$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa File: 04579b92-c2ba-3e85-be33-ca6770cc41b1.roa (raw, json) Hash identifier: 7ozBod2fnqlPD71TcoAR4fQ0BxcG/rMBjH/J0TsOkqY= Subject key identifier: 26:EF:72:D1:F3:F1:96:FA:E6:4D:8D:E1:14:8F:9C:70:5A:39:98:85 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F432858494B641D383826A14AB66EBE00 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 211392 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1d:38:38:26:a1:4a:b6:6e:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=b38aed5a-cc8d-4b1f-b291-a886ac9e47f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:39:0f:a6:8d:51:72:1b:1c:87:56:7d:61: 84:86:02:c7:51:b9:4d:4d:4e:f7:e7:c4:e8:9d:40: 70:81:28:5d:cb:55:ee:fa:ad:ad:cf:1e:9c:ed:2d: 10:39:97:f6:38:a9:9e:f3:37:43:11:a2:76:1a:38: e0:76:e1:34:69:22:58:1f:ca:9b:1c:dd:44:4d:92: 10:1b:29:18:1b:e4:ce:f8:f9:cf:ea:3c:8e:b1:1e: cf:7d:21:bd:b8:0d:45:88:b0:bc:2b:3f:4b:04:fd: 02:5c:52:89:b8:af:b4:c9:e1:1d:d7:1e:41:c9:05: a6:0d:2f:9e:18:5f:77:f4:43:10:89:ab:6d:5b:d3: fd:47:f9:fe:02:68:77:54:06:79:ce:a6:f6:78:02: ad:12:38:59:da:31:e0:2e:4e:a9:83:1e:ab:0f:3d: 83:e4:77:1c:83:65:6e:ee:83:ad:04:2c:a7:cb:05: bd:93:9a:b8:75:dc:be:6a:cf:45:93:6b:43:32:7c: f6:ec:65:5a:cd:37:4c:4a:cf:e2:32:ff:bb:25:6e: d6:3c:51:0c:15:a3:2a:bd:54:d4:8c:5e:3f:f8:7c: 57:7f:d9:ce:d2:25:a2:12:d3:9f:6b:21:aa:0e:31: de:cb:45:bc:77:ee:55:4f:7f:c4:63:61:0d:b2:3f: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EF:72:D1:F3:F1:96:FA:E6:4D:8D:E1:14:8F:9C:70:5A:39:98:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:36:a8:e0:32:f0:0e:6d:5e:5b:f5:89:81:2d:a6:6f:2b:7c: 47:6c:fe:49:95:cd:02:25:72:9b:43:3c:8b:71:ae:8a:3e:3b: 8f:3e:d3:e0:c9:85:a4:15:a7:31:60:52:2b:fa:7a:d2:2c:17: b8:d5:1c:b8:c4:55:17:71:4c:98:0d:f0:bf:7c:68:4b:fc:a9: 8d:af:e1:fe:c6:9b:65:b1:ca:e1:88:f3:06:c5:04:2e:6a:3a: b6:f4:d8:c7:ba:d8:53:3d:32:bc:26:60:ae:4b:d0:3f:57:b5: 27:82:96:3e:d8:e0:bf:99:3e:c8:27:85:a1:5e:84:26:74:a9: 46:36:4c:3a:a4:b8:e4:3d:6e:24:e1:86:57:b6:41:d9:e6:b4: f7:e7:7e:c4:95:4a:3a:0d:89:50:49:85:97:23:67:07:41:2b: 71:b9:15:d1:34:68:db:47:cc:a2:6a:01:6b:fb:7f:b1:01:e6: 66:70:df:e7:c2:bc:3e:3a:b8:e9:5a:c2:ac:85:d3:2b:66:1b: 0b:98:fe:f6:34:c1:9d:d0:c7:4d:9e:7b:12:54:e5:c2:c3:03: 62:85:cf:e2:20:63:34:f5:52:59:f4:a1:90:c5:06:02:cd:c6: 88:ab:ba:9b:84:a6:28:d3:0e:94:c7:77:c6:0a:c1:a2:2e:e8: ed:5a:78:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB04OCahSrZuvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YjM4YWVkNWEtY2M4ZC00YjFmLWIyOTEtYTg4NmFjOWU0N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUo5D6aNUXIbHIdWfWGEhgLHUblNTU7358To nUBwgShdy1Xu+q2tzx6c7S0QOZf2OKme8zdDEaJ2GjjgduE0aSJYH8qbHN1ETZIQ GykYG+TO+PnP6jyOsR7PfSG9uA1FiLC8Kz9LBP0CXFKJuK+0yeEd1x5ByQWmDS+e GF939EMQiattW9P9R/n+Amh3VAZ5zqb2eAKtEjhZ2jHgLk6pgx6rDz2D5Hccg2Vu 7oOtBCynywW9k5q4ddy+as9Fk2tDMnz27GVazTdMSs/iMv+7JW7WPFEMFaMqvVTU jF4/+HxXf9nO0iWiEtOfayGqDjHey0W8d+5VT3/EY2ENsj/5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbvctHz8Zb65k2N4RSPnHBaOZiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvMDQ1NzliOTItYzJiYS0z ZTg1LWJlMzMtY2E2NzcwY2M0MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANA2qOAy8A5tXlv1iYEtpm8rfEds/kmVzQIlcptDPItxroo+O48+0+DJ haQVpzFgUiv6etIsF7jVHLjEVRdxTJgN8L98aEv8qY2v4f7Gm2WxyuGI8wbFBC5q Orb02Me62FM9MrwmYK5L0D9XtSeClj7Y4L+ZPsgnhaFehCZ0qUY2TDqkuOQ9biTh hle2QdnmtPfnfsSVSjoNiVBJhZcjZwdBK3G5FdE0aNtHzKJqAWv7f7EB5mZw3+fC vD46uOlawqyF0ytmGwuY/vY0wZ3Qx02eexJU5cLDA2KFz+IgYzT1Uln0oZDFBgLN xoirupuEpijTDpTHd8YKwaIu6O1aeBQ= -----END CERTIFICATE-----Generated at Fri Apr 4 18:57:05 2025 by rpki-client