$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/43334eee-7f5c-335d-88a1-bf2b87253514.roa File: 43334eee-7f5c-335d-88a1-bf2b87253514.roa (raw, json) Hash identifier: Fn1H0ZnExFhLsQYXXLHr4HYHbNEDQcwA2D9wlWlcJsM= Subject key identifier: 25:E3:CD:5C:DC:53:4E:26:FC:5A:BE:29:2F:5D:CC:AB:5D:6D:04:EA Certificate issuer: /CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Certificate serial: 010D0C9F432858494B6414A6D8D8A0FF4E123780 Authority key identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/43334eee-7f5c-335d-88a1-bf2b87253514.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 36527 IP address blocks: 23.160.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:14:a6:d8:d8:a0:ff:4e:12:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=a2a101ff-64c9-4a8f-bceb-df40a2a91d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:ab:06:07:74:21:9e:74:91:3e:b1:8e:ed: 7d:16:ca:41:99:42:e7:5e:48:bb:8f:3e:1a:1d:54: 6a:75:00:35:46:71:49:17:7c:c5:95:d4:f8:01:c3: 9f:0e:35:8b:02:83:fb:ab:de:01:cb:02:f1:fd:8d: ba:7c:95:c1:2e:53:07:5d:c8:81:5a:ad:92:93:00: 83:11:31:f6:95:24:28:86:49:1c:a5:46:bf:42:d5: 9e:95:68:fd:94:a7:e8:88:66:0d:96:5f:78:01:1e: 0a:35:97:44:25:42:68:f7:0a:a2:4b:fc:37:c3:2b: ab:1d:79:59:72:94:60:4b:19:a7:e1:b0:ac:f3:54: 84:f8:18:d0:c4:4f:b9:f2:52:e4:15:3d:1e:72:e6: e8:92:ea:3a:d5:c1:bd:15:9c:3c:ce:9d:cc:3e:4c: f2:7d:fd:d7:b2:11:10:ab:cb:11:ba:a4:08:02:08: 71:8a:88:ef:a1:4e:b3:07:f1:8e:1f:ba:a5:2a:d6: bd:93:98:e5:e6:da:f7:fe:f1:6c:c2:7b:7d:48:e1: f6:aa:55:e4:90:da:66:a4:fd:5d:fd:1d:f3:a4:5d: 6e:10:4c:e9:84:b1:1a:a3:20:f6:61:ff:c5:8d:de: a8:8f:ba:0b:db:bb:b8:4c:86:46:9c:08:e6:7e:72: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E3:CD:5C:DC:53:4E:26:FC:5A:BE:29:2F:5D:CC:AB:5D:6D:04:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/43334eee-7f5c-335d-88a1-bf2b87253514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.crl X509v3 Authority Key Identifier: keyid:4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer sbgp-ipAddrBlock: critical IPv4: 23.160.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2b:24:61:28:f2:e1:82:a1:b6:b9:24:25:ea:fe:63:c8:dc: 4f:24:b2:c0:63:07:1f:b5:79:8a:90:a9:41:db:2f:bc:ab:e6: ff:fe:c9:f6:0e:16:91:66:ee:0c:69:bd:c7:d2:38:f8:cd:ce: f9:a3:07:48:64:a7:df:65:55:78:d2:38:ba:33:a3:51:e5:d5: 00:3b:61:47:f2:05:05:18:18:e7:42:02:0d:b8:81:cf:16:34: f5:99:1c:74:59:11:4b:58:e6:21:72:6d:e8:3f:d8:2e:e5:cb: 52:77:a0:fb:14:cb:ac:c2:ef:89:4e:52:98:2c:ab:fa:ba:b5: 23:8b:a0:dc:c1:36:3a:22:20:6c:9a:56:01:bb:57:fe:e5:ca: e3:d3:97:b5:f7:35:97:15:02:27:0a:dc:8c:e3:30:47:e9:d5: 57:ce:9c:43:ea:ad:30:ea:62:30:0d:34:5d:a0:26:42:83:2d: 9d:33:88:a0:fd:e0:5f:3a:27:f2:dd:4c:4c:a4:f1:06:8d:1b: a6:6e:39:da:d0:2b:10:29:4b:5c:cb:b9:d7:e6:82:31:40:16: 6d:aa:5b:a1:e2:6b:07:19:d2:ab:cf:26:07:5c:1c:e7:75:25: 8c:32:34:76:0e:3d:2c:a5:a5:7b:9b:d5:0d:3e:72:48:ec:63: 6c:fb:5b:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBSm2Nig/04SN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmN2U4ZjEtODliZS00ZjU3LWEyY2ItOTEyYjQ1YjMw OGZjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YTJhMTAxZmYtNjRjOS00YThmLWJjZWItZGY0MGEyYTkxZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyyrBgd0IZ50kT6xju19FspBmULnXki7jz4a HVRqdQA1RnFJF3zFldT4AcOfDjWLAoP7q94BywLx/Y26fJXBLlMHXciBWq2SkwCD ETH2lSQohkkcpUa/QtWelWj9lKfoiGYNll94AR4KNZdEJUJo9wqiS/w3wyurHXlZ cpRgSxmn4bCs81SE+BjQxE+58lLkFT0ecubokuo61cG9FZw8zp3MPkzyff3XshEQ q8sRuqQIAghxiojvoU6zB/GOH7qlKta9k5jl5tr3/vFswnt9SOH2qlXkkNpmpP1d /R3zpF1uEEzphLEaoyD2Yf/Fjd6oj7oL27u4TIZGnAjmfnI2EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXjzVzcU04m/Fq+KS9dzKtdbQTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YmY3 ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDViMzA4ZmMvNDMzMzRlZWUtN2Y1Yy0z MzVkLTg4YTEtYmYyYjg3MjUzNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWJmN2U4ZjEtODliZS00ZjU3LWEy Y2ItOTEyYjQ1YjMwOGZjLzliZjdlOGYxLTg5YmUtNGY1Ny1hMmNiLTkxMmI0NWIz MDhmYy5jcmwwHwYDVR0jBBgwFoAUTALaSCK+jvSz6BfyR2Rziu2G2HYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJi NDViMzA4ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMrJGEo8uGCoba5JCXq/mPI3E8kssBjBx+1eYqQqUHbL7yr5v/+yfYO FpFm7gxpvcfSOPjNzvmjB0hkp99lVXjSOLozo1Hl1QA7YUfyBQUYGOdCAg24gc8W NPWZHHRZEUtY5iFybeg/2C7ly1J3oPsUy6zC74lOUpgsq/q6tSOLoNzBNjoiIGya VgG7V/7lyuPTl7X3NZcVAicK3IzjMEfp1VfOnEPqrTDqYjANNF2gJkKDLZ0ziKD9 4F86J/LdTEyk8QaNG6ZuOdrQKxApS1zLudfmgjFAFm2qW6HiawcZ0qvPJgdcHOd1 JYwyNHYOPSylpXub1Q0+ckjsY2z7W38= -----END CERTIFICATE-----Generated at Tue Apr 29 14:30:39 2025 by rpki-client