$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa File: e5b29350-97e8-3c9d-8af3-e08fba14e907.roa (raw, json) Hash identifier: XEu4AkGV4Oe91v4lCs+5Saa4G+MuC2IiTmLBzPcZ+mU= Subject key identifier: 0E:B6:8F:A5:10:3E:C7:DE:E7:2E:B0:2D:43:CC:B7:88:24:81:9C:68 Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F43285848F65BDC4943D1374AA35B26A0 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 397131 IP address blocks: 23.170.32.0/24 maxlen: 24 2602:fe6a::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:dc:49:43:d1:37:4a:a3:5b:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=99224266-6343-4b5c-a722-69aa8cf1a457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:da:d4:8e:8b:f0:86:0f:ab:38:3d:3c:33: 60:90:ca:e3:71:87:af:15:dd:81:4e:07:4c:d3:e8: 63:b2:49:99:b0:06:35:66:b1:67:cb:9b:93:d8:40: 43:f3:bd:e2:9e:a0:ea:07:51:c2:d3:7f:dc:44:58: b3:70:f1:35:80:2b:0e:c8:39:71:12:e3:69:a1:bd: aa:36:c8:dc:a7:0c:f0:c7:be:85:51:fd:4d:8e:6f: f6:1e:e9:3d:6e:55:19:10:80:ce:15:68:cb:2f:30: 0c:f2:e6:d5:8a:cc:97:aa:9c:9e:0d:c2:33:86:c9: 17:33:7f:de:aa:17:ec:68:8a:50:65:5f:67:be:74: ba:e1:dc:00:e4:eb:72:c4:60:ba:5b:8f:b9:35:d0: 5e:10:84:4b:c2:c1:2f:70:37:45:fc:e1:5b:ac:56: 90:bb:e2:e1:a1:ba:a5:77:15:22:c3:c8:c8:39:3b: c8:68:f2:d5:1d:60:18:ab:3d:d0:85:3a:8e:2e:96: 24:16:6e:29:6c:49:46:cb:ee:9f:9e:ff:85:5e:52: f8:20:2d:0f:e9:65:e4:a2:c5:50:57:c0:77:da:e3: cb:32:77:46:c6:d8:03:42:1e:a4:fa:a2:ae:a1:2d: e8:6e:81:c9:ee:51:46:3b:5f:2d:de:78:34:fe:f1: 16:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B6:8F:A5:10:3E:C7:DE:E7:2E:B0:2D:43:CC:B7:88:24:81:9C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.170.32.0/24 IPv6: 2602:fe6a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fd:5c:ed:05:fa:20:01:a5:a8:1d:56:f1:c3:98:63:28:31: aa:c6:5f:23:ee:47:4f:b2:f4:d9:ad:cd:ad:6e:fa:12:59:58: 48:d7:0d:4e:6f:b3:2c:d8:a2:cf:0e:67:cc:f0:ec:1d:00:43: 2d:6f:53:a7:0e:34:cb:1f:2f:7f:dc:13:ad:36:99:1e:8b:b7: 74:ef:56:c9:02:8a:5c:4b:b7:1b:23:c7:b1:e4:76:4b:a0:88: 83:e8:07:7e:ad:5d:2a:96:55:42:bd:09:1e:62:32:a0:68:b3: e0:11:37:2e:85:57:bb:3f:b1:a1:f1:f6:a0:0a:c3:eb:62:63: 5f:f6:e6:39:d4:99:1f:cc:5d:aa:1a:79:9b:2a:5f:8c:13:a2: c6:b2:d3:76:38:2d:bd:d3:1c:48:7d:1e:c3:d0:98:fe:6c:fb: 46:a7:37:56:d6:24:32:62:d7:2c:7f:72:eb:14:16:59:cc:5c: 3f:e6:53:2e:d3:ee:20:48:a2:48:48:c9:90:cd:fb:c3:7a:53: 2f:8a:51:d2:37:64:65:62:65:ca:ea:f8:d3:aa:c1:a5:03:45: e7:0e:be:ce:e6:a7:62:6f:2a:cd:db:8c:d4:f2:b1:00:2f:63: ad:ce:b5:c1:2e:ca:85:f3:77:c3:1e:9a:be:d9:2f:64:c7:2d: 4f:73:ef:e5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEj2W9xJQ9E3SqNbJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OTkyMjQyNjYtNjM0My00YjVjLWE3MjItNjlhYThjZjFhNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+La1I6L8IYPqzg9PDNgkMrjcYevFd2BTgdM 0+hjskmZsAY1ZrFny5uT2EBD873inqDqB1HC03/cRFizcPE1gCsOyDlxEuNpob2q Nsjcpwzwx76FUf1Njm/2Huk9blUZEIDOFWjLLzAM8ubVisyXqpyeDcIzhskXM3/e qhfsaIpQZV9nvnS64dwA5OtyxGC6W4+5NdBeEIRLwsEvcDdF/OFbrFaQu+Lhobql dxUiw8jIOTvIaPLVHWAYqz3QhTqOLpYkFm4pbElGy+6fnv+FXlL4IC0P6WXkosVQ V8B32uPLMndGxtgDQh6k+qKuoS3oboHJ7lFGO18t3ng0/vEW3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFA62j6UQPsfe5y6wLUPMt4gkgZxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvZTViMjkzNTAtOTdlOC0z YzlkLThhZjMtZTA4ZmJhMTRlOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6ogMA4E AgACMAgDBgAmAv5qADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI/VztBfogAaWoHVbxw5hjKDGqxl8j7kdP svTZrc2tbvoSWVhI1w1Ob7Ms2KLPDmfM8OwdAEMtb1OnDjTLHy9/3BOtNpkei7d0 71bJAopcS7cbI8ex5HZLoIiD6Ad+rV0qllVCvQkeYjKgaLPgETcuhVe7P7Gh8fag CsPrYmNf9uY51JkfzF2qGnmbKl+ME6LGstN2OC290xxIfR7D0Jj+bPtGpzdW1iQy Ytcsf3LrFBZZzFw/5lMu0+4gSKJISMmQzfvDelMvilHSN2RlYmXK6vjTqsGlA0Xn Dr7O5qdibyrN24zU8rEAL2OtzrXBLsqF83fDHpq+2S9kxy1Pc+/l -----END CERTIFICATE-----Generated at Sat Apr 12 10:14:39 2025 by rpki-client