$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa File: d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa (raw, json) Hash identifier: O1BTtZTKmo1UjNFjfeNvNhAfOQUlLq9vrjUQY6qFhyU= Subject key identifier: 81:EE:E0:9B:AF:8D:62:36:19:50:8B:31:95:89:54:88:2E:B8:77:5C Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F43285849882F66A469CD0ACB174C70C0 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa Signing time: Tue 15 Apr 2025 07:39:16 +0000 ROA not before: Tue 15 Apr 2025 07:39:16 +0000 ROA not after: Mon 14 Jul 2025 07:39:16 +0000 asID: 12202 IP address blocks: 23.141.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:2f:66:a4:69:cd:0a:cb:17:4c:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Apr 15 07:39:16 2025 GMT Not After : Jul 14 07:39:16 2025 GMT Subject: CN=28a3f9a2-5e89-4603-8d78-40d383d2fd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:eb:96:56:65:eb:b5:c6:e6:be:f1:b9:34: 47:14:d1:76:ce:e1:c6:84:ca:28:b2:84:7e:32:07: 89:50:f2:f4:89:1b:26:6b:26:ad:f5:64:1a:9c:a2: 5e:fd:83:49:2c:a3:2a:2b:65:02:fd:67:d6:52:d6: 66:5a:6f:ac:b3:24:c3:16:41:48:cc:85:62:5b:83: f2:2a:73:49:f6:90:49:53:a4:62:7c:fa:42:8a:63: 85:d5:84:7c:17:06:f0:9c:19:df:ec:e2:dd:bf:f7: 04:b9:40:68:59:b8:b7:f0:05:88:50:d2:21:30:c0: 24:86:13:50:29:e6:44:d5:1e:67:70:36:26:bc:90: 3a:dd:8f:ad:3e:b7:f9:14:69:5a:41:a8:2f:00:93: 5b:1b:93:64:3f:60:ab:de:be:99:2a:e9:3a:48:9c: 8f:77:65:0c:cb:10:95:d4:3f:d2:42:41:75:5c:b0: a1:98:10:a1:7b:a4:b9:3e:b0:30:5e:ba:ca:c8:8f: e7:86:04:59:98:03:cc:a2:c4:3d:4c:6b:b5:34:09: 89:68:9e:0c:16:66:10:e7:71:7e:67:c0:a5:3e:07: 6d:5a:1c:22:f1:6e:e3:8e:2f:e8:93:cf:2a:5f:32: ba:69:85:e6:bb:61:8f:ff:50:7b:6d:33:16:e7:d5: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EE:E0:9B:AF:8D:62:36:19:50:8B:31:95:89:54:88:2E:B8:77:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 23.141.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e5:18:91:6e:57:13:66:a6:86:1c:68:ca:03:47:a4:b4:dd: 57:98:38:6f:f1:91:fe:24:bf:3a:e7:51:e7:90:dc:b3:38:4a: 2f:77:18:3c:54:76:b2:54:59:92:70:cf:56:7c:0a:8b:42:e5: 8d:2a:bf:ba:ee:c2:64:f1:12:7c:fa:bc:32:e4:29:a0:53:45: ee:3b:cb:36:27:c4:c4:5b:03:f4:05:56:98:5e:22:6f:86:d9: 3e:8c:95:fe:98:9a:87:c1:08:02:5d:fa:90:a2:1e:4c:91:b0: 0a:7e:f7:45:5e:4e:ea:37:c6:fb:43:fd:9c:a5:2f:26:c8:61: f8:91:8b:b8:c7:42:79:2d:1c:7a:59:9f:17:de:bb:71:92:3f: 3e:c3:35:22:cf:1c:0d:e2:ba:5f:4a:25:71:c0:c3:48:21:08: 4c:99:f3:ab:63:8d:e0:4f:02:4d:79:f8:1d:80:39:33:42:4b: 32:ca:d8:2b:1a:d4:d8:36:5a:b5:cb:22:7b:cb:50:de:a0:72: ea:0b:8f:56:d8:8b:50:78:7e:43:92:71:71:ed:f0:dd:f7:80: e0:9f:29:bc:c7:55:82:07:c6:0d:7f:d9:8e:f0:fb:ce:8f:a0: 7e:96:66:a4:22:9e:70:8c:2d:e2:f3:02:02:cf:dc:df:f2:02: 3b:92:61:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIL2akac0KyxdMcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI1MDQxNTA3MzkxNloXDTI1MDcxNDA3MzkxNlowLzEtMCsGA1UEAxMk MjhhM2Y5YTItNWU4OS00NjAzLThkNzgtNDBkMzgzZDJmZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5TrllZl67XG5r7xuTRHFNF2zuHGhMoosoR+ MgeJUPL0iRsmayat9WQanKJe/YNJLKMqK2UC/WfWUtZmWm+ssyTDFkFIzIViW4Py KnNJ9pBJU6RifPpCimOF1YR8FwbwnBnf7OLdv/cEuUBoWbi38AWIUNIhMMAkhhNQ KeZE1R5ncDYmvJA63Y+tPrf5FGlaQagvAJNbG5NkP2Cr3r6ZKuk6SJyPd2UMyxCV 1D/SQkF1XLChmBChe6S5PrAwXrrKyI/nhgRZmAPMosQ9TGu1NAmJaJ4MFmYQ53F+ Z8ClPgdtWhwi8W7jji/ok88qXzK6aYXmu2GP/1B7bTMW59VabQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHu4JuvjWI2GVCLMZWJVIguuHdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvZDY2NTBiOTItMjJiNy0z ZDkwLThlNDAtNWJhZDM0ZjNiYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/lGJFuVxNmpoYcaMoDR6S03VeYOG/xkf4kvzrnUeeQ3LM4Si93GDxU drJUWZJwz1Z8CotC5Y0qv7ruwmTxEnz6vDLkKaBTRe47yzYnxMRbA/QFVpheIm+G 2T6Mlf6YmofBCAJd+pCiHkyRsAp+90VeTuo3xvtD/ZylLybIYfiRi7jHQnktHHpZ nxfeu3GSPz7DNSLPHA3iul9KJXHAw0ghCEyZ86tjjeBPAk15+B2AOTNCSzLK2Csa 1Ng2WrXLInvLUN6gcuoLj1bYi1B4fkOScXHt8N33gOCfKbzHVYIHxg1/2Y7w+86P oH6WZqQinnCMLeLzAgLP3N/yAjuSYWg= -----END CERTIFICATE-----Generated at Sun Apr 27 15:09:24 2025 by rpki-client