$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa File: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (raw, json) Hash identifier: EBsjD0mrwmZZwNrMP7QiCZieQ7ziCwSBzUeqb2JXKp8= Subject key identifier: 24:03:B0:17:F5:E3:78:AA:C0:C4:F9:B9:EF:2A:22:2A:3A:8A:FE:E6 Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F43285849F2E52B6D9EFFAA95EFE13060 Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 397939 IP address blocks: 23.145.112.0/24 maxlen: 24 2605:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2b:6d:9e:ff:aa:95:ef:e1:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=ce9fc17f-11bc-45da-b4c5-9c38d38f5511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:94:03:b8:e7:5a:d3:27:3f:1f:91:fe:3d: 76:a4:c0:f2:a6:3e:f8:9b:1a:02:03:28:f4:78:cb: 4f:46:c7:92:cf:92:17:59:65:77:ee:a6:70:49:95: 67:9f:0a:59:e8:db:d1:0f:a1:b1:ac:e6:72:1b:eb: 12:29:1a:dc:c2:44:96:5f:a5:38:2c:62:46:57:c5: 45:b6:db:53:5c:0a:81:2c:e8:63:3e:ac:fd:ea:de: f1:4d:5e:b8:dc:20:c8:d5:34:73:4f:17:ba:44:cf: 0e:be:a5:e5:3e:44:66:d9:0e:52:4e:c7:c4:60:1a: 8e:f5:62:bb:80:d8:3c:2d:3f:2d:d3:73:c8:06:19: bb:0d:79:6d:6e:62:64:01:d5:5e:45:a4:5e:04:e2: c0:6d:58:15:fa:d8:f8:32:5a:ba:79:a8:1f:ca:9e: bf:67:89:73:1a:b8:c8:21:64:50:00:97:f6:e8:27: f8:b6:85:52:0b:0b:bb:eb:5b:68:9c:06:9e:ee:87: c3:74:23:e3:25:0f:fe:f0:08:6f:6c:8c:8b:30:df: 4f:90:0e:e8:ab:7a:59:8f:15:a3:82:cb:00:58:8d: a5:7f:54:0b:f6:45:2a:4b:65:de:c6:89:54:fd:b3: fc:a3:93:70:68:1e:e6:ea:d6:dd:9c:60:77:72:a8: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:03:B0:17:F5:E3:78:AA:C0:C4:F9:B9:EF:2A:22:2A:3A:8A:FE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: 23.145.112.0/24 IPv6: 2605:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:62:01:35:76:53:4a:c0:8b:ab:7e:5d:a0:8f:f5:c4:42:d6: b6:07:88:65:45:e1:b0:2d:4e:ab:72:d9:3b:91:3f:aa:c6:dc: e2:36:f2:cb:b1:8c:51:3d:3f:2e:c1:bb:27:88:da:88:e6:17: d7:5d:c9:2e:f8:9f:97:b8:3a:c3:ab:0c:92:f5:ec:d4:b9:60: 9b:44:13:ba:2d:03:a3:45:7b:2b:fd:99:0e:35:82:44:3e:51: 5a:38:90:d0:00:d0:4c:1f:df:2a:8f:9a:95:09:d6:3e:f5:74: a3:73:c2:38:ad:aa:20:86:3c:bf:63:d8:b1:c3:18:8a:0f:eb: dc:10:0b:eb:fa:de:5d:06:47:ef:16:68:ad:1c:57:4f:8c:f3: 26:29:7f:a2:67:ef:f4:81:55:47:5e:a8:40:01:aa:8b:29:fd: 73:47:4c:ca:fe:33:32:3f:f7:97:cb:11:fb:1e:f9:2f:45:3c: 7e:4f:d3:9a:c5:87:8b:45:3e:e5:e4:4c:79:55:3e:0e:0f:a3: 70:f4:6a:c2:5e:a6:8f:b0:00:d7:c6:e9:4f:2f:cc:be:4d:59: 8d:86:0d:69:45:18:14:5e:20:67:76:c3:9e:ab:ed:17:05:65: 2f:2b:0c:54:8b:d1:0b:46:8d:4f:e5:17:29:bf:db:0f:ec:99: 27:fc:c5:5c -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEny5Sttnv+qle/hMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2U5ZmMxN2YtMTFiYy00NWRhLWI0YzUtOWMzOGQzOGY1NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid2UA7jnWtMnPx+R/j12pMDypj74mxoCAyj0 eMtPRseSz5IXWWV37qZwSZVnnwpZ6NvRD6GxrOZyG+sSKRrcwkSWX6U4LGJGV8VF tttTXAqBLOhjPqz96t7xTV643CDI1TRzTxe6RM8OvqXlPkRm2Q5STsfEYBqO9WK7 gNg8LT8t03PIBhm7DXltbmJkAdVeRaReBOLAbVgV+tj4Mlq6eagfyp6/Z4lzGrjI IWRQAJf26Cf4toVSCwu761tonAae7ofDdCPjJQ/+8AhvbIyLMN9PkA7oq3pZjxWj gssAWI2lf1QL9kUqS2XexolU/bP8o5NwaB7m6tbdnGB3cqio5QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCQDsBf143iqwMT5ue8qIio6iv7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvYTRlM2I2ZTItYzdkMC0z NDM0LWI3ZDItY2ViY2E2YzJlZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5FwMA0E AgACMAcDBQAmBXNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAH1iATV2U0rAi6t+XaCP9cRC1rYHiGVF4bAt Tqty2TuRP6rG3OI28suxjFE9Py7BuyeI2ojmF9ddyS74n5e4OsOrDJL17NS5YJtE E7otA6NFeyv9mQ41gkQ+UVo4kNAA0Ewf3yqPmpUJ1j71dKNzwjitqiCGPL9j2LHD GIoP69wQC+v63l0GR+8WaK0cV0+M8yYpf6Jn7/SBVUdeqEABqosp/XNHTMr+MzI/ 95fLEfse+S9FPH5P05rFh4tFPuXkTHlVPg4Po3D0asJepo+wANfG6U8vzL5NWY2G DWlFGBReIGd2w56r7RcFZS8rDFSL0QtGjU/lFym/2w/smSf8xVw= -----END CERTIFICATE-----Generated at Sat Jul 5 01:18:33 2025 by rpki-client