$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa File: 7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa (raw, json) Hash identifier: jxnZk6VNnBbn35ZoWrl8wnhytg+ToddMI8zGUImPzys= Subject key identifier: CD:78:B1:7B:5F:48:9A:3F:8C:4E:77:E8:EF:71:F6:3F:38:1B:51:37 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C0F3245324BF9F2B1687700 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa Signing time: Tue 22 Apr 2025 10:30:33 +0000 ROA not before: Tue 22 Apr 2025 10:30:33 +0000 ROA not after: Mon 21 Jul 2025 10:30:33 +0000 asID: 32043 IP address blocks: 173.232.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:0f:32:45:32:4b:f9:f2:b1:68:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 10:30:33 2025 GMT Not After : Jul 21 10:30:33 2025 GMT Subject: CN=4928d4ae-fe93-492b-b7ec-6509704b616e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:c7:16:b3:a9:c9:94:d2:cf:4c:bc:98:3c: da:03:89:29:bb:ed:de:d1:37:ac:74:70:ab:0d:b0: 73:4b:1b:a9:4f:83:fb:6f:85:48:f8:f3:ef:5c:2a: 86:33:8b:fc:dc:0c:bf:59:70:19:47:5c:e1:0d:7e: b9:f8:04:17:fa:1b:72:4d:f5:32:3d:2a:60:91:fb: 74:36:bc:ca:9b:da:3f:c9:5a:1c:23:d1:3b:dc:0e: e3:e3:20:7c:cf:4b:e5:64:24:6b:24:7e:01:84:42: e5:9e:32:19:7e:44:a9:ce:86:e0:d5:6e:09:52:ac: 31:98:2b:ee:3f:b7:60:d3:a4:6e:94:09:8c:63:9c: fb:37:7a:1e:b1:0c:b9:d0:0d:4d:ce:d6:a9:20:70: 2b:26:c3:3a:d5:08:e7:f1:ec:05:8b:02:fc:77:df: 88:34:2f:57:14:04:b3:b9:e9:cd:9c:47:57:b3:9b: 9f:33:bd:1c:f0:45:56:07:15:c5:bc:b6:2d:24:03: 14:fa:99:1a:93:72:f4:b8:7d:33:33:27:1d:78:67: 23:a8:ab:56:62:14:2c:31:f6:a5:39:11:8c:24:47: bf:e9:eb:4f:87:14:95:52:03:20:02:01:a4:91:2c: d7:d0:60:99:d2:7e:00:4f:a5:2d:1f:ce:cf:bc:45: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:78:B1:7B:5F:48:9A:3F:8C:4E:77:E8:EF:71:F6:3F:38:1B:51:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:03:17:6b:a8:94:bc:13:ef:5f:70:33:ea:f5:7b:2b:40:d4: 37:5e:cd:de:98:c8:e4:a3:4d:7f:60:d6:4c:32:86:58:d5:7d: cb:f8:1b:f3:ad:f1:70:e5:f6:54:37:cd:6b:36:10:9f:b7:bf: d1:ed:ed:a4:0d:13:a0:04:f0:71:ed:7e:73:89:e7:1a:df:bb: ad:0a:c3:56:ca:12:7c:4f:ba:63:a9:d1:da:5d:d5:ed:a5:89: e4:7a:2b:ff:f9:06:c6:fd:d4:0f:27:ab:60:1f:af:41:34:42: 06:47:73:bf:0c:8c:72:39:b7:d6:e8:da:a2:1d:05:4b:d5:d2: 78:55:7f:95:30:3a:fe:6d:41:26:b1:4a:79:df:65:19:b4:2f: 96:60:0b:bd:fc:e4:3b:e0:37:30:8e:59:f3:80:0e:f8:f7:ff: a2:83:9d:f1:ed:d7:dc:7b:6a:38:15:18:d7:f8:8b:eb:ea:f0: 8f:3a:96:a2:dc:97:8d:77:37:a3:6d:2b:a4:76:fa:08:d7:f9: bb:27:68:d0:8a:c3:ac:49:45:47:7f:63:07:9c:00:56:78:09: 32:ef:6c:b6:1a:3e:e1:d9:89:28:21:ce:33:4b:db:57:db:2d: fd:dc:1a:f3:e3:8a:fc:5f:5f:8e:c4:d0:cc:17:7b:b2:df:7a: 3b:8f:6a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcDzJFMkv58rFodwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjEwMzAzM1oXDTI1MDcyMTEwMzAzM1owLzEtMCsGA1UEAxMk NDkyOGQ0YWUtZmU5My00OTJiLWI3ZWMtNjUwOTcwNGI2MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKfHFrOpyZTSz0y8mDzaA4kpu+3e0TesdHCr DbBzSxupT4P7b4VI+PPvXCqGM4v83Ay/WXAZR1zhDX65+AQX+htyTfUyPSpgkft0 NrzKm9o/yVocI9E73A7j4yB8z0vlZCRrJH4BhELlnjIZfkSpzobg1W4JUqwxmCvu P7dg06RulAmMY5z7N3oesQy50A1NztapIHArJsM61Qjn8ewFiwL8d9+INC9XFASz uenNnEdXs5ufM70c8EVWBxXFvLYtJAMU+pkak3L0uH0zMycdeGcjqKtWYhQsMfal ORGMJEe/6etPhxSVUgMgAgGkkSzX0GCZ0n4AT6UtH87PvEWNDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM14sXtfSJo/jE536O9x9j84G1E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvN2E4MTVlZDQtNDIyNS0z NDIwLWE2YjctZWEzYjA4MjZhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIDF2uolLwT719wM+r1eytA1Ddezd6YyOSjTX9g1kwyhljVfcv4G/Ot 8XDl9lQ3zWs2EJ+3v9Ht7aQNE6AE8HHtfnOJ5xrfu60Kw1bKEnxPumOp0dpd1e2l ieR6K//5Bsb91A8nq2Afr0E0QgZHc78MjHI5t9bo2qIdBUvV0nhVf5UwOv5tQSax SnnfZRm0L5ZgC7385DvgNzCOWfOADvj3/6KDnfHt19x7ajgVGNf4i+vq8I86lqLc l413N6NtK6R2+gjX+bsnaNCKw6xJRUd/YwecAFZ4CTLvbLYaPuHZiSghzjNL21fb Lf3cGvPjivxfX47E0MwXe7LfejuPamc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:40 2025 by rpki-client