$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a/85dabd3a-4f1f-3aa6-b9af-0d2768cac2d2.roa File: 85dabd3a-4f1f-3aa6-b9af-0d2768cac2d2.roa (raw, json) Hash identifier: C7parqY4VRpwSl+0FrEXNQ6+guw3wdNDMBIUxmMUFZY= Subject key identifier: 9A:28:DC:F5:EB:B5:36:76:85:D8:59:28:D2:2C:CE:CB:70:B6:86:DB Certificate issuer: /CN=fa1d858b-c1af-4365-8d71-19e4704bd96a Certificate serial: 010D0C9F43285849C0A4D7E022FC08240CBAAE00 Authority key identifier: EB:A7:80:19:DC:2F:63:60:FF:52:0C:C1:2E:D0:E6:68:E2:65:B0:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a/85dabd3a-4f1f-3aa6-b9af-0d2768cac2d2.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396142 IP address blocks: 23.153.128.0/24 maxlen: 24 2620:18:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a/fa1d858b-c1af-4365-8d71-19e4704bd96a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a/fa1d858b-c1af-4365-8d71-19e4704bd96a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d7:e0:22:fc:08:24:0c:ba:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1d858b-c1af-4365-8d71-19e4704bd96a Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=017a685f-9f57-4179-846e-ac8edc0a7c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:81:0e:ba:69:62:71:01:41:c6:4c:3e:4d: d0:5f:35:06:37:32:ae:ee:25:1a:b3:d9:22:b1:b5: 8d:d7:93:33:f0:52:5d:42:92:8f:32:8b:ff:22:e3: 5c:0e:72:f3:18:a3:c9:b3:b1:d4:24:ae:6d:70:bc: 32:f4:39:bc:52:2c:a2:34:8a:4f:23:12:b5:cd:65: 94:c5:03:40:7e:d8:ea:21:51:ca:8c:3c:53:b2:a0: 67:4e:40:e1:99:ef:49:16:6b:ea:40:5b:dd:e6:70: 43:fe:fa:de:9a:e7:f0:09:01:c3:be:2d:08:29:d0: 41:8d:23:7c:eb:c2:5c:a9:18:d5:7a:32:b3:fb:a1: e9:7b:ff:0c:f8:e9:84:6e:60:b9:4b:99:18:fe:97: 03:c5:5a:5c:2c:19:bc:6f:ed:c9:ee:18:82:ca:95: d2:35:37:22:23:66:13:5b:aa:fa:29:a9:02:85:45: 0c:ac:b9:bb:9c:0a:84:19:90:a9:93:f4:48:de:19: fe:18:22:63:01:41:49:df:2c:d4:85:eb:61:e9:38: fa:88:24:62:20:7a:12:d6:6f:3f:19:46:28:4e:ea: cb:f9:df:cc:c1:23:71:7a:51:fe:c8:bd:f8:31:95: 41:c6:a1:54:67:bc:44:01:fa:8b:c7:77:f4:61:e2: d3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:DC:F5:EB:B5:36:76:85:D8:59:28:D2:2C:CE:CB:70:B6:86:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a/85dabd3a-4f1f-3aa6-b9af-0d2768cac2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a/fa1d858b-c1af-4365-8d71-19e4704bd96a.crl X509v3 Authority Key Identifier: keyid:EB:A7:80:19:DC:2F:63:60:FF:52:0C:C1:2E:D0:E6:68:E2:65:B0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa1d858b-c1af-4365-8d71-19e4704bd96a.cer sbgp-ipAddrBlock: critical IPv4: 23.153.128.0/24 IPv6: 2620:18:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7e:da:ae:8c:ad:d5:bf:d1:78:48:61:44:4c:a9:7e:99:f1: 29:cd:8a:d8:ff:ac:e1:83:47:29:1f:4b:c2:c3:a7:a1:b5:65: 9c:f3:e6:42:a5:28:c9:5c:76:7b:c1:b1:47:e7:5a:8e:74:9b: 04:aa:99:0c:14:2b:3c:c6:e7:39:b0:ba:b0:5b:72:92:dc:18: 27:5f:7f:41:0c:1f:67:ce:bb:7e:04:07:a0:bf:63:74:7e:2e: 34:cf:2a:03:84:13:33:a5:77:32:f8:b9:7b:b2:11:51:5a:cb: 1c:cb:bf:c1:a7:f6:e7:51:45:5e:7f:c8:09:ce:e9:d2:b9:e8: dc:32:44:5d:22:f9:c8:d1:fc:24:6a:53:37:40:ef:21:f5:f4: 44:6e:51:28:d6:ad:ca:64:f3:a2:28:f9:9a:02:ea:ac:01:80: 6b:d3:67:d4:1b:b8:62:27:cd:b3:5e:6d:c1:14:3f:9c:95:75: 1f:ab:51:13:aa:5b:05:5c:98:4c:44:e0:be:6f:c2:bc:60:ae: bc:b5:75:c6:7e:7f:cf:e6:59:38:41:f9:a2:4d:0c:9b:f9:4a: 3c:da:06:78:e7:42:5c:ca:07:31:c0:44:e4:b2:33:41:67:b9: 82:78:1f:a2:63:dc:d1:ae:a8:07:06:a0:1b:87:4d:88:1f:a5: 7f:88:df:41 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnApNfgIvwIJAy6rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmExZDg1OGItYzFhZi00MzY1LThkNzEtMTllNDcwNGJk OTZhMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MDE3YTY4NWYtOWY1Ny00MTc5LTg0NmUtYWM4ZWRjMGE3YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7qBDrppYnEBQcZMPk3QXzUGNzKu7iUas9ki sbWN15Mz8FJdQpKPMov/IuNcDnLzGKPJs7HUJK5tcLwy9Dm8UiyiNIpPIxK1zWWU xQNAftjqIVHKjDxTsqBnTkDhme9JFmvqQFvd5nBD/vremufwCQHDvi0IKdBBjSN8 68JcqRjVejKz+6Hpe/8M+OmEbmC5S5kY/pcDxVpcLBm8b+3J7hiCypXSNTciI2YT W6r6KakChUUMrLm7nAqEGZCpk/RI3hn+GCJjAUFJ3yzUheth6Tj6iCRiIHoS1m8/ GUYoTurL+d/MwSNxelH+yL34MZVBxqFUZ7xEAfqLx3f0YeLTBwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJoo3PXrtTZ2hdhZKNIszstwtobbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYTFk ODU4Yi1jMWFmLTQzNjUtOGQ3MS0xOWU0NzA0YmQ5NmEvODVkYWJkM2EtNGYxZi0z YWE2LWI5YWYtMGQyNzY4Y2FjMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmExZDg1OGItYzFhZi00MzY1LThk NzEtMTllNDcwNGJkOTZhL2ZhMWQ4NThiLWMxYWYtNDM2NS04ZDcxLTE5ZTQ3MDRi ZDk2YS5jcmwwHwYDVR0jBBgwFoAU66eAGdwvY2D/UgzBLtDmaOJlsIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYTFkODU4Yi1jMWFmLTQzNjUtOGQ3MS0xOWU0 NzA0YmQ5NmEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5mAMA8E AgACMAkDBwAmIAAYYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfH7aroyt1b/ReEhhREypfpnxKc2K2P+s 4YNHKR9LwsOnobVlnPPmQqUoyVx2e8GxR+dajnSbBKqZDBQrPMbnObC6sFtyktwY J19/QQwfZ867fgQHoL9jdH4uNM8qA4QTM6V3Mvi5e7IRUVrLHMu/waf251FFXn/I Cc7p0rno3DJEXSL5yNH8JGpTN0DvIfX0RG5RKNatymTzoij5mgLqrAGAa9Nn1Bu4 YifNs15twRQ/nJV1H6tRE6pbBVyYTETgvm/CvGCuvLV1xn5/z+ZZOEH5ok0Mm/lK PNoGeOdCXMoHMcBE5LIzQWe5gngfomPc0a6oBwagG4dNiB+lf4jfQQ== -----END CERTIFICATE-----Generated at Mon May 12 05:17:11 2025 by rpki-client