$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa File: 41a63799-17b8-37d9-84b8-f3de51331877.roa (raw, json) Hash identifier: XqbL1TBOgBriDAObXPI1zGHV2+8kIaPuUJ267fd5Elg= Subject key identifier: A5:F8:30:B8:2F:D5:31:0B:30:F0:39:51:B6:E7:03:15:56:CE:9E:7F Certificate issuer: /CN=ab1a140b-878b-41cc-864f-08e0177f7325 Certificate serial: 010D0C9F43285849E7BA72E231C7CD75C8E19F20 Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 20473 IP address blocks: 23.150.240.0/24 maxlen: 24 204.238.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:72:e2:31:c7:cd:75:c8:e1:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=a7e4813b-f1ef-42b1-b580-469596a1a327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:a3:de:c2:26:39:ab:6a:a7:4b:82:e9:f2: 30:d9:e5:69:47:ff:53:b3:f1:a4:24:1c:9f:81:88: 47:02:71:53:94:78:da:86:27:15:5a:04:7a:a5:7f: 6f:1b:41:4e:e1:e3:2f:91:23:29:3b:d1:18:a9:de: 90:25:cc:c7:db:11:f8:08:50:ae:4e:2b:0c:26:cb: 43:84:d2:87:65:2f:c9:59:42:41:8d:ad:a4:04:80: d0:e6:eb:be:96:cd:24:bc:97:24:91:68:cf:31:88: 51:d5:fa:4c:e8:ce:aa:24:50:86:4e:5f:ab:e8:f2: 14:b5:04:47:5a:6f:6a:84:a5:08:65:ce:f6:98:50: ca:34:29:09:b7:bc:1f:aa:e6:5e:78:b0:0a:04:76: 46:7c:02:88:0a:e3:71:2f:71:b5:06:e0:ef:4a:7f: ef:75:5a:9b:7c:08:2f:a9:a7:c6:d6:81:0b:5b:7a: f8:74:2e:31:f5:61:dc:fb:3d:9c:f1:99:b8:a1:fe: c5:d3:dd:db:09:cb:23:c0:08:3f:58:99:b9:7f:90: a4:02:b8:17:21:1b:6c:90:37:72:18:1a:57:de:9a: 98:3f:be:39:ca:51:9b:9a:74:3e:f7:3b:1e:99:cf: 2d:49:11:59:99:40:ef:dc:ba:42:6d:09:c9:00:ce: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F8:30:B8:2F:D5:31:0B:30:F0:39:51:B6:E7:03:15:56:CE:9E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl X509v3 Authority Key Identifier: keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer sbgp-ipAddrBlock: critical IPv4: 23.150.240.0/24 204.238.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:62:4f:6b:b2:5d:74:94:db:f5:d7:8b:28:f0:39:a7:2b:45: 2e:73:33:b5:c2:2d:4b:d3:a2:df:aa:27:1c:82:00:72:12:e6: 44:f4:d7:a4:21:d7:b0:0d:c5:b0:9b:86:31:3d:aa:a2:29:93: 0b:a3:25:86:77:26:e9:66:e1:c6:01:8f:80:0d:ea:0b:a8:a4: 96:f2:10:97:d2:c6:6b:a4:ba:55:11:ff:f2:e6:8f:2b:49:9a: a4:51:b0:22:c4:6a:a1:f2:23:98:1c:61:e2:0c:ca:ad:89:4c: 4c:66:b7:78:d6:de:cc:63:ec:de:b1:7e:c6:d0:13:b6:98:e3: 43:c7:26:a0:d2:a7:ec:8b:11:0e:0b:82:ae:1a:01:66:ba:1e: 0b:c0:2f:5c:47:66:ed:57:6d:4f:65:9c:36:b0:2d:58:0b:65: 82:66:4d:1c:62:6a:ee:97:33:58:1a:d8:f0:b1:a2:07:27:de: 9b:e7:36:38:07:1d:99:64:30:39:c0:d8:78:7e:4f:c1:f4:f9: c3:18:69:76:b9:f8:a3:84:b0:02:ae:a5:94:1a:67:be:d3:81: 2e:75:7a:a3:b9:5e:72:3b:d3:7c:5e:1e:2f:02:fa:51:98:43: bd:3e:b0:9a:ca:e9:13:03:89:ae:39:66:9b:00:33:c0:33:71: ff:77:bd:a5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnnunLiMcfNdcjhnyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxYTE0MGItODc4Yi00MWNjLTg2NGYtMDhlMDE3N2Y3 MzI1MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YTdlNDgxM2ItZjFlZi00MmIxLWI1ODAtNDY5NTk2YTFhMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Oj3sImOatqp0uC6fIw2eVpR/9Ts/GkJByf gYhHAnFTlHjahicVWgR6pX9vG0FO4eMvkSMpO9EYqd6QJczH2xH4CFCuTisMJstD hNKHZS/JWUJBja2kBIDQ5uu+ls0kvJckkWjPMYhR1fpM6M6qJFCGTl+r6PIUtQRH Wm9qhKUIZc72mFDKNCkJt7wfquZeeLAKBHZGfAKICuNxL3G1BuDvSn/vdVqbfAgv qafG1oELW3r4dC4x9WHc+z2c8Zm4of7F093bCcsjwAg/WJm5f5CkArgXIRtskDdy GBpX3pqYP745ylGbmnQ+9zsemc8tSRFZmUDv3LpCbQnJAM7vPwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKX4MLgv1TELMPA5UbbnAxVWzp5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFh MTQwYi04NzhiLTQxY2MtODY0Zi0wOGUwMTc3ZjczMjUvNDFhNjM3OTktMTdiOC0z N2Q5LTg0YjgtZjNkZTUxMzMxODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWIxYTE0MGItODc4Yi00MWNjLTg2 NGYtMDhlMDE3N2Y3MzI1L2FiMWExNDBiLTg3OGItNDFjYy04NjRmLTA4ZTAxNzdm NzMyNS5jcmwwHwYDVR0jBBgwFoAUcS17FddH32zbmLHcy+0aLSiUV30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFhMTQwYi04NzhiLTQxY2MtODY0Zi0wOGUw MTc3ZjczMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5bwAwQA zO5GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGBiT2uyXXSU2/XXiyjwOacrRS5zM7XCLUvTot+qJxyCAHIS 5kT016Qh17ANxbCbhjE9qqIpkwujJYZ3Julm4cYBj4AN6guopJbyEJfSxmukulUR //LmjytJmqRRsCLEaqHyI5gcYeIMyq2JTExmt3jW3sxj7N6xfsbQE7aY40PHJqDS p+yLEQ4Lgq4aAWa6HgvAL1xHZu1XbU9lnDawLVgLZYJmTRxiau6XM1ga2PCxogcn 3pvnNjgHHZlkMDnA2Hh+T8H0+cMYaXa5+KOEsAKupZQaZ77TgS51eqO5XnI703xe Hi8C+lGYQ70+sJrK6RMDia45ZpsAM8Azcf93vaU= -----END CERTIFICATE-----Generated at Tue May 20 10:34:35 2025 by rpki-client