$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/f1bcd7dc-9b3b-30a5-9f73-8bf5858eb251.roa File: f1bcd7dc-9b3b-30a5-9f73-8bf5858eb251.roa (raw, json) Hash identifier: DCsfZKJaxVE1ZfevddYXiOd4Ii0Zl897x+uIa1gOMr0= Subject key identifier: CA:69:32:40:80:2D:A7:69:79:2C:21:F5:5F:CA:B0:1C:1F:B8:9E:2E Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Certificate serial: 010D0C9F4328584A0C055C28EFB9AE60054E0F80 Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/f1bcd7dc-9b3b-30a5-9f73-8bf5858eb251.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 210630 IP address blocks: 23.184.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5c:28:ef:b9:ae:60:05:4e:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=bea3af9f-7aad-404f-bdeb-bd1729b393d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d5:62:a4:5e:e1:a6:e1:bf:2d:65:28:fb:e4: f7:d9:64:12:f6:52:7d:2d:f1:52:40:a3:d1:b0:dc: f1:15:4b:12:97:b3:1f:0d:1a:57:c4:13:ea:4e:30: a9:b3:b0:59:5f:d1:6b:e7:07:b9:11:68:e1:ff:84: 46:5c:bf:6b:f7:e0:43:33:8e:36:93:60:8b:29:f1: 61:6e:13:b0:ae:ad:88:7f:7b:5e:10:f3:3a:b3:0e: 18:6e:e0:0d:df:19:81:47:60:47:5b:6e:6c:ba:90: 1e:52:14:1e:44:a7:63:b5:29:2d:9a:54:58:56:18: 7d:6c:f4:34:21:db:82:13:65:a5:31:44:1d:70:0a: 2b:fd:d0:84:26:a0:93:31:34:c3:b3:b9:f1:8d:c9: 48:58:3a:d9:3a:75:80:e3:12:f1:fa:0c:ad:be:93: 0a:bb:22:cc:dc:2e:5a:d5:f1:2f:56:57:68:09:6a: 1e:66:5c:20:24:84:df:e1:cc:9a:b7:d0:92:8f:56: 7e:b7:3f:ee:c4:61:fb:da:71:8b:25:aa:5d:3e:be: 5b:90:5f:68:47:ae:5d:dc:91:57:f0:71:24:46:7c: b9:3b:ec:59:b6:b9:e5:b3:12:f9:08:67:b5:63:c6: ea:83:9e:8c:fe:e9:bd:2b:32:fd:8d:bb:37:af:b2: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:69:32:40:80:2D:A7:69:79:2C:21:F5:5F:CA:B0:1C:1F:B8:9E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/f1bcd7dc-9b3b-30a5-9f73-8bf5858eb251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl X509v3 Authority Key Identifier: keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer sbgp-ipAddrBlock: critical IPv4: 23.184.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:39:01:f0:ac:1f:15:f5:58:20:f6:a6:70:36:02:f7:1f:c5: e4:5d:cd:e7:91:6f:23:a4:ea:27:e4:69:ee:44:95:9a:3b:a0: 36:f9:9c:33:4d:da:8d:5d:b6:37:98:4a:a7:8a:ed:b9:1f:3b: c5:fc:61:39:51:cb:b9:89:ed:70:77:1f:e3:54:73:dd:68:62: be:f8:79:c5:33:a5:bf:02:c2:54:70:68:29:72:c3:e4:a8:cc: c7:4b:19:f3:16:ff:29:d8:c0:99:2d:1b:72:89:4b:68:37:b8: 8d:52:73:2a:23:58:e4:1c:26:4a:32:be:e6:02:61:8f:26:9d: 48:09:03:6f:d4:f0:98:f3:5b:40:ee:bc:05:75:87:78:c3:38: 65:7c:40:1e:bd:27:62:9c:2b:db:fd:0b:66:bb:26:3d:52:24: 94:22:25:81:09:b7:4a:8c:08:b3:d4:c3:af:27:9d:fb:f8:80: 65:78:f8:92:22:92:95:1a:04:95:7d:4a:0b:57:8a:a7:bc:9c: 05:a4:e1:83:7e:d1:05:6e:6c:ea:8d:1e:94:33:eb:06:65:5e: 3b:78:d2:14:0a:0f:c6:96:0c:2d:de:8c:26:1f:f6:5c:0f:53: ef:6b:fd:06:51:c4:7f:2a:50:27:ec:88:4a:5f:95:b6:10:61: 5f:16:34:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVwo77muYAVOD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy YmVmMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YmVhM2FmOWYtN2FhZC00MDRmLWJkZWItYmQxNzI5YjM5M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19VipF7hpuG/LWUo++T32WQS9lJ9LfFSQKPR sNzxFUsSl7MfDRpXxBPqTjCps7BZX9Fr5we5EWjh/4RGXL9r9+BDM442k2CLKfFh bhOwrq2If3teEPM6sw4YbuAN3xmBR2BHW25supAeUhQeRKdjtSktmlRYVhh9bPQ0 IduCE2WlMUQdcAor/dCEJqCTMTTDs7nxjclIWDrZOnWA4xLx+gytvpMKuyLM3C5a 1fEvVldoCWoeZlwgJITf4cyat9CSj1Z+tz/uxGH72nGLJapdPr5bkF9oR65d3JFX 8HEkRny5O+xZtrnlsxL5CGe1Y8bqg56M/um9KzL9jbs3r7KA6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMppMkCALadpeSwh9V/KsBwfuJ4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvZjFiY2Q3ZGMtOWIzYi0z MGE1LTlmNzMtOGJmNTg1OGViMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2 ZjUwYzJiZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7gwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ5AfCsHxX1WCD2pnA2AvcfxeRdzeeRbyOk6ifkae5ElZo7oDb5nDNN 2o1dtjeYSqeK7bkfO8X8YTlRy7mJ7XB3H+NUc91oYr74ecUzpb8CwlRwaClyw+So zMdLGfMW/ynYwJktG3KJS2g3uI1ScyojWOQcJkoyvuYCYY8mnUgJA2/U8JjzW0Du vAV1h3jDOGV8QB69J2KcK9v9C2a7Jj1SJJQiJYEJt0qMCLPUw68nnfv4gGV4+JIi kpUaBJV9SgtXiqe8nAWk4YN+0QVubOqNHpQz6wZlXjt40hQKD8aWDC3ejCYf9lwP U+9r/QZRxH8qUCfsiEpflbYQYV8WNAo= -----END CERTIFICATE-----Generated at Sat Jun 7 14:02:17 2025 by rpki-client