$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa File: c293780d-5803-3e0e-a47f-235faa11c550.roa (raw, json) Hash identifier: qROjbtnUM91S0/29lIJzw3aEKAYntr8Hxm41oVuYQFI= Subject key identifier: F5:99:DF:65:75:CB:B3:95:62:A3:B4:DD:31:1F:21:3A:D0:77:7D:A0 Certificate issuer: /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Certificate serial: 010D0C9F43285849E38A3442088A05655A0BEBC0 Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa Signing time: Sun 18 May 2025 01:00:47 +0000 ROA not before: Sun 18 May 2025 01:00:47 +0000 ROA not after: Sat 16 Aug 2025 01:00:47 +0000 asID: 2914 IP address blocks: 23.133.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:8a:34:42:08:8a:05:65:5a:0b:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Validity Not Before: May 18 01:00:47 2025 GMT Not After : Aug 16 01:00:47 2025 GMT Subject: CN=2b8a06e8-0c02-444d-b56c-458bb8d4a1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:ea:52:62:2b:f2:20:75:00:9e:b2:3f:b4: 4d:eb:4e:0e:75:fc:f3:80:ee:c4:fb:04:88:19:4f: 74:ea:58:77:28:de:de:07:d1:64:49:73:d5:a2:90: 6b:10:ef:74:4a:23:fd:6e:3d:62:e9:11:a2:06:66: 6c:b1:65:bb:41:0c:7d:0a:c5:7d:18:76:e8:5e:77: e6:6f:06:96:ac:48:6e:67:87:91:4b:4a:c2:b3:93: f4:c6:95:66:05:c2:39:41:00:2c:a9:a0:e8:ab:26: 9d:04:ae:ec:3f:fa:29:a4:81:5e:aa:02:7e:e1:47: ba:61:b6:6f:1e:16:15:f6:dd:61:8b:29:25:de:4d: 87:90:68:04:ac:5d:ce:2b:49:89:41:d8:e3:c5:9f: d5:69:94:43:82:72:86:09:fe:c5:cc:a4:39:5b:43: 52:33:5c:f9:03:6c:2b:f6:aa:04:83:58:0b:eb:7c: 05:24:dd:d7:5d:f0:49:23:b6:96:da:89:bb:85:5f: 2a:fd:55:e3:fa:6a:38:d6:eb:8a:dc:e8:70:31:cc: 21:8e:4b:07:50:5f:1c:90:02:5a:7f:f9:31:29:b5: 51:c5:a6:8d:6b:e7:00:d7:24:b7:5e:8e:09:d5:6b: e8:6e:7d:81:0a:b9:84:bc:e5:be:f4:6e:af:98:a8: 1d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:DF:65:75:CB:B3:95:62:A3:B4:DD:31:1F:21:3A:D0:77:7D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl X509v3 Authority Key Identifier: keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:90:7b:6a:31:bd:91:6d:c4:60:d5:57:90:72:26:5f:7d:48: 8f:67:37:2b:a2:20:fc:67:2e:d6:5c:fd:24:a1:1c:01:0e:f5: d3:78:ce:a3:e4:1c:02:28:48:b1:90:d9:1b:82:67:c7:90:cf: 7e:c1:95:ca:94:e9:5e:42:fe:30:d0:4c:18:d7:0a:d4:5f:fc: 39:c7:ad:9c:ae:cc:95:c5:1c:43:37:28:43:4b:a1:c1:f2:d2: 4a:55:3b:05:34:54:b3:62:cd:e1:99:9b:34:b5:a9:03:53:b9: ae:37:c7:93:56:1d:de:8c:1e:b4:97:52:18:12:64:95:0e:0c: 77:5d:d4:e0:73:6d:7b:4c:1d:dd:48:93:48:cc:ee:d4:32:0f: 51:2a:9f:d9:a7:39:af:d8:82:86:b9:98:1e:0d:a4:62:d2:34: 1e:8b:b7:41:db:d9:cb:83:16:8b:44:a0:47:c6:20:43:95:4c: 19:ff:b7:0f:61:67:bf:7e:02:1d:5d:24:af:ef:97:5b:a9:e2: 30:38:71:9a:8c:7d:1f:26:98:a4:b5:69:1a:5b:14:0c:e1:ca: ca:38:3f:b5:24:2a:70:08:7e:e8:2f:f1:4a:c6:d4:66:6e:69: bb:28:46:54:26:e5:85:e4:7e:e7:cc:ee:45:5c:44:05:0d:ad: e9:74:43:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjijRCCIoFZVoL68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4 OTEzMB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk MmI4YTA2ZTgtMGMwMi00NDRkLWI1NmMtNDU4YmI4ZDRhMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qbqUmIr8iB1AJ6yP7RN604OdfzzgO7E+wSI GU906lh3KN7eB9FkSXPVopBrEO90SiP9bj1i6RGiBmZssWW7QQx9CsV9GHboXnfm bwaWrEhuZ4eRS0rCs5P0xpVmBcI5QQAsqaDoqyadBK7sP/oppIFeqgJ+4Ue6YbZv HhYV9t1hiykl3k2HkGgErF3OK0mJQdjjxZ/VaZRDgnKGCf7FzKQ5W0NSM1z5A2wr 9qoEg1gL63wFJN3XXfBJI7aW2om7hV8q/VXj+mo41uuK3OhwMcwhjksHUF8ckAJa f/kxKbVRxaaNa+cA1yS3Xo4J1Wvobn2BCrmEvOW+9G6vmKgdtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWZ32V1y7OVYqO03TEfITrQd32gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZi ZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvYzI5Mzc4MGQtNTgwMy0z ZTBlLWE0N2YtMjM1ZmFhMTFjNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWRmYmY1ZDctZGRmZS00ZTJlLThh OTUtNjhkZWQ2NDk4OTEzLzlkZmJmNWQ3LWRkZmUtNGUyZS04YTk1LTY4ZGVkNjQ5 ODkxMy5jcmwwHwYDVR0jBBgwFoAUdghT1LipsDTyMx5oi9yVMNoNBpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRl ZDY0OTg5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyQe2oxvZFtxGDVV5ByJl99SI9nNyuiIPxnLtZc/SShHAEO9dN4zqPk HAIoSLGQ2RuCZ8eQz37BlcqU6V5C/jDQTBjXCtRf/DnHrZyuzJXFHEM3KENLocHy 0kpVOwU0VLNizeGZmzS1qQNTua43x5NWHd6MHrSXUhgSZJUODHdd1OBzbXtMHd1I k0jM7tQyD1Eqn9mnOa/Ygoa5mB4NpGLSNB6Lt0Hb2cuDFotEoEfGIEOVTBn/tw9h Z79+Ah1dJK/vl1up4jA4cZqMfR8mmKS1aRpbFAzhyso4P7UkKnAIfugv8UrG1GZu absoRlQm5YXkfufM7kVcRAUNrel0QwY= -----END CERTIFICATE-----Generated at Sun Jun 15 11:24:03 2025 by rpki-client