$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa File: 0f251356-cf96-3213-a9a8-f255012a0362.roa (raw, json) Hash identifier: lchD70MStgi55gE4QM69ii9EBouBwRQxEG8XGYAYurI= Subject key identifier: 99:A6:22:41:66:CC:9A:76:00:DB:76:08:12:3D:28:CC:BA:AA:D8:F4 Certificate issuer: /CN=a2077046-f4ec-47b5-8973-860e9cbddb69 Certificate serial: 010D0C9F432858494B64131158B79A691E419C20 Authority key identifier: 65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 4508 IP address blocks: 23.175.32.0/24 maxlen: 24 155.254.2.0/23 maxlen: 23 198.89.188.0/23 maxlen: 23 2606:d680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:13:11:58:b7:9a:69:1e:41:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2077046-f4ec-47b5-8973-860e9cbddb69 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=fe8b0005-17aa-4a0b-8635-b08f054ae85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:c8:fb:08:de:cc:83:48:f0:f9:1d:fd:37: 89:f5:4c:40:94:15:7c:20:6b:37:46:ab:bd:c6:6a: 23:be:8e:67:f8:6b:14:6e:7b:22:7f:2f:dd:c9:34: e7:83:ef:a4:d7:e0:a6:73:51:31:6b:82:2c:28:4f: 69:b8:6c:48:4a:64:37:2d:a5:ab:13:01:5c:ed:41: 0f:b6:28:79:cc:e6:97:58:42:88:e9:65:a6:8a:b6: f1:8a:57:c9:07:85:b1:84:c7:09:65:a4:62:d1:f6: 19:27:8b:03:0f:80:c6:61:27:35:f5:c2:6c:ff:b9: aa:0f:67:c2:da:05:b6:c4:29:4d:f3:d7:02:71:03: c4:01:32:8b:f8:52:b4:c9:f3:8c:cb:21:cb:8f:75: 7b:33:27:2b:7e:fc:86:a3:0b:ef:19:ad:f0:84:8e: ff:61:c9:94:02:26:be:b0:ba:76:db:29:46:ca:c9: de:61:fb:e4:c7:6b:32:c4:b7:56:fd:5c:0b:07:58: d9:b2:91:3d:8d:04:e9:bd:00:1f:86:3e:a4:80:68: d1:d9:70:f8:62:08:3f:c1:6b:c5:4b:4d:10:3f:0c: 8b:ce:b5:30:ab:aa:18:91:1d:fe:ce:ae:3e:c6:dd: 47:cf:45:19:0e:8f:1a:3b:74:43:dc:43:ab:74:20: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A6:22:41:66:CC:9A:76:00:DB:76:08:12:3D:28:CC:BA:AA:D8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl X509v3 Authority Key Identifier: keyid:65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer sbgp-ipAddrBlock: critical IPv4: 23.175.32.0/24 155.254.2.0/23 198.89.188.0/23 IPv6: 2606:d680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c7:9f:d6:86:40:e2:a2:d2:a6:15:b0:2c:ca:75:42:ad:c4: f6:80:40:9b:ea:5b:7f:d4:6f:5d:cc:1e:1d:74:5f:0c:bf:ba: 28:e7:ff:33:d0:67:0f:ed:fb:ab:a7:ee:e4:94:04:bc:c6:78: 00:16:ab:b9:d3:d9:37:eb:7d:bb:48:f3:f0:bb:6b:e5:b2:9c: 1c:6c:c9:05:f5:8d:29:a7:43:c7:47:d8:1f:a0:90:58:01:86: 3f:56:e9:f7:d7:2e:00:1f:f6:23:c1:9d:0c:a1:78:c6:d3:07: e9:29:3a:e9:e2:6d:55:24:0f:69:99:2b:f3:b1:e4:5e:00:6f: a2:c0:2f:da:ee:07:08:e4:14:53:5d:69:a3:89:bf:c9:7b:90: 52:10:0a:c4:8c:ae:52:a8:49:61:a1:de:96:32:40:27:16:65: c3:3d:ca:10:11:ed:d8:b4:a2:b8:1c:83:a6:00:73:b1:65:08: a7:a8:b0:e5:8c:53:7b:13:38:e2:b3:d3:5b:01:7a:b1:51:2d: c0:fe:4c:d9:6d:ae:b0:4c:ea:96:b9:33:7d:fa:12:fc:62:c6: 95:4b:91:31:09:ea:4e:2b:35:86:50:67:44:7f:67:c0:fd:7e: 63:0c:79:14:c1:62:fd:86:ad:34:94:c8:35:8e:36:df:be:f7: 55:22:1f:d8 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWElLZBMRWLeaaR5BnCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwNzcwNDYtZjRlYy00N2I1LTg5NzMtODYwZTljYmRk YjY5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZmU4YjAwMDUtMTdhYS00YTBiLTg2MzUtYjA4ZjA1NGFlODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdjI+wjezINI8Pkd/TeJ9UxAlBV8IGs3Rqu9 xmojvo5n+GsUbnsify/dyTTng++k1+Cmc1Exa4IsKE9puGxISmQ3LaWrEwFc7UEP tih5zOaXWEKI6WWmirbxilfJB4WxhMcJZaRi0fYZJ4sDD4DGYSc19cJs/7mqD2fC 2gW2xClN89cCcQPEATKL+FK0yfOMyyHLj3V7MycrfvyGowvvGa3whI7/YcmUAia+ sLp22ylGysneYfvkx2syxLdW/VwLB1jZspE9jQTpvQAfhj6kgGjR2XD4Ygg/wWvF S00QPwyLzrUwq6oYkR3+zq4+xt1Hz0UZDo8aO3RD3EOrdCDAqQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFJmmIkFmzJp2ANt2CBI9KMy6qtj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjA3 NzA0Ni1mNGVjLTQ3YjUtODk3My04NjBlOWNiZGRiNjkvMGYyNTEzNTYtY2Y5Ni0z MjEzLWE5YTgtZjI1NTAxMmEwMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwNzcwNDYtZjRlYy00N2I1LTg5 NzMtODYwZTljYmRkYjY5L2EyMDc3MDQ2LWY0ZWMtNDdiNS04OTczLTg2MGU5Y2Jk ZGI2OS5jcmwwHwYDVR0jBBgwFoAUZXWZ/6XP/YFkIsx5URCdPNdiN/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjA3NzA0Ni1mNGVjLTQ3YjUtODk3My04NjBl OWNiZGRiNjkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF68gAwQB m/4CAwQBxlm8MA0EAgACMAcDBQAmBtaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJLHn9aGQOKi0qYVsCzK dUKtxPaAQJvqW3/Ub13MHh10Xwy/uijn/zPQZw/t+6un7uSUBLzGeAAWq7nT2Tfr fbtI8/C7a+WynBxsyQX1jSmnQ8dH2B+gkFgBhj9W6ffXLgAf9iPBnQyheMbTB+kp OunibVUkD2mZK/Ox5F4Ab6LAL9ruBwjkFFNdaaOJv8l7kFIQCsSMrlKoSWGh3pYy QCcWZcM9yhAR7di0orgcg6YAc7FlCKeosOWMU3sTOOKz01sBerFRLcD+TNltrrBM 6pa5M336EvxixpVLkTEJ6k4rNYZQZ0R/Z8D9fmMMeRTBYv2GrTSUyDWONt++91Ui H9g= -----END CERTIFICATE-----Generated at Sun Apr 6 16:06:58 2025 by rpki-client