$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa File: 576211ec-d042-32c9-995d-1385a0d1ea5e.roa (raw, json) Hash identifier: fx/YHOgBQ5TMtXdonywxNJMRPmZ+tK30cV0oHQbpYvo= Subject key identifier: 7E:60:E2:32:38:AE:46:DC:ED:D6:D8:AC:9B:0F:26:E0:C8:A6:D6:C1 Certificate issuer: /CN=4d46d941-6831-4f0b-b6f2-cb7d573cacf2 Certificate serial: 010D0C9F43285849393E7ACB810E5843E09E2498 Authority key identifier: C2:4A:9C:95:C4:0D:0F:A8:68:30:8C:F6:9A:FD:DA:6C:B3:48:81:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 63023 IP address blocks: 23.160.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:7a:cb:81:0e:58:43:e0:9e:24:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d46d941-6831-4f0b-b6f2-cb7d573cacf2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=201b13b5-793e-4c2d-91bf-1e3460c1cfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:dc:52:5c:22:1a:56:e0:b4:e0:68:43:65: 6f:02:f6:ea:af:0e:43:f9:3c:b4:98:6e:a5:f7:c1: 77:1c:e1:c8:d2:dc:1d:93:47:77:3c:90:0c:aa:07: 62:0c:90:a2:d4:81:f0:1f:cd:a4:b9:18:20:a5:23: c0:a3:eb:3b:9f:5f:81:f4:ec:17:57:c4:c7:0d:a6: 9b:d9:63:92:e1:9a:0f:65:0d:62:93:a1:aa:c3:bf: ab:6a:54:89:55:0d:99:c5:c8:6e:2c:5c:ab:df:6b: 83:98:ab:f5:22:1a:6f:ac:fc:2c:67:ef:82:47:50: 8b:d9:e8:ab:89:78:89:5f:4e:ad:d1:3b:31:3e:fb: 89:6e:f6:df:fa:24:17:af:8f:eb:0c:73:5c:ab:20: e6:56:88:7b:b1:54:1e:ca:24:22:bc:37:bb:ee:9c: 1f:8e:96:74:2c:d5:19:55:41:67:76:34:90:25:94: 5e:56:1b:fe:af:ec:cc:12:d5:ed:d8:e5:f3:f0:c9: a0:6b:04:19:87:65:f6:22:35:d5:33:90:7c:27:4f: 1d:88:21:c3:68:7a:42:2c:3b:a2:2b:39:05:9d:7d: bc:6d:e1:a4:e7:d4:a1:1c:ff:5c:d8:7a:3f:91:64: 50:60:36:28:38:7f:d0:71:88:a4:42:a2:67:a0:c6: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:60:E2:32:38:AE:46:DC:ED:D6:D8:AC:9B:0F:26:E0:C8:A6:D6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.crl X509v3 Authority Key Identifier: keyid:C2:4A:9C:95:C4:0D:0F:A8:68:30:8C:F6:9A:FD:DA:6C:B3:48:81:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer sbgp-ipAddrBlock: critical IPv4: 23.160.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:50:a8:d1:21:f2:0f:a5:0e:d5:0e:64:0b:56:b3:47:de:2a: d1:0d:53:02:ce:6d:a3:d2:c9:d7:d2:19:fd:42:6a:d1:2e:be: a8:fd:38:34:00:54:58:39:3d:d2:2e:72:f5:5b:1c:db:8a:a3: 59:0b:0d:ac:f2:af:44:da:3c:75:c6:5b:bd:06:f4:14:96:a4: 37:f7:69:8b:fe:fa:18:b6:42:40:79:1a:38:82:b0:2b:08:e4: a7:79:dc:1a:e3:d2:91:c1:d8:2c:4b:5c:a4:fc:fe:06:6d:5e: 2d:37:34:69:f0:f5:5f:37:09:d7:ae:1e:ea:a7:90:c5:be:1e: 51:fb:52:69:80:92:ac:c8:2c:ef:1b:17:d0:f7:ea:1a:7c:bb: b6:18:fb:b8:bb:9b:cf:3a:66:a8:6a:cc:bf:75:68:fb:19:14: 73:01:0d:51:67:19:f6:d4:49:54:c3:0c:d5:1a:94:ff:95:af: ff:e2:73:aa:e2:4e:7c:d3:35:89:67:b5:03:d1:8a:86:41:b9: 17:fa:c0:5f:e8:58:8c:71:3f:2b:35:e5:c4:12:49:83:4b:ec: 05:87:8b:96:e2:78:19:7b:04:75:f6:2c:b8:6f:46:1a:f0:91: 4a:60:13:28:7b:84:d4:96:1b:d1:d7:ac:17:b4:0e:8b:0e:4d: 4d:18:1f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnrLgQ5YQ+CeJJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0NmQ5NDEtNjgzMS00ZjBiLWI2ZjItY2I3ZDU3M2Nh Y2YyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MjAxYjEzYjUtNzkzZS00YzJkLTkxYmYtMWUzNDYwYzFjZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNrcUlwiGlbgtOBoQ2VvAvbqrw5D+Ty0mG6l 98F3HOHI0twdk0d3PJAMqgdiDJCi1IHwH82kuRggpSPAo+s7n1+B9OwXV8THDaab 2WOS4ZoPZQ1ik6Gqw7+ralSJVQ2ZxchuLFyr32uDmKv1IhpvrPwsZ++CR1CL2eir iXiJX06t0TsxPvuJbvbf+iQXr4/rDHNcqyDmVoh7sVQeyiQivDe77pwfjpZ0LNUZ VUFndjSQJZReVhv+r+zMEtXt2OXz8MmgawQZh2X2IjXVM5B8J08diCHDaHpCLDui KzkFnX28beGk59ShHP9c2Ho/kWRQYDYoOH/QcYikQqJnoMYjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5g4jI4rkbc7dbYrJsPJuDIptbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDQ2 ZDk0MS02ODMxLTRmMGItYjZmMi1jYjdkNTczY2FjZjIvNTc2MjExZWMtZDA0Mi0z MmM5LTk5NWQtMTM4NWEwZDFlYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ0NmQ5NDEtNjgzMS00ZjBiLWI2 ZjItY2I3ZDU3M2NhY2YyLzRkNDZkOTQxLTY4MzEtNGYwYi1iNmYyLWNiN2Q1NzNj YWNmMi5jcmwwHwYDVR0jBBgwFoAUwkqclcQND6hoMIz2mv3abLNIgZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDQ2ZDk0MS02ODMxLTRmMGItYjZmMi1jYjdk NTczY2FjZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6BIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtQqNEh8g+lDtUOZAtWs0feKtENUwLObaPSydfSGf1CatEuvqj9ODQA VFg5PdIucvVbHNuKo1kLDazyr0TaPHXGW70G9BSWpDf3aYv++hi2QkB5GjiCsCsI 5Kd53Brj0pHB2CxLXKT8/gZtXi03NGnw9V83CdeuHuqnkMW+HlH7UmmAkqzILO8b F9D36hp8u7YY+7i7m886ZqhqzL91aPsZFHMBDVFnGfbUSVTDDNUalP+Vr//ic6ri TnzTNYlntQPRioZBuRf6wF/oWIxxPys15cQSSYNL7AWHi5bieBl7BHX2LLhvRhrw kUpgEyh7hNSWG9HXrBe0DosOTU0YH2U= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:06 2025 by rpki-client