$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa File: 3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa (raw, json) Hash identifier: Lrq5TuZl+4O12apWEhPXP651hggWVfht0ad9bJv7r14= Subject key identifier: 93:D5:19:6A:BC:18:C9:27:B4:90:E0:A2:F5:1B:A0:C5:48:1D:A1:42 Certificate issuer: /CN=cc0e54e0-cc7b-4a47-961c-77b837f94955 Certificate serial: 010D0C9F4328584968B42702511832640B4C0B00 Authority key identifier: 70:D1:CC:47:A2:EA:6E:3B:97:7E:97:9A:A7:36:1F:D9:77:5D:F7:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 395243 IP address blocks: 23.185.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:27:02:51:18:32:64:0b:4c:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0e54e0-cc7b-4a47-961c-77b837f94955 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=6f3964b8-f75f-47bf-b9fe-f17d9df61a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:32:b4:e5:89:42:e0:99:57:97:da:0d:36:e5: 7d:01:df:0c:a2:28:d4:86:86:3b:c2:42:a6:4f:9b: 7b:53:dc:42:65:fe:e0:31:8d:fc:ca:11:62:37:83: 25:c9:0e:22:3f:e9:ac:d7:98:4c:1a:3b:d6:7b:36: df:1a:63:f4:1a:a0:c1:ba:92:7a:d3:8b:5a:8f:51: 04:1d:03:43:1e:9f:62:d3:cf:79:3d:0c:d9:d5:2c: 39:e7:37:3f:eb:f8:18:12:07:fa:7e:1e:cf:34:36: d5:6b:ff:c1:90:25:13:84:73:2f:ea:32:fb:2d:ec: 40:fe:22:81:51:19:9c:c2:f1:3f:27:61:ae:e1:34: 45:cb:a6:67:33:58:54:c7:05:01:8e:ea:c2:cc:57: 0f:01:5f:e1:6c:89:be:68:ae:f8:47:44:2f:41:82: b1:d6:3e:f6:54:2e:bd:eb:38:0e:be:c4:0c:af:8a: 46:fe:cb:cc:5c:bc:1b:7c:95:09:a0:a0:a5:5b:93: cb:8b:8e:3a:6e:01:01:98:53:a7:a2:92:91:ee:84: fb:08:28:2b:b1:36:79:c0:c9:54:86:c7:9b:d5:67: af:17:7d:2e:29:5f:ad:de:66:58:39:1b:22:ff:b0: 8c:07:3e:b0:32:d0:e2:28:ac:6a:22:98:2a:05:3c: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D5:19:6A:BC:18:C9:27:B4:90:E0:A2:F5:1B:A0:C5:48:1D:A1:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.crl X509v3 Authority Key Identifier: keyid:70:D1:CC:47:A2:EA:6E:3B:97:7E:97:9A:A7:36:1F:D9:77:5D:F7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer sbgp-ipAddrBlock: critical IPv4: 23.185.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:24:86:d6:38:be:f5:23:8f:38:c0:8b:ff:aa:e1:e6:9e:77: 54:9a:8d:44:19:6c:da:76:86:9c:17:7d:c1:4f:76:37:d3:21: 39:45:8b:0f:1d:80:f8:b1:5c:71:c5:92:12:2a:65:90:3c:7c: ea:ce:b2:a6:00:bf:84:9d:fc:4d:bd:9c:df:5b:36:f1:8d:78: eb:36:1f:ee:b4:53:b5:bc:b8:a2:04:72:b0:cc:91:bd:20:7e: 5a:0c:1c:f9:03:88:6c:af:c7:2f:6f:6f:91:16:e5:cc:5b:1e: 22:63:ea:73:b1:5d:da:3a:02:29:79:f0:15:ad:25:84:9c:e1: 02:8a:f2:3a:d9:92:c6:f9:c4:13:86:cd:8d:21:d1:b5:b3:a9: de:6a:2a:07:df:b3:cf:e1:50:19:bc:da:7c:5b:de:46:e2:a0: 0e:9e:67:51:04:c7:28:f3:ab:81:93:c9:9e:6e:0d:98:30:56: dd:0c:c6:cf:f4:25:da:a1:e3:dd:16:79:57:b2:2b:53:e7:b6: 2f:47:d9:58:6a:e2:fe:58:9a:29:97:4a:06:61:f3:fe:76:af: c0:2f:f3:a9:ea:82:c4:2d:dc:b4:b7:94:22:fe:2f:e5:23:51: 43:da:f1:61:51:b2:73:f0:cb:24:9b:64:31:b2:0f:ec:64:71: 3d:b5:ab:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCcCURgyZAtMCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MwZTU0ZTAtY2M3Yi00YTQ3LTk2MWMtNzdiODM3Zjk0 OTU1MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NmYzOTY0YjgtZjc1Zi00N2JmLWI5ZmUtZjE3ZDlkZjYxYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDK05YlC4JlXl9oNNuV9Ad8MoijUhoY7wkKm T5t7U9xCZf7gMY38yhFiN4MlyQ4iP+ms15hMGjvWezbfGmP0GqDBupJ604taj1EE HQNDHp9i0895PQzZ1Sw55zc/6/gYEgf6fh7PNDbVa//BkCUThHMv6jL7LexA/iKB URmcwvE/J2Gu4TRFy6ZnM1hUxwUBjurCzFcPAV/hbIm+aK74R0QvQYKx1j72VC69 6zgOvsQMr4pG/svMXLwbfJUJoKClW5PLi446bgEBmFOnopKR7oT7CCgrsTZ5wMlU hseb1WevF30uKV+t3mZYORsi/7CMBz6wMtDiKKxqIpgqBTzs5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPVGWq8GMkntJDgovUboMVIHaFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYzBl NTRlMC1jYzdiLTRhNDctOTYxYy03N2I4MzdmOTQ5NTUvM2E2NzExNWYtM2EyNC0z N2VhLWI4YWYtMGY0OWVjMzAzMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2MwZTU0ZTAtY2M3Yi00YTQ3LTk2 MWMtNzdiODM3Zjk0OTU1L2NjMGU1NGUwLWNjN2ItNGE0Ny05NjFjLTc3YjgzN2Y5 NDk1NS5jcmwwHwYDVR0jBBgwFoAUcNHMR6LqbjuXfpeapzYf2Xdd9+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYzBlNTRlMC1jYzdiLTRhNDctOTYxYy03N2I4 MzdmOTQ5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEokhtY4vvUjjzjAi/+q4eaed1SajUQZbNp2hpwXfcFPdjfTITlFiw8d gPixXHHFkhIqZZA8fOrOsqYAv4Sd/E29nN9bNvGNeOs2H+60U7W8uKIEcrDMkb0g floMHPkDiGyvxy9vb5EW5cxbHiJj6nOxXdo6Ail58BWtJYSc4QKK8jrZksb5xBOG zY0h0bWzqd5qKgffs8/hUBm82nxb3kbioA6eZ1EExyjzq4GTyZ5uDZgwVt0Mxs/0 Jdqh490WeVeyK1Pnti9H2Vhq4v5YmimXSgZh8/52r8Av86nqgsQt3LS3lCL+L+Uj UUPa8WFRsnPwyySbZDGyD+xkcT21q/k= -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:54 2025 by rpki-client