$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: A/k7OwxVtDXaXSnKtVBmiYMziqREfyRT6sdJyViqhao= Subject key identifier: 0F:E2:93:96:4D:D8:3A:20:A8:F7:FD:DB:9E:DC:79:B7:16:F3:71:13 Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F432858498769A976084632159F335100 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a9:76:08:46:32:15:9f:33:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=3d14444a-321b-459f-9d71-fd8e6a0ee103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:b7:10:a1:22:29:06:e4:47:3b:d8:0a:6b: ac:d0:05:26:26:6b:40:96:46:ac:cc:58:eb:e5:00: e7:47:05:cc:18:9a:26:ad:13:db:c5:f9:ee:0b:1d: f4:eb:7d:22:52:81:05:f8:60:77:d7:34:a0:35:c4: 77:f0:36:e2:50:46:2c:69:87:ba:06:a6:62:19:99: 11:08:e2:95:07:38:22:83:34:5d:67:d1:eb:d3:0d: 0a:37:df:0f:be:47:6c:4a:67:34:41:2d:71:d3:b3: cd:b4:0a:13:7d:9d:73:36:8b:64:d7:fe:9f:4e:37: 24:53:a4:2a:f8:52:21:00:96:dd:76:ce:f0:0a:93: 53:42:09:fc:28:34:b9:24:44:3d:6f:13:0c:ca:86: 19:ca:6b:bf:2b:22:a7:22:d6:ff:67:5c:6c:ec:5a: 45:d5:ee:f4:e2:89:0a:fa:97:bd:be:0e:e0:8f:ef: de:bc:c6:f8:a4:2f:f8:c9:f1:a9:6c:11:f2:b4:75: 3e:31:e9:ef:b9:95:45:23:2b:32:bd:10:07:07:d3: 83:49:4f:b0:04:96:ee:a9:a7:28:c7:8c:12:91:11: f1:b8:be:6c:38:10:78:fe:40:be:f2:eb:71:41:6e: 96:9f:e8:80:70:2d:7a:4a:a8:3f:59:d7:bf:cf:1e: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E2:93:96:4D:D8:3A:20:A8:F7:FD:DB:9E:DC:79:B7:16:F3:71:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b3:76:a6:04:7d:01:4f:f6:12:48:57:0e:43:44:a1:c6:a6: de:7c:9f:f6:52:8d:54:bd:40:67:76:e4:14:1b:4d:20:88:e1: 53:32:da:ac:40:6c:84:97:25:6b:d6:fd:4e:e3:c4:ec:fe:f7: 1f:1c:b5:79:a5:6d:1d:d5:08:a9:b9:73:fa:f3:3a:cd:c7:88: 92:7e:fc:33:9d:e6:96:b9:15:9b:d9:38:27:c0:a4:db:5f:54: 56:f6:f0:e5:8e:88:b4:56:c1:20:e8:fb:18:fd:cd:14:15:25: 85:55:08:b8:95:b5:73:e9:a6:41:2a:e7:d0:96:a3:41:1b:4d: a3:b5:12:6e:4e:36:d1:88:b8:1a:13:05:34:ba:3f:0c:73:75: 5d:cb:8f:1e:ae:25:fd:4e:41:5b:3c:a5:29:1c:aa:3f:a4:91: 38:46:18:36:fb:d9:8a:70:bc:20:0f:ea:3a:ff:5b:24:56:09: d9:91:73:76:6c:94:c7:46:11:91:79:05:4c:db:b6:22:eb:f3: d2:ff:b6:15:c5:5f:36:41:43:99:2e:1a:b4:1d:56:16:91:1f: f9:eb:33:a6:2f:8b:35:04:df:d6:d4:5d:f0:0e:5c:e6:80:43: bb:11:e9:8f:92:c2:e4:4e:f2:3a:1d:d0:5b:97:92:b6:82:cf: fa:40:f6:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaal2CEYyFZ8zUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk M2QxNDQ0NGEtMzIxYi00NTlmLTlkNzEtZmQ4ZTZhMGVlMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju63EKEiKQbkRzvYCmus0AUmJmtAlkaszFjr 5QDnRwXMGJomrRPbxfnuCx30630iUoEF+GB31zSgNcR38DbiUEYsaYe6BqZiGZkR COKVBzgigzRdZ9Hr0w0KN98PvkdsSmc0QS1x07PNtAoTfZ1zNotk1/6fTjckU6Qq +FIhAJbdds7wCpNTQgn8KDS5JEQ9bxMMyoYZymu/KyKnItb/Z1xs7FpF1e704okK +pe9vg7gj+/evMb4pC/4yfGpbBHytHU+MenvuZVFIysyvRAHB9ODSU+wBJbuqaco x4wSkRHxuL5sOBB4/kC+8utxQW6Wn+iAcC16Sqg/Wde/zx4xjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/ik5ZN2DogqPf9257cebcW83ETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIazdqYEfQFP9hJIVw5DRKHGpt58n/ZSjVS9QGd25BQbTSCI4VMy2qxA bISXJWvW/U7jxOz+9x8ctXmlbR3VCKm5c/rzOs3HiJJ+/DOd5pa5FZvZOCfApNtf VFb28OWOiLRWwSDo+xj9zRQVJYVVCLiVtXPppkEq59CWo0EbTaO1Em5ONtGIuBoT BTS6PwxzdV3Ljx6uJf1OQVs8pSkcqj+kkThGGDb72YpwvCAP6jr/WyRWCdmRc3Zs lMdGEZF5BUzbtiLr89L/thXFXzZBQ5kuGrQdVhaRH/nrM6YvizUE39bUXfAOXOaA Q7sR6Y+SwuRO8jod0FuXkraCz/pA9nc= -----END CERTIFICATE-----Generated at Sun Apr 27 10:51:45 2025 by rpki-client