$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa File: 4701df24-d7bf-33a8-aa62-b91271027365.roa (raw, json) Hash identifier: QZsX2djNYQZXToOSb2/5tMQl00u8voIAzZ5LtVdT7GU= Subject key identifier: 5C:EB:52:4B:FE:8A:0F:26:B6:33:28:E8:F0:B1:48:1B:A0:3D:8B:31 Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F4328584A093A96BA6D7178E80B5DA500 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 57974 IP address blocks: 23.153.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:96:ba:6d:71:78:e8:0b:5d:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=0e76bbf3-0fe0-4544-998f-800f66b784fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ba:66:4f:91:72:23:2b:04:40:e4:bf:5d:cc: 2f:ea:f1:b4:2d:ed:65:d1:1e:45:3f:f8:0a:e7:35: 9f:63:c1:2c:97:40:79:50:b1:87:e7:1a:af:71:56: 18:14:76:04:1a:31:f4:01:e9:2a:e7:cf:3d:79:75: ba:6c:d2:75:d5:ad:e0:51:2a:50:6a:bb:df:f5:92: 2b:b3:6d:20:86:77:ac:9f:38:81:61:d7:3b:f0:30: f3:ee:39:56:ae:b3:a8:d4:5d:ba:74:ee:8a:6b:d7: f8:f7:34:e9:12:d2:60:65:a8:18:82:3f:ef:20:55: 0e:ea:ca:49:53:c5:ee:dd:91:24:69:f4:52:81:b1: 5a:2c:ac:46:5a:be:da:8c:9a:f1:f2:dc:76:b8:c2: f4:d0:12:19:05:69:58:65:cb:01:ff:cd:59:b0:a5: 2e:b9:96:c8:43:6f:1c:8f:fb:f1:2c:44:4e:fe:84: a0:b4:0e:5d:f7:5b:7a:7b:15:83:2a:d2:2a:84:72: d9:73:a5:c9:83:36:f7:dd:92:16:58:65:df:39:61: 3b:d2:45:e7:5e:c7:ac:44:8a:40:58:7e:e7:da:1c: 9c:ea:f9:32:1c:8a:37:c7:38:9f:ea:5a:f3:71:18: 3f:ff:44:82:de:56:2f:87:79:87:5f:fc:72:f6:58: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:52:4B:FE:8A:0F:26:B6:33:28:E8:F0:B1:48:1B:A0:3D:8B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv4: 23.153.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b4:14:e1:e6:a8:02:56:89:e8:d5:81:bb:c8:c1:76:f3:c6: b6:f9:5c:10:84:90:23:50:ce:2f:91:86:27:e1:76:a0:3a:97: 88:4a:db:fa:01:93:10:7c:5f:aa:98:ed:e7:9b:d8:97:ed:c2: 49:1c:69:ff:06:06:ed:db:3e:49:04:2d:7c:41:f6:95:ee:2a: 45:da:2c:b2:3c:8b:ee:86:09:b4:c4:c2:1b:37:b2:ab:65:bb: fd:6e:62:9e:77:26:f0:04:42:95:c3:41:c1:48:68:84:b0:28: 06:0f:ce:8b:07:d7:61:a9:ec:b3:ca:74:45:d2:33:e5:59:a8: 93:34:0c:ab:eb:22:b9:c3:93:88:39:16:85:b1:74:45:00:bd: cf:46:a7:37:28:19:c2:50:d9:9b:bc:e1:0c:5f:e3:1d:cc:3b: 74:91:64:dc:88:cc:8e:13:6d:2e:33:9c:27:bd:0c:25:87:32: 8e:72:50:04:82:d2:44:73:77:64:d2:05:0a:c7:f2:7a:bc:94: 39:3c:34:a7:f9:16:f4:77:3a:73:fa:4f:96:12:17:e1:0f:31: 84:b5:dd:cd:b0:cc:c6:f4:e7:00:f8:af:71:be:32:7b:a0:cd: 6a:72:56:0f:f1:f0:53:fa:c9:cd:a4:6a:b8:53:cc:54:58:29: 5b:47:25:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOpa6bXF46AtdpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk MGU3NmJiZjMtMGZlMC00NTQ0LTk5OGYtODAwZjY2Yjc4NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrpmT5FyIysEQOS/Xcwv6vG0Le1l0R5FP/gK 5zWfY8Esl0B5ULGH5xqvcVYYFHYEGjH0Aekq5889eXW6bNJ11a3gUSpQarvf9ZIr s20ghnesnziBYdc78DDz7jlWrrOo1F26dO6Ka9f49zTpEtJgZagYgj/vIFUO6spJ U8Xu3ZEkafRSgbFaLKxGWr7ajJrx8tx2uML00BIZBWlYZcsB/81ZsKUuuZbIQ28c j/vxLERO/oSgtA5d91t6exWDKtIqhHLZc6XJgzb33ZIWWGXfOWE70kXnXsesRIpA WH7n2hyc6vkyHIo3xzif6lrzcRg//0SC3lYvh3mHX/xy9lgm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzrUkv+ig8mtjMo6PCxSBugPYsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNDcwMWRmMjQtZDdiZi0z M2E4LWFhNjItYjkxMjcxMDI3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS0FOHmqAJWiejVgbvIwXbzxrb5XBCEkCNQzi+RhifhdqA6l4hK2/oB kxB8X6qY7eeb2Jftwkkcaf8GBu3bPkkELXxB9pXuKkXaLLI8i+6GCbTEwhs3sqtl u/1uYp53JvAEQpXDQcFIaISwKAYPzosH12Gp7LPKdEXSM+VZqJM0DKvrIrnDk4g5 FoWxdEUAvc9GpzcoGcJQ2Zu84Qxf4x3MO3SRZNyIzI4TbS4znCe9DCWHMo5yUASC 0kRzd2TSBQrH8nq8lDk8NKf5FvR3OnP6T5YSF+EPMYS13c2wzMb05wD4r3G+Mnug zWpyVg/x8FP6yc2karhTzFRYKVtHJZA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:41:14 2025 by rpki-client