$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa File: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json) Hash identifier: gbnPqBsJ4sPtDcvkm3ZTfPjiBvCyKP3n7UCNOJVsm3A= Subject key identifier: B8:3A:FC:9D:50:2C:8B:0F:26:E4:B6:9F:17:62:4A:32:62:89:21:FA Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Certificate serial: 010D0C9F43285849DB2A2A8E8AC5E9EA86C87800 Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa Signing time: Thu 15 May 2025 01:00:47 +0000 ROA not before: Thu 15 May 2025 01:00:47 +0000 ROA not after: Wed 13 Aug 2025 01:00:47 +0000 asID: 20067 IP address blocks: 23.148.8.0/24 maxlen: 24 2602:811:c000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:2a:2a:8e:8a:c5:e9:ea:86:c8:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Validity Not Before: May 15 01:00:47 2025 GMT Not After : Aug 13 01:00:47 2025 GMT Subject: CN=59c0443d-84d4-42b0-bee9-c53d2c7934d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:68:1f:e8:53:ba:7a:2f:ef:96:d0:fc:33:5f: 37:5c:ea:e4:60:32:22:c6:66:d4:9b:f4:d0:77:9e: 11:62:f7:33:34:ef:ec:3f:3e:74:02:be:14:5d:a2: ff:14:58:68:5b:64:6b:e3:32:ad:b5:d6:cf:18:fe: ad:a4:9e:f4:c6:5c:d0:a9:8d:4d:4a:e0:a2:8d:c7: dd:98:6e:df:ac:ff:93:0f:0a:92:01:cc:d9:62:1b: 50:75:7d:64:b4:ab:cb:3b:32:dd:3a:73:7d:a6:47: 21:3c:3b:d0:3d:12:f4:16:b0:63:3d:07:4a:13:b5: 7d:73:a8:8e:64:54:13:b4:15:9f:0c:49:d8:92:91: be:3d:74:c0:54:a1:82:c6:2e:cc:c5:f3:d5:92:76: f8:61:c0:37:cb:2b:66:ea:04:06:7f:71:fd:a3:09: af:77:ee:d8:86:89:cd:ec:15:f7:a7:e8:df:95:5a: 00:e8:66:28:81:75:4f:66:96:cf:a1:44:75:48:18: 4c:66:47:95:5a:c5:07:43:08:d5:a2:59:20:97:00: 2c:d9:2c:cf:ed:ec:de:15:4b:5d:4d:22:9f:b3:10: 43:0c:71:11:20:53:50:36:4c:e1:5c:bc:e0:63:74: 95:f2:7b:75:41:05:d0:45:f7:e2:80:fc:5b:00:1a: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3A:FC:9D:50:2C:8B:0F:26:E4:B6:9F:17:62:4A:32:62:89:21:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl X509v3 Authority Key Identifier: keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer sbgp-ipAddrBlock: critical IPv4: 23.148.8.0/24 IPv6: 2602:811:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:53:d1:02:c5:d3:ab:37:59:50:49:65:7e:69:cb:72:d8:dd: fb:ab:96:a5:57:65:b6:cb:0b:b2:53:6f:fe:11:12:ca:37:2a: 45:47:64:33:af:c2:62:52:bb:e8:d7:e5:0f:d1:ae:c5:80:75: 3d:f6:16:65:ac:f8:2a:54:41:60:c3:eb:b8:db:a4:78:f1:5f: 6f:a0:55:2c:00:e3:e4:11:47:c1:23:cf:6b:e0:76:7b:23:a7: 82:62:1c:cc:b4:8f:00:e4:0a:0f:4b:e5:de:5a:83:69:58:79: 79:3e:96:6a:ac:f7:1c:c1:b3:43:f1:25:f6:91:0f:27:6d:2c: b9:36:60:49:66:7a:9d:8b:4b:70:2b:12:9a:0e:b8:d1:1f:2a: 6f:74:18:a5:b1:09:8d:bd:d3:59:b3:66:a2:c7:54:9a:93:a1: cd:1a:16:91:3c:70:93:5d:22:a2:83:bf:70:2e:15:9b:19:af: 19:b8:eb:c6:14:18:8e:65:82:0c:26:18:3c:1c:46:8d:80:c3: e4:a1:ad:f2:71:16:56:ae:38:a4:43:f1:4b:0c:04:0d:ce:86: 63:d6:8c:ca:f0:cc:e9:ec:46:ad:67:e5:4a:ed:a9:b5:03:cd: c0:42:09:94:d6:5f:70:d6:93:5c:8e:4d:51:60:0c:a4:26:d4: fb:62:22:27 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnbKiqOisXp6obIeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY3ODg1ZjItNWIxNC00ZGVkLWIyZGQtN2JlZmUyMTVk YjA3MB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk NTljMDQ0M2QtODRkNC00MmIwLWJlZTktYzUzZDJjNzkzNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2gf6FO6ei/vltD8M183XOrkYDIixmbUm/TQ d54RYvczNO/sPz50Ar4UXaL/FFhoW2Rr4zKttdbPGP6tpJ70xlzQqY1NSuCijcfd mG7frP+TDwqSAczZYhtQdX1ktKvLOzLdOnN9pkchPDvQPRL0FrBjPQdKE7V9c6iO ZFQTtBWfDEnYkpG+PXTAVKGCxi7MxfPVknb4YcA3yytm6gQGf3H9owmvd+7YhonN 7BX3p+jflVoA6GYogXVPZpbPoUR1SBhMZkeVWsUHQwjVolkglwAs2SzP7ezeFUtd TSKfsxBDDHERIFNQNkzhXLzgY3SV8nt1QQXQRffigPxbABqvYwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLg6/J1QLIsPJuS2nxdiSjJiiSH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZjc4 ODVmMi01YjE0LTRkZWQtYjJkZC03YmVmZTIxNWRiMDcvNWNjNjU3ODktZTAwNi0z YWE0LWFiNWItMzE2MDNiYTQ4ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWY3ODg1ZjItNWIxNC00ZGVkLWIy ZGQtN2JlZmUyMTVkYjA3L2FmNzg4NWYyLTViMTQtNGRlZC1iMmRkLTdiZWZlMjE1 ZGIwNy5jcmwwHwYDVR0jBBgwFoAUvTSRSrAbYBKqzqEtwWTJvL7lYbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZjc4ODVmMi01YjE0LTRkZWQtYjJkZC03YmVm ZTIxNWRiMDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5QIMA8E AgACMAkDBwQmAggRwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiVPRAsXTqzdZUEllfmnLctjd+6uWpVdl tssLslNv/hESyjcqRUdkM6/CYlK76NflD9GuxYB1PfYWZaz4KlRBYMPruNukePFf b6BVLADj5BFHwSPPa+B2eyOngmIczLSPAOQKD0vl3lqDaVh5eT6Waqz3HMGzQ/El 9pEPJ20suTZgSWZ6nYtLcCsSmg640R8qb3QYpbEJjb3TWbNmosdUmpOhzRoWkTxw k10iooO/cC4VmxmvGbjrxhQYjmWCDCYYPBxGjYDD5KGt8nEWVq44pEPxSwwEDc6G Y9aMyvDM6exGrWflSu2ptQPNwEIJlNZfcNaTXI5NUWAMpCbU+2IiJw== -----END CERTIFICATE-----Generated at Sun Jun 15 20:43:00 2025 by rpki-client