$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/131661e4-3aef-3b43-b303-e6e0f47e7930.roa File: 131661e4-3aef-3b43-b303-e6e0f47e7930.roa (raw, json) Hash identifier: 77D0kYQGFCQP0vSp6udLDlhp+MNmKm0d/i9Fp0QSRfY= Subject key identifier: A0:96:50:09:DE:ED:1C:93:E5:D9:13:2A:01:5B:46:C3:40:2D:16:65 Certificate issuer: /CN=75c2d703-b68a-47d9-8657-d65247155419 Certificate serial: 010D0C9F432858497E7E624FBCCFEBA22EA0CEA0 Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/131661e4-3aef-3b43-b303-e6e0f47e7930.roa Signing time: Fri 11 Apr 2025 20:20:19 +0000 ROA not before: Fri 11 Apr 2025 20:20:19 +0000 ROA not after: Thu 10 Jul 2025 20:20:19 +0000 asID: 266777 IP address blocks: 23.175.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:7e:62:4f:bc:cf:eb:a2:2e:a0:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419 Validity Not Before: Apr 11 20:20:19 2025 GMT Not After : Jul 10 20:20:19 2025 GMT Subject: CN=82d53ee8-6582-498a-8d8f-e64ab88be84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:38:16:27:36:d1:ee:bc:5a:c0:ff:52:6f: 6a:bc:2c:b6:6b:11:30:c7:1c:ea:f6:71:63:2f:e9: 6d:16:19:50:33:52:60:79:18:dc:31:ff:38:5d:e2: 31:cd:1d:ea:24:e3:bd:4c:32:7e:99:a9:14:32:02: eb:60:a4:02:9a:9c:c3:72:06:fa:31:7b:ce:11:65: 0a:8b:3c:2b:ad:70:77:9a:e4:ba:f0:29:86:a6:a1: 87:1c:8c:ed:5a:e8:7a:c4:9c:ba:18:a9:63:9d:47: 30:f8:28:59:95:b3:68:4f:c9:a5:33:ff:6a:81:cc: 45:77:31:10:b0:39:0d:69:5a:f0:4e:e7:5c:73:11: 47:29:cb:6f:e0:01:1c:98:60:9e:fc:e1:c5:de:de: 9a:82:17:b2:c4:ec:a1:0e:79:89:4d:03:1c:a6:b8: b0:80:c0:63:3f:f4:66:6c:b8:0e:a4:7c:aa:b8:c9: 63:57:be:d8:44:85:f2:5a:8f:40:f2:3e:0f:85:6b: 16:e8:12:00:a9:20:6e:3d:32:ff:88:52:49:ee:c6: 35:15:0b:53:e8:78:c5:5f:2d:16:2d:f2:71:1c:62: ef:d3:71:44:ea:cf:10:e1:7b:19:5c:82:0a:48:a9: 5f:26:5f:4a:72:de:f4:a1:50:c6:48:42:97:4b:26: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:96:50:09:DE:ED:1C:93:E5:D9:13:2A:01:5B:46:C3:40:2D:16:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/131661e4-3aef-3b43-b303-e6e0f47e7930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl X509v3 Authority Key Identifier: keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer sbgp-ipAddrBlock: critical IPv4: 23.175.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9f:eb:d4:8a:d2:a5:ce:1b:48:ec:d1:58:25:7e:3f:fd:d3: e7:d5:7e:c3:bb:cd:91:02:7c:48:ef:08:83:6d:bc:19:d9:da: 17:48:fc:69:9d:9c:fb:67:19:36:de:59:82:9a:5d:6e:af:af: d1:5d:81:b4:8a:f5:d5:f5:d0:ce:ae:a5:a2:5f:2e:a2:8f:29: 0f:4d:ac:aa:95:e4:16:f6:ed:2b:fd:53:2d:31:25:17:41:27: 80:78:75:2c:f7:0d:02:15:29:50:9f:d2:00:5a:60:81:87:56: 8d:9b:7b:2d:47:58:0d:5f:33:4a:e1:d8:82:65:77:86:0b:38: 23:b4:ac:29:7e:5f:f7:b9:2d:45:f2:56:0e:a2:72:b3:30:e7: 9e:92:ef:50:ff:66:7f:41:44:85:ac:c2:fd:c6:45:99:04:ec: 74:da:7b:14:8b:85:37:21:e2:f7:a9:9e:4b:7e:d0:3f:a4:b1: f8:4f:8a:1b:b8:3c:9c:6b:0c:b5:1c:1c:6a:7b:1a:91:8f:2b: fd:a5:7d:a8:db:45:94:c7:af:b5:99:9e:ac:5f:23:83:d4:7f: 54:86:06:c3:66:09:44:35:da:f1:a0:4c:9c:6c:5f:87:4f:c2: 9a:be:7b:e9:88:a8:95:b7:8a:24:5e:76:44:43:b3:50:6d:8f: 22:ea:fc:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl+fmJPvM/roi6gzqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVjMmQ3MDMtYjY4YS00N2Q5LTg2NTctZDY1MjQ3MTU1 NDE5MB4XDTI1MDQxMTIwMjAxOVoXDTI1MDcxMDIwMjAxOVowLzEtMCsGA1UEAxMk ODJkNTNlZTgtNjU4Mi00OThhLThkOGYtZTY0YWI4OGJlODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqM4Fic20e68WsD/Um9qvCy2axEwxxzq9nFj L+ltFhlQM1JgeRjcMf84XeIxzR3qJOO9TDJ+makUMgLrYKQCmpzDcgb6MXvOEWUK izwrrXB3muS68CmGpqGHHIztWuh6xJy6GKljnUcw+ChZlbNoT8mlM/9qgcxFdzEQ sDkNaVrwTudccxFHKctv4AEcmGCe/OHF3t6agheyxOyhDnmJTQMcpriwgMBjP/Rm bLgOpHyquMljV77YRIXyWo9A8j4PhWsW6BIAqSBuPTL/iFJJ7sY1FQtT6HjFXy0W LfJxHGLv03FE6s8Q4XsZXIIKSKlfJl9Kct70oVDGSEKXSyYgewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCWUAne7RyT5dkTKgFbRsNALRZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83NWMy ZDcwMy1iNjhhLTQ3ZDktODY1Ny1kNjUyNDcxNTU0MTkvMTMxNjYxZTQtM2FlZi0z YjQzLWIzMDMtZTZlMGY0N2U3OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzVjMmQ3MDMtYjY4YS00N2Q5LTg2 NTctZDY1MjQ3MTU1NDE5Lzc1YzJkNzAzLWI2OGEtNDdkOS04NjU3LWQ2NTI0NzE1 NTQxOS5jcmwwHwYDVR0jBBgwFoAUBp6HUUBycAS0WuwnVZI9zxaiKAowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83NWMyZDcwMy1iNjhhLTQ3ZDktODY1Ny1kNjUy NDcxNTU0MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF68oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACif69SK0qXOG0js0Vglfj/90+fVfsO7zZECfEjvCINtvBnZ2hdI/Gmd nPtnGTbeWYKaXW6vr9FdgbSK9dX10M6upaJfLqKPKQ9NrKqV5Bb27Sv9Uy0xJRdB J4B4dSz3DQIVKVCf0gBaYIGHVo2bey1HWA1fM0rh2IJld4YLOCO0rCl+X/e5LUXy Vg6icrMw556S71D/Zn9BRIWswv3GRZkE7HTaexSLhTch4vepnkt+0D+ksfhPihu4 PJxrDLUcHGp7GpGPK/2lfajbRZTHr7WZnqxfI4PUf1SGBsNmCUQ12vGgTJxsX4dP wpq+e+mIqJW3iiRedkRDs1BtjyLq/GQ= -----END CERTIFICATE-----Generated at Mon Apr 28 11:16:48 2025 by rpki-client