$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa File: e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa (raw, json) Hash identifier: pIKfOyu+rvNquGKbS+wV31q5J0aUragw3+MIkro651I= Subject key identifier: AB:ED:BA:6B:24:3F:CB:98:9F:7C:80:22:72:A7:B1:4E:78:1E:6E:09 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F432858494039459D39547DD41F551D00 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 3257 IP address blocks: 23.234.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:45:9d:39:54:7d:d4:1f:55:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=5d963c58-19c3-4661-9c50-efa1f5c8b393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:93:f5:e6:aa:09:48:c0:bc:78:57:18:b4: df:c2:9d:12:b9:33:42:f8:90:31:cb:20:05:e7:84: 28:af:07:1b:20:d6:6f:4c:7c:a5:73:98:e8:9e:71: 9e:00:ab:a4:92:a2:47:d0:8f:41:66:d7:0c:6a:c4: 91:75:86:3b:60:15:8f:61:77:7b:7e:98:04:cc:52: b6:d9:5c:51:f3:c0:49:2f:97:49:4e:73:c3:ae:cc: 15:4e:4d:a4:fc:95:93:4c:a0:b3:06:98:e3:df:92: 3d:94:43:c4:71:c4:a1:e5:6f:39:a4:4d:05:1d:07: f4:15:43:65:27:a7:8c:97:dc:b5:3c:69:75:9b:67: d9:90:f2:e2:82:87:15:08:11:c4:b7:20:31:b9:5f: e7:7a:94:16:10:e2:18:67:f0:cd:74:4e:05:6f:2c: 14:3c:9c:be:78:2c:e9:ba:9d:8a:54:e5:b7:94:ca: d0:0a:ae:8d:2d:c2:6c:ad:b3:e0:92:28:be:73:2b: 86:63:1b:93:27:65:e9:9a:34:60:14:13:6a:5a:c9: 35:08:b6:af:47:f5:a7:60:49:b8:87:47:24:1a:a2: ef:11:fb:20:50:7f:c1:40:ab:5c:e0:04:56:31:78: 1b:52:71:1d:66:57:71:f7:1c:3e:9c:09:f2:8b:ea: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:ED:BA:6B:24:3F:CB:98:9F:7C:80:22:72:A7:B1:4E:78:1E:6E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ea:c1:23:51:48:1f:59:bb:47:89:bc:a3:b4:e7:a3:40:0c: 86:65:24:9a:bb:d6:46:59:e0:07:bb:14:3a:9c:96:56:ff:b6: 9c:2c:48:86:6a:36:5f:f6:b8:19:9c:62:5d:56:a3:ad:fa:80: e8:b3:3a:15:b7:9f:58:08:52:f1:17:79:96:49:52:8b:e8:11: 00:14:65:7c:4a:81:64:e1:2a:52:a1:63:2d:51:08:fd:41:42: 7f:ef:0a:85:2f:9d:54:6d:77:7d:b2:d1:06:7b:0c:fa:4d:5c: 92:99:14:67:62:ca:9f:d2:05:1e:2d:e4:f2:f6:94:52:1c:b2: 9d:72:f2:e7:11:84:03:28:ab:c7:5c:d8:89:b4:7d:17:37:76: 22:09:d3:a6:7a:51:bd:e7:58:7a:e7:80:64:0c:85:8f:47:ef: cd:87:20:df:7f:e6:e9:b8:e8:d4:b8:03:68:a3:f3:bc:d4:b0: e3:9e:6d:69:3a:6e:8d:0d:3e:ac:c1:43:2f:77:02:55:9d:30: 7b:29:5a:1b:a6:a0:9e:44:92:99:16:25:03:d7:b8:b8:38:43: b7:ee:aa:b1:91:43:b9:06:78:67:d1:1d:1d:5e:f6:23:aa:52: f6:e4:22:5f:73:ee:f6:98:fc:6d:5d:26:21:14:c5:7d:94:eb: f7:f1:c4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUWdOVR91B9VHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NWQ5NjNjNTgtMTljMy00NjYxLTljNTAtZWZhMWY1YzhiMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEuT9eaqCUjAvHhXGLTfwp0SuTNC+JAxyyAF 54QorwcbINZvTHylc5jonnGeAKukkqJH0I9BZtcMasSRdYY7YBWPYXd7fpgEzFK2 2VxR88BJL5dJTnPDrswVTk2k/JWTTKCzBpjj35I9lEPEccSh5W85pE0FHQf0FUNl J6eMl9y1PGl1m2fZkPLigocVCBHEtyAxuV/nepQWEOIYZ/DNdE4FbywUPJy+eCzp up2KVOW3lMrQCq6NLcJsrbPgkii+cyuGYxuTJ2XpmjRgFBNqWsk1CLavR/WnYEm4 h0ckGqLvEfsgUH/BQKtc4ARWMXgbUnEdZldx9xw+nAnyi+q2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvtumskP8uYn3yAInKnsU54Hm4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZTIxNzVhOTgtODI2OC0z ZTBlLTg5YzQtZTdmZjBhZDI0OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvqwSNRSB9Zu0eJvKO056NADIZlJJq71kZZ4Ae7FDqcllb/tpwsSIZq Nl/2uBmcYl1Wo636gOizOhW3n1gIUvEXeZZJUovoEQAUZXxKgWThKlKhYy1RCP1B Qn/vCoUvnVRtd32y0QZ7DPpNXJKZFGdiyp/SBR4t5PL2lFIcsp1y8ucRhAMoq8dc 2Im0fRc3diIJ06Z6Ub3nWHrngGQMhY9H782HIN9/5um46NS4A2ij87zUsOOebWk6 bo0NPqzBQy93AlWdMHspWhumoJ5EkpkWJQPXuLg4Q7fuqrGRQ7kGeGfRHR1e9iOq UvbkIl9z7vaY/G1dJiEUxX2U6/fxxLY= -----END CERTIFICATE-----Generated at Sat Apr 5 08:53:34 2025 by rpki-client