$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa File: 5d22fed2-523a-322d-a47d-2db5b0e1e874.roa (raw, json) Hash identifier: 3C9FewueWziYOL2GM0WB+/VxE4DUwWOvjpP8XPR4O+A= Subject key identifier: 19:5C:A3:15:DD:D2:48:AB:96:D9:8C:6E:27:7A:2F:91:59:16:DD:23 Certificate issuer: /CN=f471d673-d293-405b-9549-4421d0436152 Certificate serial: 010D0C9F43285849618190470587D1FDC03E4F00 Authority key identifier: 30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa Signing time: Tue 01 Apr 2025 11:08:17 +0000 ROA not before: Tue 01 Apr 2025 11:08:17 +0000 ROA not after: Mon 30 Jun 2025 11:08:17 +0000 asID: 214483 IP address blocks: 23.136.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:81:90:47:05:87:d1:fd:c0:3e:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f471d673-d293-405b-9549-4421d0436152 Validity Not Before: Apr 1 11:08:17 2025 GMT Not After : Jun 30 11:08:17 2025 GMT Subject: CN=68eab84d-0cc2-4f69-8bc6-5e9fac7a990f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:0d:8f:41:6f:38:16:60:33:67:31:fc:04: 20:6b:7b:70:bc:70:f2:09:24:f8:a3:8a:53:4f:89: e7:39:b0:c8:21:b1:a3:87:5e:55:98:5b:1c:fb:7c: 7e:b7:37:65:90:97:b1:56:61:7a:ce:e1:c9:62:ca: 48:7f:42:5d:bc:00:3c:e8:09:90:d0:e9:d6:eb:05: 88:b3:b3:a6:79:f5:39:5e:77:23:78:08:f9:c2:92: d8:f2:6b:d1:c5:78:73:1b:22:70:9f:f6:cb:82:77: 03:25:85:79:7d:0c:5c:25:18:78:0d:5c:12:ae:dd: b3:31:66:9d:72:1f:20:30:05:d4:3a:3c:b5:4d:d0: c6:ec:62:01:11:b8:8c:f0:f1:4e:20:0f:63:db:32: 30:db:d8:9a:ba:ad:96:27:3c:13:43:60:50:3f:25: 75:b0:e5:03:92:d7:c7:68:13:f6:0b:b1:d2:b3:37: 45:1d:77:73:3f:b7:94:da:b8:e6:cb:a0:a1:f1:47: 46:78:97:14:a5:8d:e6:35:7a:16:de:c1:08:b1:aa: 68:37:3f:0c:93:7b:fd:f9:37:a3:1f:6f:6f:69:15: 32:51:37:06:6e:15:55:ad:3b:97:f0:23:2d:75:0a: f6:f6:5a:09:68:4b:a2:b9:47:68:bc:cf:f0:5a:d0: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5C:A3:15:DD:D2:48:AB:96:D9:8C:6E:27:7A:2F:91:59:16:DD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl X509v3 Authority Key Identifier: keyid:30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer sbgp-ipAddrBlock: critical IPv4: 23.136.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:71:55:74:29:f9:41:41:57:2c:05:e8:a8:e7:ce:bc:3a:af: 53:47:d7:9b:2b:59:17:4e:15:d8:e7:71:3f:4f:5e:64:d3:af: f2:bb:6e:98:e2:1e:fd:da:83:12:72:96:c6:56:33:04:07:23: 87:6c:b8:35:e4:d3:54:98:46:87:76:f8:3c:e5:4c:40:a8:27: 69:ac:99:b5:cb:36:9e:1e:44:a4:8e:28:74:13:fb:d6:b3:d9: 39:68:96:eb:e1:1d:75:b5:37:5c:2c:f2:a8:f4:8d:b7:e2:d3: c5:86:fa:89:f8:09:e8:cf:a6:6a:f7:e0:52:a4:8a:31:bc:32: a6:b3:d7:6b:00:89:a1:1d:28:fd:50:01:52:eb:42:c3:5b:d7: 66:02:5d:81:19:36:f7:b4:8e:23:95:6e:b3:ae:a8:03:67:f0: 62:e6:54:53:f0:5a:d2:d9:10:73:39:db:4f:02:a3:c3:9a:4a: 9b:76:1b:ad:d2:d8:cf:c5:64:ae:46:da:db:f8:ff:40:59:5b: 02:e4:87:50:c9:f1:d5:e1:a4:44:32:fd:9f:29:c3:0e:78:fb: e8:d8:df:42:4e:81:1d:5d:ae:97:9b:2c:05:94:2c:37:fb:78: 19:3d:eb:60:a7:ea:c5:0d:99:09:1e:f3:d4:be:35:60:50:d0: b0:0c:68:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhgZBHBYfR/cA+TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ3MWQ2NzMtZDI5My00MDViLTk1NDktNDQyMWQwNDM2 MTUyMB4XDTI1MDQwMTExMDgxN1oXDTI1MDYzMDExMDgxN1owLzEtMCsGA1UEAxMk NjhlYWI4NGQtMGNjMi00ZjY5LThiYzYtNWU5ZmFjN2E5OTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBkNj0FvOBZgM2cx/AQga3twvHDyCST4o4pT T4nnObDIIbGjh15VmFsc+3x+tzdlkJexVmF6zuHJYspIf0JdvAA86AmQ0OnW6wWI s7OmefU5XncjeAj5wpLY8mvRxXhzGyJwn/bLgncDJYV5fQxcJRh4DVwSrt2zMWad ch8gMAXUOjy1TdDG7GIBEbiM8PFOIA9j2zIw29iauq2WJzwTQ2BQPyV1sOUDktfH aBP2C7HSszdFHXdzP7eU2rjmy6Ch8UdGeJcUpY3mNXoW3sEIsapoNz8Mk3v9+Tej H29vaRUyUTcGbhVVrTuX8CMtdQr29loJaEuiuUdovM/wWtAf0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlcoxXd0kirltmMbid6L5FZFt0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcx ZDY3My1kMjkzLTQwNWItOTU0OS00NDIxZDA0MzYxNTIvNWQyMmZlZDItNTIzYS0z MjJkLWE0N2QtMmRiNWIwZTFlODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjQ3MWQ2NzMtZDI5My00MDViLTk1 NDktNDQyMWQwNDM2MTUyL2Y0NzFkNjczLWQyOTMtNDA1Yi05NTQ5LTQ0MjFkMDQz NjE1Mi5jcmwwHwYDVR0jBBgwFoAUMKAmCua1nzZrHHc/WjHX+++xJAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcxZDY3My1kMjkzLTQwNWItOTU0OS00NDIx ZDA0MzYxNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9xVXQp+UFBVywF6Kjnzrw6r1NH15srWRdOFdjncT9PXmTTr/K7bpji Hv3agxJylsZWMwQHI4dsuDXk01SYRod2+DzlTECoJ2msmbXLNp4eRKSOKHQT+9az 2TloluvhHXW1N1ws8qj0jbfi08WG+on4CejPpmr34FKkijG8Mqaz12sAiaEdKP1Q AVLrQsNb12YCXYEZNve0jiOVbrOuqANn8GLmVFPwWtLZEHM5208Co8OaSpt2G63S 2M/FZK5G2tv4/0BZWwLkh1DJ8dXhpEQy/Z8pww54++jY30JOgR1drpebLAWULDf7 eBk962Cn6sUNmQke89S+NWBQ0LAMaP8= -----END CERTIFICATE-----Generated at Fri Apr 18 20:19:35 2025 by rpki-client