$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/1f210877-687d-306a-8cc8-c5056fc5d150.roa File: 1f210877-687d-306a-8cc8-c5056fc5d150.roa (raw, json) Hash identifier: KRYYwbKKlZbBWKiy7dkh0XEyU+RVZF4tYTZSxktI1TE= Subject key identifier: DB:37:F5:FA:91:48:41:9F:66:78:C9:18:DA:F0:08:1E:FB:70:94:7B Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Certificate serial: 010D0C9F4328584953C413D0DDC868CBBFBA04C0 Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/1f210877-687d-306a-8cc8-c5056fc5d150.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 17024 IP address blocks: 23.154.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:13:d0:dd:c8:68:cb:bf:ba:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=0c2f3e28-7085-464e-8130-b110baa32a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:44:29:47:ec:ae:9a:7f:54:de:5d:b8:95: eb:d7:3f:a4:df:cf:39:08:97:79:c9:ff:aa:33:9a: b7:e3:f8:34:30:6a:40:cc:a9:a2:31:de:69:4e:5c: 4b:43:95:a1:c5:c0:ea:05:12:7c:02:11:85:ad:d8: 27:f5:be:17:05:0e:27:e7:87:f1:3a:2e:db:5b:04: f5:69:2b:6c:56:f3:e5:17:7b:b9:bc:08:8d:e4:c6: 55:92:e2:62:cc:9d:0d:34:b6:2d:96:42:33:37:fc: 15:36:9b:e7:8b:12:b5:8f:c9:40:f8:48:15:78:38: 25:ae:9c:cd:f7:a1:e4:bd:41:8c:93:7c:d3:dc:e0: 53:af:ce:2b:c5:e7:45:be:1e:a3:9a:a7:96:2c:44: 77:9e:af:a8:1c:e4:e0:70:ef:33:70:31:d9:18:91: 67:b4:b9:88:5b:12:c5:9d:25:54:22:38:11:20:22: 9e:90:6e:e3:80:be:cc:57:e3:c3:ac:21:07:08:cb: 1f:30:a7:4f:23:dd:f3:a7:d4:aa:69:2a:0d:73:e8: dc:99:d0:6e:66:e9:cf:c0:40:7e:2e:21:78:3f:0e: 00:f8:db:7c:aa:53:53:dc:05:7a:11:96:7e:87:56: 29:ae:a8:4f:19:67:d7:3b:d2:f2:6b:e5:fd:dd:f2: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:37:F5:FA:91:48:41:9F:66:78:C9:18:DA:F0:08:1E:FB:70:94:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/1f210877-687d-306a-8cc8-c5056fc5d150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl X509v3 Authority Key Identifier: keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer sbgp-ipAddrBlock: critical IPv4: 23.154.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d8:15:0a:5c:58:27:4c:1c:96:a1:43:61:39:9a:8e:b0:c3: c9:c3:63:74:c0:02:83:21:51:7d:35:33:4c:02:1b:26:05:4e: f6:ce:b7:ae:fb:cd:9d:78:cd:97:9a:9e:7a:d4:01:99:cb:b0: ac:1b:67:9b:c2:9d:18:e5:59:26:43:92:51:65:ac:18:d6:77: 55:6c:43:c7:2c:20:ef:29:75:74:7e:95:31:b2:4a:81:2d:94: e6:64:41:72:ae:44:6e:78:8a:b1:39:e2:47:26:91:6e:bb:3d: 0d:30:06:2a:18:e9:29:61:fc:e1:8a:ee:2e:8d:b3:03:1b:9b: 65:1c:55:e1:84:b7:b9:2f:fa:f5:20:38:0c:79:47:2b:5c:03: b3:3f:e4:a3:20:97:bc:54:09:98:45:e2:be:5b:d7:22:75:93: 86:c0:d0:59:e6:0e:c6:d6:7f:96:27:40:00:88:f0:d3:a0:6a: 78:89:59:bf:dd:40:75:50:69:ec:ec:a4:ed:c9:67:d7:01:47: b6:37:3d:cd:11:d1:75:00:0f:a9:b1:10:51:97:4e:db:8e:1f: 57:36:ef:23:33:fa:87:88:41:4e:d1:95:b7:79:81:99:05:1e: ce:2c:b2:d3:9a:03:39:08:5d:96:be:b5:d8:3a:57:66:20:5a: 4d:e5:ab:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBPQ3choy7+6BMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz Zjg3MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGMyZjNlMjgtNzA4NS00NjRlLTgxMzAtYjExMGJhYTMyYTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmpEKUfsrpp/VN5duJXr1z+k3885CJd5yf+q M5q34/g0MGpAzKmiMd5pTlxLQ5WhxcDqBRJ8AhGFrdgn9b4XBQ4n54fxOi7bWwT1 aStsVvPlF3u5vAiN5MZVkuJizJ0NNLYtlkIzN/wVNpvnixK1j8lA+EgVeDglrpzN 96HkvUGMk3zT3OBTr84rxedFvh6jmqeWLER3nq+oHOTgcO8zcDHZGJFntLmIWxLF nSVUIjgRICKekG7jgL7MV+PDrCEHCMsfMKdPI93zp9SqaSoNc+jcmdBuZunPwEB+ LiF4Pw4A+Nt8qlNT3AV6EZZ+h1YprqhPGWfXO9Lya+X93fLYlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs39fqRSEGfZnjJGNrwCB77cJR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvMWYyMTA4NzctNjg3ZC0z MDZhLThjYzgtYzUwNTZmYzVkMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh YmVhMjNmODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHYFQpcWCdMHJahQ2E5mo6ww8nDY3TAAoMhUX01M0wCGyYFTvbOt677 zZ14zZeannrUAZnLsKwbZ5vCnRjlWSZDklFlrBjWd1VsQ8csIO8pdXR+lTGySoEt lOZkQXKuRG54irE54kcmkW67PQ0wBioY6Slh/OGK7i6NswMbm2UcVeGEt7kv+vUg OAx5RytcA7M/5KMgl7xUCZhF4r5b1yJ1k4bA0FnmDsbWf5YnQACI8NOganiJWb/d QHVQaezspO3JZ9cBR7Y3Pc0R0XUAD6mxEFGXTtuOH1c27yMz+oeIQU7Rlbd5gZkF Hs4sstOaAzkIXZa+tdg6V2YgWk3lq8I= -----END CERTIFICATE-----Generated at Sun Apr 27 13:00:06 2025 by rpki-client