$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa File: 99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa (raw, json) Hash identifier: 0xWCKd6nhtQmTfmuNiz+LQ2X1C4WDfvNoRZ4dR2pQk8= Subject key identifier: 43:1C:E2:80:BD:AB:C2:73:34:5A:15:BC:8B:40:A1:52:1B:1B:71:4E Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F43285849151156D325A7C30AC2B288C0 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 400967 IP address blocks: 23.175.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:56:d3:25:a7:c3:0a:c2:b2:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=db610f5f-9972-4aab-ae4a-ca2006671fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:34:09:aa:d7:75:50:cc:e3:88:67:5f:ed: 61:95:7a:3b:48:c1:63:95:13:e6:e1:9c:62:c8:5e: e5:04:86:41:83:bd:aa:a7:e6:6e:c3:12:93:45:06: 82:95:ae:74:87:ff:e8:cb:dc:78:a1:6b:79:34:31: 4b:6f:50:7f:0c:88:22:b9:fe:2b:5d:68:eb:f0:dd: 45:10:ad:5b:44:25:95:88:2f:ad:6e:2b:a6:48:80: 2f:dd:ba:f8:d7:dc:74:f1:4f:dc:f3:79:5d:7e:14: 3b:e9:a7:5e:15:a7:38:3d:13:ea:d5:11:ba:64:ce: 4d:06:d4:42:e9:28:77:42:2a:8c:dc:38:ea:f7:01: 86:22:4f:31:f9:93:8d:b3:17:b5:da:75:d5:9f:47: 75:a7:c3:f6:ce:8b:f3:75:b4:ef:b5:28:f3:fe:46: 9a:43:68:94:6c:2b:14:a0:c9:f5:82:28:f8:a6:92: 81:49:67:29:ca:5a:c8:8b:7b:57:e9:a3:92:9f:0b: 3b:aa:35:3f:b6:55:6f:09:64:f1:a9:24:51:f4:26: 68:4c:17:6a:1b:19:a3:a7:de:77:6c:e8:d2:dd:a9: f5:62:db:af:8f:51:1e:45:3c:c0:7d:93:12:aa:6f: 58:42:01:f4:9e:a6:2d:30:38:14:85:c5:5b:01:e7: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:E2:80:BD:AB:C2:73:34:5A:15:BC:8B:40:A1:52:1B:1B:71:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 23.175.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9d:2a:41:fd:db:8d:42:a7:de:03:89:34:f3:a8:61:93:fd: b9:3b:99:e4:ea:e5:9b:8f:32:44:09:fc:5e:4b:ad:9c:85:11: ac:9b:5f:b9:bf:43:5d:6b:0c:bd:50:15:12:1e:e1:6c:85:87: e0:4e:17:c9:f8:19:60:b3:8c:9b:3d:16:cb:91:5c:58:57:b7: b8:b5:e2:1d:cf:ba:8c:fe:25:cd:47:e1:1a:70:62:ae:03:4a: da:a5:3e:0c:fc:3b:bc:7b:b2:db:1d:e5:a8:15:a1:7d:84:22: 95:2b:5c:d3:b4:d6:c1:a2:81:68:31:db:c3:87:5c:ff:4e:9e: 68:86:3f:65:bd:47:3e:0c:9c:32:54:fc:1e:87:6b:41:23:7b: 95:8b:9c:dc:ae:c3:f8:ef:3d:97:28:fa:35:23:44:27:25:b0: e8:8c:60:56:78:11:a7:e9:4a:af:b0:22:03:de:9b:3a:df:63: 42:fc:6b:d0:83:a1:e6:14:ce:0a:0a:b8:cb:63:82:e0:f4:7f: d9:06:8e:d5:2c:a4:61:f9:63:a8:ba:d6:51:51:81:6f:92:9a: 8a:93:81:30:e5:d4:bc:a0:bc:0a:8a:7d:44:5f:0a:f9:9f:6e: b6:7d:92:3e:66:dd:72:03:28:39:1b:81:4e:36:8c:ec:e7:76: 4d:b8:2f:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEVbTJafDCsKyiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGI2MTBmNWYtOTk3Mi00YWFiLWFlNGEtY2EyMDA2NjcxZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6I0CarXdVDM44hnX+1hlXo7SMFjlRPm4Zxi yF7lBIZBg72qp+ZuwxKTRQaCla50h//oy9x4oWt5NDFLb1B/DIgiuf4rXWjr8N1F EK1bRCWViC+tbiumSIAv3br419x08U/c83ldfhQ76adeFac4PRPq1RG6ZM5NBtRC 6Sh3QiqM3Djq9wGGIk8x+ZONsxe12nXVn0d1p8P2zovzdbTvtSjz/kaaQ2iUbCsU oMn1gij4ppKBSWcpylrIi3tX6aOSnws7qjU/tlVvCWTxqSRR9CZoTBdqGxmjp953 bOjS3an1Ytuvj1EeRTzAfZMSqm9YQgH0nqYtMDgUhcVbAecWWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMc4oC9q8JzNFoVvItAoVIbG3FOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvOTllOTJhOTgtNmNlYi0z ZDJkLThkYzUtNzM3Njg0NGNmMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF694MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSdKkH9241Cp94DiTTzqGGT/bk7meTq5ZuPMkQJ/F5LrZyFEaybX7m/ Q11rDL1QFRIe4WyFh+BOF8n4GWCzjJs9FsuRXFhXt7i14h3Puoz+Jc1H4RpwYq4D StqlPgz8O7x7stsd5agVoX2EIpUrXNO01sGigWgx28OHXP9OnmiGP2W9Rz4MnDJU /B6Ha0Eje5WLnNyuw/jvPZco+jUjRCclsOiMYFZ4EafpSq+wIgPemzrfY0L8a9CD oeYUzgoKuMtjguD0f9kGjtUspGH5Y6i61lFRgW+SmoqTgTDl1LygvAqKfURfCvmf brZ9kj5m3XIDKDkbgU42jOzndk24L0Y= -----END CERTIFICATE-----Generated at Fri Apr 11 23:33:32 2025 by rpki-client