$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa File: ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json) Hash identifier: b5Vps4YKtKTKDoRuny7y3cxpKlnfJeNSKN2u9J3NS6I= Subject key identifier: 62:21:97:B2:8F:12:73:87:73:B7:BA:BF:3C:23:6F:87:D1:87:96:36 Certificate issuer: /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Certificate serial: 010D0C9F4328584965E9701413F88B4DCF4B76AC Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 398292 IP address blocks: 23.158.48.0/24 maxlen: 24 169.197.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:70:14:13:f8:8b:4d:cf:4b:76:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=8aa6f901-c266-4a7d-b0b6-cdba67de44bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:78:00:73:ba:c5:4f:20:50:0b:29:df:e8: a9:24:b4:44:13:48:44:d2:77:1b:8a:e9:63:af:c7: 12:b7:e0:d3:74:fb:84:9b:40:8a:40:64:0a:0c:1d: f2:48:4c:76:23:b7:91:63:ab:89:ec:b3:bd:86:5c: c2:ea:83:c7:48:e7:b6:59:ae:e3:52:01:9d:b6:ef: 36:d1:d4:97:87:0b:05:fb:74:28:0a:7f:cc:69:49: c0:14:9d:2c:f3:bc:61:85:39:89:ac:90:4b:5e:9f: 6e:05:4e:5f:2c:c9:c8:df:19:79:24:ea:97:9d:4d: 85:91:de:f0:6f:6d:13:fc:69:1a:8f:14:76:c4:1c: 27:23:b1:56:59:de:d5:e8:c0:3b:8f:af:7c:da:89: b4:1c:ff:bd:3e:3a:1b:67:f9:0e:a4:01:e7:c3:aa: db:8c:93:6f:1b:1e:9b:d7:d6:85:b5:e5:ef:0e:d4: 87:e9:de:fd:c4:49:c7:58:39:b8:31:53:40:fe:0b: 51:13:a5:79:81:28:67:7e:4a:ad:0f:95:b5:bf:5a: 94:86:ea:53:97:18:0e:b8:2b:c0:ce:2b:3b:8c:49: 95:6f:c4:57:75:fa:f1:25:08:af:8d:36:51:34:4d: 6b:68:8f:f7:fc:14:ce:4a:ad:b4:5d:98:3f:3a:be: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:97:B2:8F:12:73:87:73:B7:BA:BF:3C:23:6F:87:D1:87:96:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl X509v3 Authority Key Identifier: keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer sbgp-ipAddrBlock: critical IPv4: 23.158.48.0/24 169.197.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:86:6e:b7:0e:b2:da:67:a9:34:2c:2b:83:3d:99:ee:d8:75: bc:57:9b:a7:7f:4a:98:c3:c2:c0:95:c5:da:9c:81:e8:4d:b1: 4f:c3:ad:92:99:4c:1a:68:ab:bb:96:57:75:ba:23:c8:b4:68: a6:db:93:ca:19:9c:97:eb:59:39:99:d4:97:4f:a1:63:c6:ed: 14:bd:05:24:59:ad:70:40:73:bd:4b:75:14:16:d2:59:18:de: d7:29:75:c0:33:0f:0b:09:c3:e6:5f:83:23:0c:d3:41:85:23: 28:27:d6:c5:f8:58:1f:2f:6a:14:f9:fd:78:86:5b:cd:a6:18: 94:08:ee:a1:99:3e:a4:65:00:de:fa:48:c3:25:cd:ac:3e:9b: 20:f9:74:2f:8b:86:30:fa:cb:bf:90:7a:ff:a1:60:41:65:a1: be:09:86:d7:4d:24:e7:b6:7d:a5:2a:be:8f:12:0b:70:48:bd: c6:9d:9b:79:91:0c:7b:98:61:5a:0a:8a:b2:3a:ae:80:54:2b: a9:ef:ac:50:77:26:f8:78:7a:1a:a8:23:75:f0:89:ae:fe:c3: 7e:bc:d8:d0:cc:61:2d:94:c6:50:7c:00:31:b3:17:ee:38:ee: 5f:7f:58:c9:c0:ac:54:d4:d7:83:03:6f:8c:48:cf:66:d0:63: 0e:ad:01:57 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEll6XAUE/iLTc9LdqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU2M2ZhM2MtYjYyMy00NWVkLWJjNTAtNWM1ZjZjZTFl ZWU4MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk OGFhNmY5MDEtYzI2Ni00YTdkLWIwYjYtY2RiYTY3ZGU0NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr294AHO6xU8gUAsp3+ipJLREE0hE0ncbiulj r8cSt+DTdPuEm0CKQGQKDB3ySEx2I7eRY6uJ7LO9hlzC6oPHSOe2Wa7jUgGdtu82 0dSXhwsF+3QoCn/MaUnAFJ0s87xhhTmJrJBLXp9uBU5fLMnI3xl5JOqXnU2Fkd7w b20T/GkajxR2xBwnI7FWWd7V6MA7j6982om0HP+9PjobZ/kOpAHnw6rbjJNvGx6b 19aFteXvDtSH6d79xEnHWDm4MVNA/gtRE6V5gShnfkqtD5W1v1qUhupTlxgOuCvA zis7jEmVb8RXdfrxJQivjTZRNE1raI/3/BTOSq20XZg/Or42UQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGIhl7KPEnOHc7e6vzwjb4fRh5Y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYz ZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVmNmNlMWVlZTgvZmZhNmViYTEtMThjNS0z ZWRmLWFhMWEtYzU0Y2Q0MDA1ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWU2M2ZhM2MtYjYyMy00NWVkLWJj NTAtNWM1ZjZjZTFlZWU4LzFlNjNmYTNjLWI2MjMtNDVlZC1iYzUwLTVjNWY2Y2Ux ZWVlOC5jcmwwHwYDVR0jBBgwFoAUownWF7q1MeX/MRUio0wUUiJgU40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYzZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVm NmNlMWVlZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF54wAwQC qcWcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADGGbrcOstpnqTQsK4M9me7YdbxXm6d/SpjDwsCVxdqcgehN sU/DrZKZTBpoq7uWV3W6I8i0aKbbk8oZnJfrWTmZ1JdPoWPG7RS9BSRZrXBAc71L dRQW0lkY3tcpdcAzDwsJw+ZfgyMM00GFIygn1sX4WB8vahT5/XiGW82mGJQI7qGZ PqRlAN76SMMlzaw+myD5dC+LhjD6y7+Qev+hYEFlob4JhtdNJOe2faUqvo8SC3BI vcadm3mRDHuYYVoKirI6roBUK6nvrFB3Jvh4ehqoI3Xwia7+w3682NDMYS2UxlB8 ADGzF+447l9/WMnArFTU14MDb4xIz2bQYw6tAVc= -----END CERTIFICATE-----Generated at Sun Apr 13 03:54:28 2025 by rpki-client