$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa File: a43f2811-9f68-38d8-af6d-9e854929690d.roa (raw, json) Hash identifier: 8Fu5Tk4X8KwlKklA8rl6IPlwUa7G+s+oIc3y6VbDscg= Subject key identifier: C4:31:A5:61:5D:42:D9:35:CC:04:DC:43:CC:99:27:30:08:FD:4F:BD Certificate issuer: /CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f Certificate serial: 010D0C9F43285849E22535BD6781542DA8FDB900 Authority key identifier: 1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399788 IP address blocks: 23.189.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:35:bd:67:81:54:2d:a8:fd:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=ce10585b-e03c-4148-b8dc-a38579c75033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:39:6d:a1:f3:f6:65:14:30:1f:c2:15:7f: 2d:4c:36:ac:3c:82:27:32:fd:c8:68:99:81:a3:91: 80:1b:39:4b:e6:7c:23:09:a4:92:74:6b:01:09:e9: 89:1f:ef:92:40:1a:63:c8:35:a8:a3:6b:7d:88:d7: 38:f3:ab:ca:6c:89:eb:44:9b:51:33:6f:7e:c5:4f: 3b:4d:a5:88:ae:96:24:f6:bd:e2:4c:16:08:c2:e3: 1b:f7:63:f9:89:02:d3:1f:c2:02:c5:7d:0e:d0:a0: d4:9f:19:56:7a:41:7f:bd:b1:4f:67:68:bb:27:69: 84:35:80:6f:37:57:3b:58:d9:36:21:52:35:f6:d5: 90:53:78:45:14:0d:0f:9c:e5:52:c7:95:ab:ec:1e: 3e:6b:d7:11:93:c2:69:3c:6f:cd:7e:b4:29:30:b2: d1:8a:28:00:23:85:1c:3b:1f:29:f3:51:01:95:ea: 5f:d3:1e:52:df:0d:be:5d:45:52:5d:3a:2f:78:40: 82:22:32:28:49:44:34:ac:9a:e0:b8:71:dd:de:33: 07:41:7a:35:9b:91:5c:17:78:cf:45:29:56:51:76: d8:0a:cb:09:5c:fa:22:0a:42:67:5e:7a:e4:98:61: b5:00:e8:32:23:b8:da:71:83:e4:e7:46:20:a3:01: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:31:A5:61:5D:42:D9:35:CC:04:DC:43:CC:99:27:30:08:FD:4F:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl X509v3 Authority Key Identifier: keyid:1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer sbgp-ipAddrBlock: critical IPv4: 23.189.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3b:83:80:04:10:b3:eb:f9:e7:e7:b3:e3:14:1a:06:f2:8c: 93:e8:96:46:56:27:3e:bf:d5:e5:e6:c6:fd:e9:53:48:88:4b: da:58:37:7e:24:46:95:bc:1a:89:f3:97:0e:15:b8:df:3f:aa: 8e:57:47:f4:e5:3c:75:ff:61:df:b3:f3:27:3a:e5:d6:46:7d: 6b:ef:9f:20:a7:ce:04:57:22:13:c6:49:4c:15:0b:bc:1d:26: 37:55:16:91:6f:73:74:ca:9c:5a:42:1c:59:f1:37:3b:f9:54: 3a:ae:06:b8:91:2b:54:7c:82:ee:7d:4f:52:f4:d8:31:51:31: 58:34:62:a6:c6:09:ad:00:b8:ac:f8:af:15:11:38:e9:1a:6e: 11:aa:67:aa:b6:bb:d3:ba:b4:a6:24:ae:95:d9:e6:98:1b:b4: b7:8f:24:a6:95:3b:c1:94:bf:bd:1d:e1:58:f3:c9:e9:5f:05: ff:21:08:3d:ca:3a:bb:59:1d:d6:08:ce:8d:e7:87:7c:55:a4: c5:82:63:84:1c:b5:37:d3:30:9d:75:67:78:24:19:45:12:49: 55:5c:36:b6:ef:36:4e:a1:da:9d:d2:72:39:b2:d0:fd:68:2c: 09:96:fe:64:70:dd:0d:f7:28:53:cf:26:47:a6:0f:6e:cb:56: bb:1a:77:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTW9Z4FULaj9uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1NzlhYzEtYThiZS00M2M1LThkNmMtZGMwMmI5Zjdh MzVmMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk Y2UxMDU4NWItZTAzYy00MTQ4LWI4ZGMtYTM4NTc5Yzc1MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90A5baHz9mUUMB/CFX8tTDasPIInMv3IaJmB o5GAGzlL5nwjCaSSdGsBCemJH++SQBpjyDWoo2t9iNc486vKbInrRJtRM29+xU87 TaWIrpYk9r3iTBYIwuMb92P5iQLTH8ICxX0O0KDUnxlWekF/vbFPZ2i7J2mENYBv N1c7WNk2IVI19tWQU3hFFA0PnOVSx5Wr7B4+a9cRk8JpPG/NfrQpMLLRiigAI4Uc Ox8p81EBlepf0x5S3w2+XUVSXToveECCIjIoSUQ0rJrguHHd3jMHQXo1m5FcF3jP RSlWUXbYCssJXPoiCkJnXnrkmGG1AOgyI7jacYPk50YgowEeywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQxpWFdQtk1zATcQ8yZJzAI/U+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMjU3 OWFjMS1hOGJlLTQzYzUtOGQ2Yy1kYzAyYjlmN2EzNWYvYTQzZjI4MTEtOWY2OC0z OGQ4LWFmNmQtOWU4NTQ5Mjk2OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDI1NzlhYzEtYThiZS00M2M1LThk NmMtZGMwMmI5ZjdhMzVmLzAyNTc5YWMxLWE4YmUtNDNjNS04ZDZjLWRjMDJiOWY3 YTM1Zi5jcmwwHwYDVR0jBBgwFoAUGuutVOSPgfAfDrmVzeyJmDru2akwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMjU3OWFjMS1hOGJlLTQzYzUtOGQ2Yy1kYzAy YjlmN2EzNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF70wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU7g4AEELPr+efns+MUGgbyjJPolkZWJz6/1eXmxv3pU0iIS9pYN34k RpW8Gonzlw4VuN8/qo5XR/TlPHX/Yd+z8yc65dZGfWvvnyCnzgRXIhPGSUwVC7wd JjdVFpFvc3TKnFpCHFnxNzv5VDquBriRK1R8gu59T1L02DFRMVg0YqbGCa0AuKz4 rxUROOkabhGqZ6q2u9O6tKYkrpXZ5pgbtLePJKaVO8GUv70d4VjzyelfBf8hCD3K OrtZHdYIzo3nh3xVpMWCY4QctTfTMJ11Z3gkGUUSSVVcNrbvNk6h2p3Scjmy0P1o LAmW/mRw3Q33KFPPJkemD27LVrsadyM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:32 2025 by rpki-client