$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa File: c88482ce-5336-3c12-a513-f86f7726f25a.roa (raw, json) Hash identifier: TF1G5IYwN2LmFfyvjw/Rg33NMvsy7L8jqBdkjgDTPV0= Subject key identifier: E0:E4:A1:DE:AC:26:1E:5F:73:92:43:71:FA:B0:73:CB:70:1D:E3:5B Certificate issuer: /CN=3572e9fa-d098-46d4-a528-9373b3585402 Certificate serial: 010D0C9F432858491ED6DC5064B1B9EB77F44A00 Authority key identifier: B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 40139 IP address blocks: 23.186.144.0/24 maxlen: 24 23.186.145.0/24 maxlen: 24 23.186.146.0/24 maxlen: 24 23.186.147.0/24 maxlen: 24 23.186.148.0/24 maxlen: 24 23.186.149.0/24 maxlen: 24 23.186.150.0/24 maxlen: 24 23.186.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:dc:50:64:b1:b9:eb:77:f4:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3572e9fa-d098-46d4-a528-9373b3585402 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=73afb5bf-8d8d-4723-ad5c-fdcbf3bdb5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:f7:76:7c:51:ee:3f:a5:10:88:6e:da:28: 40:38:d7:f3:80:cd:b0:28:89:9a:4b:97:4e:b9:bb: 5a:56:fd:b4:94:b6:8d:bf:fb:9c:6c:03:f9:55:1e: f4:cf:01:0a:ed:25:1a:b4:f1:f6:dd:f5:97:ac:df: 63:dd:ca:25:29:01:9f:62:48:3f:6b:90:22:63:f8: ac:ac:43:3b:46:0a:47:52:2a:15:84:76:55:32:2d: db:74:25:e3:65:77:d6:bf:ef:f6:66:1f:5e:e8:31: 04:82:e9:13:86:79:ed:0d:03:e3:a4:ca:7d:95:28: 07:3f:e2:a1:18:6e:ba:d2:6a:5c:7e:76:a0:5b:3a: 8b:da:bd:4d:d7:36:6a:91:cb:3f:a4:ec:ae:c6:46: 00:f0:3d:b7:38:2c:e8:9b:ec:92:d1:31:7d:b6:c7: 4d:e9:f4:1c:e7:78:b6:31:06:02:c0:86:07:f4:2d: 67:e9:b6:8b:49:ad:6f:4e:5b:b6:ae:b7:7f:f4:86: 8e:06:ed:4f:27:e4:11:24:da:48:e3:a0:e7:c3:6b: a0:43:ac:10:2f:9a:e5:c5:ec:01:e1:f0:6d:12:9a: 6d:fa:65:90:17:63:cb:31:78:e0:a4:35:8f:2b:61: 2c:1b:cd:e1:73:fa:41:52:91:45:ff:fa:87:a4:e7: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E4:A1:DE:AC:26:1E:5F:73:92:43:71:FA:B0:73:CB:70:1D:E3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl X509v3 Authority Key Identifier: keyid:B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer sbgp-ipAddrBlock: critical IPv4: 23.186.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fc:f9:62:49:46:46:d2:e1:cb:f7:9f:8e:46:62:6d:cd:ce: ae:66:52:63:5f:12:5a:73:d7:9e:9c:76:26:2f:74:ce:7b:cd: b1:b0:d0:b4:09:a2:26:dc:d0:cc:cb:d3:b7:b9:97:c7:a9:51: 4b:82:25:2f:84:bf:b3:10:f3:b2:1d:84:5a:28:e3:2a:4f:0f: ec:4f:97:7d:21:ce:c0:19:12:67:97:a5:73:d9:66:d5:9f:64: 46:8c:84:31:62:ae:7e:09:83:a8:84:d3:21:06:55:d1:6d:0c: 65:6e:89:f9:b0:69:58:19:97:02:23:34:89:0f:5d:b6:fe:6a: 1f:25:43:34:29:64:c5:93:47:53:49:a8:3f:47:90:95:7c:35: 34:aa:b9:04:d6:a5:81:51:a5:f9:da:ce:38:fc:70:29:3b:12: 2a:58:a7:ae:3d:71:6d:d6:a9:23:e0:cd:98:ea:b6:23:43:64: a8:11:68:9b:c0:d3:0a:47:fd:c5:11:32:bd:65:63:09:5f:26: 0c:7f:aa:74:fc:e1:37:c6:16:63:3f:42:2d:4a:38:e6:69:a4: 8a:c6:19:de:23:b5:c0:0d:f1:9a:4b:6b:dd:46:db:34:72:c9: 66:18:99:1c:b7:bc:19:0c:ee:68:46:76:55:7a:4d:f3:40:17: 99:a6:f1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1txQZLG563f0SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU3MmU5ZmEtZDA5OC00NmQ0LWE1MjgtOTM3M2IzNTg1 NDAyMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NzNhZmI1YmYtOGQ4ZC00NzIzLWFkNWMtZmRjYmYzYmRiNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fv3dnxR7j+lEIhu2ihAONfzgM2wKImaS5dO ubtaVv20lLaNv/ucbAP5VR70zwEK7SUatPH23fWXrN9j3colKQGfYkg/a5AiY/is rEM7RgpHUioVhHZVMi3bdCXjZXfWv+/2Zh9e6DEEgukThnntDQPjpMp9lSgHP+Kh GG660mpcfnagWzqL2r1N1zZqkcs/pOyuxkYA8D23OCzom+yS0TF9tsdN6fQc53i2 MQYCwIYH9C1n6baLSa1vTlu2rrd/9IaOBu1PJ+QRJNpI46Dnw2ugQ6wQL5rlxewB 4fBtEppt+mWQF2PLMXjgpDWPK2EsG83hc/pBUpFF//qHpOen5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODkod6sJh5fc5JDcfqwc8twHeNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zNTcy ZTlmYS1kMDk4LTQ2ZDQtYTUyOC05MzczYjM1ODU0MDIvYzg4NDgyY2UtNTMzNi0z YzEyLWE1MTMtZjg2Zjc3MjZmMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzU3MmU5ZmEtZDA5OC00NmQ0LWE1 MjgtOTM3M2IzNTg1NDAyLzM1NzJlOWZhLWQwOTgtNDZkNC1hNTI4LTkzNzNiMzU4 NTQwMi5jcmwwHwYDVR0jBBgwFoAUtyfl3zG3cOj0HtqKbjQL8wiLMMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zNTcyZTlmYS1kMDk4LTQ2ZDQtYTUyOC05Mzcz YjM1ODU0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF7qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX8+WJJRkbS4cv3n45GYm3Nzq5mUmNfElpz156cdiYvdM57zbGw0LQJ oibc0MzL07e5l8epUUuCJS+Ev7MQ87IdhFoo4ypPD+xPl30hzsAZEmeXpXPZZtWf ZEaMhDFirn4Jg6iE0yEGVdFtDGVuifmwaVgZlwIjNIkPXbb+ah8lQzQpZMWTR1NJ qD9HkJV8NTSquQTWpYFRpfnazjj8cCk7EipYp649cW3WqSPgzZjqtiNDZKgRaJvA 0wpH/cURMr1lYwlfJgx/qnT84TfGFmM/Qi1KOOZppIrGGd4jtcAN8ZpLa91G2zRy yWYYmRy3vBkM7mhGdlV6TfNAF5mm8UQ= -----END CERTIFICATE-----Generated at Mon Apr 7 17:00:53 2025 by rpki-client