$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa File: 571cbfab-46db-38c9-9e6c-a6d9b7760005.roa (raw, json) Hash identifier: trqZMddsHVHYw+K6MYJ130LiHEl41xWlciAYvYRfZGI= Subject key identifier: 6F:39:C0:36:01:D9:D4:2A:0D:7B:C3:07:50:2D:EE:D5:7A:84:C7:D8 Certificate issuer: /CN=d6301b93-7acb-4494-b07b-a79f8d7740ea Certificate serial: 010D0C9F432858490E16C82EE90AED0A31730800 Authority key identifier: C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 63023 IP address blocks: 23.154.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c8:2e:e9:0a:ed:0a:31:73:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6301b93-7acb-4494-b07b-a79f8d7740ea Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=8a3b51b9-9f72-4e1d-8dea-60920f7dd543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:b0:30:2c:ca:95:67:14:98:b9:bd:7b:4d: 6e:97:42:a5:01:d1:c9:52:fe:42:8b:e9:3d:40:f6: e2:41:c5:22:9e:8f:82:c3:e9:5e:39:c8:8d:74:a9: de:0a:ff:95:dd:41:e4:4b:54:21:2c:66:ac:c1:17: 6d:b1:f5:75:94:8e:66:6b:7f:62:ff:ed:3f:a3:cc: c9:1a:c2:c2:78:f3:4e:88:19:c5:c3:c8:21:41:92: 9d:19:6f:01:7b:19:79:91:44:cf:fd:a3:74:a8:89: 42:c1:88:90:98:8f:4b:99:70:17:93:ac:12:78:a7: 11:11:bd:5f:9e:9a:ea:da:ca:f6:a0:9f:16:d8:13: 42:55:48:41:e7:f5:79:94:da:1c:9c:20:05:6f:00: 3c:14:c0:6b:e7:96:7a:4a:af:bf:03:d6:73:e5:26: 70:3d:5c:29:5a:10:8b:c3:73:d5:05:50:f9:56:1f: c6:fa:e9:8b:eb:9f:b7:f9:d8:0a:9a:5c:64:cb:ec: c7:22:61:9b:82:43:60:75:25:fe:22:83:dd:ba:22: 93:4b:6a:63:36:db:85:bd:3b:61:89:ce:5f:ca:85: 22:a0:80:a1:ab:64:b8:dc:8a:12:0d:7f:74:6d:31: 53:89:9b:c6:25:45:bb:18:e1:06:d8:61:89:3d:1d: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:39:C0:36:01:D9:D4:2A:0D:7B:C3:07:50:2D:EE:D5:7A:84:C7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.crl X509v3 Authority Key Identifier: keyid:C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer sbgp-ipAddrBlock: critical IPv4: 23.154.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c6:54:b0:ca:80:0a:3f:0b:82:ea:87:50:54:92:25:f6:fe: e2:23:90:4b:0b:33:2a:92:8a:e3:3d:23:b6:da:81:bb:c6:e6: db:3a:74:c0:9d:a9:6e:03:6b:2b:75:35:7c:b6:23:24:d3:36: 44:23:04:6f:8e:ff:81:39:36:9f:ee:f4:4e:c1:bc:0f:18:b6: 6e:c6:1e:90:2e:21:aa:2b:d0:7e:76:ca:05:1b:a1:c8:3a:5e: d2:55:7a:11:5d:c0:75:d5:22:d7:a2:5e:0f:27:92:67:d2:cb: 7e:78:82:80:9b:f8:aa:da:4e:d4:51:95:5f:5f:ec:c2:17:d3: 24:f1:d0:b3:da:c5:66:58:e6:0f:55:8e:ef:89:53:0c:50:34: 66:08:f7:3b:17:76:10:34:b6:1f:1d:0a:a7:89:75:3e:07:a3: 91:b6:dd:38:bf:9d:55:a6:0f:28:43:79:99:90:33:d4:a4:0b: 6c:ca:26:ba:4b:13:14:5e:e3:cf:e9:46:e8:4e:76:f7:5f:94: 5b:d7:0e:8c:a4:1f:40:c9:a0:ca:2a:94:01:49:8d:b3:e3:a5: 0b:f7:06:41:ba:9c:db:68:79:88:b0:b0:29:23:12:ee:02:62: 88:3a:19:1b:c5:93:dd:f8:b8:b3:83:c3:0d:ce:c0:cf:bc:6e: b6:65:33:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsgu6QrtCjFzCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDYzMDFiOTMtN2FjYi00NDk0LWIwN2ItYTc5ZjhkNzc0 MGVhMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OGEzYjUxYjktOWY3Mi00ZTFkLThkZWEtNjA5MjBmN2RkNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLWwMCzKlWcUmLm9e01ul0KlAdHJUv5Ci+k9 QPbiQcUino+Cw+leOciNdKneCv+V3UHkS1QhLGaswRdtsfV1lI5ma39i/+0/o8zJ GsLCePNOiBnFw8ghQZKdGW8Bexl5kUTP/aN0qIlCwYiQmI9LmXAXk6wSeKcREb1f nprq2sr2oJ8W2BNCVUhB5/V5lNocnCAFbwA8FMBr55Z6Sq+/A9Zz5SZwPVwpWhCL w3PVBVD5Vh/G+umL65+3+dgKmlxky+zHImGbgkNgdSX+IoPduiKTS2pjNtuFvTth ic5fyoUioIChq2S43IoSDX90bTFTiZvGJUW7GOEG2GGJPR0f4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG85wDYB2dQqDXvDB1At7tV6hMfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNjMw MWI5My03YWNiLTQ0OTQtYjA3Yi1hNzlmOGQ3NzQwZWEvNTcxY2JmYWItNDZkYi0z OGM5LTllNmMtYTZkOWI3NzYwMDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDYzMDFiOTMtN2FjYi00NDk0LWIw N2ItYTc5ZjhkNzc0MGVhL2Q2MzAxYjkzLTdhY2ItNDQ5NC1iMDdiLWE3OWY4ZDc3 NDBlYS5jcmwwHwYDVR0jBBgwFoAUycU8NOgCb+IFH+NKU+mFZ9+3LdQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNjMwMWI5My03YWNiLTQ0OTQtYjA3Yi1hNzlm OGQ3NzQwZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXGVLDKgAo/C4Lqh1BUkiX2/uIjkEsLMyqSiuM9I7bagbvG5ts6dMCd qW4Dayt1NXy2IyTTNkQjBG+O/4E5Np/u9E7BvA8Ytm7GHpAuIaor0H52ygUbocg6 XtJVehFdwHXVIteiXg8nkmfSy354goCb+KraTtRRlV9f7MIX0yTx0LPaxWZY5g9V ju+JUwxQNGYI9zsXdhA0th8dCqeJdT4Ho5G23Ti/nVWmDyhDeZmQM9SkC2zKJrpL ExRe48/pRuhOdvdflFvXDoykH0DJoMoqlAFJjbPjpQv3BkG6nNtoeYiwsCkjEu4C Yog6GRvFk934uLODww3OwM+8brZlM1s= -----END CERTIFICATE-----Generated at Mon May 5 19:49:59 2025 by rpki-client