$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f817e6c3-3518-3791-9ffa-972eb3b45d99.roa File: f817e6c3-3518-3791-9ffa-972eb3b45d99.roa (raw, json) Hash identifier: 2y8hRosOpt0alG7Rm9LhiNPsjT2EWNxP/tR88WSJAZU= Subject key identifier: 8C:EA:7B:C7:2E:CE:68:31:38:AC:91:4F:2F:D6:8F:19:10:4B:AF:10 Certificate issuer: /CN=f397700c-ac8d-4e3f-a06d-cb330dbb1e47 Certificate serial: 010D0C9F43285849C0A4E1E787919AFEFBE29740 Authority key identifier: 93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f817e6c3-3518-3791-9ffa-972eb3b45d99.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 4138 IP address blocks: 23.129.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e1:e7:87:91:9a:fe:fb:e2:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f397700c-ac8d-4e3f-a06d-cb330dbb1e47 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=2e1032fa-3db8-481d-8103-b2d1a05a4879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:25:36:b1:b7:4c:90:bf:8b:08:24:66:5d: 10:37:bc:29:b9:99:c2:79:a8:cd:26:36:18:60:01: 17:ce:16:2b:45:53:f6:90:d8:10:1e:73:49:15:ff: c7:0c:30:e1:01:05:2e:19:a6:4f:f0:51:39:d1:3b: 16:c0:3e:38:52:15:52:a3:fb:5b:13:c8:43:8b:94: b2:bc:7c:be:2d:1f:65:7c:dd:2d:66:ed:03:cb:54: a2:eb:62:44:e9:b4:14:dc:09:a5:fa:bf:17:de:89: 90:21:0d:ac:b9:ef:8e:81:60:ce:f0:f3:97:ed:b1: e5:43:bf:95:80:6c:b7:f9:73:21:32:34:d5:ef:b3: 66:72:f7:73:c1:35:cb:f0:76:f7:a1:e1:6f:9d:55: 6d:26:03:61:57:78:e5:05:20:67:68:a0:2f:b8:2b: 96:33:aa:47:c3:2f:fc:12:85:cf:6d:e5:28:7b:03: 4b:2a:56:10:ff:2b:94:19:f0:a8:21:3e:14:79:d1: 2c:fc:ba:0c:ef:23:fc:35:c0:2c:d9:f6:d7:d6:c6: 0d:f5:ac:e8:9e:91:1f:87:bb:ab:ef:d6:dc:db:dd: 60:a1:c3:f1:7b:5c:af:e8:4f:38:94:1a:a4:32:d6: 40:77:c5:7b:8e:93:6d:61:ed:3c:ce:57:92:e0:53: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EA:7B:C7:2E:CE:68:31:38:AC:91:4F:2F:D6:8F:19:10:4B:AF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f817e6c3-3518-3791-9ffa-972eb3b45d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.crl X509v3 Authority Key Identifier: keyid:93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer sbgp-ipAddrBlock: critical IPv4: 23.129.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0d:34:85:56:53:cf:37:b9:bb:fe:ab:6b:e1:02:39:59:37: 0d:5b:0b:ee:53:3a:7a:e7:eb:95:28:98:1d:31:9f:85:9f:a6: 10:6e:09:31:98:c4:d3:3e:ee:c0:a6:61:ed:18:6a:d0:1b:c3: 89:91:d6:49:e5:6a:07:e9:2a:86:6d:9f:96:95:36:ca:6b:b4: bc:fb:c2:de:fa:1c:d5:40:f7:69:a0:3f:41:3b:46:1e:59:d8: e2:52:5c:8e:a0:ba:f6:da:58:88:26:f8:23:48:c3:7a:50:1f: 0a:d1:2d:79:f0:5a:7d:8c:87:67:1a:cf:79:a3:8c:1d:20:71: f0:57:4d:aa:cb:48:d3:14:84:fb:28:83:b9:74:55:0d:f7:80: 9f:59:c8:ee:04:9f:77:c0:43:f8:e7:dc:20:c5:8b:c2:70:9a: 10:2d:7d:fa:76:71:df:e2:19:49:9a:2e:7e:2f:b6:07:7b:13: af:e4:33:a6:f2:2d:76:4c:76:47:a1:79:c8:60:d4:30:c1:09: 95:74:67:35:f5:da:cd:1e:52:6c:a5:d6:4d:3c:40:ac:f0:97: 6f:f8:26:5f:35:77:0b:5a:20:30:b0:42:e4:7d:e9:46:b7:f2: de:13:e4:1b:4b:2c:a9:e1:89:22:59:85:c5:6f:79:2d:26:6d: a8:c5:3c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOHnh5Ga/vvil0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM5NzcwMGMtYWM4ZC00ZTNmLWEwNmQtY2IzMzBkYmIx ZTQ3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MmUxMDMyZmEtM2RiOC00ODFkLTgxMDMtYjJkMWEwNWE0ODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9YlNrG3TJC/iwgkZl0QN7wpuZnCeajNJjYY YAEXzhYrRVP2kNgQHnNJFf/HDDDhAQUuGaZP8FE50TsWwD44UhVSo/tbE8hDi5Sy vHy+LR9lfN0tZu0Dy1Si62JE6bQU3Aml+r8X3omQIQ2sue+OgWDO8POX7bHlQ7+V gGy3+XMhMjTV77NmcvdzwTXL8Hb3oeFvnVVtJgNhV3jlBSBnaKAvuCuWM6pHwy/8 EoXPbeUoewNLKlYQ/yuUGfCoIT4UedEs/LoM7yP8NcAs2fbX1sYN9azonpEfh7ur 79bc291gocPxe1yv6E84lBqkMtZAd8V7jpNtYe08zleS4FMqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzqe8cuzmgxOKyRTy/WjxkQS68QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzk3 NzAwYy1hYzhkLTRlM2YtYTA2ZC1jYjMzMGRiYjFlNDcvZjgxN2U2YzMtMzUxOC0z NzkxLTlmZmEtOTcyZWIzYjQ1ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM5NzcwMGMtYWM4ZC00ZTNmLWEw NmQtY2IzMzBkYmIxZTQ3L2YzOTc3MDBjLWFjOGQtNGUzZi1hMDZkLWNiMzMwZGJi MWU0Ny5jcmwwHwYDVR0jBBgwFoAUkyq4CSdzOUfglYB7BXO0GgjwjAowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzk3NzAwYy1hYzhkLTRlM2YtYTA2ZC1jYjMz MGRiYjFlNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgNNIVWU883ubv+q2vhAjlZNw1bC+5TOnrn65UomB0xn4WfphBuCTGY xNM+7sCmYe0YatAbw4mR1knlagfpKoZtn5aVNsprtLz7wt76HNVA92mgP0E7Rh5Z 2OJSXI6guvbaWIgm+CNIw3pQHwrRLXnwWn2Mh2caz3mjjB0gcfBXTarLSNMUhPso g7l0VQ33gJ9ZyO4En3fAQ/jn3CDFi8JwmhAtffp2cd/iGUmaLn4vtgd7E6/kM6by LXZMdkehechg1DDBCZV0ZzX12s0eUmyl1k08QKzwl2/4Jl81dwtaIDCwQuR96Ua3 8t4T5BtLLKnhiSJZhcVveS0mbajFPK0= -----END CERTIFICATE-----Generated at Thu May 8 22:06:22 2025 by rpki-client