$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa File: 290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa (raw, json) Hash identifier: +yk5QZku//4RpQFV1AkPmDha23BO8pYasA7aKhV9rM8= Subject key identifier: 5D:B4:2F:3B:2A:BC:D1:B7:AC:12:8B:4D:D2:7A:BB:A8:8E:B0:42:31 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849AFB81603E96DE2AE9393E680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa Signing time: Tue 29 Apr 2025 11:31:12 +0000 ROA not before: Tue 29 Apr 2025 11:31:12 +0000 ROA not after: Mon 28 Jul 2025 11:31:12 +0000 asID: 174 IP address blocks: 173.232.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:b8:16:03:e9:6d:e2:ae:93:93:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 29 11:31:12 2025 GMT Not After : Jul 28 11:31:12 2025 GMT Subject: CN=1001a416-1f20-4967-9d9d-9856a77c72a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:18:4b:45:f6:d7:08:8c:cf:4c:17:c1:b5: 15:fa:f2:3c:84:c0:33:c2:f1:29:df:a8:91:89:a1: cf:ae:72:d5:ac:7d:c8:17:9b:19:06:3d:55:bc:f2: 31:db:6d:6b:b5:49:9c:51:4a:e3:df:78:7e:3e:5a: 06:34:0a:7a:7b:a0:80:3f:68:0a:1c:bd:b4:39:03: 9a:ac:fb:d8:7a:2b:b3:ac:9b:a0:35:48:1d:fa:99: 07:49:f2:7f:78:3e:12:da:e8:5c:8d:a5:f4:22:85: 1c:ae:da:89:91:26:68:91:47:0b:35:6c:b3:45:0d: 20:ae:4b:05:d4:cb:10:5e:22:9d:3d:b1:64:3f:1e: c7:5b:82:30:3c:20:01:e7:9c:52:27:f5:1a:c1:fe: 2d:2f:68:5d:6f:95:b0:31:fb:7b:a3:ec:3a:c6:ae: 0b:cd:a8:ce:32:65:56:d5:a7:e2:cb:f8:ac:67:04: e7:11:23:83:1b:45:f1:49:60:a7:47:0f:95:6b:8d: 17:27:41:f7:41:ac:b0:bf:74:3b:85:62:e9:90:c7: 90:47:ec:7a:3a:38:d7:c7:b3:80:1e:84:54:3a:b3: 13:fa:7d:28:ce:fa:c3:40:58:8c:56:7e:50:32:51: 57:29:ca:0f:02:04:94:ed:17:fb:95:63:e7:55:69: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B4:2F:3B:2A:BC:D1:B7:AC:12:8B:4D:D2:7A:BB:A8:8E:B0:42:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5c:03:30:db:35:7c:5e:98:d2:81:93:f2:d9:b9:b6:c5:31: ba:2c:27:03:c1:d8:ce:48:34:27:fc:cc:79:4d:d3:05:1c:46: 95:8a:ac:b6:ab:cd:55:12:11:8b:2a:28:db:bd:0b:87:02:78: fc:f5:75:9f:cb:de:d6:c6:d0:a3:32:2f:45:56:04:e9:f5:8b: b3:e6:57:3c:3e:46:77:32:2a:a9:13:51:1d:1c:9b:fe:18:c9: 10:da:48:19:a9:58:73:7c:9f:80:ff:7c:4d:cf:ec:7c:24:17: 81:d4:80:f3:17:68:db:cb:e0:b4:7d:df:b1:9e:d2:af:8f:82: 42:8c:5d:0d:5d:62:2c:29:d9:ae:bd:93:1c:e8:76:e3:9a:18: 5d:aa:e2:15:df:b3:db:d7:48:ef:10:b4:2c:4e:d7:c5:37:23: ae:16:80:fa:df:b0:89:94:8a:af:3b:28:36:75:e5:b0:90:3e: 3a:99:c7:40:ae:92:68:c5:92:05:51:f5:b9:e5:3d:c5:0f:5b: 1f:c8:e9:33:b0:7e:09:19:81:10:bb:07:91:6f:c7:a4:e8:7e: 38:e0:41:f8:af:fe:c4:da:00:1c:66:34:9b:72:71:02:7b:88: 94:d1:8d:1f:6e:0d:ab:b3:0a:4e:09:31:88:5c:ee:ac:49:c0: 48:0b:40:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvuBYD6W3irpOT5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyOTExMzExMloXDTI1MDcyODExMzExMlowLzEtMCsGA1UEAxMk MTAwMWE0MTYtMWYyMC00OTY3LTlkOWQtOTg1NmE3N2M3MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsscYS0X21wiMz0wXwbUV+vI8hMAzwvEp36iR iaHPrnLVrH3IF5sZBj1VvPIx221rtUmcUUrj33h+PloGNAp6e6CAP2gKHL20OQOa rPvYeiuzrJugNUgd+pkHSfJ/eD4S2uhcjaX0IoUcrtqJkSZokUcLNWyzRQ0grksF 1MsQXiKdPbFkPx7HW4IwPCAB55xSJ/Uawf4tL2hdb5WwMft7o+w6xq4LzajOMmVW 1afiy/isZwTnESODG0XxSWCnRw+Va40XJ0H3Qaywv3Q7hWLpkMeQR+x6OjjXx7OA HoRUOrMT+n0ozvrDQFiMVn5QMlFXKcoPAgSU7Rf7lWPnVWnQewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF20LzsqvNG3rBKLTdJ6u6iOsEIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjkwYTMxY2ItYTlkMi0z YTI0LWI0NzktZThmY2JhNmIzNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZcAzDbNXxemNKBk/LZubbFMbosJwPB2M5INCf8zHlN0wUcRpWKrLar zVUSEYsqKNu9C4cCePz1dZ/L3tbG0KMyL0VWBOn1i7PmVzw+RncyKqkTUR0cm/4Y yRDaSBmpWHN8n4D/fE3P7HwkF4HUgPMXaNvL4LR937Ge0q+PgkKMXQ1dYiwp2a69 kxzoduOaGF2q4hXfs9vXSO8QtCxO18U3I64WgPrfsImUiq87KDZ15bCQPjqZx0Cu kmjFkgVR9bnlPcUPWx/I6TOwfgkZgRC7B5Fvx6TofjjgQfiv/sTaABxmNJtycQJ7 iJTRjR9uDauzCk4JMYhc7qxJwEgLQLA= -----END CERTIFICATE-----Generated at Thu May 1 21:40:23 2025 by rpki-client