$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa File: 6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa (raw, json) Hash identifier: NcRK6vqscuzLOaF/XJIiD/FUab978ODY21B5B3MSZwc= Subject key identifier: 55:ED:6A:47:CE:F6:7B:AC:19:B2:A5:0A:D1:F6:36:F3:3B:60:BE:67 Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Certificate serial: 010D0C9F432858499DBF2C9D04A08B6E7B9AF300 Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 396982 IP address blocks: 168.235.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2c:9d:04:a0:8b:6e:7b:9a:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=2af365c8-6354-46e6-a1ed-76830f2fa5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:47:fb:f3:ce:6b:36:55:e1:c8:50:ca:ce: b2:4d:e7:b1:06:ea:9b:f7:fc:67:7f:58:fb:fb:d4: fb:6e:73:c2:2a:be:70:51:82:5a:96:e0:ee:fb:7e: ff:d8:b6:a6:a0:f7:1c:fe:5c:aa:d8:6e:31:f9:96: 82:7a:cb:0c:4f:f1:88:1d:11:4c:06:f0:08:c5:3e: 59:96:b7:33:19:9d:24:8d:87:7c:9b:1a:9b:46:b5: aa:cf:1d:c5:1a:27:8a:b4:34:45:7c:54:8f:14:16: 05:bd:c4:a6:9b:84:b2:7b:dc:14:f2:20:0a:4c:65: 9d:ff:99:de:0e:57:cb:c8:2f:69:58:bf:fa:dc:ee: c9:69:a0:13:57:30:2b:8b:f8:16:10:73:76:d6:1e: 72:d4:ca:47:ac:93:1b:61:83:24:bc:5d:6b:3e:84: f2:07:4d:d1:f4:b2:b0:e5:c6:3d:cb:06:7f:6e:9c: a5:f0:36:ab:60:74:55:6e:a9:3f:f6:b3:a6:de:b8: 0c:1d:e5:9b:95:8b:e8:d2:2a:db:c5:b5:ef:9f:a7: ec:b0:5a:6f:60:e4:c7:c8:64:75:97:15:f1:ce:91: 0c:60:be:fe:68:1f:c8:92:15:f8:4a:1d:e9:b9:cb: 44:35:0d:50:ee:51:3c:41:d9:60:e6:4a:43:e6:2f: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:ED:6A:47:CE:F6:7B:AC:19:B2:A5:0A:D1:F6:36:F3:3B:60:BE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl X509v3 Authority Key Identifier: keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer sbgp-ipAddrBlock: critical IPv4: 168.235.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:da:47:4d:15:22:e7:50:f0:15:8f:0e:48:1d:02:ec:3e:26: c3:3b:5e:e4:33:d2:eb:d1:fe:06:81:b8:72:3c:1e:01:26:42: b7:82:7f:51:65:d1:17:71:03:86:bb:59:1a:c8:d4:a3:27:67: 4f:80:28:a7:5a:5c:19:18:e1:c7:94:74:35:40:2d:51:55:3d: fa:10:de:d0:27:1e:a9:80:19:82:b1:d2:04:20:22:95:e2:53: 40:90:b6:14:ee:99:79:34:13:cd:0a:23:3d:c9:15:81:8c:77: e1:67:a4:6b:90:9d:98:14:6b:39:c8:42:2f:2c:51:f5:e8:c2: b9:ed:cf:08:ce:8d:3e:f2:59:a3:aa:a0:03:7b:a3:14:1b:51: f0:46:10:ff:6f:5b:18:50:7a:ca:ea:29:d9:f3:56:69:1e:ea: 12:70:52:e5:e7:bb:57:70:fe:b0:b3:14:df:08:6e:f7:5b:9e: 1f:47:f1:f9:a2:05:88:10:45:d4:75:6e:64:fd:61:d1:1e:07: 53:4b:64:a9:39:09:d3:6e:ea:e1:73:89:e3:da:a4:72:da:5d: 42:c1:1a:ad:45:91:64:b5:12:7f:0c:fe:9f:08:bf:9f:71:7d: 5b:1b:e2:76:d3:cf:37:ff:21:ff:05:af:40:c0:4d:a8:dd:dc: 58:88:21:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvyydBKCLbnua8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1 NmY5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MmFmMzY1YzgtNjM1NC00NmU2LWExZWQtNzY4MzBmMmZhNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysxH+/POazZV4chQys6yTeexBuqb9/xnf1j7 +9T7bnPCKr5wUYJaluDu+37/2LamoPcc/lyq2G4x+ZaCessMT/GIHRFMBvAIxT5Z lrczGZ0kjYd8mxqbRrWqzx3FGieKtDRFfFSPFBYFvcSmm4Sye9wU8iAKTGWd/5ne DlfLyC9pWL/63O7JaaATVzAri/gWEHN21h5y1MpHrJMbYYMkvF1rPoTyB03R9LKw 5cY9ywZ/bpyl8DarYHRVbqk/9rOm3rgMHeWblYvo0irbxbXvn6fssFpvYOTHyGR1 lxXxzpEMYL7+aB/IkhX4Sh3puctENQ1Q7lE8Qdlg5kpD5i9uMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXtakfO9nusGbKlCtH2NvM7YL5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3 YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvNmU5N2YwM2QtYjBmZi0z ZThkLWE3Y2QtNTdiNDk0MGM2MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1 NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfaR00VIudQ8BWPDkgdAuw+JsM7XuQz0uvR/gaBuHI8HgEmQreCf1Fl 0RdxA4a7WRrI1KMnZ0+AKKdaXBkY4ceUdDVALVFVPfoQ3tAnHqmAGYKx0gQgIpXi U0CQthTumXk0E80KIz3JFYGMd+FnpGuQnZgUaznIQi8sUfXowrntzwjOjT7yWaOq oAN7oxQbUfBGEP9vWxhQesrqKdnzVmke6hJwUuXnu1dw/rCzFN8Ibvdbnh9H8fmi BYgQRdR1bmT9YdEeB1NLZKk5CdNu6uFziePapHLaXULBGq1FkWS1En8M/p8Iv59x fVsb4nbTzzf/If8Fr0DATajd3FiIIYs= -----END CERTIFICATE-----Generated at Mon May 5 09:29:33 2025 by rpki-client