$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: xT/2haW4LzGnDmDXbOL/VQuPv9rn0WUW3WJJSYEmnnY= Subject key identifier: 54:A2:4D:E2:26:FE:90:A5:7B:CA:1F:60:B8:4A:CC:B7:23:36:7C:66 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F432858491AA6D119EAB123A173980C00 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d1:19:ea:b1:23:a1:73:98:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=6caeb3ee-ce60-4ad9-b935-b4e3097b3b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:72:3b:4b:28:b8:e9:f1:d0:84:7a:63:89: 7a:e8:12:a4:e2:58:5d:0c:29:14:b0:9d:0f:36:9f: e0:30:a0:95:b5:a8:a5:30:49:89:01:94:f4:46:18: 52:d2:bb:60:58:08:66:0c:1e:f7:f4:cc:00:9d:50: 1e:49:15:10:9a:0a:6f:cf:16:36:b8:cc:72:30:bb: 11:62:c9:69:26:eb:52:49:8e:62:d9:d6:9c:ec:be: 79:d8:bd:4b:db:a7:b4:cb:ad:eb:59:d2:25:27:a2: e6:d2:ce:53:d9:0a:b2:5b:fa:bb:86:44:ec:6b:26: fd:65:f0:a8:14:d4:21:1a:16:db:b6:1c:9d:9c:c7: 93:9d:d4:38:c5:e0:15:85:38:7f:27:73:8f:67:8b: 29:9a:40:37:86:8f:a9:cc:da:f4:8a:0f:6c:a5:43: a7:ca:67:e6:9a:65:7a:54:14:1a:95:aa:76:5c:4c: e9:ac:12:b3:2c:c8:97:e8:c5:49:f3:cf:6a:a1:65: 89:bc:0a:bd:f6:b0:d9:dc:c6:ad:27:b3:84:84:7f: 46:a9:69:87:1c:f7:ca:52:fe:08:b1:6d:14:5f:85: 1f:cf:6f:39:0d:97:9d:bb:f5:30:0e:56:a2:1e:b7: e0:c2:10:d9:fd:f1:6f:18:35:de:a9:82:1d:c1:3b: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A2:4D:E2:26:FE:90:A5:7B:CA:1F:60:B8:4A:CC:B7:23:36:7C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9f:a2:1b:fa:72:0d:ed:7d:56:a9:7f:71:97:d4:b5:7f:7c: ae:95:61:8b:69:bd:d7:a8:e3:7c:10:ce:ba:5e:83:88:bc:b0: 65:90:3f:06:9d:cd:aa:65:82:41:8d:7f:7d:b9:71:ed:23:d0: a2:73:97:88:f2:f9:e0:1b:3e:6d:1c:40:09:b7:a5:8d:01:c4: 67:78:7d:79:75:89:25:ac:1e:c3:0a:35:8d:6c:8c:03:7f:2a: 77:06:05:3c:0d:a6:97:c4:3a:df:72:7b:43:cc:3f:81:74:73: 02:b8:bf:0e:01:2b:58:3c:e6:44:98:7c:b9:db:08:81:ab:1d: 5b:4b:4b:45:67:54:6c:ee:96:5c:d6:d6:1d:7d:a2:e2:1d:c4: 08:72:7b:4b:3e:ca:db:94:5f:32:ef:d0:7d:d1:e5:aa:93:32: 7f:f8:69:70:6a:62:d7:54:5f:d2:20:dc:36:d8:d2:ea:d9:e0: 86:ef:a9:51:2e:47:f6:7d:b3:26:76:bc:60:a5:d0:11:62:1f: bd:db:1a:04:b0:bc:bf:4c:e0:11:94:d6:1f:da:6f:bd:2e:9f: c1:98:b2:55:6e:c0:82:db:62:bd:18:b3:16:5b:ce:ea:f5:48: 70:ff:a2:b6:32:40:98:a2:62:e8:15:d4:6b:6d:54:c8:c6:16: 77:e2:15:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaptEZ6rEjoXOYDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NmNhZWIzZWUtY2U2MC00YWQ5LWI5MzUtYjRlMzA5N2IzYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNZyO0souOnx0IR6Y4l66BKk4lhdDCkUsJ0P Np/gMKCVtailMEmJAZT0RhhS0rtgWAhmDB739MwAnVAeSRUQmgpvzxY2uMxyMLsR YslpJutSSY5i2dac7L552L1L26e0y63rWdIlJ6Lm0s5T2QqyW/q7hkTsayb9ZfCo FNQhGhbbthydnMeTndQ4xeAVhTh/J3OPZ4spmkA3ho+pzNr0ig9spUOnymfmmmV6 VBQalap2XEzprBKzLMiX6MVJ889qoWWJvAq99rDZ3MatJ7OEhH9GqWmHHPfKUv4I sW0UX4Ufz285DZedu/UwDlaiHrfgwhDZ/fFvGDXeqYIdwTtSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSiTeIm/pCle8ofYLhKzLcjNnxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADafohv6cg3tfVapf3GX1LV/fK6VYYtpvdeo43wQzrpeg4i8sGWQPwad zaplgkGNf325ce0j0KJzl4jy+eAbPm0cQAm3pY0BxGd4fXl1iSWsHsMKNY1sjAN/ KncGBTwNppfEOt9ye0PMP4F0cwK4vw4BK1g85kSYfLnbCIGrHVtLS0VnVGzullzW 1h19ouIdxAhye0s+ytuUXzLv0H3R5aqTMn/4aXBqYtdUX9Ig3DbY0urZ4IbvqVEu R/Z9syZ2vGCl0BFiH73bGgSwvL9M4BGU1h/ab70un8GYslVuwILbYr0YsxZbzur1 SHD/orYyQJiiYugV1GttVMjGFnfiFWo= -----END CERTIFICATE-----Generated at Fri May 9 04:05:38 2025 by rpki-client