$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa File: 936a75ba-7eb9-3709-9d13-c404379a1254.roa (raw, json) Hash identifier: Qfmb1VSdmqjpl5FKyeF9QUV0IqqzTz/WDSHH5wmSLzw= Subject key identifier: 40:6D:67:08:D0:2E:AF:61:C8:3C:ED:77:D1:19:97:CE:A0:A8:1D:29 Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584930DE6FFB64349C7200C87F40 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 23.179.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6f:fb:64:34:9c:72:00:c8:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=39c2cbd7-395a-4923-9d55-769bcb708295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:f1:f4:6b:11:71:9a:54:47:32:80:04:f3: cb:74:08:9e:06:d9:8c:d4:16:57:f6:05:10:f4:f8: 91:38:60:b9:d9:ea:7d:04:0e:7c:3e:01:9a:6d:b8: 7a:14:82:87:d5:31:fb:27:11:fb:c5:bc:a6:f8:36: 1d:6a:cb:2b:f0:d1:cf:21:28:7c:a0:3a:42:6a:ed: 5d:e6:94:d3:30:b9:f2:27:53:14:64:49:39:80:a8: fb:35:2c:51:b1:e2:e0:05:d2:c4:2c:2d:8d:d4:d4: 55:85:9c:07:f8:cc:94:c9:9e:41:17:a3:91:d1:f8: 0e:c7:b4:d2:50:b2:1c:1f:71:af:2f:46:68:98:d7: fb:b5:2a:23:d4:77:f4:26:97:63:c1:7b:5b:db:ae: 20:b9:59:60:f6:ac:8e:52:aa:02:db:9a:e6:5a:ad: b6:f5:99:6b:90:0e:32:87:b6:07:7b:b1:b0:87:e9: ba:e3:1d:76:9f:7e:2d:dc:31:9b:fc:ef:79:c7:73: cb:3c:e9:db:c0:9a:10:2c:6f:b6:32:e2:20:c1:18: fc:37:9d:81:be:4f:43:16:6a:1e:c8:83:11:9a:f1: 9c:7b:64:51:7e:23:e1:23:db:30:fb:bf:37:ba:e2: 51:c7:9c:0c:b5:33:57:c3:5e:00:43:41:97:d8:8f: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6D:67:08:D0:2E:AF:61:C8:3C:ED:77:D1:19:97:CE:A0:A8:1D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5d:74:b2:f2:8e:97:69:ce:5a:93:41:df:b3:cc:f6:3c:ca: e4:42:d1:0b:63:bb:a2:fa:3d:fa:96:87:01:e0:6c:1d:41:d2: 07:13:c0:90:3f:2c:5e:2e:e2:6a:d1:45:a3:9e:5a:b9:8f:ce: ac:c1:62:1b:da:e2:e9:d5:2d:d4:6c:a2:f9:98:17:dd:c3:b3: 39:a5:57:bf:ab:bf:3f:8d:27:01:e2:31:21:bf:18:cd:43:5a: 18:08:3f:50:62:e6:c5:f5:39:ea:ca:6f:80:d6:c6:e5:ce:df: a1:e6:01:96:cb:e5:26:ab:36:e8:b4:00:24:27:3c:cb:4a:50: c7:01:f3:33:93:de:82:8d:a6:e9:14:de:ef:72:7e:4f:3c:78: 6a:e8:3e:67:6d:ee:43:eb:62:de:7d:97:50:a3:6b:e1:df:84: b0:1e:9e:6a:8e:1e:78:70:9e:c5:47:d9:ff:17:06:9d:aa:38: 4b:0a:bc:4d:61:8e:a4:ec:71:81:56:b4:be:53:a8:6d:f6:52: c5:77:7a:a0:39:de:86:50:69:12:df:38:e3:21:3f:ea:e6:14: e9:39:79:19:70:6c:2d:d5:ec:25:78:19:1f:23:11:50:bc:94: 50:5c:29:b0:61:ad:6e:42:5b:f7:24:c8:8a:c2:9d:5d:97:0a: 9a:23:98:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m/7ZDSccgDIf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MzljMmNiZDctMzk1YS00OTIzLTlkNTUtNzY5YmNiNzA4Mjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc/x9GsRcZpURzKABPPLdAieBtmM1BZX9gUQ 9PiROGC52ep9BA58PgGabbh6FIKH1TH7JxH7xbym+DYdassr8NHPISh8oDpCau1d 5pTTMLnyJ1MUZEk5gKj7NSxRseLgBdLELC2N1NRVhZwH+MyUyZ5BF6OR0fgOx7TS ULIcH3GvL0ZomNf7tSoj1Hf0JpdjwXtb264guVlg9qyOUqoC25rmWq229ZlrkA4y h7YHe7Gwh+m64x12n34t3DGb/O95x3PLPOnbwJoQLG+2MuIgwRj8N52Bvk9DFmoe yIMRmvGce2RRfiPhI9sw+783uuJRx5wMtTNXw14AQ0GX2I//mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBtZwjQLq9hyDztd9EZl86gqB0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvOTM2YTc1YmEtN2ViOS0z NzA5LTlkMTMtYzQwNDM3OWExMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFddLLyjpdpzlqTQd+zzPY8yuRC0Qtju6L6PfqWhwHgbB1B0gcTwJA/ LF4u4mrRRaOeWrmPzqzBYhva4unVLdRsovmYF93DszmlV7+rvz+NJwHiMSG/GM1D WhgIP1Bi5sX1OerKb4DWxuXO36HmAZbL5SarNui0ACQnPMtKUMcB8zOT3oKNpukU 3u9yfk88eGroPmdt7kPrYt59l1Cja+HfhLAenmqOHnhwnsVH2f8XBp2qOEsKvE1h jqTscYFWtL5TqG32UsV3eqA53oZQaRLfOOMhP+rmFOk5eRlwbC3V7CV4GR8jEVC8 lFBcKbBhrW5CW/ckyIrCnV2XCpojmJU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:14 2025 by rpki-client