$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa File: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (raw, json) Hash identifier: ytolkGAKjltl/yim1aWb90YB+sw0sbzb8GLsCPs3uZQ= Subject key identifier: DC:C2:FD:E6:20:A0:4F:DD:66:35:88:E5:A2:6E:88:62:76:57:B6:09 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F43285849ED4FD449F4C6D4E2BDEF0520 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 32526 IP address blocks: 23.160.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d4:49:f4:c6:d4:e2:bd:ef:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=ebab5575-0b55-46f7-92b1-babaed309e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e2:34:bc:a6:d8:95:b0:6b:f6:26:e4:a8:11: 9a:a9:a7:10:fa:38:92:34:b1:f3:6d:72:6c:1e:b1: 53:91:25:02:4a:b7:c0:06:89:48:0b:9d:1b:c1:e8: 9f:9f:15:76:a9:f5:94:14:cc:d4:84:b2:9a:86:2f: 93:fe:50:e2:ee:21:f2:8e:24:ae:ca:a9:c4:32:aa: fd:6a:c0:dd:13:f3:06:66:73:15:99:42:c6:36:00: b1:ad:cd:2d:32:38:6c:a1:16:bb:cb:05:a7:f8:08: 6d:0c:3a:39:32:f6:f3:8d:d4:b9:03:00:fc:b2:45: 40:a1:b2:57:a9:a6:4f:d5:77:81:4c:df:cc:fb:f8: a8:1d:dd:e1:d3:94:f4:27:9e:c6:7c:17:d7:14:32: fb:22:a5:6c:a0:72:e4:57:3e:fe:e0:9a:a3:55:75: 97:a1:c0:08:7b:78:ac:67:23:7a:f2:4d:04:61:a8: 7f:16:c2:a6:f9:0e:f3:a7:52:3a:5e:a0:82:4b:20: da:00:48:8f:65:5a:9c:a4:0d:57:68:55:84:eb:63: 3b:49:0d:5a:b7:df:c4:3e:3d:33:7e:8e:39:fe:08: 15:32:9b:77:27:e3:d2:eb:cc:31:63:2e:f0:84:59: 74:90:4b:65:5c:cb:4c:b7:cc:1b:f7:71:45:ff:2c: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:FD:E6:20:A0:4F:DD:66:35:88:E5:A2:6E:88:62:76:57:B6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: 23.160.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:45:cd:07:71:9c:d9:49:6d:f7:5e:4d:12:94:04:c7:c8:b6: da:82:05:a7:05:a2:ed:9e:54:f5:01:df:3a:16:b2:7e:13:69: 61:88:6f:07:48:e0:87:b1:d4:59:db:f1:aa:d6:17:c9:68:4a: b1:af:22:78:ad:58:f6:4e:f7:bd:8a:03:73:71:51:9b:a4:73: e6:4c:fd:ed:df:74:bb:c6:6f:2c:4a:28:f0:a9:af:48:37:65: 3a:39:22:56:8d:e2:26:c9:b9:5e:a8:a8:7a:0b:23:d6:b9:26: 32:61:fc:f1:b0:c9:6b:88:db:43:9a:47:d3:ab:28:6b:6d:be: d0:14:3f:7c:6e:93:55:e8:3d:b6:58:fa:9a:ae:61:0a:a7:21: 2b:66:11:dd:d9:0a:ab:b0:7f:ff:61:0b:c7:e3:02:59:fc:4a: 8e:45:8e:b1:07:11:2a:7f:af:f5:85:45:db:3d:2b:5a:44:53: d0:de:59:f7:dd:14:0c:ad:75:af:dd:5c:28:cf:13:40:68:38: 2e:29:0f:87:05:b1:ec:57:52:45:9f:c0:99:7c:32:75:43:fc: 6a:d1:f4:68:ee:ec:f4:6a:d4:6e:87:86:60:75:91:0a:d1:d5: 0f:7c:08:6c:81:b1:f9:01:f2:cf:b7:e0:13:09:4b:4a:e7:27: cb:0c:f5:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9RJ9MbU4r3vBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZWJhYjU1NzUtMGI1NS00NmY3LTkyYjEtYmFiYWVkMzA5ZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOI0vKbYlbBr9ibkqBGaqacQ+jiSNLHzbXJs HrFTkSUCSrfABolIC50bweifnxV2qfWUFMzUhLKahi+T/lDi7iHyjiSuyqnEMqr9 asDdE/MGZnMVmULGNgCxrc0tMjhsoRa7ywWn+AhtDDo5MvbzjdS5AwD8skVAobJX qaZP1XeBTN/M+/ioHd3h05T0J57GfBfXFDL7IqVsoHLkVz7+4JqjVXWXocAIe3is ZyN68k0EYah/FsKm+Q7zp1I6XqCCSyDaAEiPZVqcpA1XaFWE62M7SQ1at9/EPj0z fo45/ggVMpt3J+PS68wxYy7whFl0kEtlXMtMt8wb93FF/yzcPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzC/eYgoE/dZjWI5aJuiGJ2V7YJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvMTY2NGI1MDktNWQ4Yy0z MGFkLTg2OWUtZTllMmJiMTU5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1FzQdxnNlJbfdeTRKUBMfIttqCBacFou2eVPUB3zoWsn4TaWGIbwdI 4Iex1Fnb8arWF8loSrGvInitWPZO972KA3NxUZukc+ZM/e3fdLvGbyxKKPCpr0g3 ZTo5IlaN4ibJuV6oqHoLI9a5JjJh/PGwyWuI20OaR9OrKGttvtAUP3xuk1XoPbZY +pquYQqnIStmEd3ZCquwf/9hC8fjAln8So5FjrEHESp/r/WFRds9K1pEU9DeWffd FAytda/dXCjPE0BoOC4pD4cFsexXUkWfwJl8MnVD/GrR9Gju7PRq1G6HhmB1kQrR 1Q98CGyBsfkB8s+34BMJS0rnJ8sM9Ts= -----END CERTIFICATE-----Generated at Mon Jun 16 20:54:48 2025 by rpki-client