$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa File: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (raw, json) Hash identifier: +7j7hJ+m0FTIqx5/xLdIkfoSo5ShkFWgfifZZ/yHrBE= Subject key identifier: D1:11:61:7F:B3:D0:1A:6C:6E:16:86:12:CF:51:00:58:64:CE:6D:2F Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F43285849FCAA7DE3E731447BEC08F600 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 26904 IP address blocks: 23.247.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7d:e3:e7:31:44:7b:ec:08:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=7907f158-c9b1-45eb-a856-df0e86961d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:1a:8f:13:8b:0b:5e:ab:e5:e8:84:92:d0: 37:cb:69:93:24:b9:37:97:8f:66:d5:69:b5:73:ad: 98:1c:66:0a:c3:91:65:b8:8d:ac:59:22:a5:1b:14: f4:52:25:26:b1:da:cf:d1:cb:f8:e6:cf:01:b9:d2: 7a:06:0b:c1:42:fb:c6:3e:36:df:fc:8c:a2:6a:9c: 7c:e2:99:e8:4b:df:ec:b2:0d:93:e9:f2:58:a8:c6: 93:c7:af:ed:c3:c0:46:dd:88:29:54:7b:17:ee:cc: cc:45:eb:d8:60:ca:98:b5:ad:28:6e:7d:3b:87:b9: 76:2d:32:4e:6f:d6:24:ef:7a:f1:05:d2:46:71:d2: ab:70:fe:e5:d4:b5:c2:d7:ad:48:f0:53:19:1e:8a: 1b:ab:4e:6f:04:e9:84:10:34:24:af:4a:58:b1:59: f6:cc:01:78:1b:31:24:cb:12:a3:9e:10:9d:27:02: a2:4c:c1:85:00:ab:a8:e5:1f:19:ca:60:b7:35:66: 43:24:db:0b:dd:7a:b5:ed:d3:bb:1f:0e:78:e2:a9: 6a:30:b2:34:a6:2d:c2:da:27:4c:c8:6b:07:4f:83: ec:6b:86:30:8b:d5:d7:9b:f5:b4:08:d7:9f:41:2d: 5e:05:28:8b:09:31:16:f0:d6:3a:52:ad:6e:50:b8: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:11:61:7F:B3:D0:1A:6C:6E:16:86:12:CF:51:00:58:64:CE:6D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b7:c7:e8:c9:ee:70:5a:95:e5:97:6f:af:2a:32:9b:b8:db: 91:44:0c:23:4d:6b:44:06:82:6c:8b:31:3a:4a:a3:e5:88:c3: 66:da:4d:99:2e:88:9d:ef:6f:45:5a:af:c1:ae:f4:bf:2d:0e: fc:e9:f7:42:e0:cb:b0:80:20:3a:cc:5f:61:ae:4f:01:7d:ff: 9b:8c:ce:96:9f:84:ea:5f:8d:5d:6a:bd:b3:00:d2:bd:ce:00: 86:30:7e:4e:cf:67:2e:26:df:18:d0:ec:58:0c:00:3c:d3:95: f1:f4:15:ec:95:3d:b4:a3:4b:e7:c7:38:08:97:58:6e:d1:91: eb:c1:02:8f:6f:2d:fe:d2:8e:59:9b:b5:41:86:62:d4:e4:e4: 53:6c:60:23:b0:27:17:f3:94:26:b2:8c:8a:44:b8:62:4c:63: 1e:5c:59:49:9a:fb:1b:16:66:0e:6d:43:6f:f0:73:e4:26:34: ba:67:f7:40:39:61:b5:bf:20:8d:64:f1:3e:92:de:3f:8f:de: 7d:c1:2e:00:a9:73:f2:01:48:88:8e:0f:fe:40:eb:8a:56:33: 00:d8:64:64:bd:e0:ce:5e:b2:35:3c:ce:b3:79:55:b4:9a:d4: 0b:a9:5d:6a:94:b8:51:e7:f5:fd:17:37:f8:2e:c9:bd:0d:0b: 6c:c5:e4:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn3j5zFEe+wI9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NzkwN2YxNTgtYzliMS00NWViLWE4NTYtZGYwZTg2OTYxZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KkajxOLC16r5eiEktA3y2mTJLk3l49m1Wm1 c62YHGYKw5FluI2sWSKlGxT0UiUmsdrP0cv45s8BudJ6BgvBQvvGPjbf/Iyiapx8 4pnoS9/ssg2T6fJYqMaTx6/tw8BG3YgpVHsX7szMRevYYMqYta0obn07h7l2LTJO b9Yk73rxBdJGcdKrcP7l1LXC161I8FMZHoobq05vBOmEEDQkr0pYsVn2zAF4GzEk yxKjnhCdJwKiTMGFAKuo5R8ZymC3NWZDJNsL3Xq17dO7Hw544qlqMLI0pi3C2idM yGsHT4Psa4Ywi9XXm/W0CNefQS1eBSiLCTEW8NY6Uq1uULgQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNERYX+z0BpsbhaGEs9RAFhkzm0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvYmY5MjRkYmQtMzRiYy0z YzczLTk5MTEtZTZlOTMzNDA1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD23x+jJ7nBaleWXb68qMpu425FEDCNNa0QGgmyLMTpKo+WIw2baTZku iJ3vb0Var8Gu9L8tDvzp90Lgy7CAIDrMX2GuTwF9/5uMzpafhOpfjV1qvbMA0r3O AIYwfk7PZy4m3xjQ7FgMADzTlfH0FeyVPbSjS+fHOAiXWG7RkevBAo9vLf7Sjlmb tUGGYtTk5FNsYCOwJxfzlCayjIpEuGJMYx5cWUma+xsWZg5tQ2/wc+QmNLpn90A5 YbW/II1k8T6S3j+P3n3BLgCpc/IBSIiOD/5A64pWMwDYZGS94M5esjU8zrN5VbSa 1AupXWqUuFHn9f0XN/guyb0NC2zF5Ow= -----END CERTIFICATE-----Generated at Sun Jun 15 17:38:26 2025 by rpki-client