$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa File: 525cb8cc-a19e-362c-834b-664f1ba9b526.roa (raw, json) Hash identifier: BlqKZmUv92MX2LKbNdR9/4NhEfeShKnlp+Us/gLC9fo= Subject key identifier: DC:F0:0C:1E:D2:56:B1:37:0C:C7:3E:5A:5B:C7:C4:18:EB:C9:41:7E Certificate issuer: /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Certificate serial: 010D0C9F432858499C59E90FDBCBABBC71F33700 Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 401489 IP address blocks: 23.191.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e9:0f:db:cb:ab:bc:71:f3:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=27efd8ab-890a-48a8-9e2c-b0e86fea433a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:34:a1:82:be:7a:19:50:67:22:87:c2:2b: c1:07:e9:c7:eb:5f:0b:1d:7d:2d:66:92:73:73:9d: 9b:1f:89:78:2f:e6:f3:3b:7b:5c:02:54:b7:ec:49: b5:e6:0d:31:e7:94:cc:f6:d9:22:fb:fb:33:47:b8: 57:d2:40:6d:92:0f:89:6d:cb:18:1d:bb:03:56:87: a4:4d:fe:1b:00:10:b2:c0:84:40:7d:f3:11:8a:71: 5d:d8:7c:d6:1e:ca:1d:70:2e:08:76:03:bd:26:f8: fe:fa:55:db:fe:83:4a:53:8a:88:3d:41:77:ff:ad: 88:48:e7:da:cd:64:20:da:73:8e:6e:f4:b1:ae:e1: 78:c6:4a:6c:d0:e3:33:c0:81:9d:97:1e:55:0e:4c: 43:97:b1:52:55:6d:83:58:15:33:78:c8:b1:53:be: fe:79:1a:7d:db:83:74:99:dc:9b:ed:08:30:d9:36: 5c:80:8b:0e:0c:0b:d8:0c:73:bc:b8:7e:43:bb:c7: 4d:4c:9c:5c:fc:52:2a:85:60:c3:e0:b5:92:d2:31: 76:a0:9b:49:7c:37:c8:5f:54:23:82:33:62:88:9c: eb:90:0b:cd:d4:59:1e:c7:b9:28:d0:e2:9d:2b:4d: 04:ef:bf:73:fd:ee:89:e3:cf:38:01:68:f3:0b:c6: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F0:0C:1E:D2:56:B1:37:0C:C7:3E:5A:5B:C7:C4:18:EB:C9:41:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl X509v3 Authority Key Identifier: keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer sbgp-ipAddrBlock: critical IPv4: 23.191.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:91:dc:1f:e5:8f:88:e6:6c:d2:87:13:58:3e:07:f4:5d:0d: 0a:e9:a8:75:89:74:7a:27:c7:bf:2f:cf:01:35:9b:06:76:b3: 15:b3:12:92:21:fe:57:17:bb:ca:b7:70:ee:4f:53:d4:69:80: b0:8f:a4:64:7f:85:e2:d3:17:aa:1f:0a:c9:32:b3:bf:6d:82: 5e:bb:46:e9:90:b4:24:89:d1:74:74:89:ee:38:5a:2b:e6:a0: 90:31:86:f4:9f:d4:fe:8b:65:ff:48:82:3e:a4:8a:0b:b6:97: 71:b4:9d:a7:8e:db:39:a3:0a:4e:67:94:23:ee:f0:04:ec:08: cc:ce:ee:8d:fa:5f:bc:87:aa:6c:c1:de:74:fe:48:fa:5d:8d: 0b:30:6a:fe:69:35:96:a8:6d:60:a4:c2:79:0e:ec:68:be:0b: 98:b8:cc:ac:db:0a:0b:d7:04:2e:19:00:23:b9:a2:c6:f0:72: 63:5c:1d:d3:56:38:81:69:45:5f:d2:ce:d4:5f:8f:87:25:9e: 69:fc:c0:f6:ee:33:57:c2:8f:55:1c:3c:0c:2e:f0:92:4f:ec: 6d:66:9b:78:e4:06:23:ce:0c:9b:a9:e5:1e:7e:21:9a:32:04: 76:c2:d8:c6:f9:4f:27:6e:4e:36:c6:27:5c:2e:dd:dd:95:6a: 0c:ba:a7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWekP28urvHHzNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5ODYtOGNkOWQwODEx YjE4MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MjdlZmQ4YWItODkwYS00OGE4LTllMmMtYjBlODZmZWE0MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+o0oYK+ehlQZyKHwivBB+nH618LHX0tZpJz c52bH4l4L+bzO3tcAlS37Em15g0x55TM9tki+/szR7hX0kBtkg+JbcsYHbsDVoek Tf4bABCywIRAffMRinFd2HzWHsodcC4IdgO9Jvj++lXb/oNKU4qIPUF3/62ISOfa zWQg2nOObvSxruF4xkps0OMzwIGdlx5VDkxDl7FSVW2DWBUzeMixU77+eRp924N0 mdyb7Qgw2TZcgIsODAvYDHO8uH5Du8dNTJxc/FIqhWDD4LWS0jF2oJtJfDfIX1Qj gjNiiJzrkAvN1Fkex7ko0OKdK00E779z/e6J4884AWjzC8ZKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzwDB7SVrE3DMc+WlvHxBjryUF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0 MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5ZDA4MTFiMTgvNTI1Y2I4Y2MtYTE5ZS0z NjJjLTgzNGItNjY0ZjFiYTliNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5 ODYtOGNkOWQwODExYjE4L2RhOTQyYTJlLWEyOGUtNGRkNy04OTg2LThjZDlkMDgx MWIxOC5jcmwwHwYDVR0jBBgwFoAUjx/K5tPSLHj+6uRZ9KttEgf4C/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5 ZDA4MTFiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWR3B/lj4jmbNKHE1g+B/RdDQrpqHWJdHonx78vzwE1mwZ2sxWzEpIh /lcXu8q3cO5PU9RpgLCPpGR/heLTF6ofCskys79tgl67RumQtCSJ0XR0ie44Wivm oJAxhvSf1P6LZf9Igj6kigu2l3G0naeO2zmjCk5nlCPu8ATsCMzO7o36X7yHqmzB 3nT+SPpdjQswav5pNZaobWCkwnkO7Gi+C5i4zKzbCgvXBC4ZACO5osbwcmNcHdNW OIFpRV/SztRfj4clnmn8wPbuM1fCj1UcPAwu8JJP7G1mm3jkBiPODJup5R5+IZoy BHbC2Mb5TyduTjbGJ1wu3d2Vagy6p+Y= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:06 2025 by rpki-client