$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16adb460-9f9e-3908-a5ee-02ab094e7f82.roa File: 16adb460-9f9e-3908-a5ee-02ab094e7f82.roa (raw, json) Hash identifier: ttWw0Uf+GH2n9QvPgZ6EnbxVOGM2FuzhB5b18/cxJ3s= Subject key identifier: 34:9D:78:20:33:E4:00:26:66:2C:9B:F2:A0:3A:91:E9:90:B0:E7:1B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584929F0DC4E3EE01363DE011390 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16adb460-9f9e-3908-a5ee-02ab094e7f82.roa Signing time: Wed 12 Mar 2025 13:27:16 +0000 ROA not before: Wed 12 Mar 2025 13:27:16 +0000 ROA not after: Tue 10 Jun 2025 13:27:16 +0000 asID: 3561 IP address blocks: 23.230.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:f0:dc:4e:3e:e0:13:63:de:01:13:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 12 13:27:16 2025 GMT Not After : Jun 10 13:27:16 2025 GMT Subject: CN=4953d01f-cb7d-4911-a86e-2f4d4c36a1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:48:2f:dd:df:12:6e:f8:9c:fb:e3:0b:9a:9c: f3:12:e3:b0:39:30:f1:fe:c6:b5:4a:29:ef:8a:49: 78:d9:c6:30:9c:a3:23:9f:a0:cf:28:59:80:e3:5a: 8a:b5:31:c6:f0:4a:1d:0b:a5:b7:4a:c7:7a:db:f1: 69:71:7c:05:3b:31:aa:d4:d0:ac:e4:01:49:0e:73: ed:55:1f:37:3c:36:53:3c:e4:01:55:dc:6d:2d:d2: 56:9b:53:82:62:76:6d:7c:9e:e2:20:34:6d:a2:4f: aa:98:39:6d:ea:e6:0b:df:1a:b6:cb:44:58:4f:01: 95:36:23:1d:9d:20:89:f2:c4:db:a2:f7:28:56:94: 9a:3d:74:44:94:10:b1:03:0e:60:9b:31:04:82:02: fa:a7:5e:14:f5:47:93:8e:62:4b:d2:ca:24:07:6d: e0:bf:5f:9d:6d:0f:1a:35:13:22:4f:36:0a:f3:71: ff:ac:a2:14:16:7e:02:a7:cc:8e:fc:dc:b0:80:94: 4c:99:10:fd:6b:49:e2:61:2f:f4:9f:5a:82:39:db: 58:ca:e3:36:e9:bf:8f:d0:fb:c9:32:e6:98:be:ce: 1d:8f:d0:70:01:36:52:26:03:2e:6e:21:07:9b:4f: a7:f7:5c:14:be:be:8d:b8:31:8e:b9:95:82:7d:1e: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9D:78:20:33:E4:00:26:66:2C:9B:F2:A0:3A:91:E9:90:B0:E7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16adb460-9f9e-3908-a5ee-02ab094e7f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1c:bf:01:e1:4f:37:f8:8f:06:31:8c:b0:2f:a5:94:90:d8: 16:2d:8b:9e:0a:bd:17:96:49:53:8f:fd:29:a5:0c:0a:11:00: 4b:13:c9:d7:21:9b:e0:df:23:db:97:cf:36:fe:0b:9b:5b:0a: 26:1c:78:8c:23:09:97:35:f3:a1:da:0c:e2:9b:9e:5a:12:10: f6:35:01:36:28:64:23:ba:14:e8:30:2b:90:8c:80:be:09:27: 94:65:9e:c8:5d:f6:7b:68:c7:78:ac:03:38:e6:fb:00:07:5c: ae:7f:82:30:6b:65:6f:22:76:08:e0:85:5f:81:3e:40:49:1f: 35:f0:ea:ab:c5:80:34:61:c8:60:0c:41:68:4a:5c:7d:04:bf: cd:af:b3:bc:f1:84:ae:3a:d4:99:f3:a8:55:c7:fb:41:6b:47: 58:5d:5a:44:5d:77:b9:8e:9e:85:f4:09:42:f1:7f:34:cd:44: 90:3c:ae:0e:39:14:cf:46:4d:4e:42:ec:23:7f:a9:2e:38:80: 5e:d8:d2:d6:e3:3d:0b:e3:70:5f:3f:a8:12:e3:7a:3c:b0:0a: 16:6d:c0:16:01:e0:9a:3a:dd:34:d9:fd:ae:1e:7a:0a:6d:5c: 18:bc:92:55:a9:51:2e:a7:41:0d:43:20:b4:95:54:07:ef:1e: 92:36:0d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp8NxOPuATY94BE5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMxMjEzMjcxNloXDTI1MDYxMDEzMjcxNlowLzEtMCsGA1UEAxMk NDk1M2QwMWYtY2I3ZC00OTExLWE4NmUtMmY0ZDRjMzZhMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkgv3d8Sbvic++MLmpzzEuOwOTDx/sa1Sinv ikl42cYwnKMjn6DPKFmA41qKtTHG8EodC6W3Ssd62/FpcXwFOzGq1NCs5AFJDnPt VR83PDZTPOQBVdxtLdJWm1OCYnZtfJ7iIDRtok+qmDlt6uYL3xq2y0RYTwGVNiMd nSCJ8sTbovcoVpSaPXRElBCxAw5gmzEEggL6p14U9UeTjmJL0sokB23gv1+dbQ8a NRMiTzYK83H/rKIUFn4Cp8yO/NywgJRMmRD9a0niYS/0n1qCOdtYyuM26b+P0PvJ MuaYvs4dj9BwATZSJgMubiEHm0+n91wUvr6NuDGOuZWCfR59PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSdeCAz5AAmZiyb8qA6kemQsOcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTZhZGI0NjAtOWY5ZS0z OTA4LWE1ZWUtMDJhYjA5NGU3ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+bzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEcvwHhTzf4jwYxjLAvpZSQ2BYti54KvReWSVOP/SmlDAoRAEsTydch m+DfI9uXzzb+C5tbCiYceIwjCZc186HaDOKbnloSEPY1ATYoZCO6FOgwK5CMgL4J J5Rlnshd9ntox3isAzjm+wAHXK5/gjBrZW8idgjghV+BPkBJHzXw6qvFgDRhyGAM QWhKXH0Ev82vs7zxhK461JnzqFXH+0FrR1hdWkRdd7mOnoX0CULxfzTNRJA8rg45 FM9GTU5C7CN/qS44gF7Y0tbjPQvjcF8/qBLjejywChZtwBYB4Jo63TTZ/a4eegpt XBi8klWpUS6nQQ1DILSVVAfvHpI2DTk= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:21 2025 by rpki-client