$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa File: 097c095d-ece4-3ab9-b654-21a67c8b50d9.roa (raw, json) Hash identifier: 4V4WVAHpqOViT6x/eD4FP50yKO0E0HiIvSZXFt6d1cM= Subject key identifier: C2:DD:B7:B4:20:BE:91:55:0E:66:F1:D0:D5:52:7A:A2:74:99:92:67 Certificate issuer: /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Certificate serial: 010D0C9F432858494B6411DC6431DC8E185C9E00 Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 965 IP address blocks: 23.129.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:11:dc:64:31:dc:8e:18:5c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=01955c3c-b184-41f0-b9b5-7973bf4bf7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:6f:a1:65:2a:5f:23:c4:56:60:24:df:a9: ac:33:bd:00:bf:51:cf:77:b6:9f:8d:9c:4d:bf:08: ea:a1:cf:5b:02:b9:ea:e0:79:20:29:f6:d9:65:c3: 6a:82:34:4e:c6:9f:38:c8:f6:10:00:4d:4f:75:1c: c1:54:d8:08:15:27:d7:43:a3:ec:2b:7f:5f:f2:91: 4f:b6:1a:d7:28:dd:20:d1:2b:eb:a8:fe:29:ad:7c: 84:3a:c9:70:b6:1f:fc:f2:93:ad:f1:93:75:76:40: 65:12:6d:a5:03:3e:bb:95:69:04:92:44:d6:ea:a8: 5d:15:35:6f:5f:cc:ff:6e:f9:1a:1f:b1:cd:c7:c8: b5:38:a4:1d:9b:b3:76:54:67:46:28:cf:a6:89:70: a2:d0:29:8c:a2:ab:22:e1:05:70:4f:cd:72:d6:a1: bf:ad:07:0c:6c:5a:6e:fe:b0:8f:98:8b:c2:c8:74: e8:5d:17:5a:af:2b:69:50:d7:da:95:45:ee:66:c3: ea:97:3b:53:46:38:b7:2c:24:1a:8d:2b:a4:1c:a2: cd:46:96:d7:2a:4c:d2:78:90:5e:38:c7:24:ec:ef: d6:52:79:95:f4:4c:48:1a:13:ca:38:20:97:10:4e: d3:7d:4e:ad:01:c5:cb:6f:59:21:80:2b:7c:f9:29: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DD:B7:B4:20:BE:91:55:0E:66:F1:D0:D5:52:7A:A2:74:99:92:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl X509v3 Authority Key Identifier: keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:54:56:69:38:b0:69:0b:4d:57:90:7a:f6:71:f0:0a:6c:7d: 26:da:2d:c7:1b:1c:6d:1b:df:f4:ec:61:86:3a:eb:df:af:f9: eb:7b:09:3e:ab:38:7e:cb:f3:20:ff:e0:09:8f:4b:43:cf:d4: 1c:d2:32:c7:53:e6:9e:69:eb:cf:db:97:a7:09:58:fd:cd:96: 0a:57:04:6d:bd:2d:46:b6:c9:36:68:16:02:41:6e:94:cd:d6: b7:32:19:d8:24:22:2f:f2:12:16:ff:e8:c0:22:76:bd:7d:c9: 24:3d:67:2e:bf:cd:01:49:aa:80:50:01:87:67:f2:63:15:60: 4f:50:1f:e1:53:04:f2:7b:fa:96:86:74:f6:cc:4a:aa:b4:a9: f5:f5:54:19:9c:d0:c0:c7:ae:49:07:8d:11:87:8e:76:ec:e1: 49:9e:22:6b:2e:f7:16:3d:d6:2b:cf:d9:70:2c:fd:cb:9b:68: da:59:18:71:21:be:98:79:ec:46:72:57:49:30:9f:ef:04:df: 30:2a:a8:09:79:9b:40:b8:f3:b0:c7:85:53:b2:25:9b:dd:1a: 02:6a:c9:02:41:ef:38:83:14:5a:c4:1f:ec:18:b3:33:c6:b9: ab:28:30:72:92:12:fe:de:32:26:24:df:95:a6:bf:a5:9c:7e: e7:c3:a6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBHcZDHcjhhcngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRk Y2JmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDE5NTVjM2MtYjE4NC00MWYwLWI5YjUtNzk3M2JmNGJmN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd5voWUqXyPEVmAk36msM70Av1HPd7afjZxN vwjqoc9bArnq4HkgKfbZZcNqgjROxp84yPYQAE1PdRzBVNgIFSfXQ6PsK39f8pFP thrXKN0g0SvrqP4prXyEOslwth/88pOt8ZN1dkBlEm2lAz67lWkEkkTW6qhdFTVv X8z/bvkaH7HNx8i1OKQdm7N2VGdGKM+miXCi0CmMoqsi4QVwT81y1qG/rQcMbFpu /rCPmIvCyHToXRdarytpUNfalUXuZsPqlztTRji3LCQajSukHKLNRpbXKkzSeJBe OMck7O/WUnmV9ExIGhPKOCCXEE7TfU6tAcXLb1khgCt8+Sl4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLdt7QgvpFVDmbx0NVSeqJ0mZJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3 MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMDk3YzA5NWQtZWNlNC0z YWI5LWI2NTQtMjFhNjdjOGI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVhNzI2MDUtOTliYy00YzRiLTk5 NWUtYzAxYTM2ODRkY2JmLzM1YTcyNjA1LTk5YmMtNGM0Yi05OTVlLWMwMWEzNjg0 ZGNiZi5jcmwwHwYDVR0jBBgwFoAUnSedZlfExijXDhO+lc06f9crhFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFh MzY4NGRjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFUVmk4sGkLTVeQevZx8ApsfSbaLccbHG0b3/TsYYY669+v+et7CT6r OH7L8yD/4AmPS0PP1BzSMsdT5p5p68/bl6cJWP3NlgpXBG29LUa2yTZoFgJBbpTN 1rcyGdgkIi/yEhb/6MAidr19ySQ9Zy6/zQFJqoBQAYdn8mMVYE9QH+FTBPJ7+paG dPbMSqq0qfX1VBmc0MDHrkkHjRGHjnbs4UmeImsu9xY91ivP2XAs/cubaNpZGHEh vph57EZyV0kwn+8E3zAqqAl5m0C487DHhVOyJZvdGgJqyQJB7ziDFFrEH+wYszPG uasoMHKSEv7eMiYk35Wmv6WcfufDpkk= -----END CERTIFICATE-----Generated at Sat Apr 12 00:53:32 2025 by rpki-client