$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa File: 14bd33ec-ec91-396b-b0e6-927ef8be3191.roa (raw, json) Hash identifier: RVXJ6AkxNMC5ghjudvlGn4nUMfn/wuMuhBmjW3TOREo= Subject key identifier: CF:DD:39:71:EB:CC:48:5D:58:C2:60:D3:89:0E:B2:8C:F8:CA:DE:87 Certificate issuer: /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Certificate serial: 010D0C9F43285849B14A03923DAE344DBE654AC0 Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 203729 IP address blocks: 23.142.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:03:92:3d:ae:34:4d:be:65:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4ae8405b-7277-47dc-bf80-1dff0be6053d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:3a:f3:5d:d1:bb:51:a0:4f:cf:7a:7b:33: 42:80:55:d1:25:db:ea:97:80:5f:9c:04:39:14:a1: 78:fd:ab:20:a8:03:59:c4:03:38:b0:d7:67:1e:81: 31:ba:65:11:b4:62:53:bf:88:c6:65:f6:93:f1:f2: 4a:b8:da:6c:60:67:ed:ea:e0:fb:a9:7a:77:0f:77: 4d:77:32:fc:d1:3d:3e:a2:18:2d:0b:d6:f0:f9:42: e1:46:9e:3f:ba:21:22:3d:d6:56:10:80:52:d6:8a: da:e9:58:da:7a:c1:ae:43:8d:65:f2:ec:c5:53:9d: bc:cc:41:57:13:43:fb:72:7b:e2:94:39:bd:f3:79: 46:9d:1d:8f:72:91:1f:65:9b:cc:af:35:51:8e:0d: be:d1:19:6f:c2:a0:f6:bb:44:0e:50:a9:cf:35:14: 97:83:ae:a5:ae:49:cd:cb:75:ce:24:a0:b5:3e:61: 67:a3:f8:47:39:84:fb:ac:96:90:73:3e:69:6b:1f: 1b:f5:e6:dc:30:23:b2:c2:0f:de:03:22:7b:17:6a: 3a:8b:9a:b9:df:bc:07:13:3e:00:be:11:31:91:2f: e8:26:51:7e:9e:b7:f7:ae:dd:19:c4:76:5d:fc:f4: 31:5a:e5:fb:b6:8c:78:19:26:3c:67:54:eb:3b:ae: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:39:71:EB:CC:48:5D:58:C2:60:D3:89:0E:B2:8C:F8:CA:DE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl X509v3 Authority Key Identifier: keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer sbgp-ipAddrBlock: critical IPv4: 23.142.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:81:5f:fc:35:60:a4:4d:3e:06:98:33:04:17:b6:8a:2a:c5: 51:23:dd:a5:da:54:18:45:db:cd:04:e4:60:64:31:db:d1:45: 3a:1e:9c:d7:2e:39:2f:db:fa:64:4e:99:08:f7:b8:fa:d3:ff: 88:02:11:3e:43:62:a9:74:0e:5c:22:58:f8:45:70:91:e7:1d: e6:cc:22:4d:2e:13:9b:7a:40:ac:b8:cc:a4:bf:1b:0e:e4:52: e5:a6:4e:1e:4f:d3:f0:ed:72:84:61:a5:19:ff:69:aa:ca:c3: 06:92:72:68:87:1c:ac:d6:78:84:fb:aa:94:3f:47:be:8e:49: 47:b1:00:4f:ea:ea:9e:a6:e5:5c:15:6d:5a:d9:01:1a:a0:bb: a3:70:75:2c:a7:c9:79:39:1a:c8:79:03:b3:76:d0:ff:f0:13: 05:2c:be:09:cd:ed:a0:45:ce:e7:6c:02:9d:2d:0e:45:da:b9: 14:22:31:0c:87:6c:64:4f:97:ae:a2:cc:de:ca:c9:16:2d:b5: dc:9b:92:d3:74:34:d0:78:49:5f:6f:da:43:a4:20:15:4f:08: 70:98:aa:bf:c9:c5:74:9f:8b:15:3b:2e:30:59:cd:ba:d4:59: fc:bd:de:17:d5:81:d7:50:a8:37:98:9c:b1:dc:03:5e:7c:d3: 75:99:d6:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgOSPa40Tb5lSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh NjIxMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGFlODQwNWItNzI3Ny00N2RjLWJmODAtMWRmZjBiZTYwNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHI6813Ru1GgT896ezNCgFXRJdvql4BfnAQ5 FKF4/asgqANZxAM4sNdnHoExumURtGJTv4jGZfaT8fJKuNpsYGft6uD7qXp3D3dN dzL80T0+ohgtC9bw+ULhRp4/uiEiPdZWEIBS1ora6VjaesGuQ41l8uzFU528zEFX E0P7cnvilDm983lGnR2PcpEfZZvMrzVRjg2+0RlvwqD2u0QOUKnPNRSXg66lrknN y3XOJKC1PmFno/hHOYT7rJaQcz5pax8b9ebcMCOywg/eAyJ7F2o6i5q537wHEz4A vhExkS/oJlF+nrf3rt0ZxHZd/PQxWuX7tox4GSY8Z1TrO64u/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/dOXHrzEhdWMJg04kOsoz4yt6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvMTRiZDMzZWMtZWM5MS0z OTZiLWIwZTYtOTI3ZWY4YmUzMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1 MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj MmYzYWE2MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF45ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuBX/w1YKRNPgaYMwQXtooqxVEj3aXaVBhF280E5GBkMdvRRToenNcu OS/b+mROmQj3uPrT/4gCET5DYql0DlwiWPhFcJHnHebMIk0uE5t6QKy4zKS/Gw7k UuWmTh5P0/DtcoRhpRn/aarKwwaScmiHHKzWeIT7qpQ/R76OSUexAE/q6p6m5VwV bVrZARqgu6NwdSynyXk5Gsh5A7N20P/wEwUsvgnN7aBFzudsAp0tDkXauRQiMQyH bGRPl66izN7KyRYttdybktN0NNB4SV9v2kOkIBVPCHCYqr/JxXSfixU7LjBZzbrU Wfy93hfVgddQqDeYnLHcA15803WZ1nY= -----END CERTIFICATE-----Generated at Mon May 5 20:47:42 2025 by rpki-client