$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9d9947a0-3836-381e-b040-11cbeaaa83b3.roa File: 9d9947a0-3836-381e-b040-11cbeaaa83b3.roa (raw, json) Hash identifier: Z11sJpS2c5aqZg5usQEVPKLmOn9sVO9pgmkbmCA/q6s= Subject key identifier: 69:5B:99:14:52:FE:EA:7A:10:AE:4D:30:8A:7E:5D:C1:0D:84:09:40 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F43285849C904E1C61A5BC5BE5BEA8980 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9d9947a0-3836-381e-b040-11cbeaaa83b3.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 139267 IP address blocks: 23.166.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e1:c6:1a:5b:c5:be:5b:ea:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=7bb6700d-97ef-44c6-b5f7-7052227fb58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b7:e8:4d:0b:64:c4:9b:d2:44:5b:2e:5c:ff: fd:3a:32:c1:fd:d8:ba:e3:07:cb:b2:a0:c0:17:b4: dd:0a:7d:62:1a:45:59:f9:85:7c:a0:14:54:e4:bf: 44:91:d1:1c:3a:c7:3b:2f:1c:f2:a1:a9:c6:cb:ff: fb:ea:2d:80:bb:1f:ce:dc:07:45:5f:8a:25:e3:45: e3:46:6c:c6:ed:fa:51:84:1a:64:81:47:19:1f:c5: 4e:2c:29:a3:68:f8:d9:90:64:41:96:3b:2b:95:a6: 0a:20:de:86:95:3f:05:9c:24:6e:84:b5:d8:7e:29: 75:ec:bc:bb:a0:07:3d:f2:5f:34:19:66:dc:24:7a: 34:3d:bf:83:22:e8:e6:d4:5b:63:6b:6d:a7:a0:b0: 89:bb:8d:f8:93:37:59:89:51:31:8a:4a:3f:45:29: c5:c8:14:8d:06:40:9e:90:3d:97:65:0b:e7:79:26: 68:15:77:b2:80:0c:17:67:47:16:f5:e5:8f:ea:19: 07:d7:27:23:a0:0e:5f:b5:d8:41:77:ac:c0:42:e2: 97:67:64:4c:dc:40:53:76:65:1e:6a:4f:4f:8e:f6: 2c:35:f5:e3:fc:e4:84:6e:23:56:c8:4a:3a:6c:09: 9c:32:1d:40:18:47:97:91:75:c5:67:0b:5d:6c:01: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:99:14:52:FE:EA:7A:10:AE:4D:30:8A:7E:5D:C1:0D:84:09:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9d9947a0-3836-381e-b040-11cbeaaa83b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 23.166.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:55:45:2a:27:40:67:24:98:86:0e:a0:c3:f6:98:a3:b5:79: 8b:71:06:9d:08:3b:e7:c3:26:52:99:d5:f4:6a:94:c6:cc:37: 64:e8:e5:01:50:bd:23:fb:04:a0:49:4e:8c:57:d2:ff:50:12: f4:62:b7:52:b0:dd:b5:81:28:06:26:39:c7:0e:1b:af:eb:de: 6b:40:a0:f9:ed:82:57:b0:6f:2d:75:d8:a5:35:81:a7:90:07: 49:56:ba:af:3b:d6:77:4c:f6:90:0e:97:ae:bb:4a:6e:19:c0: e7:2a:18:6b:0f:36:bc:8e:ec:dd:a2:a3:06:3c:43:36:47:02: 92:d0:29:bf:f1:10:1c:2f:f3:5a:3e:31:a7:2e:5f:63:f7:67: d2:14:53:c9:54:44:88:82:44:0c:5e:8a:e2:ca:ba:9d:38:50: 4f:0e:03:6e:ab:92:b1:23:7a:f5:0f:42:f4:c3:15:c1:55:cb: 24:8d:7e:c5:a3:39:ef:60:e6:d3:da:d0:66:37:09:cd:3b:ba: 23:aa:dd:b4:4b:a2:69:2c:96:0b:1f:78:11:15:34:ba:2a:c5: 51:4b:5c:b5:b8:fe:a0:8b:08:fc:06:48:fd:0a:70:8c:fe:7a: 24:0d:74:4f:f4:d7:1c:10:50:ac:6c:d2:8a:78:25:c9:af:4c: 92:47:e5:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOHGGlvFvlvqiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk N2JiNjcwMGQtOTdlZi00NGM2LWI1ZjctNzA1MjIyN2ZiNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbfoTQtkxJvSRFsuXP/9OjLB/di64wfLsqDA F7TdCn1iGkVZ+YV8oBRU5L9EkdEcOsc7LxzyoanGy//76i2Aux/O3AdFX4ol40Xj RmzG7fpRhBpkgUcZH8VOLCmjaPjZkGRBljsrlaYKIN6GlT8FnCRuhLXYfil17Ly7 oAc98l80GWbcJHo0Pb+DIujm1Ftja22noLCJu434kzdZiVExiko/RSnFyBSNBkCe kD2XZQvneSZoFXeygAwXZ0cW9eWP6hkH1ycjoA5ftdhBd6zAQuKXZ2RM3EBTdmUe ak9PjvYsNfXj/OSEbiNWyEo6bAmcMh1AGEeXkXXFZwtdbAHOjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlbmRRS/up6EK5NMIp+XcENhAlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvOWQ5OTQ3YTAtMzgzNi0z ODFlLWIwNDAtMTFjYmVhYWE4M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOJVRSonQGckmIYOoMP2mKO1eYtxBp0IO+fDJlKZ1fRqlMbMN2To5QFQ vSP7BKBJToxX0v9QEvRit1Kw3bWBKAYmOccOG6/r3mtAoPntglewby112KU1gaeQ B0lWuq871ndM9pAOl667Sm4ZwOcqGGsPNryO7N2iowY8QzZHApLQKb/xEBwv81o+ MacuX2P3Z9IUU8lURIiCRAxeiuLKup04UE8OA26rkrEjevUPQvTDFcFVyySNfsWj Oe9g5tPa0GY3Cc07uiOq3bRLomkslgsfeBEVNLoqxVFLXLW4/qCLCPwGSP0KcIz+ eiQNdE/01xwQUKxs0op4JcmvTJJH5dA= -----END CERTIFICATE-----Generated at Sun May 11 01:11:08 2025 by rpki-client