$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa File: e604780b-4bf4-362f-9661-294a2090b35c.roa (raw, json) Hash identifier: 5TV40LS2n5DrSWfO5TX9Cm6Pdaq8fAthfDI5XPbGTK8= Subject key identifier: BC:B0:7E:5D:2C:66:0C:26:AD:10:AB:57:E9:65:6A:8F:77:5B:69:65 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F432858495C244708D1199787180415C0 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 33039 IP address blocks: 23.173.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:47:08:d1:19:97:87:18:04:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=b3c67ac8-1e07-4dd4-91f8-8a3f770721cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:fa:d7:0d:3c:59:3d:b4:f6:b9:31:74:fe:35: fa:48:98:92:39:2a:0c:b6:15:99:47:2c:c0:73:26: a3:92:a9:8a:b7:f7:cc:f8:8b:1d:c9:31:89:37:18: 19:17:bc:f8:a8:c2:95:9d:45:4f:a7:d6:4a:aa:96: e3:95:c1:63:87:24:53:8d:c2:27:19:8d:d5:81:88: 3b:5b:f7:0e:1a:ac:35:93:7a:55:ec:10:30:28:2b: 04:df:29:4f:86:da:21:83:3f:f2:d7:16:c5:4d:0d: 16:e1:ae:1b:d0:ba:b1:b7:aa:81:29:19:1a:42:83: ae:93:99:1a:8e:a2:57:9d:64:36:62:24:98:df:da: 7f:8b:00:e9:17:25:95:7a:1f:9a:32:15:f3:54:88: 15:4a:31:da:82:57:b2:c5:6e:b3:4e:1e:66:24:c7: c8:06:a4:41:78:63:9b:4f:a6:a6:a7:00:f0:f9:6f: 67:c0:a4:ae:fd:2b:f9:04:62:dc:3a:10:98:e8:1b: 53:08:8a:a2:c6:39:43:80:6b:7a:69:50:54:55:f9: 43:30:ce:a5:22:ba:5e:f7:17:fe:73:ee:95:3a:56: 00:a8:9a:e9:19:39:93:e6:2c:fb:2a:91:dd:be:86: 1c:1b:ae:d6:fb:0c:f9:2f:47:92:ac:e9:3f:43:b0: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:7E:5D:2C:66:0C:26:AD:10:AB:57:E9:65:6A:8F:77:5B:69:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 23.173.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:26:dd:91:1e:8d:98:24:fa:4c:bd:8c:a7:c0:e2:62:79:8b: c3:fe:94:f2:49:a9:cc:ad:46:43:b3:6b:41:88:be:f2:21:4d: b3:e3:df:a1:0f:e7:14:1d:9f:58:c5:0d:ff:5e:2f:a1:5f:a0: b2:60:21:d8:3b:9a:c4:b0:40:62:08:1a:33:ca:a0:d3:03:04: 04:5e:63:1a:d8:84:e5:29:b2:5e:47:5a:f2:12:ac:9f:04:10: 6b:73:f4:a1:70:2a:14:3c:bb:f4:ef:4b:27:85:6c:32:2a:45: fa:c4:5d:82:c8:81:6a:b3:fc:a3:1e:22:83:db:ae:8b:d8:98: 83:4d:da:00:fd:db:1a:9e:1d:67:70:40:a5:08:b2:e0:71:cf: 5e:84:3c:e0:c6:d0:b2:22:5a:b6:b9:a0:cd:6c:09:7c:fc:29: 92:d0:d1:dd:29:51:69:65:8b:22:d5:76:85:d4:0a:82:41:47: db:18:a3:e7:cb:a9:a9:5c:c8:97:40:44:d9:4a:a3:b5:38:4d: e5:53:fe:d2:e8:f7:d9:66:0e:06:ee:a4:2a:16:5f:e5:10:38: fb:93:06:82:e9:6b:e0:7b:84:ab:99:fd:7c:7c:3a:aa:6a:e7: 01:d9:8b:0e:14:be:2f:77:37:fb:92:19:18:29:e6:a5:fe:47: ba:da:12:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEcI0RmXhxgEFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YjNjNjdhYzgtMWUwNy00ZGQ0LTkxZjgtOGEzZjc3MDcyMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vrXDTxZPbT2uTF0/jX6SJiSOSoMthWZRyzA cyajkqmKt/fM+IsdyTGJNxgZF7z4qMKVnUVPp9ZKqpbjlcFjhyRTjcInGY3VgYg7 W/cOGqw1k3pV7BAwKCsE3ylPhtohgz/y1xbFTQ0W4a4b0Lqxt6qBKRkaQoOuk5ka jqJXnWQ2YiSY39p/iwDpFyWVeh+aMhXzVIgVSjHagleyxW6zTh5mJMfIBqRBeGOb T6ampwDw+W9nwKSu/Sv5BGLcOhCY6BtTCIqixjlDgGt6aVBUVflDMM6lIrpe9xf+ c+6VOlYAqJrpGTmT5iz7KpHdvoYcG67W+wz5L0eSrOk/Q7B/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLywfl0sZgwmrRCrV+llao93W2llMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZTYwNDc4MGItNGJmNC0z NjJmLTk2NjEtMjk0YTIwOTBiMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsm3ZEejZgk+ky9jKfA4mJ5i8P+lPJJqcytRkOza0GIvvIhTbPj36EP 5xQdn1jFDf9eL6FfoLJgIdg7msSwQGIIGjPKoNMDBAReYxrYhOUpsl5HWvISrJ8E EGtz9KFwKhQ8u/TvSyeFbDIqRfrEXYLIgWqz/KMeIoPbrovYmINN2gD92xqeHWdw QKUIsuBxz16EPODG0LIiWra5oM1sCXz8KZLQ0d0pUWlliyLVdoXUCoJBR9sYo+fL qalcyJdARNlKo7U4TeVT/tLo99lmDgbupCoWX+UQOPuTBoLpa+B7hKuZ/Xx8Oqpq 5wHZiw4Uvi93N/uSGRgp5qX+R7raEmg= -----END CERTIFICATE-----Generated at Sat Apr 5 02:59:36 2025 by rpki-client