$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa File: 9d2a25f7-26a6-337c-b528-eef86d7a910b.roa (raw, json) Hash identifier: zj1NFRpl8ngfR0HCZD0mpJnCsVxxWcRVSCtIXlt1W/A= Subject key identifier: 3A:0D:CA:49:3F:8C:4D:EF:70:B7:83:FB:6E:85:19:51:78:AD:6D:DB Certificate issuer: /CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d Certificate serial: 010D0C9F43285849D85F913E22F225201A7191C0 Authority key identifier: D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 62485 IP address blocks: 23.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:91:3e:22:f2:25:20:1a:71:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=fc841503-caf6-4815-a5ec-ac7853af3e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d4:a8:79:0e:a8:6b:61:ca:c6:a8:7b:6a:60: 3c:c6:7a:f3:48:48:f3:fa:70:75:f9:d8:c4:e5:4c: 5a:bc:d4:16:a9:11:50:cf:15:c6:1f:75:0c:10:8b: b3:12:b5:5f:f3:96:7c:47:c6:b6:d8:41:58:e5:37: c0:b3:62:9c:11:7f:25:8c:63:98:41:50:fa:bf:89: 6c:b8:d0:da:09:67:6e:62:6a:2a:fa:fb:4a:dd:6d: fa:fd:3b:54:0d:2f:22:cf:56:6f:97:86:b7:ee:66: 42:ca:55:83:19:87:b9:6b:4b:53:15:f5:ef:00:db: 13:52:02:05:4b:fd:c5:a9:23:e9:d3:8c:ae:23:b7: c7:8e:6e:e7:9d:05:61:2a:90:d8:52:84:38:38:0c: 48:2b:e5:f3:8a:38:55:4a:f8:47:a4:0c:90:cf:e8: 5f:ac:8b:72:a3:66:d4:96:8d:6b:90:df:30:92:25: 1e:ef:7f:d7:61:98:bc:32:81:c6:a2:97:ad:9e:21: 0d:14:92:5b:86:1e:92:03:52:75:e6:28:9b:fa:e5: 13:3a:c2:ed:cc:1e:37:79:6a:86:2d:a7:f6:d5:9c: ba:98:9f:91:ac:3a:b5:aa:d0:c5:88:4c:c7:c4:af: 1b:7f:1f:e6:a8:9c:38:7b:58:30:0e:30:f2:41:b6: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0D:CA:49:3F:8C:4D:EF:70:B7:83:FB:6E:85:19:51:78:AD:6D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.crl X509v3 Authority Key Identifier: keyid:D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer sbgp-ipAddrBlock: critical IPv4: 23.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:0b:69:23:42:a0:4b:c5:28:5c:a6:e2:24:db:07:ba:c4:17: 78:ec:76:8a:18:d9:c9:04:96:ae:a6:38:5e:d1:11:ed:ac:35: 4d:8b:3c:c2:ee:85:46:d4:e6:f5:b8:ed:a8:63:ee:6d:dc:87: 54:7b:f5:a9:a7:93:cf:3b:4c:cf:e7:b9:74:2c:fd:48:a4:5e: 80:64:9c:5d:fc:f9:a7:7f:35:26:83:72:9f:9e:71:11:02:50: d1:28:f7:4c:a2:ed:be:28:80:0b:2c:34:54:72:e9:8b:1b:4e: d3:e1:5d:27:cb:3e:60:3e:02:a7:d2:78:69:f2:46:bf:ec:0a: 1f:22:2b:78:d8:14:c8:16:ab:4b:6a:33:af:55:dc:9d:01:00: 8b:fd:dc:86:07:09:56:bd:fc:30:ff:99:02:ab:24:37:ed:0a: fc:f0:37:13:a7:79:92:a0:67:f2:ad:6d:48:ac:bf:d5:4e:fe: 32:50:13:71:c2:d6:8e:da:8f:64:5d:c3:b9:d2:0e:39:dc:a0: 7d:5d:f4:d7:4b:a3:98:df:38:82:5f:99:74:37:cf:76:39:e3: b9:27:81:9d:10:7a:a8:a7:dc:0d:63:78:b7:be:26:69:b5:07: 31:09:8c:c7:e8:8d:de:f6:46:c4:b5:76:9e:bf:85:67:28:76: 53:7e:26:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5E+IvIlIBpxkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlYjdhMTMtYmNkMi00OGY3LWI5YjctNTczMTAyYzg4 YTFkMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZmM4NDE1MDMtY2FmNi00ODE1LWE1ZWMtYWM3ODUzYWYzZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNSoeQ6oa2HKxqh7amA8xnrzSEjz+nB1+djE 5UxavNQWqRFQzxXGH3UMEIuzErVf85Z8R8a22EFY5TfAs2KcEX8ljGOYQVD6v4ls uNDaCWduYmoq+vtK3W36/TtUDS8iz1Zvl4a37mZCylWDGYe5a0tTFfXvANsTUgIF S/3FqSPp04yuI7fHjm7nnQVhKpDYUoQ4OAxIK+XzijhVSvhHpAyQz+hfrItyo2bU lo1rkN8wkiUe73/XYZi8MoHGopetniENFJJbhh6SA1J15iib+uUTOsLtzB43eWqG Laf21Zy6mJ+RrDq1qtDFiEzHxK8bfx/mqJw4e1gwDjDyQbZ2bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoNykk/jE3vcLeD+26FGVF4rW3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZWVi N2ExMy1iY2QyLTQ4ZjctYjliNy01NzMxMDJjODhhMWQvOWQyYTI1ZjctMjZhNi0z MzdjLWI1MjgtZWVmODZkN2E5MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGVlYjdhMTMtYmNkMi00OGY3LWI5 YjctNTczMTAyYzg4YTFkLzhlZWI3YTEzLWJjZDItNDhmNy1iOWI3LTU3MzEwMmM4 OGExZC5jcmwwHwYDVR0jBBgwFoAU0c0jp1+Mrh2eSAFVtH7UyzSKQxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZWViN2ExMy1iY2QyLTQ4ZjctYjliNy01NzMx MDJjODhhMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0LaSNCoEvFKFym4iTbB7rEF3jsdooY2ckElq6mOF7REe2sNU2LPMLu hUbU5vW47ahj7m3ch1R79amnk887TM/nuXQs/UikXoBknF38+ad/NSaDcp+ecREC UNEo90yi7b4ogAssNFRy6YsbTtPhXSfLPmA+AqfSeGnyRr/sCh8iK3jYFMgWq0tq M69V3J0BAIv93IYHCVa9/DD/mQKrJDftCvzwNxOneZKgZ/KtbUisv9VO/jJQE3HC 1o7aj2Rdw7nSDjncoH1d9NdLo5jfOIJfmXQ3z3Y547kngZ0Qeqin3A1jeLe+Jmm1 BzEJjMfojd72RsS1dp6/hWcodlN+JlU= -----END CERTIFICATE-----Generated at Sat Jun 7 13:52:38 2025 by rpki-client