$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa File: 83c7a286-9c49-3189-98ae-ea46ce63e22b.roa (raw, json) Hash identifier: bTLmM+Jlb793JKGZFOTXT/4FakSjyGss2/MZMhgbJWk= Subject key identifier: 06:A9:68:A7:98:C6:28:E2:1A:76:0C:06:0D:7F:CB:E0:AC:8F:5D:BB Certificate issuer: /CN=33d8879e-24de-4dd1-bab7-7cc451009cc2 Certificate serial: 010D0C9F43285849E2251197300A60800DBC1B80 Authority key identifier: 73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 2914 IP address blocks: 23.134.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:11:97:30:0a:60:80:0d:bc:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d8879e-24de-4dd1-bab7-7cc451009cc2 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=cdb5f225-5d1e-4896-ae1d-35ff4081031d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:a4:b0:4e:25:e7:98:96:a5:70:38:3c:27: 1e:70:1e:60:61:62:dc:f6:1d:db:35:23:15:4d:1a: c4:4a:36:d4:ae:10:a1:20:d2:61:56:d1:64:5e:65: c7:3a:56:cc:d3:4f:c7:81:73:dc:ab:66:b6:be:43: b6:49:52:8a:79:34:57:97:cb:18:d2:f7:cd:5c:fa: c1:40:19:1f:35:96:51:06:2f:9c:f4:59:62:8e:96: 13:2e:0b:84:49:87:0b:d7:d9:51:2c:39:e3:f4:34: c3:b4:15:8b:0b:bf:87:3b:3a:35:58:27:a2:37:5b: e1:f4:65:61:2a:97:59:fa:e7:f0:d9:b3:ff:db:08: 16:d2:12:a0:7d:87:b5:64:94:58:72:bc:89:9f:64: 17:5f:16:49:d4:e6:f2:ae:3a:b2:3f:14:d0:ac:b2: a9:72:f8:67:1e:bd:96:0f:40:5c:bf:32:59:61:77: a2:e0:1a:fe:b3:96:35:b0:0c:15:28:86:1c:8c:89: ef:8d:c8:cf:24:04:06:3c:3b:3f:eb:96:ee:12:8c: 0b:8b:74:dd:2e:b5:41:ff:c1:25:00:56:a2:44:ac: 57:15:b1:29:ba:0e:a5:ee:fb:f2:3f:1a:28:5b:a2: 2c:73:f2:58:f9:eb:aa:a6:71:49:de:95:cf:96:cf: f6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:68:A7:98:C6:28:E2:1A:76:0C:06:0D:7F:CB:E0:AC:8F:5D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl X509v3 Authority Key Identifier: keyid:73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer sbgp-ipAddrBlock: critical IPv4: 23.134.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:22:0f:be:92:2a:1b:79:28:b3:ad:d1:6b:99:8d:bc:38:91: 63:ba:a0:64:7d:16:a1:4a:66:93:c5:8b:f3:01:94:b3:00:e0: 7d:64:69:f1:eb:e8:ea:81:0d:94:13:d4:3b:00:03:04:f2:02: 1c:8f:b1:06:ab:50:70:1d:5e:f2:c0:87:50:33:dd:3a:61:eb: c2:e5:08:35:65:c6:eb:82:6f:60:ed:f8:b4:57:10:6f:04:d1: 35:bd:d0:de:82:dd:93:8b:42:7c:9d:e8:93:3a:68:d8:41:b9: e6:c0:cc:e1:51:b7:ce:42:d9:a4:08:3b:c8:0a:dd:c9:0e:4e: 8b:25:f4:32:f2:9f:fd:44:7c:79:1e:d6:72:64:96:34:3c:55: 3e:c8:26:6a:07:94:38:26:58:09:9d:6c:1f:ab:f6:a4:60:5f: e3:f5:d5:14:34:3a:01:47:31:fe:ed:d2:e1:89:5b:ed:65:eb: f8:28:1a:2f:8f:b0:de:a6:bc:b3:97:65:15:88:29:d3:04:36: b1:0b:fb:c9:af:d8:12:2e:3e:2b:3a:52:48:10:ab:c2:6a:15: 06:ed:d5:4b:cc:66:cd:ff:44:05:c8:ed:55:bc:44:39:97:02: 63:91:4d:5d:cd:8f:20:44:bf:a9:bc:e8:14:3a:be:73:89:68: a2:fa:79:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRGXMApggA28G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkODg3OWUtMjRkZS00ZGQxLWJhYjctN2NjNDUxMDA5 Y2MyMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk Y2RiNWYyMjUtNWQxZS00ODk2LWFlMWQtMzVmZjQwODEwMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlqksE4l55iWpXA4PCcecB5gYWLc9h3bNSMV TRrESjbUrhChINJhVtFkXmXHOlbM00/HgXPcq2a2vkO2SVKKeTRXl8sY0vfNXPrB QBkfNZZRBi+c9FlijpYTLguESYcL19lRLDnj9DTDtBWLC7+HOzo1WCeiN1vh9GVh KpdZ+ufw2bP/2wgW0hKgfYe1ZJRYcryJn2QXXxZJ1ObyrjqyPxTQrLKpcvhnHr2W D0BcvzJZYXei4Br+s5Y1sAwVKIYcjInvjcjPJAQGPDs/65buEowLi3TdLrVB/8El AFaiRKxXFbEpug6l7vvyPxooW6Isc/JY+euqpnFJ3pXPls/2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAapaKeYxijiGnYMBg1/y+Csj127MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Q4 ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0NTEwMDljYzIvODNjN2EyODYtOWM0OS0z MTg5LTk4YWUtZWE0NmNlNjNlMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkODg3OWUtMjRkZS00ZGQxLWJh YjctN2NjNDUxMDA5Y2MyLzMzZDg4NzllLTI0ZGUtNGRkMS1iYWI3LTdjYzQ1MTAw OWNjMi5jcmwwHwYDVR0jBBgwFoAUc7pflcFl7vs1foTVc2Xa9Qis7qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2Q4ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0 NTEwMDljYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUiD76SKht5KLOt0WuZjbw4kWO6oGR9FqFKZpPFi/MBlLMA4H1kafHr 6OqBDZQT1DsAAwTyAhyPsQarUHAdXvLAh1Az3Tph68LlCDVlxuuCb2Dt+LRXEG8E 0TW90N6C3ZOLQnyd6JM6aNhBuebAzOFRt85C2aQIO8gK3ckOTosl9DLyn/1EfHke 1nJkljQ8VT7IJmoHlDgmWAmdbB+r9qRgX+P11RQ0OgFHMf7t0uGJW+1l6/goGi+P sN6mvLOXZRWIKdMENrEL+8mv2BIuPis6UkgQq8JqFQbt1UvMZs3/RAXI7VW8RDmX AmORTV3NjyBEv6m86BQ6vnOJaKL6eSg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:05 2025 by rpki-client