$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa File: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (raw, json) Hash identifier: 3EQ+KOKFMjXNAfPGWEZ2w67ibTmrARXqNIwiiQ8KXbY= Subject key identifier: 2C:49:F4:DA:AB:ED:5F:F1:BE:22:C5:CC:64:6E:CF:41:3B:51:44:3F Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584981D45481D12C4B7A9063B880 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 400442 IP address blocks: 23.133.168.0/24 maxlen: 24 205.236.99.0/24 maxlen: 24 2602:fbc7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:54:81:d1:2c:4b:7a:90:63:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=c5c8a477-34d5-4981-9e52-56233f6c5b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:4c:1c:b5:78:ae:97:3f:96:0e:b2:f6:53: 99:83:f2:e8:f3:2e:cb:6c:cb:3f:fc:e4:19:0e:e1: 5a:a5:e7:a7:7c:4d:2d:b3:f7:96:2c:e3:c0:ad:a0: 54:94:39:bf:78:0f:74:4d:50:e6:1a:a0:3f:f4:17: 5c:55:c5:6c:c0:d2:5e:23:41:f8:5a:63:ff:d6:58: 36:10:d7:c6:f6:aa:52:e9:41:50:67:be:f4:e7:71: bd:4c:fb:82:eb:6d:24:9d:e5:a0:4b:5d:ec:b3:57: 0d:0f:3b:d9:b1:fd:0f:0a:18:35:c0:67:48:32:ef: a7:e8:fe:52:26:47:92:55:3e:b7:bc:21:5b:9f:61: 2c:0e:b1:99:10:03:2f:63:2e:a9:e0:e3:a1:2e:5c: 29:5b:bb:08:eb:2a:17:30:d1:3c:e3:3f:e1:c8:56: 93:b1:e7:96:b5:33:18:bd:7e:50:9a:b8:65:e0:8f: f5:1b:c8:64:f2:20:d8:00:76:5c:23:c6:84:d4:cc: 9a:f2:37:8a:3a:16:6c:22:98:f2:d6:b5:62:84:16: a5:98:38:9e:fe:ba:3d:22:b7:15:34:19:c9:73:9b: 5e:ab:8c:ea:63:46:31:71:45:40:48:94:31:90:55: b7:70:de:41:25:c4:b2:4b:f7:81:72:3d:f8:a0:bf: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:49:F4:DA:AB:ED:5F:F1:BE:22:C5:CC:64:6E:CF:41:3B:51:44:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv4: 23.133.168.0/24 205.236.99.0/24 IPv6: 2602:fbc7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d2:c0:38:69:4e:f9:03:eb:1c:a5:b4:8e:42:ad:cc:3f:72: 61:39:33:57:a1:f6:f0:1b:8c:8d:44:40:18:33:4d:ea:45:67: 3c:a4:51:cc:f0:97:72:c7:b8:55:61:82:49:60:c3:f8:84:da: 17:f4:a6:32:aa:68:a3:52:ff:5f:57:2a:19:4f:4a:3b:33:1b: 45:4b:2f:87:ba:2e:b6:20:8c:13:ca:33:91:19:54:44:03:4c: 52:a5:4d:a6:de:4c:14:71:b4:0f:3c:f5:52:ae:ee:10:f8:da: ed:57:f4:83:10:7c:c7:30:47:e3:f8:18:ec:3c:cf:8a:52:ec: b7:d3:15:50:f8:b7:fd:e0:91:b3:96:84:95:a9:03:5b:d5:1f: 83:f3:bf:a4:5f:14:93:d2:21:13:be:20:20:2b:5e:20:d0:be: 3b:8e:09:5b:53:3a:4c:bc:72:d7:3b:ef:7e:39:cd:ed:94:d8: 62:05:56:3f:ed:4a:ae:94:8a:9f:44:9c:10:37:ce:eb:49:5e: 9d:26:8e:6c:3c:93:d8:dc:13:3b:87:8a:9e:a0:2e:2a:60:6d: ce:f6:22:33:88:eb:7b:9d:6c:c0:67:0a:36:5f:d7:bc:5c:7d: 11:a3:c2:c7:09:df:67:03:5f:3f:68:77:e5:8a:f7:6e:da:8a: 6f:ce:0a:e1 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEmB1FSB0SxLepBjuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk YzVjOGE0NzctMzRkNS00OTgxLTllNTItNTYyMzNmNmM1YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVVMHLV4rpc/lg6y9lOZg/Lo8y7LbMs//OQZ DuFapeenfE0ts/eWLOPAraBUlDm/eA90TVDmGqA/9BdcVcVswNJeI0H4WmP/1lg2 ENfG9qpS6UFQZ77053G9TPuC620kneWgS13ss1cNDzvZsf0PChg1wGdIMu+n6P5S JkeSVT63vCFbn2EsDrGZEAMvYy6p4OOhLlwpW7sI6yoXMNE84z/hyFaTseeWtTMY vX5Qmrhl4I/1G8hk8iDYAHZcI8aE1Mya8jeKOhZsIpjy1rVihBalmDie/ro9IrcV NBnJc5teq4zqY0YxcUVASJQxkFW3cN5BJcSyS/eBcj34oL8CgwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFCxJ9Nqr7V/xviLFzGRuz0E7UUQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvODk3YWRkZGItYTMwOS0z ZmMwLWI3OTMtY2NiZjUzODhjMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4WoAwQA zexjMA4EAgACMAgDBgAmAvvHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa0sA4aU75A+scpbSOQq3MP3Jh OTNXofbwG4yNREAYM03qRWc8pFHM8Jdyx7hVYYJJYMP4hNoX9KYyqmijUv9fVyoZ T0o7MxtFSy+Hui62IIwTyjORGVREA0xSpU2m3kwUcbQPPPVSru4Q+NrtV/SDEHzH MEfj+BjsPM+KUuy30xVQ+Lf94JGzloSVqQNb1R+D87+kXxST0iETviAgK14g0L47 jglbUzpMvHLXO+9+Oc3tlNhiBVY/7UqulIqfRJwQN87rSV6dJo5sPJPY3BM7h4qe oC4qYG3O9iIziOt7nWzAZwo2X9e8XH0Ro8LHCd9nA18/aHflivdu2opvzgrh -----END CERTIFICATE-----Generated at Sat May 3 02:31:42 2025 by rpki-client