$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa File: dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa (raw, json) Hash identifier: 1WChNjLvL8Na7TZtl54pALwOnfCKHbX0ZWXWVcVfMM4= Subject key identifier: B8:8D:A8:4D:BB:34:6C:A4:72:39:4F:BE:89:50:3D:22:C3:38:0B:2E Certificate issuer: /CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Certificate serial: 010D0C9F432858498E6485AE2C575C30C0043500 Authority key identifier: 58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 400289 IP address blocks: 23.132.40.0/24 maxlen: 24 23.152.8.0/24 maxlen: 24 2606:9440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:85:ae:2c:57:5c:30:c0:04:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=4d55404f-8767-4d74-9ea1-d33044cac481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:26:2c:6c:80:cf:d5:18:02:59:45:c3:f2: df:38:1f:a7:ab:b9:3e:e4:f8:04:1c:3b:6f:c7:ca: be:c5:8a:ce:1c:73:5b:d4:25:9c:25:28:2c:0a:bb: 2c:d1:7f:c8:8a:df:43:6e:8d:a7:5a:80:c4:b2:42: 5c:7b:d4:70:fa:a4:68:8e:6f:cd:88:7b:12:fc:2e: 0d:f6:20:4a:1a:7e:66:64:31:e2:98:d9:46:02:cb: 20:07:99:b2:a3:47:50:66:70:d9:cd:9a:63:33:14: 0f:d3:54:43:96:c9:f4:a6:58:b6:a5:86:64:06:3e: ec:42:b9:ad:c7:6a:3b:0c:d4:ed:b2:2d:89:a6:35: ec:7b:ed:bf:de:0d:aa:b1:4c:39:5a:da:88:c5:72: 36:d8:27:f0:f2:a3:80:8e:25:16:e7:e2:15:47:80: cc:a5:fc:96:8f:f7:d8:a8:0b:30:01:f3:35:29:a8: 6b:20:92:8c:18:02:e5:26:82:45:12:9d:a6:58:3b: 77:bc:ed:d7:d2:e8:4d:35:a5:1a:d6:cc:6c:16:8c: b0:66:15:79:55:17:54:5e:1c:cf:aa:be:1d:e6:cf: 40:da:ef:48:f5:42:ac:aa:d6:85:42:e2:a5:3c:4c: 33:7d:eb:a9:19:a6:28:30:1f:f4:30:90:6a:5a:5e: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8D:A8:4D:BB:34:6C:A4:72:39:4F:BE:89:50:3D:22:C3:38:0B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl X509v3 Authority Key Identifier: keyid:58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer sbgp-ipAddrBlock: critical IPv4: 23.132.40.0/24 23.152.8.0/24 IPv6: 2606:9440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b5:a8:4a:8d:e7:3b:2f:87:1a:2b:f9:3c:2f:a1:db:8a:f6: b5:00:03:10:f0:a4:68:d3:69:fc:2f:9e:3d:48:4b:fd:82:7b: f7:d4:50:ba:d6:d4:c4:76:4c:48:7b:31:6b:f4:44:5f:37:e8: b3:46:77:0b:60:22:4e:ae:76:a4:4e:ea:4b:ab:75:8d:ed:9f: 7d:d5:c7:99:90:ab:ed:23:d3:b6:bd:32:0c:cb:05:6f:71:74: 95:94:d3:10:2a:64:80:70:b2:bc:26:01:b0:e6:f0:0c:c9:20: c9:57:e0:8e:f6:49:ef:91:96:3c:f6:08:fe:63:8b:f3:12:c5: c7:53:53:35:17:c2:8d:6d:48:7e:ae:91:10:0b:97:d2:c9:b4: 1b:05:b9:45:2d:1a:d1:02:6d:c4:76:71:26:01:08:69:36:24: 5e:5c:ef:81:93:20:47:96:5e:a6:3d:d1:49:b8:f3:7e:e2:d2: ca:09:5f:f7:fb:c2:52:e9:7a:43:02:c2:0a:86:4f:17:42:e1: ad:e1:b7:66:6b:34:81:01:d5:3a:24:f2:5c:db:cc:0d:fc:09: 9d:4b:e0:6e:f0:5e:e0:7b:32:d6:7e:e8:1b:b5:07:e9:29:83: 08:fa:b0:83:fb:56:6b:7d:6c:08:4f:79:b8:1c:98:4b:0b:a9: 50:63:43:3a -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEmOZIWuLFdcMMAENQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YyYjUyNGItMTRiOS00N2VlLWI5MzgtMzRiMGNjNDBl YzVlMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NGQ1NTQwNGYtODc2Ny00ZDc0LTllYTEtZDMzMDQ0Y2FjNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jwmLGyAz9UYAllFw/LfOB+nq7k+5PgEHDtv x8q+xYrOHHNb1CWcJSgsCrss0X/Iit9Dbo2nWoDEskJce9Rw+qRojm/NiHsS/C4N 9iBKGn5mZDHimNlGAssgB5myo0dQZnDZzZpjMxQP01RDlsn0pli2pYZkBj7sQrmt x2o7DNTtsi2JpjXse+2/3g2qsUw5WtqIxXI22Cfw8qOAjiUW5+IVR4DMpfyWj/fY qAswAfM1KahrIJKMGALlJoJFEp2mWDt3vO3X0uhNNaUa1sxsFoywZhV5VRdUXhzP qr4d5s9A2u9I9UKsqtaFQuKlPEwzfeupGaYoMB/0MJBqWl5oTQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFLiNqE27NGykcjlPvolQPSLDOAsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJi NTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIwY2M0MGVjNWUvZGJhNjM4NjktNGIxYS0z ZTIzLTliMTctZjM4YTlhOGUzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YyYjUyNGItMTRiOS00N2VlLWI5 MzgtMzRiMGNjNDBlYzVlL2NmMmI1MjRiLTE0YjktNDdlZS1iOTM4LTM0YjBjYzQw ZWM1ZS5jcmwwHwYDVR0jBBgwFoAUWHUvLPuR0MXWh7HOPDK2TheF76kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJiNTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIw Y2M0MGVjNWUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4QoAwQA F5gIMA0EAgACMAcDBQAmBpRAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG21qEqN5zsvhxor+TwvoduK9rUA AxDwpGjTafwvnj1IS/2Ce/fUULrW1MR2TEh7MWv0RF836LNGdwtgIk6udqRO6kur dY3tn33Vx5mQq+0j07a9MgzLBW9xdJWU0xAqZIBwsrwmAbDm8AzJIMlX4I72Se+R ljz2CP5ji/MSxcdTUzUXwo1tSH6ukRALl9LJtBsFuUUtGtECbcR2cSYBCGk2JF5c 74GTIEeWXqY90Um4837i0soJX/f7wlLpekMCwgqGTxdC4a3ht2ZrNIEB1Tok8lzb zA38CZ1L4G7wXuB7MtZ+6Bu1B+kpgwj6sIP7Vmt9bAhPebgcmEsLqVBjQzo= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:31 2025 by rpki-client