$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa File: 6e3e97d0-eea0-3541-b2e3-e61df6230705.roa (raw, json) Hash identifier: Y8ALJ30I8RxqjU2MYI8qvWl9DSVohTbDbunPDR2sg1o= Subject key identifier: 0A:91:FC:2C:69:EE:73:31:52:AF:50:26:32:BF:8E:14:43:93:AC:54 Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Certificate serial: 010D0C9F43285849DF5A5E3C066710C546DF1E00 Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 5650 IP address blocks: 23.239.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5e:3c:06:67:10:c5:46:df:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=2a43ae18-d637-41d1-b46b-78efbd265798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:7b:3b:cf:99:fc:67:da:e2:90:0d:f6:29: 7e:47:ab:ef:6f:24:58:a1:e9:7e:42:13:5c:c2:f1: 84:31:0f:d6:d1:0d:4b:c7:ea:b8:e6:52:f8:a4:b1: c2:38:17:3a:b7:67:0d:13:f9:36:2f:c3:f8:f5:7c: e7:e4:55:24:83:9a:35:dd:1e:7d:4e:69:43:b4:b2: 30:b2:ce:0c:72:11:3e:7b:98:1c:d2:ea:56:ad:17: c0:91:18:1d:e4:3f:ec:7a:35:70:be:5e:70:0e:e4: 97:cf:a7:ec:72:ab:a3:de:8a:6a:46:6b:57:a1:2d: ff:7a:98:a7:6a:44:13:43:eb:dd:8c:ea:9c:e0:65: fe:19:5c:de:9c:e8:0c:5a:ca:d3:fc:2b:4a:82:d4: a4:c7:28:24:1e:6b:f8:ca:34:cc:fe:76:92:0d:09: dc:fd:62:f1:99:6b:ec:03:b4:ea:03:b7:58:bf:3f: f1:69:95:80:7e:a7:8a:79:65:d2:76:95:a4:6f:a4: 05:65:da:81:f9:8e:12:48:0b:91:e9:65:0a:b8:e8: 39:a0:58:fb:71:d0:f0:e3:0d:07:9b:e0:4c:af:9e: b2:5c:c7:0b:45:f3:00:39:d2:84:70:41:15:e4:64: 6b:19:78:3a:d6:da:6d:3a:3a:c6:3d:91:91:0b:e3: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:91:FC:2C:69:EE:73:31:52:AF:50:26:32:BF:8E:14:43:93:AC:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl X509v3 Authority Key Identifier: keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer sbgp-ipAddrBlock: critical IPv4: 23.239.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:50:cb:8a:67:b5:e5:bd:60:0e:b5:bc:cd:2a:58:c2:f9:5e: d1:72:d8:58:45:b6:e6:7b:04:37:58:e4:0b:3f:52:0f:87:74: b1:44:ee:65:5f:23:e9:4f:b3:00:df:66:1b:8b:5a:c8:a1:e9: 90:93:f2:f7:81:60:95:ee:34:66:91:74:d0:ff:40:4f:ac:0f: 3c:08:e3:76:1b:5d:0e:11:88:4c:70:79:f0:1f:62:73:7d:f6: 2c:f8:2e:fe:2a:5c:1b:0b:5f:2c:09:4d:8f:83:c9:8e:de:79: ea:61:a7:2f:b7:c0:b3:7a:d0:4b:13:2b:ef:31:41:04:db:d3: 07:f4:28:5c:6e:75:78:83:94:8b:86:34:98:65:40:ea:30:d3: 41:12:75:d1:5a:e4:50:55:8b:ac:08:c6:39:cb:8e:34:85:a4: 1c:dd:43:da:49:52:18:8d:b8:ed:9f:46:87:30:cb:b5:ed:7b: 57:85:84:1b:28:2f:b9:fc:5c:87:73:d4:8e:08:f0:4b:b8:e7: 4d:f9:37:c0:fb:76:b9:32:46:48:f7:34:19:9f:9b:a4:44:68: d4:f8:16:d1:04:63:34:85:9f:41:5f:7b:b9:80:91:49:06:de: 7f:b1:87:74:cf:4d:c6:5a:a6:bc:ca:a2:99:28:42:1b:c2:9c: 76:8b:d1:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWl48BmcQxUbfHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0 Mjg3MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MmE0M2FlMTgtZDYzNy00MWQxLWI0NmItNzhlZmJkMjY1Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b97O8+Z/Gfa4pAN9il+R6vvbyRYoel+QhNc wvGEMQ/W0Q1Lx+q45lL4pLHCOBc6t2cNE/k2L8P49Xzn5FUkg5o13R59TmlDtLIw ss4MchE+e5gc0upWrRfAkRgd5D/sejVwvl5wDuSXz6fscquj3opqRmtXoS3/epin akQTQ+vdjOqc4GX+GVzenOgMWsrT/CtKgtSkxygkHmv4yjTM/naSDQnc/WLxmWvs A7TqA7dYvz/xaZWAfqeKeWXSdpWkb6QFZdqB+Y4SSAuR6WUKuOg5oFj7cdDw4w0H m+BMr56yXMcLRfMAOdKEcEEV5GRrGXg61tptOjrGPZGRC+MatQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqR/Cxp7nMxUq9QJjK/jhRDk6xUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4 NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvNmUzZTk3ZDAtZWVhMC0z NTQxLWIyZTMtZTYxZGY2MjMwNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF++gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9Qy4pnteW9YA61vM0qWML5XtFy2FhFtuZ7BDdY5As/Ug+HdLFE7mVf I+lPswDfZhuLWsih6ZCT8veBYJXuNGaRdND/QE+sDzwI43YbXQ4RiExwefAfYnN9 9iz4Lv4qXBsLXywJTY+DyY7eeephpy+3wLN60EsTK+8xQQTb0wf0KFxudXiDlIuG NJhlQOow00ESddFa5FBVi6wIxjnLjjSFpBzdQ9pJUhiNuO2fRocwy7Xte1eFhBso L7n8XIdz1I4I8Eu45035N8D7drkyRkj3NBmfm6REaNT4FtEEYzSFn0Ffe7mAkUkG 3n+xh3TPTcZaprzKopkoQhvCnHaL0c0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:06 2025 by rpki-client