$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa File: 3d653275-34fd-30d1-9fbd-3fc5704add6a.roa (raw, json) Hash identifier: JotQD+EFoGIAzYas5zFQqJC2HncOAXHi8EwH1Hg9YZU= Subject key identifier: 9E:4A:C9:97:3D:56:4F:1F:99:BB:D7:0F:9C:C4:EB:94:0E:9D:F0:E9 Certificate issuer: /CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8 Certificate serial: 010D0C9F432858491246C807EC24641EDF63D240 Authority key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 400930 IP address blocks: 23.175.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c8:07:ec:24:64:1e:df:63:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6cb80d74-bdd2-4c7a-88af-7dfddd9bbd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:e3:09:96:81:13:00:5f:76:45:5f:35:09: 29:c2:8d:4a:2b:c0:a3:0a:7c:2d:ea:95:19:8d:65: c1:46:21:ae:a8:c1:c8:64:5d:57:24:a0:06:3b:b7: 3a:27:2f:68:2b:d0:6c:ee:f6:7d:d9:63:7c:ff:ad: 8b:0f:cd:81:99:50:1b:c5:f3:e0:00:4c:85:04:40: ec:2a:a9:e9:43:df:db:45:24:a1:f6:ba:f7:87:ab: d2:04:c9:82:55:d3:c2:96:2d:69:cd:9a:31:0d:3c: 5e:80:6f:6c:54:5e:f4:a4:29:ee:90:a3:53:12:1b: 40:3a:76:a1:20:7e:88:7f:6c:cd:3e:3b:43:a1:f8: e4:a1:28:db:16:37:02:dc:f5:9e:34:5a:7d:06:b9: df:17:44:ab:f9:7d:65:c9:f5:f0:f9:bc:11:b4:0f: 95:23:6b:8b:b4:fa:7c:be:c0:17:9f:be:ee:c1:a0: 25:95:d6:7a:70:4e:c0:34:12:47:6b:c6:43:25:52: 0e:a6:1c:b6:c7:65:09:fb:97:8e:61:cf:8b:13:67: e1:13:73:96:23:47:87:59:d7:e7:d3:f8:38:b7:28: 70:b1:87:cd:3a:aa:1d:51:02:ac:07:c9:03:e2:18: d0:3e:f8:d1:b7:c6:3e:01:e7:43:e0:e4:95:f8:b7: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4A:C9:97:3D:56:4F:1F:99:BB:D7:0F:9C:C4:EB:94:0E:9D:F0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl X509v3 Authority Key Identifier: keyid:97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer sbgp-ipAddrBlock: critical IPv4: 23.175.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e7:be:c5:b3:e7:2f:96:4e:12:d7:6e:f9:63:f6:f8:9e:18: 7c:63:7b:38:84:6d:14:dd:dd:96:d6:14:73:7b:3c:9c:f2:51: 32:20:07:e5:06:f1:e8:ac:0f:ef:89:8f:15:e4:96:a5:d6:12: d5:1d:1c:57:ae:dd:a9:07:cf:d5:b8:04:f5:fe:c8:97:55:2b: 87:89:4f:3d:20:71:26:df:98:63:9d:2f:99:c1:6c:b8:e4:87: 62:af:cf:32:de:0f:7f:d7:6f:37:b3:ba:45:95:4e:ee:0c:07: cd:54:6e:0e:3e:9b:cc:92:d9:e8:e0:a6:46:f6:be:5c:05:b3: 51:fc:ae:f3:77:be:a5:5d:3f:ab:e5:4e:ed:77:db:88:a8:56: 96:7b:dd:c8:09:13:ae:e0:e8:f5:31:99:d8:3a:d5:2c:8c:f6: 99:b3:be:f7:0c:f8:f5:ca:66:86:df:cd:c3:09:d9:9f:d6:52: e5:c6:65:44:9a:71:88:42:14:0d:c5:04:37:2e:dc:d9:b4:bc: cd:f2:6b:95:8f:e5:11:78:93:32:b6:57:3c:6d:fb:16:99:9a: ab:6c:13:8f:b5:99:34:b9:7c:b1:16:4c:13:11:1e:89:88:36: 66:69:a6:be:4e:e0:22:2a:a6:70:12:23:cd:3f:75:50:f9:4e: 61:43:27:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsgH7CRkHt9j0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIyNGEwZjMtZWQwZS00ZjUyLWE3ZDQtNWYyYjUwNDhi ZWY4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmNiODBkNzQtYmRkMi00YzdhLTg4YWYtN2RmZGRkOWJiZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz/jCZaBEwBfdkVfNQkpwo1KK8CjCnwt6pUZ jWXBRiGuqMHIZF1XJKAGO7c6Jy9oK9Bs7vZ92WN8/62LD82BmVAbxfPgAEyFBEDs KqnpQ9/bRSSh9rr3h6vSBMmCVdPCli1pzZoxDTxegG9sVF70pCnukKNTEhtAOnah IH6If2zNPjtDofjkoSjbFjcC3PWeNFp9BrnfF0Sr+X1lyfXw+bwRtA+VI2uLtPp8 vsAXn77uwaAlldZ6cE7ANBJHa8ZDJVIOphy2x2UJ+5eOYc+LE2fhE3OWI0eHWdfn 0/g4tyhwsYfNOqodUQKsB8kD4hjQPvjRt8Y+AedD4OSV+Lci2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5KyZc9Vk8fmbvXD5zE65QOnfDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMjI0 YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJiNTA0OGJlZjgvM2Q2NTMyNzUtMzRmZC0z MGQxLTlmYmQtM2ZjNTcwNGFkZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjIyNGEwZjMtZWQwZS00ZjUyLWE3 ZDQtNWYyYjUwNDhiZWY4LzIyMjRhMGYzLWVkMGUtNGY1Mi1hN2Q0LTVmMmI1MDQ4 YmVmOC5jcmwwHwYDVR0jBBgwFoAUl1Nt1yQVObJUhvIlN/tifcqtQpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMjI0YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJi NTA0OGJlZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF684MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALnvsWz5y+WThLXbvlj9vieGHxjeziEbRTd3ZbWFHN7PJzyUTIgB+UG 8eisD++JjxXklqXWEtUdHFeu3akHz9W4BPX+yJdVK4eJTz0gcSbfmGOdL5nBbLjk h2KvzzLeD3/XbzezukWVTu4MB81Ubg4+m8yS2ejgpkb2vlwFs1H8rvN3vqVdP6vl Tu1324ioVpZ73cgJE67g6PUxmdg61SyM9pmzvvcM+PXKZobfzcMJ2Z/WUuXGZUSa cYhCFA3FBDcu3Nm0vM3ya5WP5RF4kzK2Vzxt+xaZmqtsE4+1mTS5fLEWTBMRHomI NmZppr5O4CIqpnASI80/dVD5TmFDJ4g= -----END CERTIFICATE-----Generated at Fri May 9 05:09:47 2025 by rpki-client