$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa File: 8cfb401d-a235-3259-9fc3-160664b8029d.roa (raw, json) Hash identifier: kWisV4dz50FUgK0v/Zv9g7VsbI6kMVo/+ee629wYF+Q= Subject key identifier: 4D:7B:0A:FE:9A:9C:C8:7C:05:C0:DB:2B:45:4A:8E:02:B2:60:D6:8B Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Certificate serial: 010D0C9F432858499C59E73582F5108591E2C7C0 Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 18013 IP address blocks: 23.247.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e7:35:82:f5:10:85:91:e2:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=0e572e11-3650-45cc-886f-c6bf103a6b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:6e:b0:30:76:39:84:c9:f7:bb:a5:35:27: 57:66:b0:a8:c7:b7:b0:80:d7:5a:f5:b4:35:a1:c1: 95:4e:5e:f0:70:62:93:6e:ec:72:f6:66:08:4f:22: da:2d:10:0f:91:9a:f3:6d:9e:a7:42:b0:1c:6a:3e: be:d3:0a:99:a0:54:48:93:67:56:45:86:b8:4f:92: 56:26:b8:7b:d4:b1:4a:f1:51:32:92:37:61:09:a6: 74:54:19:18:69:42:5c:24:93:22:88:55:cc:63:2b: e9:46:77:ed:f2:48:5a:1f:59:85:60:2a:72:6a:ac: 3c:b9:89:bd:6d:e9:17:cb:59:19:b0:51:2a:50:21: 0a:84:79:05:6f:c8:b5:08:bb:86:bc:a2:b0:e2:78: c7:40:d6:39:de:d6:74:80:f3:9c:d4:22:7c:e5:0c: 70:e9:b0:64:4d:42:39:44:1d:b4:93:9d:4b:0d:dc: 02:c5:84:c4:ba:8e:f9:4b:3b:64:bc:3a:10:7b:cf: 0e:c7:d5:eb:ca:c5:e8:33:f8:b5:df:00:06:4b:a7: 4d:56:55:1f:e5:14:1f:a7:e0:a7:78:95:d9:4e:51: 8d:a4:3a:52:eb:eb:f8:cf:a6:37:40:90:be:4e:67: 49:10:12:40:72:15:ac:2a:f4:57:85:79:af:aa:60: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7B:0A:FE:9A:9C:C8:7C:05:C0:DB:2B:45:4A:8E:02:B2:60:D6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl X509v3 Authority Key Identifier: keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5c:12:7b:71:dc:7d:f8:50:b3:db:e6:ef:4c:27:95:80:a2: a8:5e:4c:3d:9f:03:d8:5d:70:9e:43:b1:c1:9a:a5:4c:7f:dc: e2:35:1f:13:3e:b5:a5:f3:49:24:8f:35:48:4d:b5:81:b4:fc: 1c:45:7c:2c:13:b4:80:c3:70:51:ac:50:eb:bf:3b:91:f7:bc: ef:d9:0b:65:ce:15:96:c1:f8:e2:e0:51:38:21:17:f5:c5:0c: 8b:d0:f6:9f:0a:73:72:f2:68:c1:27:90:19:e7:ec:1a:b0:f8: eb:b5:29:e5:b5:78:22:1a:03:6f:2d:86:6a:81:1b:e3:43:72: af:2d:d2:76:c4:31:bd:c8:ca:81:40:4e:d3:45:32:94:9a:2f: c2:af:e6:d4:4a:c7:d0:09:83:1d:a5:b3:c5:2a:90:a2:63:b1: 32:48:ff:b4:5d:f7:50:bc:dc:63:a2:3c:ca:9a:66:f4:47:23: 24:88:b1:b0:ee:6a:d3:29:e6:cb:eb:cb:9c:ac:d6:ff:1a:52: a1:e0:a1:13:bd:c3:8d:76:6a:ea:78:a7:e9:0f:10:20:47:a6: 48:d4:17:fe:08:15:f0:c5:71:c0:b5:0f:79:39:ef:72:8f:b2: 91:c0:19:4d:95:de:9d:96:98:52:12:de:bc:e8:bf:17:04:5a: ac:7a:92:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWec1gvUQhZHix8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj ZGIxMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MGU1NzJlMTEtMzY1MC00NWNjLTg4NmYtYzZiZjEwM2E2YjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXBusDB2OYTJ97ulNSdXZrCox7ewgNda9bQ1 ocGVTl7wcGKTbuxy9mYITyLaLRAPkZrzbZ6nQrAcaj6+0wqZoFRIk2dWRYa4T5JW Jrh71LFK8VEykjdhCaZ0VBkYaUJcJJMiiFXMYyvpRnft8khaH1mFYCpyaqw8uYm9 bekXy1kZsFEqUCEKhHkFb8i1CLuGvKKw4njHQNY53tZ0gPOc1CJ85Qxw6bBkTUI5 RB20k51LDdwCxYTEuo75SztkvDoQe88Ox9XrysXoM/i13wAGS6dNVlUf5RQfp+Cn eJXZTlGNpDpS6+v4z6Y3QJC+TmdJEBJAchWsKvRXhXmvqmBLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE17Cv6anMh8BcDbK0VKjgKyYNaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvOGNmYjQwMWQtYTIzNS0z MjU5LTlmYzMtMTYwNjY0YjgwMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0 M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5 MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRcEntx3H34ULPb5u9MJ5WAoqheTD2fA9hdcJ5DscGapUx/3OI1HxM+ taXzSSSPNUhNtYG0/BxFfCwTtIDDcFGsUOu/O5H3vO/ZC2XOFZbB+OLgUTghF/XF DIvQ9p8Kc3LyaMEnkBnn7Bqw+Ou1KeW1eCIaA28thmqBG+NDcq8t0nbEMb3IyoFA TtNFMpSaL8Kv5tRKx9AJgx2ls8UqkKJjsTJI/7Rd91C83GOiPMqaZvRHIySIsbDu atMp5svry5ys1v8aUqHgoRO9w412aup4p+kPECBHpkjUF/4IFfDFccC1D3k573KP spHAGU2V3p2WmFIS3rzovxcEWqx6kjg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:28 2025 by rpki-client