$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa File: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (raw, json) Hash identifier: Xb6hySrp578rmnlBDf43XdJT1HHOoMsXfehbmvL+sOA= Subject key identifier: A4:C1:6A:D2:F2:81:0C:A6:C6:CF:1B:97:F4:8D:1F:E0:15:66:E2:34 Certificate issuer: /CN=3789343d-8560-48b0-9530-d2a1129fefe7 Certificate serial: 010D0C9F43285848F4F6A0C4D6EBBDD85FFE4830 Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 401228 IP address blocks: 23.183.216.0/24 maxlen: 24 2602:f87c::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a0:c4:d6:eb:bd:d8:5f:fe:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=2ed4270f-f077-427b-bc8f-9515f90c5d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:97:96:3b:9b:9e:d0:5c:27:d6:46:a9:25: f9:0e:58:a4:cf:eb:4f:52:94:17:d2:9e:f1:67:ec: f4:a7:da:f3:8c:9e:d7:1d:f9:09:60:97:1e:bf:24: c1:e1:b4:f4:22:90:ce:43:d0:e5:15:ce:38:1f:c0: f8:73:33:77:fb:39:91:c7:b2:5a:dd:a7:ec:0a:64: 59:82:a0:95:c9:23:4e:5d:ae:d1:b8:35:49:34:7b: a0:07:42:0e:d8:dd:77:64:36:6d:37:6f:44:01:c7: 05:81:30:c0:db:cd:d1:15:d3:94:51:d0:f8:d5:7a: 36:c7:1a:2a:fd:a3:2d:e3:50:4f:42:bb:ec:39:92: 4c:50:8c:e4:b4:b2:ee:28:21:71:a4:da:0e:ca:e2: 54:66:51:c5:df:0a:a4:d5:b7:5a:bd:f6:1d:1d:d2: 60:3e:83:8a:71:7e:e0:e9:62:b2:cd:a5:df:41:73: a9:06:d2:b6:1d:16:b0:40:cf:3a:13:da:30:52:d3: 5a:90:91:35:82:a0:20:ac:5b:5b:23:dd:c0:fc:c8: 59:bc:eb:f1:55:7b:92:91:08:90:f3:2a:24:88:fc: ea:5a:58:03:4d:4b:6c:72:da:c1:d6:36:e7:22:ec: 9a:5a:81:7c:2c:3e:18:15:8c:e4:00:6b:4c:6c:de: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C1:6A:D2:F2:81:0C:A6:C6:CF:1B:97:F4:8D:1F:E0:15:66:E2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl X509v3 Authority Key Identifier: keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer sbgp-ipAddrBlock: critical IPv4: 23.183.216.0/24 IPv6: 2602:f87c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5a:20:b4:94:1c:37:b6:d5:db:1a:6e:78:5b:b2:e7:18:4c: 95:87:a3:cc:8b:cb:33:0f:d3:aa:1f:20:b6:7c:70:9c:b9:5a: 91:69:d7:4a:bf:59:b7:53:19:8c:07:ae:8f:26:69:2f:17:eb: 69:94:57:b1:e5:9a:4f:a9:8b:64:f5:7b:13:6c:5f:c6:7c:9e: e5:fa:ed:81:6f:c8:99:99:2f:b6:3a:cc:16:0d:ba:1b:36:27: 7e:39:89:52:df:81:03:20:62:db:8b:c3:e8:0d:1b:3f:e2:15: 33:53:a9:34:ea:04:49:d0:97:52:a9:2f:f4:87:3a:24:50:29: b9:ed:5b:8e:7b:4e:ef:a6:84:ea:66:20:97:20:4d:4d:9f:76: cb:ea:a0:bd:b1:73:c5:ed:f9:eb:10:27:a2:5e:d8:35:ff:b1: 64:37:c2:5a:57:94:d8:bb:f9:6e:e6:a5:c5:c8:16:33:20:26: 00:25:c1:51:f2:1f:3f:8e:f0:33:fe:2d:5e:88:6e:9b:d4:a3: e0:f4:e0:3d:87:83:b5:d9:6d:89:b7:72:2a:7d:3c:b6:1f:13: 6c:ff:6e:4e:10:0e:b6:8c:3f:9a:1a:0b:91:5a:7b:40:59:26: 89:85:d1:0e:a5:df:69:88:db:4f:61:4d:e1:68:0a:8e:25:7a: 0a:cd:18:82 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEj09qDE1uu92F/+SDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZl ZmU3MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MmVkNDI3MGYtZjA3Ny00MjdiLWJjOGYtOTUxNWY5MGM1ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3CXljubntBcJ9ZGqSX5Dlikz+tPUpQX0p7x Z+z0p9rzjJ7XHfkJYJcevyTB4bT0IpDOQ9DlFc44H8D4czN3+zmRx7Ja3afsCmRZ gqCVySNOXa7RuDVJNHugB0IO2N13ZDZtN29EAccFgTDA283RFdOUUdD41Xo2xxoq /aMt41BPQrvsOZJMUIzktLLuKCFxpNoOyuJUZlHF3wqk1bdavfYdHdJgPoOKcX7g 6WKyzaXfQXOpBtK2HRawQM86E9owUtNakJE1gqAgrFtbI93A/MhZvOvxVXuSkQiQ 8yokiPzqWlgDTUtsctrB1jbnIuyaWoF8LD4YFYzkAGtMbN450wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKTBatLygQymxs8bl/SNH+AVZuI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNzg5 MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvZDYwM2JjNDgtMGU3Yy0z ZjljLWFjMzAtYWEyZGRkN2FmMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzc4OTM0M2QtODU2MC00OGIwLTk1 MzAtZDJhMTEyOWZlZmU3LzM3ODkzNDNkLTg1NjAtNDhiMC05NTMwLWQyYTExMjlm ZWZlNy5jcmwwHwYDVR0jBBgwFoAUQv3n+tIDobxgBxZrF7G6QrnBmlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmEx MTI5ZmVmZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7fYMA4E AgACMAgDBgAmAvh8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuWiC0lBw3ttXbGm54W7LnGEyVh6PMi8sz D9OqHyC2fHCcuVqRaddKv1m3UxmMB66PJmkvF+tplFex5ZpPqYtk9XsTbF/GfJ7l +u2Bb8iZmS+2OswWDbobNid+OYlS34EDIGLbi8PoDRs/4hUzU6k06gRJ0JdSqS/0 hzokUCm57VuOe07vpoTqZiCXIE1Nn3bL6qC9sXPF7fnrECeiXtg1/7FkN8JaV5TY u/lu5qXFyBYzICYAJcFR8h8/jvAz/i1eiG6b1KPg9OA9h4O12W2Jt3IqfTy2HxNs /25OEA62jD+aGguRWntAWSaJhdEOpd9piNtPYU3haAqOJXoKzRiC -----END CERTIFICATE-----Generated at Sat Apr 12 17:00:06 2025 by rpki-client