$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/15009c05-1bc4-304e-87d5-ab788644da3a.roa File: 15009c05-1bc4-304e-87d5-ab788644da3a.roa (raw, json) Hash identifier: YSGpXgedqrnooYHC22k1emvUPUcZDAd6Vq5bliFhDa4= Subject key identifier: 34:6B:F2:73:18:8F:C6:DA:11:2B:EE:C5:64:2F:DF:3C:64:9E:1F:89 Certificate issuer: /CN=2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646 Certificate serial: 010D0C9F432858495B2150F8317B47ED3C443580 Authority key identifier: 1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/15009c05-1bc4-304e-87d5-ab788644da3a.roa Signing time: Sun 30 Mar 2025 04:19:31 +0000 ROA not before: Sun 30 Mar 2025 04:19:31 +0000 ROA not after: Sat 28 Jun 2025 04:19:31 +0000 asID: 8095 IP address blocks: 23.180.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5b:21:50:f8:31:7b:47:ed:3c:44:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646 Validity Not Before: Mar 30 04:19:31 2025 GMT Not After : Jun 28 04:19:31 2025 GMT Subject: CN=80ca0298-ceef-4fae-b1f1-dddc64835494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:b7:a1:2b:70:9b:47:b7:7d:6c:82:f6:9e: 05:fb:87:d6:09:c9:e2:b5:e5:ba:a1:78:c3:7f:76: 29:1d:ec:2b:1e:8b:10:b3:e7:78:08:fd:82:7c:9a: db:4f:53:24:82:b1:6d:a0:35:a7:25:5c:d0:e3:f3: a6:b2:d2:c8:2d:55:04:09:37:de:22:49:3d:b6:13: 5a:14:a3:98:02:85:b6:2e:e1:44:c9:a3:38:98:f0: a8:97:ad:51:89:30:11:b4:6d:57:e7:86:fd:5c:60: 62:1d:96:db:0f:38:2a:4c:dc:1c:ac:74:9b:16:09: be:81:cb:49:bc:93:35:e6:72:e0:72:95:61:42:0e: 57:be:43:06:2c:43:f6:83:23:4d:b2:b1:0e:7c:1a: 4e:4c:7c:24:ec:a3:76:dc:bd:b6:ef:99:c9:48:1c: 72:e6:94:0e:5a:af:ce:62:d8:64:ab:d6:a7:c7:26: 6b:93:4e:61:d6:64:a9:3d:dc:36:29:4f:03:8d:eb: 2b:82:c4:ea:f5:31:7b:6d:a1:8b:82:28:7d:d2:a9: 84:ea:b4:45:8e:aa:75:cf:ed:c3:b5:15:5b:7e:1e: 95:a0:20:f1:a4:3b:2f:ce:07:25:28:8c:88:8c:62: 34:f4:bf:8a:02:ef:26:3e:f0:9d:2b:98:8e:b9:b7: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6B:F2:73:18:8F:C6:DA:11:2B:EE:C5:64:2F:DF:3C:64:9E:1F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/15009c05-1bc4-304e-87d5-ab788644da3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl X509v3 Authority Key Identifier: keyid:1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer sbgp-ipAddrBlock: critical IPv4: 23.180.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:87:1c:b8:54:ec:4d:46:1e:33:c1:a1:99:84:0b:27:ad:2c: 55:5a:c8:12:14:15:89:02:83:ca:71:4b:bb:f7:c6:ac:1f:93: 00:2b:94:08:0b:e0:e3:7b:ce:da:0a:96:68:5b:6b:06:b5:11: 60:1c:95:f3:54:18:62:98:84:85:29:96:f1:0a:10:fb:6c:00: f8:50:88:bf:5d:31:9a:e2:cd:b2:e2:67:60:de:d0:98:05:26: 12:44:36:55:89:8d:b6:6d:9f:df:a8:95:6f:73:7f:83:88:0f: 23:c9:a7:87:34:b0:88:4f:f9:12:cd:c3:75:ed:5c:63:cc:e8: da:d9:9e:ee:36:90:a9:96:c0:21:04:69:fa:ba:5e:a1:ef:7c: 1a:33:53:50:6d:7d:f2:ca:9d:f2:f9:fc:1f:ce:b9:e4:e2:be: fb:93:85:1b:60:df:e9:93:7f:3d:d2:5f:ba:f5:32:e7:0e:f5: b0:6b:5b:06:bb:80:34:20:b4:8e:73:7d:14:46:13:53:ce:97: 13:86:62:88:f6:28:de:bc:cb:65:53:23:56:6c:b2:f1:a8:33: 68:0d:4f:46:ae:69:b0:3f:42:21:f2:b9:aa:7f:1e:ee:63:3f: d4:25:b9:3c:79:c7:d4:fd:e5:6d:7e:91:e0:28:3b:82:5c:d8: 62:3c:e7:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElbIVD4MXtH7TxENYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ1MzZkMWYtM2RhYy00YmQ1LWIxYjgtYzhjNmY4YWFk NjQ2MB4XDTI1MDMzMDA0MTkzMVoXDTI1MDYyODA0MTkzMVowLzEtMCsGA1UEAxMk ODBjYTAyOTgtY2VlZi00ZmFlLWIxZjEtZGRkYzY0ODM1NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsau3oStwm0e3fWyC9p4F+4fWCcniteW6oXjD f3YpHewrHosQs+d4CP2CfJrbT1MkgrFtoDWnJVzQ4/OmstLILVUECTfeIkk9thNa FKOYAoW2LuFEyaM4mPCol61RiTARtG1X54b9XGBiHZbbDzgqTNwcrHSbFgm+gctJ vJM15nLgcpVhQg5XvkMGLEP2gyNNsrEOfBpOTHwk7KN23L2275nJSBxy5pQOWq/O Ythkq9anxyZrk05h1mSpPdw2KU8DjesrgsTq9TF7baGLgih90qmE6rRFjqp1z+3D tRVbfh6VoCDxpDsvzgclKIyIjGI09L+KAu8mPvCdK5iOubcogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRr8nMYj8baESvuxWQv3zxknh+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDUz NmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2ZjhhYWQ2NDYvMTUwMDljMDUtMWJjNC0z MDRlLTg3ZDUtYWI3ODg2NDRkYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ1MzZkMWYtM2RhYy00YmQ1LWIx YjgtYzhjNmY4YWFkNjQ2LzJkNTM2ZDFmLTNkYWMtNGJkNS1iMWI4LWM4YzZmOGFh ZDY0Ni5jcmwwHwYDVR0jBBgwFoAUG5qQsrNiN9sQtT2TbtUDWXqdKuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDUzNmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2 ZjhhYWQ2NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7Q4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyHHLhU7E1GHjPBoZmECyetLFVayBIUFYkCg8pxS7v3xqwfkwArlAgL 4ON7ztoKlmhbawa1EWAclfNUGGKYhIUplvEKEPtsAPhQiL9dMZrizbLiZ2De0JgF JhJENlWJjbZtn9+olW9zf4OIDyPJp4c0sIhP+RLNw3XtXGPM6NrZnu42kKmWwCEE afq6XqHvfBozU1BtffLKnfL5/B/OueTivvuThRtg3+mTfz3SX7r1MucO9bBrWwa7 gDQgtI5zfRRGE1POlxOGYoj2KN68y2VTI1ZssvGoM2gNT0auabA/QiHyuap/Hu5j P9QluTx5x9T95W1+keAoO4Jc2GI85+s= -----END CERTIFICATE-----Generated at Tue Apr 29 09:25:54 2025 by rpki-client