$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa File: bfa7d67a-952c-3905-85f8-44a66117cd46.roa (raw, json) Hash identifier: hSVrRpzXB5r58sy/CUC5J+1B4UOIIeZgQ0SbpI602xc= Subject key identifier: FD:4C:C2:A4:FC:5E:99:4A:86:97:B4:68:96:76:20:1F:E6:2A:41:2C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F432858497DA4730196337A0D0FDAAC40 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 64267 IP address blocks: 23.157.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:73:01:96:33:7a:0d:0f:da:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c3077e69-d298-4111-ba57-70fe70e97dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:71:ce:a5:91:e5:02:2e:23:ec:93:df:38: 6e:96:3a:02:22:f7:ca:84:83:4a:2a:d2:41:a3:20: ee:a3:50:e8:62:8e:9e:55:cb:02:5e:e4:54:87:fc: e5:bb:e8:f0:db:dc:93:fd:60:72:cb:e4:f2:cb:a2: a3:1e:85:18:4f:e3:81:f6:b5:47:12:89:cb:c3:58: 90:6d:29:c5:20:b4:63:de:79:71:21:a0:ee:75:c3: 5d:8d:b7:e7:20:29:2e:61:fa:98:ed:68:b5:51:e3: 17:5e:c9:5a:f2:67:77:94:0c:cf:9f:a4:cc:59:a7: cb:72:2a:9c:91:42:6d:3d:dd:e4:96:60:3e:08:82: f8:d4:17:4e:d4:b7:b9:33:8e:0e:33:51:31:d8:11: c6:46:43:17:8f:ac:10:71:65:14:ef:8f:7f:65:3f: d4:88:86:f4:f3:79:61:58:e3:a9:46:f3:a4:4f:98: dd:97:0a:b4:1e:85:09:26:9c:3e:4b:3c:fd:3b:fb: 63:b4:9b:b5:86:c1:eb:78:9b:98:4f:01:32:76:60: 24:45:d5:b4:bc:17:76:55:09:09:be:e8:cb:ad:76: 58:33:90:26:84:0e:1a:06:8e:a0:f3:da:49:6d:7e: 11:5e:0f:43:9a:c2:af:cb:82:b9:0a:59:5e:ab:82: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4C:C2:A4:FC:5E:99:4A:86:97:B4:68:96:76:20:1F:E6:2A:41:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 23.157.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8b:35:a5:87:3e:4c:2a:9e:52:70:fb:3f:5e:59:77:47:18: 36:d1:05:0d:57:16:c9:f5:c8:16:80:54:f4:28:3f:f5:d8:7c: f6:8a:0f:9d:11:e4:a4:e6:8b:90:07:90:80:f7:8a:da:f5:92: 37:0a:63:97:79:1a:0c:62:d6:85:b4:ca:35:3b:e1:10:77:19: d9:25:10:3f:29:89:4d:5b:84:9c:84:eb:7b:3e:1d:42:b2:56: bf:1f:9c:d1:ea:a2:c1:19:78:00:5f:31:0a:17:23:16:b9:2f: 1e:7a:98:8d:e1:67:17:dc:1d:22:c9:db:52:2f:e1:ca:1c:9a: 54:4b:d3:99:db:e0:ad:38:a0:fb:63:b9:ff:f4:f9:9f:88:57: 17:04:9c:f5:d3:4c:b9:bb:e0:7a:30:90:da:20:23:0f:82:c8: 0a:44:0e:c3:41:1a:37:bc:d9:76:1f:ee:01:ad:5c:72:fd:92: 75:2b:01:13:03:39:ea:5d:53:39:0e:e5:52:c9:41:78:be:bf: 31:5f:db:70:85:67:d3:8d:cb:48:1a:eb:1d:7d:23:35:2f:b8: 63:44:c8:6c:35:6c:cf:c3:27:4b:0c:1c:2c:87:93:55:64:c5: a0:80:00:de:d4:2f:52:25:fe:4c:2b:c6:73:14:44:e4:47:37: 67:ce:c3:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHMBljN6DQ/arEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzMwNzdlNjktZDI5OC00MTExLWJhNTctNzBmZTcwZTk3ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBhxzqWR5QIuI+yT3zhuljoCIvfKhINKKtJB oyDuo1DoYo6eVcsCXuRUh/zlu+jw29yT/WByy+Tyy6KjHoUYT+OB9rVHEonLw1iQ bSnFILRj3nlxIaDudcNdjbfnICkuYfqY7Wi1UeMXXsla8md3lAzPn6TMWafLciqc kUJtPd3klmA+CIL41BdO1Le5M44OM1Ex2BHGRkMXj6wQcWUU749/ZT/UiIb083lh WOOpRvOkT5jdlwq0HoUJJpw+Szz9O/tjtJu1hsHreJuYTwEydmAkRdW0vBd2VQkJ vujLrXZYM5AmhA4aBo6g89pJbX4RXg9DmsKvy4K5Clleq4KCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1MwqT8XplKhpe0aJZ2IB/mKkEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmZhN2Q2N2EtOTUyYy0z OTA1LTg1ZjgtNDRhNjYxMTdjZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSLNaWHPkwqnlJw+z9eWXdHGDbRBQ1XFsn1yBaAVPQoP/XYfPaKD50R 5KTmi5AHkID3itr1kjcKY5d5Ggxi1oW0yjU74RB3GdklED8piU1bhJyE63s+HUKy Vr8fnNHqosEZeABfMQoXIxa5Lx56mI3hZxfcHSLJ21Iv4cocmlRL05nb4K04oPtj uf/0+Z+IVxcEnPXTTLm74HowkNogIw+CyApEDsNBGje82XYf7gGtXHL9knUrARMD OepdUzkO5VLJQXi+vzFf23CFZ9ONy0ga6x19IzUvuGNEyGw1bM/DJ0sMHCyHk1Vk xaCAAN7UL1Il/kwrxnMURORHN2fOw6o= -----END CERTIFICATE-----Generated at Sun Apr 27 20:26:45 2025 by rpki-client