$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa File: 3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa (raw, json) Hash identifier: 4kH6VHb8KfaqctAF2ijDFjPy+IOwb9QvZFXkpc1sJHI= Subject key identifier: 03:8A:64:CB:B5:62:9E:FD:F2:53:C5:88:90:2E:1D:10:4E:B4:99:44 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B62618694D118C4BE2CAEEC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 23.16.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:18:69:4d:11:8c:4b:e2:ca:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=8ea5741e-a4d6-410b-b23c-63a9b39eec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:49:d0:1c:07:d1:ff:0c:29:76:dd:53:52: 63:80:67:8c:c9:7f:3f:5f:6f:a6:5e:5d:75:89:80: b8:b0:f0:93:88:a2:0c:9c:da:c2:a3:8d:a2:f3:04: 78:70:23:ca:39:fd:f2:2c:b3:fc:99:19:f6:b3:04: c4:3f:7d:f6:5a:b4:07:6b:db:1f:6c:06:2b:e0:85: 42:a5:72:04:61:ec:52:67:ee:0f:19:a4:c7:e8:dc: e0:b7:ef:f8:d4:18:07:77:78:4a:6f:06:f7:ee:82: a0:5b:9f:88:82:23:d8:36:9d:2a:ae:29:a6:a5:86: cf:68:99:e6:b4:8d:48:4c:c2:2f:1e:dc:3c:40:f9: f9:2e:e9:af:40:d0:00:07:40:2d:3f:20:a4:c9:bf: cf:a2:70:67:ca:40:9d:0b:13:3e:d6:b1:98:90:22: d4:d8:17:55:0d:d7:13:bd:04:7a:08:b6:19:aa:06: 98:4c:92:eb:6e:20:71:5e:6a:85:88:0a:9e:db:aa: c4:aa:5a:18:af:0f:68:83:3b:8b:2e:88:3c:b9:32: 33:cb:29:78:60:ff:f6:bd:e8:c3:1b:48:2e:b1:be: 20:f9:4d:cc:da:ca:27:f9:45:aa:25:ed:9f:5b:18: 0a:86:22:f7:f5:f9:d6:42:57:01:28:72:e4:5e:eb: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8A:64:CB:B5:62:9E:FD:F2:53:C5:88:90:2E:1D:10:4E:B4:99:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 23.16.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ee:ba:1a:2c:6b:d8:ed:9d:49:1c:21:e7:43:d4:ff:58:12:96: 1f:e5:cf:a6:1f:af:76:7b:d1:43:79:aa:d4:9d:d4:9e:ea:5f: 8b:b5:d5:c3:7b:3d:be:c2:de:cc:67:bb:08:8e:79:6b:39:48: e0:5a:82:22:f9:31:24:6f:6e:9c:4f:26:91:c0:a2:32:84:f9: 8b:41:fe:a9:e0:6f:34:5d:d9:ac:39:2e:f5:0b:1a:3c:c9:b3: b5:01:ef:24:00:0d:7f:46:c0:9c:a0:48:c2:73:84:8f:7c:35: 36:09:35:cb:d0:c2:4c:8f:5d:cc:63:b0:5d:8e:d4:8b:d9:d1: 08:ff:78:99:81:f2:b5:44:08:39:a4:4d:bf:c4:13:0a:3d:90: 5c:82:03:26:fa:ff:8f:1c:4f:d7:5c:cf:9c:3a:ff:f6:6e:56: 77:42:dd:69:d0:0d:2d:d4:fe:36:e2:30:cd:f0:66:90:7e:3b: b1:dd:3c:f7:b8:29:6e:be:cb:0e:63:58:a6:98:78:38:72:8f: b5:61:01:b1:f5:d4:f4:a1:58:d3:32:ee:00:2f:a4:dc:98:87: e5:96:aa:ce:4d:14:be:dd:87:9c:e9:fa:98:f7:2c:51:35:ca: b3:2f:36:28:07:fb:89:c1:20:17:39:08:84:6c:47:fc:e2:e1: e4:a3:3a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhhpTRGMS+LK7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk OGVhNTc0MWUtYTRkNi00MTBiLWIyM2MtNjNhOWIzOWVlYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq31J0BwH0f8MKXbdU1JjgGeMyX8/X2+mXl11 iYC4sPCTiKIMnNrCo42i8wR4cCPKOf3yLLP8mRn2swTEP332WrQHa9sfbAYr4IVC pXIEYexSZ+4PGaTH6Nzgt+/41BgHd3hKbwb37oKgW5+IgiPYNp0qrimmpYbPaJnm tI1ITMIvHtw8QPn5LumvQNAAB0AtPyCkyb/PonBnykCdCxM+1rGYkCLU2BdVDdcT vQR6CLYZqgaYTJLrbiBxXmqFiAqe26rEqloYrw9ogzuLLog8uTIzyyl4YP/2vejD G0gusb4g+U3M2son+UWqJe2fWxgKhiL39fnWQlcBKHLkXutrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOKZMu1Yp798lPFiJAuHRBOtJlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Y3MWE5Y2YtODhiYi0z ZmRjLWE0ZjgtZDNhMDdkNzA0YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO66Gixr2O2dSRwh50PU/1gSlh/lz6Yfr3Z70UN5qtSd1J7qX4u11cN7 Pb7C3sxnuwiOeWs5SOBagiL5MSRvbpxPJpHAojKE+YtB/qngbzRd2aw5LvULGjzJ s7UB7yQADX9GwJygSMJzhI98NTYJNcvQwkyPXcxjsF2O1IvZ0Qj/eJmB8rVECDmk Tb/EEwo9kFyCAyb6/48cT9dcz5w6//ZuVndC3WnQDS3U/jbiMM3wZpB+O7HdPPe4 KW6+yw5jWKaYeDhyj7VhAbH11PShWNMy7gAvpNyYh+WWqs5NFL7dh5zp+pj3LFE1 yrMvNigH+4nBIBc5CIRsR/zi4eSjOio= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:27 2025 by rpki-client