$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/9077d754-78a8-3f34-80a1-bf1f2afdf719.roa File: 9077d754-78a8-3f34-80a1-bf1f2afdf719.roa (raw, json) Hash identifier: PvWgZnCYPpGIKGxaMLIHqW7J4s+zQ0BgOPY2gDhG/lE= Subject key identifier: A1:94:FF:09:D7:64:8E:F6:C1:7A:9C:A8:B4:B3:04:1E:67:B5:B2:CC Certificate issuer: /CN=a7029ab5-98ff-451b-9d4f-e72d91a2c9a5 Certificate serial: 010D0C9F432858497C29D9A5053D9C32378B1900 Authority key identifier: 54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/9077d754-78a8-3f34-80a1-bf1f2afdf719.roa Signing time: Fri 11 Apr 2025 00:18:23 +0000 ROA not before: Fri 11 Apr 2025 00:18:23 +0000 ROA not after: Thu 10 Jul 2025 00:18:23 +0000 asID: 401616 IP address blocks: 23.137.100.0/24 maxlen: 24 2602:f68a::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:29:d9:a5:05:3d:9c:32:37:8b:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7029ab5-98ff-451b-9d4f-e72d91a2c9a5 Validity Not Before: Apr 11 00:18:23 2025 GMT Not After : Jul 10 00:18:23 2025 GMT Subject: CN=ad9baef9-33ed-43aa-ac46-0b3ebd659db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:2e:ce:cd:60:c6:c6:7f:e2:bf:1d:08:07: aa:c2:c0:45:fb:ae:1b:38:24:95:05:26:4a:32:6f: 80:08:be:3f:b4:fd:76:33:b8:d2:1a:ad:0a:4c:cd: ee:d8:95:78:6c:9c:9e:58:d7:31:82:00:28:44:2b: 23:80:1d:0c:b3:1b:82:f3:6b:b9:74:38:12:0b:e4: 1b:74:80:e2:cd:98:53:98:e1:47:5e:af:e4:92:77: c1:00:7a:05:22:25:b7:bd:21:8c:5c:97:b1:f2:0d: 79:4e:06:43:b3:91:67:d9:9d:dd:b1:84:13:34:46: e9:66:c4:fe:94:d5:75:7a:36:8b:12:e5:73:c4:1b: 4a:61:de:8a:23:9e:69:57:8d:ff:d2:af:00:5e:de: 3e:67:f2:ec:ab:0d:01:73:5d:48:93:db:25:72:41: 8f:21:0f:89:bf:7e:d7:98:03:0f:39:4b:14:e7:96: 93:c4:70:ff:c4:4c:05:64:58:18:17:11:d8:07:64: 7d:00:fc:5b:f7:74:5a:0d:f7:8c:7d:2f:36:3c:27: fb:53:b9:2c:26:2b:b0:9c:8e:80:8c:42:11:5f:9d: 6d:78:0d:75:ed:62:c5:3a:73:bc:f0:52:ce:4a:a0: e4:b5:5d:19:73:bc:3a:be:56:d4:24:fc:8b:84:0a: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:FF:09:D7:64:8E:F6:C1:7A:9C:A8:B4:B3:04:1E:67:B5:B2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/9077d754-78a8-3f34-80a1-bf1f2afdf719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.crl X509v3 Authority Key Identifier: keyid:54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer sbgp-ipAddrBlock: critical IPv4: 23.137.100.0/24 IPv6: 2602:f68a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d4:7e:cb:14:35:12:fc:fe:f8:e5:21:20:72:a6:fe:58:76: 6a:8a:2c:76:23:10:ff:68:4e:ed:6c:14:7a:f3:45:42:dd:ec: 86:55:84:b5:38:c8:79:56:ec:7f:26:e3:b0:d0:57:0e:fa:72: c7:e4:9a:81:80:16:b6:3c:51:74:55:f4:7e:b9:78:70:e4:58: 1a:53:70:0a:d5:cd:70:50:62:27:56:56:6a:20:e6:bd:44:e8: e4:f9:9a:89:71:11:4c:65:c8:62:5d:b1:44:e1:5b:0b:de:86: 6c:77:96:92:64:7b:ef:97:24:01:6e:37:ff:23:6d:19:42:e8: a7:4c:7f:eb:df:b1:64:5c:d7:27:79:55:3b:bc:ae:e8:77:e1: 78:9d:bd:7f:78:02:fb:0b:fc:3c:09:02:98:ea:28:16:c6:c2: a7:22:a6:41:78:18:a4:be:7a:e4:2f:a6:16:da:b8:db:eb:71: 42:f0:cf:c8:8e:7e:a8:c1:d2:eb:9b:a7:f7:7d:6c:b6:b6:cf: 62:3b:43:ca:b9:a0:38:d6:58:91:1a:10:56:f5:9a:99:7e:cf: bf:a3:c1:c0:b8:26:13:28:d6:4a:e7:db:11:37:1e:2c:7d:77: e3:55:3a:40:4e:26:5f:7d:87:3a:8f:4e:24:bc:13:a5:c3:35: cb:37:17:b6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEl8KdmlBT2cMjeLGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMjlhYjUtOThmZi00NTFiLTlkNGYtZTcyZDkxYTJj OWE1MB4XDTI1MDQxMTAwMTgyM1oXDTI1MDcxMDAwMTgyM1owLzEtMCsGA1UEAxMk YWQ5YmFlZjktMzNlZC00M2FhLWFjNDYtMGIzZWJkNjU5ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXcuzs1gxsZ/4r8dCAeqwsBF+64bOCSVBSZK Mm+ACL4/tP12M7jSGq0KTM3u2JV4bJyeWNcxggAoRCsjgB0MsxuC82u5dDgSC+Qb dIDizZhTmOFHXq/kknfBAHoFIiW3vSGMXJex8g15TgZDs5Fn2Z3dsYQTNEbpZsT+ lNV1ejaLEuVzxBtKYd6KI55pV43/0q8AXt4+Z/Lsqw0Bc11Ik9slckGPIQ+Jv37X mAMPOUsU55aTxHD/xEwFZFgYFxHYB2R9APxb93RaDfeMfS82PCf7U7ksJiuwnI6A jEIRX51teA117WLFOnO88FLOSqDktV0Zc7w6vlbUJPyLhAoW4wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKGU/wnXZI72wXqcqLSzBB5ntbLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNzAy OWFiNS05OGZmLTQ1MWItOWQ0Zi1lNzJkOTFhMmM5YTUvOTA3N2Q3NTQtNzhhOC0z ZjM0LTgwYTEtYmYxZjJhZmRmNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTcwMjlhYjUtOThmZi00NTFiLTlk NGYtZTcyZDkxYTJjOWE1L2E3MDI5YWI1LTk4ZmYtNDUxYi05ZDRmLWU3MmQ5MWEy YzlhNS5jcmwwHwYDVR0jBBgwFoAUVB4U8gJ7u8fZH1CNEa/+8u0bmZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNzAyOWFiNS05OGZmLTQ1MWItOWQ0Zi1lNzJk OTFhMmM5YTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4lkMA4E AgACMAgDBgAmAvaKADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj1H7LFDUS/P745SEgcqb+WHZqiix2IxD/ aE7tbBR680VC3eyGVYS1OMh5Vux/JuOw0FcO+nLH5JqBgBa2PFF0VfR+uXhw5Fga U3AK1c1wUGInVlZqIOa9ROjk+ZqJcRFMZchiXbFE4VsL3oZsd5aSZHvvlyQBbjf/ I20ZQuinTH/r37FkXNcneVU7vK7od+F4nb1/eAL7C/w8CQKY6igWxsKnIqZBeBik vnrkL6YW2rjb63FC8M/Ijn6owdLrm6f3fWy2ts9iO0PKuaA41liRGhBW9ZqZfs+/ o8HAuCYTKNZK59sRNx4sfXfjVTpATiZffYc6j04kvBOlwzXLNxe2 -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:02 2025 by rpki-client