$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa File: afe04a10-6d20-3764-bd84-54723556b6bc.roa (raw, json) Hash identifier: 5HV4PLRjN6QynFStgA3mhwVG/6gA7mFVJVE8ZreFqok= Subject key identifier: D7:71:ED:BB:EE:0A:76:23:C6:CB:21:B2:F7:6E:92:CD:D3:70:66:7D Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F43285849244E64A5E2FDF4AF328E5400 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 54082 IP address blocks: 23.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:64:a5:e2:fd:f4:af:32:8e:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=f434a608-5c8c-4557-97cc-827c3f205789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:f7:9f:86:d3:b9:d6:d2:d0:7b:09:ad:a7: 2d:cf:15:05:da:ec:b0:f9:7c:a8:35:84:5d:0c:30: 27:19:16:28:65:58:68:c1:89:5a:0d:d8:9b:92:bd: d2:e1:87:33:d0:03:18:12:ad:25:3c:f4:3d:c5:b1: 9e:1a:6d:12:26:38:06:08:bb:12:27:02:cf:02:72: 23:6d:2e:50:8b:26:b6:f4:e6:ea:28:da:a5:53:1e: d7:8e:ed:41:05:44:5b:26:4e:54:52:e7:51:09:69: 19:25:fc:0f:b1:6e:4f:66:06:8a:26:4a:45:9d:37: 54:4f:f7:08:99:5e:ca:ab:66:91:27:91:4d:81:ae: 7c:a7:71:ac:b1:b9:fc:fb:7c:35:98:e6:c4:7d:02: f1:b2:2e:b1:6f:e4:59:8f:60:4e:11:61:23:e2:15: c2:ae:49:9a:47:f4:5f:ab:46:f5:ca:70:e4:21:99: da:bf:74:a1:fb:28:85:ef:ff:b8:13:cb:79:ca:e3: 60:9f:49:2b:b9:a5:c3:bf:27:61:83:ec:da:bf:a8: e4:46:9f:03:89:12:f3:69:10:a3:8f:c1:05:83:4b: b5:6c:ac:21:24:cd:5c:30:13:52:fc:dc:e5:06:5e: b3:98:df:c1:e0:5f:72:f0:31:77:f3:97:b0:9b:58: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:71:ED:BB:EE:0A:76:23:C6:CB:21:B2:F7:6E:92:CD:D3:70:66:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:f2:fc:a3:f2:c8:ba:06:5c:1d:b8:35:c2:73:21:f6:4f:c9: 15:78:2f:8c:b9:b1:81:b6:de:6e:5b:a0:a7:25:01:1b:ba:e9: a9:ee:fb:84:2b:37:3d:8a:b9:7e:f3:7d:a6:6b:41:c7:13:62: 14:39:16:9c:5e:68:dc:22:7e:a0:83:9d:e6:f7:1d:60:0e:a2: f8:82:e2:4b:cf:fd:88:23:23:8f:b1:72:d9:44:fd:7a:24:a9: 48:18:49:85:62:bf:9e:5e:8d:0f:44:be:35:33:c9:d2:58:b7: ec:1f:51:fd:77:1f:0b:3e:57:3b:69:69:1c:37:ae:e9:05:81: ed:31:81:64:68:f4:de:d6:1c:49:a7:f0:01:9c:ba:58:d6:17: af:b1:79:41:18:5c:93:f3:d3:40:2b:77:62:e6:c2:ea:13:b5: e6:91:85:6b:ee:b5:3a:90:fd:8e:7c:a6:5e:a8:69:86:0e:3b: 8c:0d:92:60:20:81:9c:ac:8e:e9:97:44:c7:c0:da:4e:7a:12: ee:a4:65:d2:07:73:f2:08:ca:50:13:c3:96:d6:db:ae:16:e1: 0d:e0:a7:4c:90:bc:bd:2c:13:aa:58:8d:c9:e6:73:08:85:30: 3a:72:4c:8b:3b:e5:aa:51:1a:54:b2:4f:bb:26:1d:ef:1c:ac: 08:fc:6a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTmSl4v30rzKOVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZjQzNGE2MDgtNWM4Yy00NTU3LTk3Y2MtODI3YzNmMjA1Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWT3n4bTudbS0HsJractzxUF2uyw+XyoNYRd DDAnGRYoZVhowYlaDdibkr3S4Ycz0AMYEq0lPPQ9xbGeGm0SJjgGCLsSJwLPAnIj bS5Qiya29ObqKNqlUx7Xju1BBURbJk5UUudRCWkZJfwPsW5PZgaKJkpFnTdUT/cI mV7Kq2aRJ5FNga58p3Gssbn8+3w1mObEfQLxsi6xb+RZj2BOEWEj4hXCrkmaR/Rf q0b1ynDkIZnav3Sh+yiF7/+4E8t5yuNgn0kruaXDvydhg+zav6jkRp8DiRLzaRCj j8EFg0u1bKwhJM1cMBNS/NzlBl6zmN/B4F9y8DF385ewm1gBXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdx7bvuCnYjxsshsvduks3TcGZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvYWZlMDRhMTAtNmQyMC0z NzY0LWJkODQtNTQ3MjM1NTZiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHy/KPyyLoGXB24NcJzIfZPyRV4L4y5sYG23m5boKclARu66anu+4Qr Nz2KuX7zfaZrQccTYhQ5FpxeaNwifqCDneb3HWAOoviC4kvP/YgjI4+xctlE/Xok qUgYSYViv55ejQ9EvjUzydJYt+wfUf13Hws+VztpaRw3rukFge0xgWRo9N7WHEmn 8AGculjWF6+xeUEYXJPz00Ard2LmwuoTteaRhWvutTqQ/Y58pl6oaYYOO4wNkmAg gZysjumXRMfA2k56Eu6kZdIHc/IIylATw5bW264W4Q3gp0yQvL0sE6pYjcnmcwiF MDpyTIs75apRGlSyT7smHe8crAj8aiY= -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:26 2025 by rpki-client