$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa File: 553b08e2-7500-3d55-b607-b218b8a593e2.roa (raw, json) Hash identifier: +a2Hz6XCRhrl6nxV22i2OJQDWU2qzSdTkodkuZSN9Yw= Subject key identifier: 39:9F:33:CD:5B:76:64:09:7A:FD:B2:C6:AB:AD:59:94:07:75:FD:7C Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B64171C41C680CC4A1E1980 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 23.88.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:17:1c:41:c6:80:cc:4a:1e:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=7a08b5df-dde6-488b-a2a3-f8fac7bd1b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:5d:f0:67:e1:34:f5:87:28:27:fd:b9:93: a8:ff:5d:ef:37:8f:53:cb:52:e2:da:bd:ea:15:bc: 32:4e:70:4e:2d:11:04:2f:fd:8f:0a:73:5d:c9:8f: d9:3e:45:df:4a:31:4b:ea:33:36:10:cb:60:d9:4d: f8:df:74:ae:34:1a:d6:2f:01:e1:e2:4f:22:73:7d: 8d:ca:c9:51:28:71:c3:fe:72:b9:c1:11:a8:a4:ba: 4d:b7:93:29:cb:ba:7f:ce:b1:b4:b2:60:cb:43:55: 70:71:94:77:fc:0b:0c:c2:ba:fd:13:c9:78:e3:36: 1c:7b:8d:f1:06:48:52:85:0c:c8:75:9d:24:26:49: 4d:2c:64:31:1c:41:cb:1f:fa:7e:aa:7e:e2:2c:30: 6d:a6:cf:b9:5b:41:c3:c5:b4:ac:b8:9c:f4:4c:0b: c6:07:38:94:55:87:73:d5:bd:a8:33:02:73:1c:e4: 42:8b:cf:eb:92:e9:f2:b0:a5:05:23:57:a1:64:aa: e2:51:19:e9:9b:e7:78:f7:96:b7:97:f5:59:b3:0c: 92:04:16:87:6f:0a:94:6d:23:8a:97:43:69:5f:53: cd:2d:f6:9a:02:eb:6a:1f:f5:de:3a:fe:dd:b8:a8: 35:89:98:f7:0b:75:42:c3:00:03:65:21:6c:fa:eb: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9F:33:CD:5B:76:64:09:7A:FD:B2:C6:AB:AD:59:94:07:75:FD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 23.88.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:5f:bb:13:df:d5:48:b0:83:8f:75:0d:41:8d:80:7e:e0:ec: 5e:65:80:f8:16:62:8e:80:6a:7d:f0:ca:df:f5:f5:b2:5a:3f: cd:08:14:28:a8:f9:1f:f9:b7:0f:ea:15:21:74:2d:a2:5b:ae: 09:3a:fc:27:66:e6:c1:59:65:5b:0a:86:a1:4e:8e:97:99:76: 5e:37:90:5d:0a:ba:fa:7a:15:4c:98:c0:de:ef:8c:ef:61:e3: 68:bd:fc:fa:b9:4d:6e:5b:48:af:06:6b:84:d4:03:18:b2:5b: 56:8a:20:19:f2:2f:10:f8:71:f7:7e:82:fe:09:95:ee:f6:77: f3:a3:85:8e:7b:fd:6f:34:00:16:b6:aa:35:44:a8:89:42:94: 83:52:67:da:d2:46:ae:eb:15:6b:73:12:23:c8:35:3d:73:fe: 87:d0:2f:dc:59:13:53:87:27:19:21:0f:09:17:0c:9b:81:e4: e6:b1:2e:32:e2:cd:b0:0d:22:d3:7b:65:fb:cf:a4:e6:25:32: 62:01:3a:f6:91:6f:9f:25:89:b3:cc:4f:e1:da:63:09:9d:a0: 50:79:11:bb:e3:72:eb:8f:b7:7f:2b:14:7b:07:2e:16:bc:f3: 9c:df:1c:8c:d9:bb:5c:80:b7:13:a5:73:3c:4c:35:73:6e:0d: e4:1d:d2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBccQcaAzEoeGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk N2EwOGI1ZGYtZGRlNi00ODhiLWEyYTMtZjhmYWM3YmQxYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNRd8GfhNPWHKCf9uZOo/13vN49Ty1Li2r3q FbwyTnBOLREEL/2PCnNdyY/ZPkXfSjFL6jM2EMtg2U3433SuNBrWLwHh4k8ic32N yslRKHHD/nK5wRGopLpNt5Mpy7p/zrG0smDLQ1VwcZR3/AsMwrr9E8l44zYce43x BkhShQzIdZ0kJklNLGQxHEHLH/p+qn7iLDBtps+5W0HDxbSsuJz0TAvGBziUVYdz 1b2oMwJzHORCi8/rkunysKUFI1ehZKriURnpm+d495a3l/VZswySBBaHbwqUbSOK l0NpX1PNLfaaAutqH/XeOv7duKg1iZj3C3VCwwADZSFs+uscrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmfM81bdmQJev2yxqutWZQHdf18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNTUzYjA4ZTItNzUwMC0z ZDU1LWI2MDctYjIxOGI4YTU5M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1iwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhfuxPf1Uiwg491DUGNgH7g7F5lgPgWYo6Aan3wyt/19bJaP80IFCio +R/5tw/qFSF0LaJbrgk6/Cdm5sFZZVsKhqFOjpeZdl43kF0Kuvp6FUyYwN7vjO9h 42i9/Pq5TW5bSK8Ga4TUAxiyW1aKIBnyLxD4cfd+gv4Jle72d/OjhY57/W80ABa2 qjVEqIlClINSZ9rSRq7rFWtzEiPINT1z/ofQL9xZE1OHJxkhDwkXDJuB5OaxLjLi zbANItN7ZfvPpOYlMmIBOvaRb58libPMT+HaYwmdoFB5EbvjcuuPt38rFHsHLha8 85zfHIzZu1yAtxOlczxMNXNuDeQd0t0= -----END CERTIFICATE-----Generated at Sun Apr 6 20:21:16 2025 by rpki-client