$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa File: 4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (raw, json) Hash identifier: vr0y8YQjsOAwasCEq7JYNJHGChAFOHEP8XCO8MmBHSo= Subject key identifier: 7B:EB:AD:09:81:CC:1C:E4:A7:F6:4E:5E:68:8B:86:59:43:30:3B:8F Certificate issuer: /CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Certificate serial: 010D0C9F4328584913AC1AE1360946F0259E6A80 Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 400142 IP address blocks: 23.191.176.0/24 maxlen: 24 2602:fc99::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1a:e1:36:09:46:f0:25:9e:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=d86be4b8-ff3b-4473-a4da-2d97a6bc5f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:c4:46:77:37:c0:04:25:8e:bf:98:35:3b: b5:4e:c9:04:43:55:3f:a3:b0:35:d8:b1:c7:96:58: de:6b:1d:02:56:17:e2:3c:80:e2:5a:48:ad:81:85: 95:cc:a2:68:33:7c:e6:78:7e:77:f0:60:4e:3a:44: d9:0f:d8:73:1c:2a:ca:47:03:1a:61:a8:be:74:83: 0a:4e:60:c9:e7:81:cf:7c:c5:1d:98:af:a1:30:09: fb:10:65:f9:11:06:a9:a0:6d:34:bd:fb:6b:58:4d: de:00:21:42:0e:dd:72:c8:d9:88:4c:e9:09:d7:e0: 03:ff:7e:27:38:78:a5:cb:d8:61:c5:ae:58:48:1f: 0f:64:fc:a8:6b:1e:89:3a:97:80:94:40:4f:a5:ba: 80:88:a5:4f:3a:10:1c:82:e7:b2:9d:e3:0c:68:3a: 33:ec:5c:51:61:b0:c7:42:49:69:d7:76:1f:9c:a3: 46:f6:44:d8:ef:71:90:25:a6:f7:34:af:50:2f:02: c2:79:ac:2f:86:e9:06:00:f6:52:61:5f:ad:1a:77: 40:d0:3e:e4:df:f5:c8:e0:fa:41:b1:97:01:36:06: 29:84:5b:d2:26:d0:04:a2:b1:52:01:9d:96:9a:cd: ba:31:e0:8e:1b:26:b2:9b:0b:74:74:93:95:53:09: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:AD:09:81:CC:1C:E4:A7:F6:4E:5E:68:8B:86:59:43:30:3B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl X509v3 Authority Key Identifier: keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer sbgp-ipAddrBlock: critical IPv4: 23.191.176.0/24 IPv6: 2602:fc99::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:67:9e:31:26:b1:11:d7:94:7d:1a:67:bc:12:c8:33:cb:f5: ed:2c:16:26:2c:0e:70:22:4c:ee:ad:1e:e2:aa:60:d1:3e:a2: 11:da:51:06:ab:81:8a:30:34:a6:3f:89:5b:8d:29:c4:10:df: cf:0b:6d:5f:3c:c9:25:06:b8:ce:d3:2c:3a:c6:cc:74:a5:01: d1:f8:28:2c:2d:80:25:89:88:3e:e4:a7:36:7b:75:63:e3:ce: 86:a7:5b:69:05:3f:45:03:55:8f:20:3e:71:52:ea:4a:d4:81: c7:cc:dd:d7:3d:23:ba:c4:51:57:d0:5a:cd:a7:21:79:de:15: ef:94:3b:83:eb:cd:89:9a:58:8a:e5:2d:b8:c6:6b:b1:92:66: b2:7d:06:3d:b3:05:c2:85:87:09:4b:7f:0b:e3:14:a1:6a:34: 83:97:38:9f:ce:22:39:26:6b:0b:64:4d:5b:be:ef:00:73:15: be:32:e7:fe:50:44:43:ee:bd:c4:26:e4:68:83:b0:a0:55:86: 4c:56:e6:31:37:36:57:40:be:1f:85:7b:50:f4:16:80:51:99: 46:08:dd:7c:f8:8f:e6:ca:44:c9:97:5b:71:7a:5d:7a:0c:2c: af:b1:eb:a8:b1:61:1f:15:1d:e0:e2:52:9e:21:a0:dc:5b:a0: a2:d3:5a:1e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkTrBrhNglG8CWeaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyYWU0OGYtNDc1Yi00MmIzLTlhNTYtY2U4ODUyNTE1 MDU1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDg2YmU0YjgtZmYzYi00NDczLWE0ZGEtMmQ5N2E2YmM1ZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK3ERnc3wAQljr+YNTu1TskEQ1U/o7A12LHH lljeax0CVhfiPIDiWkitgYWVzKJoM3zmeH538GBOOkTZD9hzHCrKRwMaYai+dIMK TmDJ54HPfMUdmK+hMAn7EGX5EQapoG00vftrWE3eACFCDt1yyNmITOkJ1+AD/34n OHily9hhxa5YSB8PZPyoax6JOpeAlEBPpbqAiKVPOhAcgueyneMMaDoz7FxRYbDH Qklp13YfnKNG9kTY73GQJab3NK9QLwLCeawvhukGAPZSYV+tGndA0D7k3/XI4PpB sZcBNgYphFvSJtAEorFSAZ2Wms26MeCOGyaymwt0dJOVUwmthwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHvrrQmBzBzkp/ZOXmiLhllDMDuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJh ZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4NTI1MTUwNTUvNGExOWMwNjItZDIyNy0z MWQ3LWIwZGMtMmY1MjU1NjdkM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmMyYWU0OGYtNDc1Yi00MmIzLTlh NTYtY2U4ODUyNTE1MDU1LzJjMmFlNDhmLTQ3NWItNDJiMy05YTU2LWNlODg1MjUx NTA1NS5jcmwwHwYDVR0jBBgwFoAUhBs1SSOEDxgolRUcg9Kc2jDt5EwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJhZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4 NTI1MTUwNTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+wMA4E AgACMAgDBgQmAvyZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIZ54xJrER15R9Gme8Esgzy/XtLBYmLA5w IkzurR7iqmDRPqIR2lEGq4GKMDSmP4lbjSnEEN/PC21fPMklBrjO0yw6xsx0pQHR +CgsLYAliYg+5Kc2e3Vj486Gp1tpBT9FA1WPID5xUupK1IHHzN3XPSO6xFFX0FrN pyF53hXvlDuD682JmliK5S24xmuxkmayfQY9swXChYcJS38L4xShajSDlzifziI5 JmsLZE1bvu8AcxW+Muf+UERD7r3EJuRog7CgVYZMVuYxNzZXQL4fhXtQ9BaAUZlG CN18+I/mykTJl1txel16DCyvseuosWEfFR3g4lKeIaDcW6Ci01oe -----END CERTIFICATE-----Generated at Wed May 14 00:25:43 2025 by rpki-client