$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa File: 07cd9fc5-1051-39bc-bd56-dadd655c312e.roa (raw, json) Hash identifier: 6Akb0sc0Kb8iL6fVVaWUEbFswl0xFD0tOu+y/mcBisA= Subject key identifier: 63:5D:99:D5:78:DD:4A:DC:68:CC:D7:7D:8F:24:70:31:41:9A:63:C1 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285849B57A0F4D08316DA2F1A77580 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 400226 IP address blocks: 23.128.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:0f:4d:08:31:6d:a2:f1:a7:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=d6b91606-9b1b-41ec-bfbf-3e0167fc7fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f7:c4:ca:20:30:89:c3:dc:a7:47:61:d7:6e: a5:77:98:a3:c1:98:de:e1:41:f5:19:7e:5a:59:9e: b3:c5:92:25:28:3c:d7:a0:92:07:c5:90:ed:fd:10: 43:78:a3:f3:f7:f1:ca:9d:96:67:1f:32:c6:ea:d0: cb:60:22:37:09:48:61:39:41:06:61:1a:6c:a8:5e: 73:d2:ec:ad:c5:7a:f9:8e:06:ff:1c:88:79:25:2c: c5:9a:8f:0a:09:5f:4d:72:e2:a7:a9:07:07:f3:49: 3a:a8:d3:1f:da:94:0e:76:0e:50:7f:db:2b:0f:82: d7:cb:e1:68:c7:33:e7:93:0e:06:97:e0:06:75:60: 7d:75:c5:13:da:2f:f9:ed:9f:12:81:a5:27:6b:09: 58:a1:b1:97:01:20:d3:63:7e:66:cf:b2:3b:fc:96: 9e:07:e7:3e:03:d9:4f:75:50:4e:0b:28:cd:28:d7: f3:be:40:76:6c:53:74:e4:5a:d2:f2:fb:dc:35:23: 87:c7:d9:63:59:95:22:b3:cc:7e:38:79:7c:fe:ae: 72:6c:ab:ae:7a:30:cf:d1:b4:66:0b:23:28:02:38: a8:5a:6f:84:c4:22:b3:18:ce:97:79:26:c4:0f:5b: 63:fa:1e:c8:38:de:aa:7e:f3:3d:a1:b8:8c:36:91: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5D:99:D5:78:DD:4A:DC:68:CC:D7:7D:8F:24:70:31:41:9A:63:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:56:07:35:b8:3d:6c:b1:4e:97:e4:14:aa:65:92:fa:02:57: 1b:48:fa:80:b6:bd:14:40:a9:25:39:ee:97:4c:50:59:15:1a: 5d:b1:7f:24:ac:45:34:ad:47:7a:21:20:fc:c2:62:6e:f7:0d: 2f:a3:b5:20:e4:f8:c0:66:5f:70:53:56:ec:72:0c:3c:41:16: 3a:b2:ac:54:d0:24:58:8e:c4:86:37:a3:b0:0a:53:30:27:03: 54:74:e5:ba:6b:79:e6:c2:df:b1:90:f9:3b:79:c4:6e:30:e3: d3:55:45:88:2d:c4:91:b2:b6:c6:9b:4e:cd:f5:c0:0b:66:6b: 85:78:0b:12:60:99:5a:a5:54:49:61:05:a3:30:18:9f:08:2d: e6:a5:da:73:bb:eb:ae:e4:dd:cf:01:22:a1:a6:46:c5:d9:7b: ec:81:57:61:da:78:3a:a4:58:ec:47:3f:fc:95:45:97:30:11: 2d:bf:5f:9a:33:f7:83:9a:b4:b1:64:b6:4b:63:9e:fa:52:a2: da:64:6a:24:2e:35:76:9e:76:5f:55:68:11:24:27:85:43:a7: 4c:33:2a:cd:c0:03:87:17:a4:95:fd:25:39:67:bb:8b:ff:1e: 31:3e:84:e3:0a:b1:52:bf:69:30:a1:a4:07:f1:96:51:c8:d6: d1:02:88:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eg9NCDFtovGndYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZDZiOTE2MDYtOWIxYi00MWVjLWJmYmYtM2UwMTY3ZmM3ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPfEyiAwicPcp0dh126ld5ijwZje4UH1GX5a WZ6zxZIlKDzXoJIHxZDt/RBDeKPz9/HKnZZnHzLG6tDLYCI3CUhhOUEGYRpsqF5z 0uytxXr5jgb/HIh5JSzFmo8KCV9NcuKnqQcH80k6qNMf2pQOdg5Qf9srD4LXy+Fo xzPnkw4Gl+AGdWB9dcUT2i/57Z8SgaUnawlYobGXASDTY35mz7I7/JaeB+c+A9lP dVBOCyjNKNfzvkB2bFN05FrS8vvcNSOHx9ljWZUis8x+OHl8/q5ybKuuejDP0bRm CyMoAjioWm+ExCKzGM6XeSbED1tj+h7ION6qfvM9obiMNpHd8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNdmdV43UrcaMzXfY8kcDFBmmPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDdjZDlmYzUtMTA1MS0z OWJjLWJkNTYtZGFkZDY1NWMzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9WBzW4PWyxTpfkFKplkvoCVxtI+oC2vRRAqSU57pdMUFkVGl2xfySs RTStR3ohIPzCYm73DS+jtSDk+MBmX3BTVuxyDDxBFjqyrFTQJFiOxIY3o7AKUzAn A1R05bpreebC37GQ+Tt5xG4w49NVRYgtxJGytsabTs31wAtma4V4CxJgmVqlVElh BaMwGJ8ILeal2nO7667k3c8BIqGmRsXZe+yBV2HaeDqkWOxHP/yVRZcwES2/X5oz 94OatLFktktjnvpSotpkaiQuNXaedl9VaBEkJ4VDp0wzKs3AA4cXpJX9JTlnu4v/ HjE+hOMKsVK/aTChpAfxllHI1tECiIU= -----END CERTIFICATE-----Generated at Mon May 12 18:39:29 2025 by rpki-client