$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa File: 8173a82e-409b-318c-b3f2-9691e512a24c.roa (raw, json) Hash identifier: kb+X/deY+qlbA0b4D20jDQVvUqGUugaQqdMPwwUYKi0= Subject key identifier: 27:BA:1A:21:D2:CA:A7:2B:41:9B:30:DB:A0:5F:02:5C:AC:F4:FD:18 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F432858495EEED49207C39073D1329480 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 11870 IP address blocks: 167.23.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:d4:92:07:c3:90:73:d1:32:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=acc2c79b-073f-4863-b17a-19d80341a8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:16:bc:c2:6a:d0:5a:1c:e6:84:d9:48:63:ef: 1c:16:e4:30:cf:f2:93:03:46:00:54:f3:c5:dd:78: d3:c4:73:e8:08:0a:83:35:03:82:89:a5:20:66:ce: 09:cb:c8:0f:7c:ab:0a:45:c1:4a:81:07:ee:9f:0f: 07:7c:36:e8:9d:89:58:cd:c6:db:0f:ea:2f:a0:f7: 51:d0:75:b0:50:c8:ad:ef:36:4d:ee:60:cb:79:16: 5b:58:41:01:ee:31:74:3f:e5:fd:f9:e0:ac:25:f0: bf:d6:9c:8e:f9:b7:cc:df:5c:cd:84:29:a6:41:e6: 18:fe:6a:7c:f6:74:b8:1c:45:bd:ef:d1:0d:1b:cb: 44:58:7e:93:69:0f:da:5b:35:60:9b:a1:2e:cb:1e: 5d:82:a6:37:da:4e:d4:94:a3:17:65:fc:28:d5:18: 7b:47:da:e2:b3:50:65:87:ba:f6:03:c6:9f:7d:1c: f5:57:5c:dc:14:53:f2:6a:3e:50:df:39:72:31:6a: f7:ca:b7:72:75:45:04:14:80:68:75:28:e2:a9:a2: aa:54:ad:53:da:bd:fa:eb:36:bc:71:2e:4c:8c:85: 0a:a9:c4:6f:ed:ce:77:c7:c8:73:f3:b1:b2:3b:9c: 74:56:68:89:28:42:b8:1d:d9:a6:8d:c1:cc:4c:37: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BA:1A:21:D2:CA:A7:2B:41:9B:30:DB:A0:5F:02:5C:AC:F4:FD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ea:69:b1:e7:74:92:53:c4:99:89:28:69:3c:c1:d9:86:d9: f7:ff:89:61:b5:cc:0d:ee:23:83:e8:b9:99:5a:26:96:90:16: 83:96:65:d8:23:07:c8:ec:eb:4d:a3:8a:90:75:74:db:16:a5: 36:9f:e4:21:69:d1:4e:97:f2:8d:09:6e:ba:ca:07:a6:90:c5: e6:6d:d2:28:8c:ad:62:ba:8a:fb:3d:e9:12:2b:f1:84:4a:4f: 3a:27:6c:d2:21:ab:84:6c:e9:de:b4:cd:38:1d:00:66:5a:ba: 7e:eb:f3:51:f2:74:16:c4:5c:12:2a:ce:94:80:2e:f5:24:04: 02:08:a3:cb:8e:34:d9:0e:eb:ca:f2:a6:bb:75:f1:7e:c1:1c: 10:62:e5:e0:e4:f1:d6:32:b9:ea:a5:17:5f:83:d9:d3:19:7a: 40:f1:94:71:4c:a0:ca:54:09:a1:a7:59:95:78:b8:2a:fa:8d: 1b:f1:c7:27:ba:3d:95:15:fe:fe:1b:89:58:a0:9c:f2:e0:80: fb:2e:98:e8:85:9c:46:57:93:f1:65:fe:99:bf:ff:d3:cc:d5: e4:d1:8a:d2:71:7b:22:a1:4d:35:c8:36:62:36:e6:a7:6a:b1: 7a:46:8c:b4:41:44:5b:0c:b5:0d:19:5d:b1:cd:01:e5:b9:97: 33:84:5d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tSSB8OQc9EylIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk YWNjMmM3OWItMDczZi00ODYzLWIxN2EtMTlkODAzNDFhOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ra8wmrQWhzmhNlIY+8cFuQwz/KTA0YAVPPF 3XjTxHPoCAqDNQOCiaUgZs4Jy8gPfKsKRcFKgQfunw8HfDbonYlYzcbbD+ovoPdR 0HWwUMit7zZN7mDLeRZbWEEB7jF0P+X9+eCsJfC/1pyO+bfM31zNhCmmQeYY/mp8 9nS4HEW979ENG8tEWH6TaQ/aWzVgm6Euyx5dgqY32k7UlKMXZfwo1Rh7R9ris1Bl h7r2A8affRz1V1zcFFPyaj5Q3zlyMWr3yrdydUUEFIBodSjiqaKqVK1T2r366za8 cS5MjIUKqcRv7c53x8hz87GyO5x0VmiJKEK4HdmmjcHMTDey2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe6GiHSyqcrQZsw26BfAlys9P0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvODE3M2E4MmUtNDA5Yi0z MThjLWIzZjItOTY5MWU1MTJhMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpxdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjqabHndJJTxJmJKGk8wdmG2ff/iWG1zA3uI4PouZlaJpaQFoOWZdgj B8js602jipB1dNsWpTaf5CFp0U6X8o0JbrrKB6aQxeZt0iiMrWK6ivs96RIr8YRK TzonbNIhq4Rs6d60zTgdAGZaun7r81HydBbEXBIqzpSALvUkBAIIo8uONNkO68ry prt18X7BHBBi5eDk8dYyueqlF1+D2dMZekDxlHFMoMpUCaGnWZV4uCr6jRvxxye6 PZUV/v4biVignPLggPsumOiFnEZXk/Fl/pm//9PM1eTRitJxeyKhTTXINmI25qdq sXpGjLRBRFsMtQ0ZXbHNAeW5lzOEXWQ= -----END CERTIFICATE-----Generated at Wed Apr 9 19:45:53 2025 by rpki-client