$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa File: 9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa (raw, json) Hash identifier: gXk0Uql0x1T2u5lD4rckov7t/btuYVPjGd/ATuWic8k= Subject key identifier: B2:5A:45:62:DC:A3:E1:E9:D3:8E:F3:D6:13:DB:9A:CB:43:DC:6C:93 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584971142D5A0F88A74AE76C1980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 23473 IP address blocks: 216.171.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:2d:5a:0f:88:a7:4a:e7:6c:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=a094d3e0-7ae0-4212-86ab-37641891cd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:c6:e5:f9:d4:3c:53:92:fc:ed:1e:ed:02: 07:bb:6d:05:11:fe:fc:48:d5:be:d7:d5:3e:48:e6: 92:0b:db:5d:6f:77:86:d8:4f:d7:17:06:ef:dd:c0: 33:8b:1b:b8:80:90:d6:4a:9b:26:a4:c6:40:b6:fb: 6a:73:0e:08:10:3e:6f:01:8f:be:12:1b:3b:6f:3d: 37:5d:17:ae:67:51:5c:30:da:4b:39:33:6d:73:0e: 5a:0d:df:8c:45:fd:32:0e:62:7f:e6:02:f3:47:c1: 51:4e:e0:e9:8f:fc:58:b3:d1:42:e2:4e:0e:27:65: 92:c9:9b:dc:3f:72:94:33:19:3f:da:ee:17:f9:e9: 60:f8:c8:69:29:69:5c:52:09:2f:9a:d9:ac:fe:1e: e8:c7:74:6a:74:39:83:bf:ad:d0:42:9c:e1:a5:0c: db:d0:b6:ee:a1:54:87:eb:04:ad:b3:a7:6c:a5:f7: 04:6d:01:58:d6:4f:47:f1:23:fb:ea:8e:36:34:aa: f7:0e:77:48:50:10:28:bf:ab:52:18:08:bf:17:a2: 21:eb:75:7b:0d:b3:01:d4:f5:b6:2e:44:2a:b3:fd: 98:e0:eb:20:c0:50:c2:72:78:ac:7f:08:47:84:8d: 36:f9:f8:11:1b:ed:e2:0c:0f:4e:50:64:3b:cd:ce: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5A:45:62:DC:A3:E1:E9:D3:8E:F3:D6:13:DB:9A:CB:43:DC:6C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:45:77:f8:7d:79:82:cf:13:b0:a3:15:81:36:b8:7b:f7:84: e3:9c:75:ea:85:3a:91:f7:24:9b:6e:da:ab:40:ca:d5:0f:aa: 6e:b3:d3:b0:ab:5d:6f:1a:5f:ed:34:50:ce:2c:6b:0e:17:6a: ef:20:60:10:58:35:ca:ea:9a:46:c2:ff:ab:0c:53:5b:03:de: 77:e6:01:95:44:a8:ab:64:15:b8:73:59:1b:e4:60:91:f2:11: 10:38:5d:69:ce:77:3b:78:07:3d:85:ac:23:e5:c5:33:86:c1: 19:42:26:f8:70:9e:09:38:c4:76:28:18:31:00:79:7b:b1:e4: a4:c8:b5:17:5c:8e:18:01:fd:77:8e:84:f0:7b:56:52:44:07: 99:58:ed:e8:62:63:92:d9:65:40:4a:b1:f8:b1:2c:83:1b:fd: 55:35:b3:a5:38:c1:f5:19:1a:c3:74:2a:3c:dc:de:0b:12:68: 6d:42:b9:29:e0:85:b4:86:41:3e:1e:28:2d:b5:ef:5b:29:54: c6:68:a8:8a:1c:f3:e1:a2:b1:82:8f:b3:60:72:1b:56:b4:2d: 87:72:b1:f2:44:69:2d:1c:94:8d:37:d2:04:21:95:9d:a3:53: dd:eb:cb:3f:69:9e:9b:cc:f9:6f:a2:e6:9c:4b:77:2c:cf:31: be:1c:b9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFC1aD4inSudsGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk YTA5NGQzZTAtN2FlMC00MjEyLTg2YWItMzc2NDE4OTFjZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYfG5fnUPFOS/O0e7QIHu20FEf78SNW+19U+ SOaSC9tdb3eG2E/XFwbv3cAzixu4gJDWSpsmpMZAtvtqcw4IED5vAY++Ehs7bz03 XReuZ1FcMNpLOTNtcw5aDd+MRf0yDmJ/5gLzR8FRTuDpj/xYs9FC4k4OJ2WSyZvc P3KUMxk/2u4X+elg+MhpKWlcUgkvmtms/h7ox3RqdDmDv63QQpzhpQzb0LbuoVSH 6wSts6dspfcEbQFY1k9H8SP76o42NKr3DndIUBAov6tSGAi/F6Ih63V7DbMB1PW2 LkQqs/2Y4OsgwFDCcnisfwhHhI02+fgRG+3iDA9OUGQ7zc7EWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJaRWLco+Hp047z1hPbmstD3GyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTA0NGY4MTgtMDgxMC0z ZjZmLTg3ZmEtY2U5ZDZiOGIwNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9Fd/h9eYLPE7CjFYE2uHv3hOOcdeqFOpH3JJtu2qtAytUPqm6z07Cr XW8aX+00UM4saw4Xau8gYBBYNcrqmkbC/6sMU1sD3nfmAZVEqKtkFbhzWRvkYJHy ERA4XWnOdzt4Bz2FrCPlxTOGwRlCJvhwngk4xHYoGDEAeXux5KTItRdcjhgB/XeO hPB7VlJEB5lY7ehiY5LZZUBKsfixLIMb/VU1s6U4wfUZGsN0Kjzc3gsSaG1CuSng hbSGQT4eKC2171spVMZoqIoc8+GisYKPs2ByG1a0LYdysfJEaS0clI030gQhlZ2j U93ryz9pnpvM+W+i5pxLdyzPMb4cuTY= -----END CERTIFICATE-----Generated at Mon Apr 28 01:14:56 2025 by rpki-client