$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa File: 3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa (raw, json) Hash identifier: orN/h6C2S+u+4/VLW/uy1UefKrxkiqD4Dl3nvOk8irg= Subject key identifier: 69:08:1B:FF:9D:57:AE:E0:78:93:71:F3:E8:3E:9F:D1:23:B9:96:1A Certificate issuer: /CN=903dbcce-bb2a-403e-ad25-67981ea1de21 Certificate serial: 010D0C9F43285849ED4FD65C2AF6F241EC4D5700 Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 149020 IP address blocks: 23.131.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d6:5c:2a:f6:f2:41:ec:4d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=0fa3b4d0-510a-4d14-b1d0-98cd08e4f28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:b4:e9:10:a1:2e:a1:1c:32:56:6d:85:c9: e7:ca:a4:8e:78:72:72:2b:e9:69:cb:2d:76:aa:2d: 19:a1:e3:b3:a5:04:54:b5:c7:5f:e6:53:f0:69:24: 3f:e5:32:ac:11:5a:ea:51:46:45:aa:c5:ed:ca:cf: ef:1e:3c:04:2e:48:06:66:c4:8d:fb:dc:4d:6b:d7: 32:f5:07:36:92:f4:99:8c:f3:35:26:f1:c3:82:a5: 0b:e4:93:c0:49:e8:74:52:f9:3a:55:e6:cf:cc:7a: d8:4d:d3:c6:70:9e:e7:8c:6c:b8:68:8a:a3:77:61: 0e:aa:31:20:db:b9:08:55:a7:c6:27:cd:bd:02:0b: 59:7a:56:07:1f:ed:18:6d:36:9f:c3:9a:34:ab:a4: f3:4c:69:4e:b1:cb:be:a3:d5:e5:19:94:72:6b:e0: d9:88:b8:69:6e:6a:10:5e:bc:41:7c:90:eb:92:79: bb:e9:f3:09:2f:20:48:23:67:e5:6d:da:9a:b1:0c: 12:fa:a9:f5:26:9e:a4:b0:dc:8c:bc:6a:75:c7:e4: 53:11:ca:6e:a7:cb:17:e0:04:98:ea:0d:cd:8f:dc: b6:2f:1e:b6:d3:3f:d8:47:92:4c:ee:db:55:4f:d8: 13:3a:2a:78:48:3c:9d:47:7e:fc:74:05:20:16:83: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:08:1B:FF:9D:57:AE:E0:78:93:71:F3:E8:3E:9F:D1:23:B9:96:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl X509v3 Authority Key Identifier: keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer sbgp-ipAddrBlock: critical IPv4: 23.131.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:a1:08:9a:f2:da:e1:f9:e8:b9:b5:0c:d1:fb:27:cd:d9:0d: 36:4a:f3:74:b6:ca:fc:c5:d0:4a:04:7d:ea:24:71:d4:5d:fe: 81:ed:d7:36:bb:7f:c3:e1:c2:11:fd:b6:85:48:4b:fa:5f:cd: 28:95:2d:40:dc:5c:b4:50:f1:1a:ec:1e:d9:bf:97:09:b2:ba: 89:7c:d9:b6:ef:4c:34:76:15:77:3d:8d:4c:52:c2:db:3c:60: 06:ff:87:13:89:3f:72:2f:ea:c4:31:25:a2:e8:06:e5:8a:52: 65:66:90:7a:e2:cc:33:6d:37:0b:5b:8d:7e:5f:3e:a9:e7:a4: 67:0e:9e:6a:70:80:c0:b7:b5:57:55:3a:48:28:bc:54:64:ad: 22:67:12:26:b0:6f:f5:fd:85:1c:83:ff:ab:00:d5:f9:e1:de: ce:7d:0f:99:c3:47:70:a9:d5:12:42:7d:13:9f:cd:33:28:e0: 41:e3:dc:f6:33:70:bb:c6:66:c2:4c:3d:02:11:1a:85:76:7f: b4:f3:3d:c8:09:54:61:db:ea:ad:d7:56:61:36:ae:fa:e4:6f: db:90:1d:2b:6a:ac:66:76:52:48:da:2c:9f:b5:8c:2f:6c:02: b3:20:0e:4d:3d:a6:e4:b1:92:94:65:53:49:b6:6b:fa:84:1d: 20:c8:1c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9ZcKvbyQexNVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZGJjY2UtYmIyYS00MDNlLWFkMjUtNjc5ODFlYTFk ZTIxMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk MGZhM2I0ZDAtNTEwYS00ZDE0LWIxZDAtOThjZDA4ZTRmMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWu06RChLqEcMlZthcnnyqSOeHJyK+lpyy12 qi0ZoeOzpQRUtcdf5lPwaSQ/5TKsEVrqUUZFqsXtys/vHjwELkgGZsSN+9xNa9cy 9Qc2kvSZjPM1JvHDgqUL5JPASeh0Uvk6VebPzHrYTdPGcJ7njGy4aIqjd2EOqjEg 27kIVafGJ829AgtZelYHH+0YbTafw5o0q6TzTGlOscu+o9XlGZRya+DZiLhpbmoQ XrxBfJDrknm76fMJLyBII2flbdqasQwS+qn1Jp6ksNyMvGp1x+RTEcpup8sX4ASY 6g3Nj9y2Lx620z/YR5JM7ttVT9gTOip4SDydR378dAUgFoNPUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkIG/+dV67geJNx8+g+n9EjuZYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MDNk YmNjZS1iYjJhLTQwM2UtYWQyNS02Nzk4MWVhMWRlMjEvMzU1NGE1NzAtZGZkZS0z ZjFiLWJiMzctMDVmNmJjOWFiMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTAzZGJjY2UtYmIyYS00MDNlLWFk MjUtNjc5ODFlYTFkZTIxLzkwM2RiY2NlLWJiMmEtNDAzZS1hZDI1LTY3OTgxZWEx ZGUyMS5jcmwwHwYDVR0jBBgwFoAUtdTji+hhvNy218k9W6s+zWZMaW4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MDNkYmNjZS1iYjJhLTQwM2UtYWQyNS02Nzk4 MWVhMWRlMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqhCJry2uH56Lm1DNH7J83ZDTZK83S2yvzF0EoEfeokcdRd/oHt1za7 f8PhwhH9toVIS/pfzSiVLUDcXLRQ8RrsHtm/lwmyuol82bbvTDR2FXc9jUxSwts8 YAb/hxOJP3Iv6sQxJaLoBuWKUmVmkHrizDNtNwtbjX5fPqnnpGcOnmpwgMC3tVdV OkgovFRkrSJnEiawb/X9hRyD/6sA1fnh3s59D5nDR3Cp1RJCfROfzTMo4EHj3PYz cLvGZsJMPQIRGoV2f7TzPcgJVGHb6q3XVmE2rvrkb9uQHStqrGZ2UkjaLJ+1jC9s ArMgDk09puSxkpRlU0m2a/qEHSDIHP8= -----END CERTIFICATE-----Generated at Tue Jun 17 16:56:22 2025 by rpki-client