a6:c6:e5:8d:3e:00:1d:7f:5e:97: a9:85:fd:6e:f0:5e:8f:0d:93:7b:f7:63:0c:f1:23: f0:5d:5e:a7:b6:ff:52:43:9b:f1:78:08:a0:21:2e: 14:a2:aa:c7:a8:f9:19:32:2a:ab:c5:e6:90:82:7d: ea:14:af:50:7a:f4:55:70:f7:c0:3e:48:ac:83:a8: ca:a5:ac:b9:79:72:2e:fe:a8:bf:9f:e0:53:3c:97: 8e:70:6a:ab:7b:24:8f:d9:fe:29:1f:a3:4f:26:7f: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:14:72:11:79:B3:40:0D:DD:0F:84:CE:E1:DA:2A:13:32:FA:E0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:fb:31:a1:c8:98:80:c9:18:af:de:c4:83:a4:0c:a5:be:a2: 32:94:d1:59:8d:11:12:32:5a:10:5e:34:73:ab:db:ca:d1:fc: 4f:da:0e:61:a6:fb:28:bd:c9:c3:23:48:ca:50:25:d2:03:e0: 5e:98:22:4e:25:69:04:5e:1d:0a:da:2f:10:fd:7c:a1:58:22: fc:d7:4e:30:cd:30:0a:e1:01:57:ae:84:89:ce:e2:7e:f0:93: 0b:9f:c7:12:5e:65:85:38:7f:3f:a9:6f:9f:46:7e:ac:c3:f6: 4d:27:db:ba:5c:0a:6c:2c:e1:4f:7a:78:50:09:d5:82:61:c0: ca:38:8d:5f:d2:6a:50:cc:7e:aa:f3:cb:f0:89:44:70:d3:7b: 02:03:8f:ab:12:41:9f:15:8b:7b:ab:b5:aa:5d:5b:b6:b4:af: e3:54:a8:62:d1:76:ad:77:e4:ae:bd:67:fc:7c:bc:d3:14:28: 78:2d:81:51:5c:ac:f0:88:a5:25:6f:0a:79:93:79:e0:54:6c: 84:e6:72:25:00:9f:dd:6f:31:7f:46:76:25:fe:22:f9:50:65: 10:f4:09:74:0b:06:4f:18:ec:d2:36:e1:08:ff:31:21:73:c3: 8d:fc:15:cf:f9:14:b2:b8:1d:b8:5d:17:5e:87:0a:b6:b6:69: c4:0a:98:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGawjRSotEVKNQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk OTc1ZDgzMTgtODM1Ny00MjVkLWI0NDctZWEzNWU3ZTI1M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgay4z/vq76bof56W21ahQPI9qedD25BihJZ MYSJXvBQXS7n/V4xieLNsNXdSKchsStIOEeFZglDvzQ56ocdOAAeNcgmqdHt8MjG V7N7KYk8tEOBgT3pRjctFdT9Va+8v1Z3xB7v5WqbGgGb9qSdaIxmwIYe5I789YCT MifCDrGmfo0XhWAO24jOR4/0C0V8vkqE+oi+9pwebqbG5Y0+AB1/Xpephf1u8F6P DZN792MM8SPwXV6ntv9SQ5vxeAigIS4UoqrHqPkZMiqrxeaQgn3qFK9QevRVcPfA Pkisg6jKpay5eXIu/qi/n+BTPJeOcGqreySP2f4pH6NPJn+81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQUchF5s0AN3Q+EzuHaKhMy+uCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvMjUwMTdlNGUtOTg1MC0z OGJmLWE4ZTQtYTk2ZDIzNDEwMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKf7MaHImIDJGK/exIOkDKW+ojKU0VmNERIyWhBeNHOr28rR/E/aDmGm +yi9ycMjSMpQJdID4F6YIk4laQReHQraLxD9fKFYIvzXTjDNMArhAVeuhInO4n7w kwufxxJeZYU4fz+pb59GfqzD9k0n27pcCmws4U96eFAJ1YJhwMo4jV/SalDMfqrz y/CJRHDTewIDj6sSQZ8Vi3urtapdW7a0r+NUqGLRdq135K69Z/x8vNMUKHgtgVFc rPCIpSVvCnmTeeBUbITmciUAn91vMX9GdiX+IvlQZRD0CXQLBk8Y7NI24Qj/MSFz w438Fc/5FLK4HbhdF16HCra2acQKmHE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:58 2025 by rpki-client