$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa File: 832cfaf4-5d90-3073-8f3f-5764acbc529b.roa (raw, json) Hash identifier: wat/08HUd0TQMSTS0G4go34cSIIG77vVb4bqtu0l+UQ= Subject key identifier: 88:89:F7:CA:6D:17:A1:23:3B:63:77:51:4D:16:8C:69:6B:44:9D:08 Certificate issuer: /CN=791130fd-44cf-4486-92b3-7838b38e49ea Certificate serial: 010D0C9F43285849D2CA272851F845DF01628380 Authority key identifier: F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 401541 IP address blocks: 23.157.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:27:28:51:f8:45:df:01:62:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=791130fd-44cf-4486-92b3-7838b38e49ea Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=877a4cd6-ddee-4af8-afcd-c80fccaf257d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:10:22:95:1b:4a:d1:dd:96:93:92:e4:a9: 0f:8c:cf:6f:43:67:9f:6c:a3:31:17:09:00:f0:82: ba:a8:e7:ab:2b:a1:82:91:2b:a7:3b:43:a5:e8:04: c6:29:61:56:dd:a7:f3:2c:f1:b3:59:b5:6c:0c:58: c2:b2:b4:20:ca:3c:12:ac:ed:3c:39:bd:a4:37:3f: 7e:58:aa:e0:f4:a9:0b:c5:74:6a:72:0d:e5:9c:b3: 1d:2a:d5:f4:de:80:49:ff:77:84:d3:97:0f:92:b1: 07:80:21:53:b3:08:f1:06:3e:e8:94:3c:68:31:92: c0:03:04:5f:bc:aa:67:da:24:3d:bb:a1:f9:f2:43: 20:ed:5c:5f:6f:fb:39:b3:eb:83:88:a7:ac:3c:7a: 60:5f:05:d5:f4:70:c1:c8:45:19:7d:07:57:85:60: ac:31:c6:e9:00:5e:a6:2b:bd:85:a7:da:66:49:11: e2:bc:2d:55:51:cf:f7:5c:c8:70:d1:5d:45:8a:7b: 6d:19:92:4a:12:ee:b2:ff:f5:b3:6e:1e:69:c2:47: eb:ac:16:b9:30:a4:48:dc:3f:1f:5f:18:31:0f:c8: e6:5f:58:24:5c:c5:6d:dd:e5:71:4c:9c:9a:10:ad: 18:4d:b0:ae:d9:57:86:b0:63:7b:0e:45:b5:66:8c: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:89:F7:CA:6D:17:A1:23:3B:63:77:51:4D:16:8C:69:6B:44:9D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl X509v3 Authority Key Identifier: keyid:F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer sbgp-ipAddrBlock: critical IPv4: 23.157.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:60:97:ae:67:2e:e9:b9:65:a9:48:6e:4a:2b:a7:95:84:90: 3a:fd:92:b9:e4:99:8c:cd:e1:c4:e0:9d:16:5a:8c:02:4d:4b: 03:cf:79:1e:f3:a0:17:b2:7e:6e:e3:2e:c3:d6:db:2b:9d:19: 86:24:61:4f:c8:51:41:dd:0a:9c:b4:15:18:9c:4a:6b:b4:af: cb:87:6f:1a:0b:ae:bc:21:ae:1e:fb:5b:f0:a6:00:88:b4:83: b5:4f:fa:84:b4:e4:ca:c8:b0:e9:d8:eb:80:c9:39:27:80:7a: 10:b4:85:cf:46:d8:bb:c5:61:3d:9a:62:be:93:18:60:2f:dd: 86:9a:69:f3:0e:6e:7a:0b:83:51:70:6f:e3:79:f5:2f:be:4c: 05:4f:7e:74:6b:9d:ac:40:6a:91:d1:3b:d8:49:21:44:f3:6d: 0d:0c:87:97:c6:df:a7:b6:3e:c1:60:39:45:3f:39:78:42:c4: e4:57:0c:b5:9a:79:a4:f8:03:62:d6:15:2e:f1:0f:e9:16:ac: a1:76:27:6c:98:c2:be:d3:a6:88:45:25:6d:b1:24:f7:8f:cf: 27:4f:e7:a3:7d:73:d2:c0:98:53:da:2b:c2:fd:6c:60:43:9f: d5:19:b7:50:d7:9f:2b:86:82:71:2b:d3:90:ef:af:ea:f0:f5: 43:0e:2e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyicoUfhF3wFig4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkxMTMwZmQtNDRjZi00NDg2LTkyYjMtNzgzOGIzOGU0 OWVhMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ODc3YTRjZDYtZGRlZS00YWY4LWFmY2QtYzgwZmNjYWYyNTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqUQIpUbStHdlpOS5KkPjM9vQ2efbKMxFwkA 8IK6qOerK6GCkSunO0Ol6ATGKWFW3afzLPGzWbVsDFjCsrQgyjwSrO08Ob2kNz9+ WKrg9KkLxXRqcg3lnLMdKtX03oBJ/3eE05cPkrEHgCFTswjxBj7olDxoMZLAAwRf vKpn2iQ9u6H58kMg7Vxfb/s5s+uDiKesPHpgXwXV9HDByEUZfQdXhWCsMcbpAF6m K72Fp9pmSRHivC1VUc/3XMhw0V1FinttGZJKEu6y//Wzbh5pwkfrrBa5MKRI3D8f XxgxD8jmX1gkXMVt3eVxTJyaEK0YTbCu2VeGsGN7DkW1ZowgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiJ98ptF6EjO2N3UU0WjGlrRJ0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OTEx MzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4YjM4ZTQ5ZWEvODMyY2ZhZjQtNWQ5MC0z MDczLThmM2YtNTc2NGFjYmM1MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzkxMTMwZmQtNDRjZi00NDg2LTky YjMtNzgzOGIzOGU0OWVhLzc5MTEzMGZkLTQ0Y2YtNDQ4Ni05MmIzLTc4MzhiMzhl NDllYS5jcmwwHwYDVR0jBBgwFoAU9A8l1MS3LaNVjWYGlZ7x6c+YBM8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83OTExMzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4 YjM4ZTQ5ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElgl65nLum5ZalIbkorp5WEkDr9krnkmYzN4cTgnRZajAJNSwPPeR7z oBeyfm7jLsPW2yudGYYkYU/IUUHdCpy0FRicSmu0r8uHbxoLrrwhrh77W/CmAIi0 g7VP+oS05MrIsOnY64DJOSeAehC0hc9G2LvFYT2aYr6TGGAv3YaaafMObnoLg1Fw b+N59S++TAVPfnRrnaxAapHRO9hJIUTzbQ0Mh5fG36e2PsFgOUU/OXhCxORXDLWa eaT4A2LWFS7xD+kWrKF2J2yYwr7TpohFJW2xJPePzydP56N9c9LAmFPaK8L9bGBD n9UZt1DXnyuGgnEr05Dvr+rw9UMOLoI= -----END CERTIFICATE-----Generated at Tue Jul 1 00:33:14 2025 by rpki-client