$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa File: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (raw, json) Hash identifier: bg03O9GF6QKt+Kz6NaXGp9o40IeJbCW3hN8LnSanh9M= Subject key identifier: 95:4F:56:89:1A:CE:FE:2A:3A:51:8F:C7:6D:70:7E:11:4C:CA:0B:78 Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F432858496A19AC8A3E9A338295325D80 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 23470 IP address blocks: 23.147.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:ac:8a:3e:9a:33:82:95:32:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=3a8cacbe-958f-45ba-9d55-2eb6ed32e452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:69:f9:20:f4:d4:b5:b6:9c:fd:9a:be:f3: f5:4e:2e:af:ca:57:f6:3d:46:09:2f:ae:64:22:83: ca:a2:fb:2e:c9:83:ad:78:17:83:18:2f:fe:12:6e: 10:ad:9c:ef:d4:61:b2:cb:b5:6c:73:e3:ca:3b:ba: 39:d8:f1:aa:7b:f2:76:21:2a:31:22:d0:77:2b:96: 4a:07:b6:96:a7:ed:57:ce:d3:ee:e9:03:96:9d:b5: 33:e2:9d:f8:e5:19:bf:b1:02:46:b3:fa:a4:2e:c2: 6c:71:93:a2:8f:cd:d8:13:b1:bd:1e:b0:87:4f:57: 7f:1d:23:95:c9:34:e8:8a:bb:ee:5d:da:cb:61:51: 87:f5:5e:6a:c4:dd:94:93:fb:c1:3e:bf:f6:0f:95: 4d:1d:bc:49:a4:42:79:de:ed:c7:74:5b:3c:5a:e4: ca:6b:32:3d:19:44:12:b0:ef:49:32:ee:67:10:65: 40:c8:82:d9:b0:a0:35:48:8c:9a:ab:79:2c:f5:22: b8:84:70:a8:c8:b5:d6:1f:36:d7:51:67:be:23:41: 04:9c:97:41:e7:ad:09:23:da:cf:ec:43:02:d3:05: 2b:ea:b6:c2:72:61:be:b7:89:5a:1b:42:66:dd:48: 3b:85:18:1c:ed:dc:b1:7f:bc:d3:15:4c:2a:16:53: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4F:56:89:1A:CE:FE:2A:3A:51:8F:C7:6D:70:7E:11:4C:CA:0B:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f1:f3:83:49:be:28:c7:4d:2d:6a:cc:16:f5:58:a5:ed:1a: 76:32:cf:21:05:48:55:00:ea:8e:7e:11:e2:b4:d6:b3:0a:f6: 53:a2:04:ea:29:4b:2f:6d:47:69:4c:94:02:49:c4:8f:43:da: d0:44:34:f1:70:f8:c8:18:ed:37:e0:34:64:49:48:58:5c:47: 2f:56:fa:0e:a3:69:29:24:e3:7f:d7:b3:98:78:d5:d6:58:08: 94:65:64:ec:ca:82:ae:91:21:af:71:a1:fe:5c:b4:77:ac:c2: 77:4e:5a:d4:60:82:d2:6b:23:58:ac:24:37:60:2a:4f:14:47: 3a:f4:60:bf:ef:1f:cf:8a:0f:f7:e7:a3:67:be:57:c7:16:95: ac:b0:29:80:76:10:da:c2:06:9a:64:08:e2:75:f5:e4:24:ca: 46:23:61:ca:bc:e7:9b:2d:a3:8f:88:19:4a:e9:44:8f:5a:e7: ee:c8:ca:3f:84:81:88:50:5d:6b:d8:fe:80:4f:80:1a:4d:13: ba:f3:ac:cc:2d:a4:47:06:b4:98:3c:1a:03:26:49:38:24:1e: 35:57:23:f0:ad:b9:27:ed:8f:7d:63:0f:b6:2f:a4:e3:11:33: a6:33:f0:00:06:e7:75:d9:79:e8:21:51:50:88:f9:ba:9c:f5: 70:8f:a0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGayKPpozgpUyXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk M2E4Y2FjYmUtOTU4Zi00NWJhLTlkNTUtMmViNmVkMzJlNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Jp+SD01LW2nP2avvP1Ti6vylf2PUYJL65k IoPKovsuyYOteBeDGC/+Em4QrZzv1GGyy7Vsc+PKO7o52PGqe/J2ISoxItB3K5ZK B7aWp+1XztPu6QOWnbUz4p345Rm/sQJGs/qkLsJscZOij83YE7G9HrCHT1d/HSOV yTToirvuXdrLYVGH9V5qxN2Uk/vBPr/2D5VNHbxJpEJ53u3HdFs8WuTKazI9GUQS sO9JMu5nEGVAyILZsKA1SIyaq3ks9SK4hHCoyLXWHzbXUWe+I0EEnJdB560JI9rP 7EMC0wUr6rbCcmG+t4laG0Jm3Ug7hRgc7dyxf7zTFUwqFlMw5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVPVokazv4qOlGPx21wfhFMygt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvOGM3ZDNlNGItMGU4Ni0z NDhhLWI0ZmQtZjM5MGM2ZDU3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7x84NJvijHTS1qzBb1WKXtGnYyzyEFSFUA6o5+EeK01rMK9lOiBOop Sy9tR2lMlAJJxI9D2tBENPFw+MgY7TfgNGRJSFhcRy9W+g6jaSkk43/Xs5h41dZY CJRlZOzKgq6RIa9xof5ctHeswndOWtRggtJrI1isJDdgKk8URzr0YL/vH8+KD/fn o2e+V8cWlaywKYB2ENrCBppkCOJ19eQkykYjYcq855sto4+IGUrpRI9a5+7Iyj+E gYhQXWvY/oBPgBpNE7rzrMwtpEcGtJg8GgMmSTgkHjVXI/CtuSftj31jD7YvpOMR M6Yz8AAG53XZeeghUVCI+bqc9XCPoA4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:22 2025 by rpki-client