$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa File: f23e2a3a-a075-31c5-a07e-1d43dac01650.roa (raw, json) Hash identifier: AWOqXPSF/gBFQeT7L4ulbc3HLgJwFvqb+1+NJK8S+8o= Subject key identifier: 18:94:71:FE:27:70:45:2A:FB:E7:29:9D:36:F2:B7:12:04:B2:65:23 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F43285848BBBB843867AEF3615D7726E0 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 23528 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:84:38:67:ae:f3:61:5d:77:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=6621e688-aaa6-4dcd-8cc3-1f41e3191fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:23:d6:2b:af:5e:7b:b2:1f:91:c1:18:17: 7e:b1:ed:2a:8f:ee:6c:98:26:a8:be:2c:40:1f:31: d3:c8:44:e0:6d:90:de:6e:c8:32:86:f9:9d:94:bb: e9:c6:90:e4:01:3f:f0:e2:a7:8a:7b:95:e3:71:7d: 49:b6:27:99:0f:5b:47:c8:47:c9:36:41:f8:11:67: 1b:62:23:92:36:08:e9:f9:66:ea:0e:46:3f:8d:73: 43:8b:05:dd:7e:b4:ee:a9:0e:c6:75:ed:fc:d6:8a: 41:00:80:33:77:78:20:a0:be:04:37:8a:3c:81:2f: 66:2e:b2:3d:5b:a5:03:d7:6f:c4:69:73:4c:04:dd: ac:72:85:44:d0:4f:e8:65:a1:34:20:1a:05:6c:eb: c9:aa:e4:7d:bf:76:35:81:10:9d:fe:00:3a:dd:00: 55:cc:a8:ad:88:9f:3c:c9:37:04:cc:e6:00:13:c8: d2:ee:b7:ed:29:84:5f:38:89:72:56:76:0e:90:32: 67:5d:8d:0f:9f:a3:f3:61:55:1a:58:c8:a7:6d:a0: eb:aa:52:bc:47:19:a6:f3:cd:f5:47:27:a6:0c:f1: de:d4:ed:54:a8:85:7a:cc:08:a5:71:21:00:d8:90: d6:a4:4f:4e:0f:22:24:43:c1:80:f0:f5:42:0e:45: 82:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:94:71:FE:27:70:45:2A:FB:E7:29:9D:36:F2:B7:12:04:B2:65:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:dc:8a:ea:01:88:bf:30:67:f5:48:ba:4f:95:57:2a:35:2c: 4e:0c:b8:39:d4:6a:9f:4c:5a:b3:d1:2b:9b:ad:82:24:09:d0: f1:ab:cc:02:b3:e4:b5:91:5e:f7:b0:eb:a1:dc:0f:bf:6c:bd: ac:07:0f:f4:eb:44:43:b0:20:d2:86:1b:9a:07:ad:6e:89:08: 2a:fb:2c:0d:6c:81:29:ca:0a:7d:c6:0d:a6:3b:26:35:6f:bc: 23:21:b0:cf:cb:77:af:cd:b6:25:00:76:20:01:d0:d4:73:e4: dc:1a:f6:b5:a8:05:2f:e2:fd:89:9a:46:e6:4b:94:3a:c8:df: c0:31:d8:b9:68:10:36:84:27:61:34:4e:5c:5f:cc:fb:e9:3e: 90:c0:f4:f5:50:92:8c:17:c0:bb:6e:2b:7d:1b:5d:88:42:0a: 22:03:19:dc:ef:b8:eb:56:26:f1:49:91:27:98:bc:89:5b:09: fc:12:8b:56:e1:82:b9:53:e1:a6:94:be:b8:e1:8e:31:3b:3a: 55:24:79:fc:89:a4:b9:63:fa:47:96:9f:66:01:14:cd:ab:12: ab:53:08:54:33:95:6f:cf:ab:06:22:00:f5:9c:81:cf:de:96: 48:10:06:29:f6:93:78:8a:2e:b2:e6:2b:1f:f2:ed:34:70:a7: 5d:94:c0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4Q4Z67zYV13JuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NjYyMWU2ODgtYWFhNi00ZGNkLThjYzMtMWY0MWUzMTkxZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Yj1iuvXnuyH5HBGBd+se0qj+5smCaovixA HzHTyETgbZDebsgyhvmdlLvpxpDkAT/w4qeKe5XjcX1JtieZD1tHyEfJNkH4EWcb YiOSNgjp+WbqDkY/jXNDiwXdfrTuqQ7Gde381opBAIAzd3ggoL4EN4o8gS9mLrI9 W6UD12/EaXNMBN2scoVE0E/oZaE0IBoFbOvJquR9v3Y1gRCd/gA63QBVzKitiJ88 yTcEzOYAE8jS7rftKYRfOIlyVnYOkDJnXY0Pn6PzYVUaWMinbaDrqlK8Rxmm8831 RyemDPHe1O1UqIV6zAilcSEA2JDWpE9ODyIkQ8GA8PVCDkWCUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiUcf4ncEUq++cpnTbytxIEsmUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvZjIzZTJhM2EtYTA3NS0z MWM1LWEwN2UtMWQ0M2RhYzAxNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbciuoBiL8wZ/VIuk+VVyo1LE4MuDnUap9MWrPRK5utgiQJ0PGrzAKz 5LWRXvew66HcD79svawHD/TrREOwINKGG5oHrW6JCCr7LA1sgSnKCn3GDaY7JjVv vCMhsM/Ld6/NtiUAdiAB0NRz5Nwa9rWoBS/i/YmaRuZLlDrI38Ax2LloEDaEJ2E0 TlxfzPvpPpDA9PVQkowXwLtuK30bXYhCCiIDGdzvuOtWJvFJkSeYvIlbCfwSi1bh grlT4aaUvrjhjjE7OlUkefyJpLlj+keWn2YBFM2rEqtTCFQzlW/PqwYiAPWcgc/e lkgQBin2k3iKLrLmKx/y7TRwp12UwI8= -----END CERTIFICATE-----Generated at Sat Apr 5 22:32:47 2025 by rpki-client