$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa File: fa73468a-9857-31fe-a887-276ed3d1ca76.roa (raw, json) Hash identifier: XReVpxUnDViAHEIbWZGaHY6+MwKdmp1nrHkBPIykjoQ= Subject key identifier: 2B:97:23:C8:AD:84:8C:D8:A7:0E:D3:C7:1E:F1:3F:67:00:19:96:73 Certificate issuer: /CN=98252c6f-4de3-4710-bd94-6334e6a81c64 Certificate serial: 010D0C9F43285849B6DF4B5F785BBAF40B8AA280 Authority key identifier: 63:77:8D:A2:31:36:6F:07:47:59:D6:D0:A4:F4:87:B0:C2:56:62:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 394144 IP address blocks: 23.145.160.0/24 maxlen: 24 192.234.79.0/24 maxlen: 24 2602:ff7a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4b:5f:78:5b:ba:f4:0b:8a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98252c6f-4de3-4710-bd94-6334e6a81c64 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=38c4ff0e-a5b8-4bcf-84e8-4911b760de61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:a4:dc:2b:82:af:a5:56:36:7d:99:72:36: 2e:9d:c9:f7:38:bb:57:3b:e0:4e:0a:5c:0b:44:3f: 8d:3e:9a:cf:ad:57:11:c7:22:3b:5b:7a:43:7f:8e: 4f:7f:38:e9:b3:78:bf:67:78:bc:21:65:ba:ec:9c: 70:19:4e:07:67:91:17:bd:aa:7e:92:bf:e6:85:69: 3b:80:22:12:97:92:ad:fe:ed:75:18:3f:c9:d5:6c: c0:af:74:de:04:e1:14:ea:86:b8:ba:0e:7f:3a:d1: 87:52:12:f3:ca:d2:3b:39:fe:e9:dd:55:47:17:df: 78:fe:46:ef:d6:64:23:53:8e:45:85:c8:15:3d:47: 4f:34:52:30:a3:8f:8b:25:9b:e3:24:0f:04:da:b4: 89:0f:9d:1c:75:bf:e4:e8:77:d5:c6:3d:e7:d0:6f: fb:d9:53:50:41:b2:0e:90:27:21:05:61:9a:cc:ea: f8:09:f5:7e:47:75:36:61:55:18:2a:fa:f9:a5:35: 0f:0f:e8:9b:9f:c0:78:74:fe:a5:2d:29:fe:22:d9: 0c:48:ab:b8:66:32:50:a6:2d:29:b4:4f:17:2e:33: e0:c1:34:c6:fd:35:1c:c2:7e:bd:98:9a:56:e5:2c: fd:cf:52:a8:06:20:44:19:d1:30:f6:a8:3f:6b:17: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:97:23:C8:AD:84:8C:D8:A7:0E:D3:C7:1E:F1:3F:67:00:19:96:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.crl X509v3 Authority Key Identifier: keyid:63:77:8D:A2:31:36:6F:07:47:59:D6:D0:A4:F4:87:B0:C2:56:62:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer sbgp-ipAddrBlock: critical IPv4: 23.145.160.0/24 192.234.79.0/24 IPv6: 2602:ff7a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:76:d9:dc:3e:03:e0:0c:e7:66:4e:29:75:4b:74:97:40:d7: 66:8b:a5:f2:78:c3:f9:1f:1a:bd:3d:a9:55:82:03:55:00:bf: d4:d0:29:eb:44:d2:c8:8d:ba:82:f8:84:b5:83:6e:c5:90:bd: ec:f1:85:4c:25:ee:94:75:03:e3:05:c4:03:32:8a:e1:c6:9b: 80:2e:eb:62:ed:a5:5e:bb:67:e3:a2:cc:3c:fa:b7:00:a5:d0: d8:ba:12:a6:9c:10:31:88:2d:2a:d0:bd:0f:cb:15:03:6a:7a: 77:b9:b3:3c:f8:62:68:5d:74:56:0d:37:90:e1:36:b5:0b:f0: 8b:c4:51:99:b4:d3:23:01:b5:68:b3:66:81:de:f0:ef:c5:89: 5a:b4:92:1c:a0:26:a1:5a:7c:b1:ec:20:aa:0e:6d:95:38:1d: f7:cc:2b:00:cc:dc:db:64:26:4a:ca:c4:ab:86:11:6f:87:fb: d2:f1:dc:8e:39:28:dc:ab:14:23:69:62:35:06:90:b6:06:0b: a5:ed:ff:a3:c7:07:34:45:25:ac:ad:48:ea:da:c4:98:c4:b8: 32:13:7a:04:67:12:3a:d2:b4:04:27:ab:5f:a9:cf:4b:70:b8: ae:c7:21:d6:a2:6e:ec:ba:49:6a:05:c0:5d:2e:20:37:36:bc: d0:b3:19:23 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEm230tfeFu69AuKooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNTJjNmYtNGRlMy00NzEwLWJkOTQtNjMzNGU2YTgx YzY0MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk MzhjNGZmMGUtYTViOC00YmNmLTg0ZTgtNDkxMWI3NjBkZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Ck3CuCr6VWNn2ZcjYuncn3OLtXO+BOClwL RD+NPprPrVcRxyI7W3pDf45Pfzjps3i/Z3i8IWW67JxwGU4HZ5EXvap+kr/mhWk7 gCISl5Kt/u11GD/J1WzAr3TeBOEU6oa4ug5/OtGHUhLzytI7Of7p3VVHF994/kbv 1mQjU45FhcgVPUdPNFIwo4+LJZvjJA8E2rSJD50cdb/k6HfVxj3n0G/72VNQQbIO kCchBWGazOr4CfV+R3U2YVUYKvr5pTUPD+ibn8B4dP6lLSn+ItkMSKu4ZjJQpi0p tE8XLjPgwTTG/TUcwn69mJpW5Sz9z1KoBiBEGdEw9qg/axfBpwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCuXI8ithIzYpw7Txx7xP2cAGZZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ODI1 MmM2Zi00ZGUzLTQ3MTAtYmQ5NC02MzM0ZTZhODFjNjQvZmE3MzQ2OGEtOTg1Ny0z MWZlLWE4ODctMjc2ZWQzZDFjYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTgyNTJjNmYtNGRlMy00NzEwLWJk OTQtNjMzNGU2YTgxYzY0Lzk4MjUyYzZmLTRkZTMtNDcxMC1iZDk0LTYzMzRlNmE4 MWM2NC5jcmwwHwYDVR0jBBgwFoAUY3eNojE2bwdHWdbQpPSHsMJWYogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85ODI1MmM2Zi00ZGUzLTQ3MTAtYmQ5NC02MzM0 ZTZhODFjNjQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5GgAwQA wOpPMA0EAgACMAcDBQAmAv96MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFh22dw+A+AM52ZOKXVLdJdA12aL pfJ4w/kfGr09qVWCA1UAv9TQKetE0siNuoL4hLWDbsWQvezxhUwl7pR1A+MFxAMy iuHGm4Au62LtpV67Z+OizDz6twCl0Ni6EqacEDGILSrQvQ/LFQNqene5szz4Ymhd dFYNN5DhNrUL8IvEUZm00yMBtWizZoHe8O/FiVq0khygJqFafLHsIKoObZU4HffM KwDM3NtkJkrKxKuGEW+H+9Lx3I45KNyrFCNpYjUGkLYGC6Xt/6PHBzRFJaytSOra xJjEuDITegRnEjrStAQnq1+pz0twuK7HIdaibuy6SWoFwF0uIDc2vNCzGSM= -----END CERTIFICATE-----Generated at Tue May 13 12:29:44 2025 by rpki-client