$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/0443525c-039a-3c64-a752-90eeea65c208.roa File: 0443525c-039a-3c64-a752-90eeea65c208.roa (raw, json) Hash identifier: sy+s/xLnjlsbHxIjsonwrsMYC7/DuoOThtyHmRxIVhI= Subject key identifier: D1:5B:60:C6:B7:42:51:FD:09:94:C0:CB:1C:2F:FC:3B:7C:04:36:CA Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F4328584A254D7318B94ACC28EBF91480 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/0443525c-039a-3c64-a752-90eeea65c208.roa Signing time: Tue 10 Jun 2025 14:21:43 +0000 ROA not before: Tue 10 Jun 2025 14:21:43 +0000 ROA not after: Mon 08 Sep 2025 14:21:43 +0000 asID: 213436 IP address blocks: 23.151.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:4d:73:18:b9:4a:cc:28:eb:f9:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Jun 10 14:21:43 2025 GMT Not After : Sep 8 14:21:43 2025 GMT Subject: CN=aec912fb-d978-4a46-a228-5ac8c7f8f42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:b9:3d:8b:6b:4a:ff:ac:44:0f:c6:a4:19: 35:b4:24:26:c3:87:52:18:e3:46:ff:9a:e4:03:c5: da:2a:28:06:1f:71:7b:ae:f5:50:7d:49:57:14:e0: 69:40:01:85:c4:0a:b4:20:6f:5a:d3:be:04:29:65: 64:f9:cf:ca:1a:38:84:38:01:e0:dd:fe:eb:13:99: 79:22:9d:02:23:e9:e8:ac:7c:2c:50:4d:84:29:4f: cc:07:29:bb:71:56:9f:e7:b3:79:db:90:15:9a:93: c3:29:08:c0:34:bd:f5:48:45:6e:36:d1:15:47:8e: 0a:c6:a0:31:0f:58:0f:ab:2a:07:86:1c:12:80:17: ca:89:ba:90:07:63:ce:50:be:23:25:e6:59:9b:6c: 6f:e0:d6:90:00:96:a7:97:97:ba:96:6a:61:1f:da: 0d:99:64:c5:d8:4e:65:53:ff:3f:59:07:63:96:3c: 98:22:b7:c3:49:13:a3:c8:7f:c4:a0:15:a3:a8:c1: e9:63:b3:ff:14:7a:84:75:d7:4e:07:ec:7d:e2:38: 66:bc:86:bd:38:1b:e1:e0:17:5f:a4:ae:40:a3:0d: 57:be:3b:5b:f5:d8:8f:0f:8a:a8:b6:54:70:f1:59: 6d:77:dd:41:b7:78:1d:2a:2a:24:d6:c0:22:b5:aa: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5B:60:C6:B7:42:51:FD:09:94:C0:CB:1C:2F:FC:3B:7C:04:36:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/0443525c-039a-3c64-a752-90eeea65c208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 23.151.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7d:d6:45:9f:3c:e2:43:39:00:5a:84:9a:77:d4:04:49:bb: e0:72:14:11:94:ba:32:5f:8d:3c:a9:16:db:f3:94:2c:2b:e0: 02:0c:04:70:ca:1a:22:96:b3:77:e4:fe:26:7b:df:a8:d2:b2: 3e:c8:7d:36:36:b1:b5:73:b1:88:47:e6:21:b5:8b:b5:b0:7c: 18:28:a4:70:2d:bb:56:e9:8f:2b:6b:e1:41:9f:d2:45:0b:3e: 7a:6e:34:fb:7b:7b:90:6e:ad:6b:5d:2e:97:a5:81:18:41:66: 23:e7:aa:84:31:97:51:b4:6d:e2:da:77:a7:c5:09:48:70:09: 58:86:37:df:1c:ea:d5:1a:86:01:da:47:6a:1b:57:c1:3e:7d: a0:11:b0:66:86:85:13:0c:e2:6b:af:1b:25:53:d9:b0:a1:06: a9:51:26:24:55:1b:98:91:95:84:d6:f6:2c:8b:1a:ab:ed:f7: 11:97:dc:1e:90:de:1c:3c:a9:3c:32:9c:f4:f3:b8:e5:ed:64: c7:41:88:7c:18:ec:e3:a5:b1:eb:8b:30:6b:63:38:52:87:aa: e9:7b:db:5c:5e:2f:0d:31:1e:4a:12:15:84:9f:2a:d5:84:fa: 2e:45:6a:b2:1d:da:10:69:f6:c8:55:85:c7:cb:5d:32:a1:21: a4:84:5e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolTXMYuUrMKOv5FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDYxMDE0MjE0M1oXDTI1MDkwODE0MjE0M1owLzEtMCsGA1UEAxMk YWVjOTEyZmItZDk3OC00YTQ2LWEyMjgtNWFjOGM3ZjhmNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2py5PYtrSv+sRA/GpBk1tCQmw4dSGONG/5rk A8XaKigGH3F7rvVQfUlXFOBpQAGFxAq0IG9a074EKWVk+c/KGjiEOAHg3f7rE5l5 Ip0CI+norHwsUE2EKU/MBym7cVaf57N525AVmpPDKQjANL31SEVuNtEVR44KxqAx D1gPqyoHhhwSgBfKibqQB2POUL4jJeZZm2xv4NaQAJanl5e6lmphH9oNmWTF2E5l U/8/WQdjljyYIrfDSROjyH/EoBWjqMHpY7P/FHqEdddOB+x94jhmvIa9OBvh4Bdf pK5Aow1Xvjtb9diPD4qotlRw8Vltd91Bt3gdKiok1sAitapSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFbYMa3QlH9CZTAyxwv/Dt8BDbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvMDQ0MzUyNWMtMDM5YS0z YzY0LWE3NTItOTBlZWVhNjVjMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5coMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ91kWfPOJDOQBahJp31ARJu+ByFBGUujJfjTypFtvzlCwr4AIMBHDK GiKWs3fk/iZ736jSsj7IfTY2sbVzsYhH5iG1i7WwfBgopHAtu1bpjytr4UGf0kUL PnpuNPt7e5BurWtdLpelgRhBZiPnqoQxl1G0beLad6fFCUhwCViGN98c6tUahgHa R2obV8E+faARsGaGhRMM4muvGyVT2bChBqlRJiRVG5iRlYTW9iyLGqvt9xGX3B6Q 3hw8qTwynPTzuOXtZMdBiHwY7OOlseuLMGtjOFKHqul721xeLw0xHkoSFYSfKtWE +i5FarId2hBp9shVhcfLXTKhIaSEXvQ= -----END CERTIFICATE-----Generated at Sun Jun 15 23:15:38 2025 by rpki-client