$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa File: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (raw, json) Hash identifier: uN5nZ/uHoSNqFoeyIs7GQ8FcUOckOr9j3t8fm74HB84= Subject key identifier: E0:24:66:BF:CA:DD:89:3E:54:24:82:F8:1A:02:DF:3A:6D:7C:9E:FA Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F43285849849EFB4C1A35EAA733DFDAC0 Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 400586 IP address blocks: 23.134.104.0/24 maxlen: 24 2602:fb98::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fb:4c:1a:35:ea:a7:33:df:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=118acfb1-7dea-4d84-9b17-b0ac57e43ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6b:93:37:4c:2e:7c:d5:3c:b6:f1:72:03:0c: 44:56:fd:da:e3:78:66:05:21:df:9b:cb:cb:8d:0f: 25:e4:f5:5c:fd:b6:f7:ff:02:ff:b3:bf:01:2c:a6: a3:26:be:65:c7:47:b5:8f:62:a6:e7:6a:b2:bc:5b: 40:9e:f7:83:5b:54:82:23:59:d5:67:ab:1d:7c:b2: 5e:64:40:d2:83:fc:cb:0e:d4:04:4c:dd:b3:1a:d2: 3f:eb:6a:a5:eb:22:61:6a:b4:f5:b3:41:93:49:c0: e0:3d:68:87:64:b2:9c:4e:e0:cd:d4:0a:cd:78:4b: f0:8d:ca:5d:7f:2e:92:51:21:46:c0:01:83:71:c5: 63:51:e3:8e:57:6e:e3:f9:0b:b0:2e:76:14:9e:81: a7:83:50:f1:e0:e8:75:39:84:ba:c5:a4:41:4a:95: ca:a9:eb:e8:e9:62:5b:32:e3:48:83:e6:c6:2c:5d: 2c:d5:82:45:18:91:59:21:c4:3b:34:40:dc:15:ce: 1c:8f:30:1b:82:08:00:37:4f:88:ba:59:46:98:61: f7:95:e0:b4:9b:a0:14:c3:9d:a2:08:61:0c:8d:70: 6e:db:94:28:ca:41:1f:90:59:73:57:a5:48:a7:dd: 0e:44:9d:f7:0a:21:d3:60:5f:cd:8c:46:bf:45:34: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:66:BF:CA:DD:89:3E:54:24:82:F8:1A:02:DF:3A:6D:7C:9E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: 23.134.104.0/24 IPv6: 2602:fb98::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:14:38:04:3c:8b:6c:2f:78:51:21:5c:83:3a:ca:3e:73:f0: 4c:62:fa:1c:17:fc:6c:55:83:9a:8a:7f:f6:0f:df:f0:b6:08: 36:44:c1:83:74:40:f9:c9:b5:35:e4:44:07:6a:00:b2:00:75: f8:75:70:80:88:b1:e7:1c:4d:65:7a:1a:bf:e8:cf:8c:0c:e8: db:e1:e5:f1:07:f4:c2:6f:ef:55:7d:24:92:32:55:d8:8d:1d: d7:93:ee:07:ff:b1:a9:c9:d5:62:89:b0:97:d1:cb:05:6f:26: dd:69:2d:a9:e1:b5:8e:c5:fa:20:bc:32:5b:70:15:41:7d:85: 5a:ce:ff:2a:b1:32:72:38:30:dd:11:7f:0d:56:bd:1d:d5:16: 9d:f1:69:42:d2:db:98:65:43:28:1a:f3:9f:e1:c0:c6:09:48: a3:bf:41:46:14:6a:52:97:02:9a:3b:ff:55:12:ba:02:e9:5b: d1:79:22:bd:95:34:08:71:22:56:90:05:6e:cf:55:ef:48:da: 77:6d:06:50:e6:10:dc:00:a6:ca:15:6e:b7:8a:15:bb:9e:b3: d9:6a:8d:51:9a:a9:d8:50:51:83:2c:2e:fd:5f:04:c0:6c:c8: d1:da:a8:5f:18:22:87:24:17:b3:02:a6:41:21:06:62:f1:d4: 1a:9e:8b:db -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmEnvtMGjXqpzPf2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk MTE4YWNmYjEtN2RlYS00ZDg0LTliMTctYjBhYzU3ZTQzZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32uTN0wufNU8tvFyAwxEVv3a43hmBSHfm8vL jQ8l5PVc/bb3/wL/s78BLKajJr5lx0e1j2Km52qyvFtAnveDW1SCI1nVZ6sdfLJe ZEDSg/zLDtQETN2zGtI/62ql6yJharT1s0GTScDgPWiHZLKcTuDN1ArNeEvwjcpd fy6SUSFGwAGDccVjUeOOV27j+QuwLnYUnoGng1Dx4Oh1OYS6xaRBSpXKqevo6WJb MuNIg+bGLF0s1YJFGJFZIcQ7NEDcFc4cjzAbgggAN0+IullGmGH3leC0m6AUw52i CGEMjXBu25QoykEfkFlzV6VIp90ORJ33CiHTYF/NjEa/RTQA0QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOAkZr/K3Yk+VCSC+BoC3zptfJ76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvZDUwNWY2ODAtZGRkOS0z NjFkLTgyNDAtOTUxOGQxN2Y2YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZoMA4E AgACMAgDBgAmAvuYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPFDgEPItsL3hRIVyDOso+c/BMYvocF/xs VYOain/2D9/wtgg2RMGDdED5ybU15EQHagCyAHX4dXCAiLHnHE1lehq/6M+MDOjb 4eXxB/TCb+9VfSSSMlXYjR3Xk+4H/7GpydViibCX0csFbybdaS2p4bWOxfogvDJb cBVBfYVazv8qsTJyODDdEX8NVr0d1Rad8WlC0tuYZUMoGvOf4cDGCUijv0FGFGpS lwKaO/9VEroC6VvReSK9lTQIcSJWkAVuz1XvSNp3bQZQ5hDcAKbKFW63ihW7nrPZ ao1RmqnYUFGDLC79XwTAbMjR2qhfGCKHJBezAqZBIQZi8dQanovb -----END CERTIFICATE-----Generated at Sat Apr 19 00:52:28 2025 by rpki-client