$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa File: 5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa (raw, json) Hash identifier: 3LCwuWuHa6jY8JSTQTAUvn1muzXbn6S+P+4h72lDX8I= Subject key identifier: FD:D9:F0:37:76:B2:BF:3E:54:03:BD:BC:87:30:61:63:80:E2:33:18 Certificate issuer: /CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Certificate serial: 010D0C9F432858494CC9444A9DF702AE7145D3A0 Authority key identifier: 0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 401214 IP address blocks: 23.183.152.0/24 maxlen: 24 2602:f888::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:44:4a:9d:f7:02:ae:71:45:d3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=1b6cb101-41aa-49a9-b540-2ee74852c5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:91:ea:30:64:1c:18:5f:c1:8c:8d:d2:f0: a1:20:4a:f3:f5:6f:58:bd:29:cb:5b:aa:17:4c:4c: 0a:9b:a3:69:e9:3c:b6:33:f9:f5:c4:67:81:8a:68: c1:ec:cb:b6:f1:86:0d:14:15:bf:a5:99:65:e8:bb: 32:aa:78:1b:da:de:63:75:d1:20:87:47:20:22:bb: 1c:39:4b:08:d5:15:c0:07:99:d3:ec:78:26:1b:22: 33:ce:36:8f:72:16:67:1d:32:2b:7d:af:a7:f6:6b: d5:98:5e:6e:fd:6d:77:80:8b:a0:b6:3b:ac:6a:c6: cb:6e:2d:6b:f4:56:aa:df:a9:3f:0b:29:5d:a4:19: 56:cd:d1:eb:ae:8c:05:87:a6:65:c0:cb:74:8b:36: 7a:cc:1f:a5:c9:e3:44:31:a8:96:1e:63:69:a8:f0: 8b:79:40:5b:48:ed:97:c8:54:d4:b0:82:19:d4:47: 80:e0:9b:fa:e4:4f:55:8e:33:2c:ba:de:ba:8f:e3: e1:83:d0:79:38:a2:e7:2b:c7:64:9c:a2:bb:52:ab: 6a:1b:b7:30:a1:d0:94:1c:5e:b1:e9:98:45:fa:01: f0:e0:97:c7:bd:ee:68:1b:f0:37:85:ac:b2:01:0c: d6:42:ab:ad:93:4f:6a:3b:61:84:d3:89:d2:0c:3d: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:F0:37:76:B2:BF:3E:54:03:BD:BC:87:30:61:63:80:E2:33:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl X509v3 Authority Key Identifier: keyid:0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer sbgp-ipAddrBlock: critical IPv4: 23.183.152.0/24 IPv6: 2602:f888::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:12:2e:1c:a2:a7:5d:64:b6:aa:63:bc:2e:08:5c:d5:4a:68: 5f:cb:ab:23:78:1c:13:bb:b7:2d:d8:ed:6e:4b:05:91:00:90: 92:6a:ec:6f:30:fa:c3:05:08:fe:b2:3f:a9:16:69:f5:76:cb: 6c:96:f8:65:a7:fb:7f:37:b5:68:c9:9c:9c:a5:dd:c7:98:ab: b4:fe:4f:ed:7f:67:f1:cd:0a:a5:4f:c4:ef:f0:b1:ef:ba:c4: 56:6f:c9:bd:88:dd:85:a8:87:68:c6:41:b2:51:14:a2:7f:c6: 1c:37:d1:3f:04:71:33:1c:f5:d1:b4:d8:a5:89:d2:b8:71:f5: 8d:f8:a3:25:5b:e0:dd:10:ea:30:26:a6:6f:fb:a3:41:a4:17: 19:b4:32:43:63:1d:2b:83:ce:92:50:56:3a:bf:db:ab:b7:65: 62:a1:92:13:78:9b:73:60:b8:1e:10:04:7a:34:6d:56:a0:d2: 4d:a1:15:e0:d2:bc:41:e3:0b:54:3f:87:7e:b6:22:b5:57:db: 06:fb:f9:53:d2:79:33:ef:29:02:d8:0d:74:b0:d2:3e:02:5f: 15:5d:2f:01:df:86:28:56:81:5d:c1:fd:7a:0e:85:21:98:ef: 25:72:02:44:d9:d9:d9:c5:2e:7a:67:ee:63:10:77:a2:da:a6: a4:a9:52:29 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElMyURKnfcCrnFF06AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQyODQ1YTQtYjk1Mi00YWI3LTljZGItZDQzMmNhNTMw ZGQ5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MWI2Y2IxMDEtNDFhYS00OWE5LWI1NDAtMmVlNzQ4NTJjNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypuR6jBkHBhfwYyN0vChIErz9W9YvSnLW6oX TEwKm6Np6Ty2M/n1xGeBimjB7Mu28YYNFBW/pZll6Lsyqngb2t5jddEgh0cgIrsc OUsI1RXAB5nT7HgmGyIzzjaPchZnHTIrfa+n9mvVmF5u/W13gIugtjusasbLbi1r 9Faq36k/CyldpBlWzdHrrowFh6ZlwMt0izZ6zB+lyeNEMaiWHmNpqPCLeUBbSO2X yFTUsIIZ1EeA4Jv65E9VjjMsut66j+Phg9B5OKLnK8dknKK7UqtqG7cwodCUHF6x 6ZhF+gHw4JfHve5oG/A3hayyAQzWQqutk09qO2GE04nSDD0KowIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP3Z8Dd2sr8+VAO9vIcwYWOA4jMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDI4 NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMyY2E1MzBkZDkvNTkwMWNlMjMtMTNiNi0z MGUwLWFiOTQtM2FlNzlmYjcyZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQyODQ1YTQtYjk1Mi00YWI3LTlj ZGItZDQzMmNhNTMwZGQ5LzVkMjg0NWE0LWI5NTItNGFiNy05Y2RiLWQ0MzJjYTUz MGRkOS5jcmwwHwYDVR0jBBgwFoAUDUskoG7MmmMPdWG1Y/JwuJVXISswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZDI4NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMy Y2E1MzBkZDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7eYMA4E AgACMAgDBgAmAviIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiEi4coqddZLaqY7wuCFzVSmhfy6sjeBwT u7ct2O1uSwWRAJCSauxvMPrDBQj+sj+pFmn1dstslvhlp/t/N7VoyZycpd3HmKu0 /k/tf2fxzQqlT8Tv8LHvusRWb8m9iN2FqIdoxkGyURSif8YcN9E/BHEzHPXRtNil idK4cfWN+KMlW+DdEOowJqZv+6NBpBcZtDJDYx0rg86SUFY6v9urt2VioZITeJtz YLgeEAR6NG1WoNJNoRXg0rxB4wtUP4d+tiK1V9sG+/lT0nkz7ykC2A10sNI+Al8V XS8B34YoVoFdwf16DoUhmO8lcgJE2dnZxS56Z+5jEHei2qakqVIp -----END CERTIFICATE-----Generated at Tue Apr 8 14:54:36 2025 by rpki-client