$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa File: ec69835c-0929-34da-8360-1c7309443e7a.roa (raw, json) Hash identifier: 6FnwbKZpb5wBeCLc1RazeZ5iBjFF3aYctz1oW4tYWJo= Subject key identifier: 31:21:EF:8C:97:9E:65:C1:75:04:76:05:FB:37:FB:2F:8C:4D:8E:45 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F432858499294A2ACA8217296F58F6480 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 55134 IP address blocks: 23.173.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a2:ac:a8:21:72:96:f5:8f:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=0b134612-999a-41c4-a082-56216d5ff025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:d6:41:fb:2e:dd:ff:36:a8:40:1c:76:48: 05:ef:87:f3:9d:66:cf:1a:99:a8:f5:1d:0e:91:56: 83:0f:61:ac:1e:48:f9:9e:1d:a5:1a:9b:4e:1a:eb: 9e:3d:a3:36:31:d9:16:8b:82:b9:32:56:29:fd:99: 70:7f:43:6b:50:49:f4:e8:25:56:12:17:df:c9:88: d7:4d:77:46:59:93:67:fd:66:c6:e4:22:ce:48:e3: 2c:80:a1:6b:ba:7d:46:6f:b9:45:88:74:3d:b8:b7: 94:3d:02:4b:d6:da:6f:cf:c6:14:4c:3b:e6:e9:62: 05:fb:a7:1b:37:c8:0b:2f:2a:8a:bf:2c:c3:3d:ce: 16:c4:73:3b:ea:a9:24:02:d7:0c:eb:49:3f:93:39: e3:15:f0:df:4a:cd:e8:c7:da:cc:64:b1:97:b3:25: 3e:f7:4a:8d:58:74:91:ab:e2:bc:25:fc:88:bc:5e: da:df:2f:86:e0:ef:f3:c9:ce:30:6e:6d:80:67:4b: a6:66:66:f2:b9:b6:5a:66:da:be:cb:ae:6b:37:39: 4f:f1:d6:80:5c:75:80:26:98:d6:7e:57:10:b2:7f: f1:c8:ad:ac:61:82:0e:cb:6e:db:ef:36:c8:aa:ae: 1e:d3:19:99:f2:f8:f2:9b:51:85:1e:e4:5a:f4:88: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:21:EF:8C:97:9E:65:C1:75:04:76:05:FB:37:FB:2F:8C:4D:8E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:53:c0:21:9b:4b:b6:e1:dd:90:11:ce:62:6d:60:18:4f:f7: 29:22:db:64:af:3b:50:81:ae:24:08:6c:66:b7:a8:11:90:33: dd:5c:1c:af:4a:e2:0b:57:0e:8c:f3:df:e1:89:6a:f6:51:ee: b7:f3:0a:b7:e1:3d:80:ee:33:40:c0:2c:9c:e2:d1:73:00:f9: 2f:20:76:d5:d0:6e:7b:b0:d9:90:40:aa:46:60:53:87:72:bb: 06:1d:d9:05:55:9b:a7:4b:57:73:b9:cf:15:3b:8b:74:29:c8: eb:27:2a:6d:2e:05:95:8f:4d:4c:28:25:c6:ea:b2:eb:4e:09: b6:4f:28:e7:34:a5:dd:5a:29:a5:81:17:92:4d:b8:42:6b:18: e0:57:ab:45:89:7a:30:d8:50:93:55:72:e1:44:52:83:37:99: 93:3d:bb:b6:c7:fb:eb:44:38:59:55:17:49:37:50:cd:c4:95: ac:fa:a2:3c:2b:5e:16:50:56:04:1a:e1:41:fa:44:07:38:b9: 73:fb:88:fd:05:3a:9a:28:f7:d0:13:87:c9:10:de:7a:22:a1: f9:c5:46:47:8d:be:61:23:c5:e0:2c:50:36:0f:2f:da:c0:79: 06:1d:20:76:6f:75:db:1b:73:2d:31:91:b8:df:28:dd:05:e7: ef:e6:45:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKKsqCFylvWPZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MGIxMzQ2MTItOTk5YS00MWM0LWEwODItNTYyMTZkNWZmMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvfWQfsu3f82qEAcdkgF74fznWbPGpmo9R0O kVaDD2GsHkj5nh2lGptOGuuePaM2MdkWi4K5MlYp/Zlwf0NrUEn06CVWEhffyYjX TXdGWZNn/WbG5CLOSOMsgKFrun1Gb7lFiHQ9uLeUPQJL1tpvz8YUTDvm6WIF+6cb N8gLLyqKvyzDPc4WxHM76qkkAtcM60k/kznjFfDfSs3ox9rMZLGXsyU+90qNWHSR q+K8JfyIvF7a3y+G4O/zyc4wbm2AZ0umZmbyubZaZtq+y65rNzlP8daAXHWAJpjW flcQsn/xyK2sYYIOy27b7zbIqq4e0xmZ8vjym1GFHuRa9IhIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEh74yXnmXBdQR2Bfs3+y+MTY5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvZWM2OTgzNWMtMDkyOS0z NGRhLTgzNjAtMWM3MzA5NDQzZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdTwCGbS7bh3ZARzmJtYBhP9yki22SvO1CBriQIbGa3qBGQM91cHK9K 4gtXDozz3+GJavZR7rfzCrfhPYDuM0DALJzi0XMA+S8gdtXQbnuw2ZBAqkZgU4dy uwYd2QVVm6dLV3O5zxU7i3QpyOsnKm0uBZWPTUwoJcbqsutOCbZPKOc0pd1aKaWB F5JNuEJrGOBXq0WJejDYUJNVcuFEUoM3mZM9u7bH++tEOFlVF0k3UM3Elaz6ojwr XhZQVgQa4UH6RAc4uXP7iP0FOpoo99ATh8kQ3noiofnFRkeNvmEjxeAsUDYPL9rA eQYdIHZvddsbcy0xkbjfKN0F5+/mRds= -----END CERTIFICATE-----Generated at Mon Apr 28 00:57:23 2025 by rpki-client