$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa File: 86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa (raw, json) Hash identifier: ro8oHCU8gl+Sa+Jguv5wq58zJD0Lj/TqjGJFiRBvRBQ= Subject key identifier: A2:6E:79:5B:39:14:94:C1:F6:48:1D:EB:53:C1:72:5E:93:F3:33:CE Certificate issuer: /CN=81b7ac6c-80f4-4151-a607-46f1d9c9a264 Certificate serial: 010D0C9F432858499928071E773F79332A97F600 Authority key identifier: 27:94:C0:58:3C:E2:19:D8:1A:33:F0:A1:F5:7F:E4:0C:06:1B:A5:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa Signing time: Mon 21 Apr 2025 09:33:09 +0000 ROA not before: Mon 21 Apr 2025 09:33:09 +0000 ROA not after: Sun 20 Jul 2025 09:33:09 +0000 asID: 214483 IP address blocks: 23.137.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:28:07:1e:77:3f:79:33:2a:97:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81b7ac6c-80f4-4151-a607-46f1d9c9a264 Validity Not Before: Apr 21 09:33:09 2025 GMT Not After : Jul 20 09:33:09 2025 GMT Subject: CN=2c15c34d-2630-4da3-8cbb-d91755b9e04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:8d:0c:0c:cf:88:57:01:8f:2d:cd:b9:e4: 36:a2:dc:28:e6:61:91:37:86:5d:ff:af:01:d8:fb: 6c:eb:4a:5b:1f:45:a9:b1:55:26:02:da:af:1a:0f: 71:af:07:0d:e6:b1:9a:1c:52:51:37:45:65:0d:3a: 39:a4:68:51:ec:91:7d:98:6d:42:1d:a1:c0:32:26: 05:5f:b8:a4:a8:a7:c1:53:83:c9:37:4e:a4:64:fc: f9:c2:74:28:fd:a6:d4:bd:d1:3a:ec:1c:6c:aa:61: f7:41:91:db:3a:1b:b7:20:65:99:53:35:3b:a0:69: 7f:10:b3:b1:77:7c:90:d0:30:e8:3f:de:52:cf:4c: 01:ef:93:66:be:bf:96:0f:45:cf:c4:6a:d8:69:0c: 02:85:a9:c8:3e:cb:1c:07:f2:45:4e:de:09:6a:78: a2:96:c5:74:2f:be:b0:a0:66:b3:1d:6d:6d:e2:20: a0:60:6b:df:1a:fe:df:9a:a9:3a:c9:b9:36:07:d0: 60:96:ed:f1:df:45:9f:ce:15:6d:cd:d3:9f:28:d3: e9:df:d4:0b:8c:dd:05:d9:63:30:72:89:62:88:39: 93:b5:90:f2:6a:69:16:df:11:fc:81:98:d5:a4:38: d1:74:32:0f:96:7d:d5:c7:8a:fa:52:12:d9:da:33: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:79:5B:39:14:94:C1:F6:48:1D:EB:53:C1:72:5E:93:F3:33:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.crl X509v3 Authority Key Identifier: keyid:27:94:C0:58:3C:E2:19:D8:1A:33:F0:A1:F5:7F:E4:0C:06:1B:A5:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer sbgp-ipAddrBlock: critical IPv4: 23.137.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:24:05:d5:b1:87:62:f9:e8:74:32:f3:d6:85:8d:78:78:3e: 26:cc:50:de:22:cf:09:a4:08:5d:62:75:5a:3d:d7:12:ba:9c: 6c:63:fc:a1:ce:6e:11:66:00:e8:1f:a7:c3:8a:aa:fe:d9:36: 09:b3:d9:1a:65:13:15:0e:06:51:06:ae:76:71:24:ce:77:7e: 30:14:2d:5f:94:a9:dc:5d:7a:60:61:c2:5e:0a:5a:43:db:e9: 07:9a:fc:bb:96:fe:c5:c3:93:77:b9:b9:3c:96:2d:a0:4a:c6: eb:b3:a7:ab:dc:c7:10:22:2d:24:6a:cb:a4:19:5c:f7:62:d4: 90:e6:ed:e4:30:18:de:c1:f6:68:39:1f:d3:df:81:56:97:c6: 17:2d:de:7f:af:28:51:69:a4:00:a4:ba:ab:f2:95:4b:5a:dd: a5:20:c0:92:f7:55:58:26:74:8b:ab:97:5e:aa:f8:9d:6c:23: 16:b7:71:2d:d4:2b:52:c9:bc:8a:bc:57:49:e8:9e:52:d2:6a: ca:52:e4:f5:90:d4:33:f1:42:3d:49:28:79:04:dd:1b:6e:44: ea:45:c6:69:35:31:b6:2f:db:89:30:9d:b8:45:3d:a4:45:a6: 6e:9b:ed:24:22:9a:47:f5:d0:11:00:6f:bc:5b:d7:18:d3:53: fa:a5:07:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZKAcedz95MyqX9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFiN2FjNmMtODBmNC00MTUxLWE2MDctNDZmMWQ5Yzlh MjY0MB4XDTI1MDQyMTA5MzMwOVoXDTI1MDcyMDA5MzMwOVowLzEtMCsGA1UEAxMk MmMxNWMzNGQtMjYzMC00ZGEzLThjYmItZDkxNzU1YjllMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjKNDAzPiFcBjy3NueQ2otwo5mGRN4Zd/68B 2Pts60pbH0WpsVUmAtqvGg9xrwcN5rGaHFJRN0VlDTo5pGhR7JF9mG1CHaHAMiYF X7ikqKfBU4PJN06kZPz5wnQo/abUvdE67BxsqmH3QZHbOhu3IGWZUzU7oGl/ELOx d3yQ0DDoP95Sz0wB75Nmvr+WD0XPxGrYaQwChanIPsscB/JFTt4JaniilsV0L76w oGazHW1t4iCgYGvfGv7fmqk6ybk2B9Bglu3x30WfzhVtzdOfKNPp39QLjN0F2WMw coliiDmTtZDyamkW3xH8gZjVpDjRdDIPln3Vx4r6UhLZ2jO5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJueVs5FJTB9kgd61PBcl6T8zPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84MWI3 YWM2Yy04MGY0LTQxNTEtYTYwNy00NmYxZDljOWEyNjQvODZkMmZjMzMtMzNhYS0z NTU5LWEzZDktMGY2NjU3ZTg4ZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODFiN2FjNmMtODBmNC00MTUxLWE2 MDctNDZmMWQ5YzlhMjY0LzgxYjdhYzZjLTgwZjQtNDE1MS1hNjA3LTQ2ZjFkOWM5 YTI2NC5jcmwwHwYDVR0jBBgwFoAUJ5TAWDziGdgaM/Ch9X/kDAYbpcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84MWI3YWM2Yy04MGY0LTQxNTEtYTYwNy00NmYx ZDljOWEyNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4nkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4kBdWxh2L56HQy89aFjXh4PibMUN4izwmkCF1idVo91xK6nGxj/KHO bhFmAOgfp8OKqv7ZNgmz2RplExUOBlEGrnZxJM53fjAULV+UqdxdemBhwl4KWkPb 6Qea/LuW/sXDk3e5uTyWLaBKxuuzp6vcxxAiLSRqy6QZXPdi1JDm7eQwGN7B9mg5 H9PfgVaXxhct3n+vKFFppACkuqvylUta3aUgwJL3VVgmdIurl16q+J1sIxa3cS3U K1LJvIq8V0nonlLSaspS5PWQ1DPxQj1JKHkE3RtuROpFxmk1MbYv24kwnbhFPaRF pm6b7SQimkf10BEAb7xb1xjTU/qlB7U= -----END CERTIFICATE-----Generated at Mon Apr 28 07:09:20 2025 by rpki-client