$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/c4eecb44-9468-327d-a4e0-79328177a32f.roa File: c4eecb44-9468-327d-a4e0-79328177a32f.roa (raw, json) Hash identifier: GQ1OJhnSf3E/xj8rmkFc08JFO0aujfmzf629/TIzkVo= Subject key identifier: 9C:D1:B7:66:7B:7A:9E:26:2A:5D:A7:05:47:E1:E3:19:A2:9B:B6:A7 Certificate issuer: /CN=161b8b27-7c5e-4f07-9903-b425ee9ea1a3 Certificate serial: 010D0C9F43285849C79F67703F7B75387581C000 Authority key identifier: 3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/c4eecb44-9468-327d-a4e0-79328177a32f.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 23.189.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:67:70:3f:7b:75:38:75:81:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161b8b27-7c5e-4f07-9903-b425ee9ea1a3 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=ba5e6e8b-716e-4596-8006-ef4c3307cbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:bc:e5:8c:a7:d8:c5:03:ee:b3:af:48:ae: fa:e4:d3:b9:e2:75:ab:03:c8:a2:ac:fe:55:70:f6: 64:a5:42:6a:64:dd:63:97:e3:72:d1:3f:b3:7e:b2: fc:25:7e:88:04:51:67:7a:27:3e:4d:ac:17:e5:eb: f0:a7:dc:f9:dd:ec:e8:d9:9d:2f:a1:93:a5:9c:6b: a0:dd:c0:57:c8:2c:a1:15:e1:a2:26:ef:cd:0c:e0: 10:6d:fd:c7:de:e3:cb:60:28:53:ea:f1:ec:d9:87: ed:42:fd:25:92:55:b3:1e:3e:8d:9e:53:87:53:32: b1:af:14:c9:8f:97:70:0c:30:c9:c4:81:9a:99:d6: 93:92:63:fd:e4:0f:a4:b1:19:9b:f5:3b:01:67:51: 5f:af:0a:ff:65:ac:09:22:e6:59:08:c3:85:ed:14: 8c:2f:83:f1:aa:24:3d:c7:ae:d8:d4:ed:4a:0e:ba: 2b:db:67:4c:e0:6b:28:ec:dd:0e:ec:ba:0f:1b:e2: ff:50:2e:5f:d1:ca:59:54:78:fd:d6:07:45:30:d4: b6:42:65:39:d0:0c:ff:40:04:5d:9e:ca:29:c1:ae: 4e:4c:e0:7a:af:3c:32:a4:23:2f:de:50:45:85:de: 32:d7:14:45:74:0b:7e:ac:0a:e5:76:4c:1d:86:3e: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:B7:66:7B:7A:9E:26:2A:5D:A7:05:47:E1:E3:19:A2:9B:B6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/c4eecb44-9468-327d-a4e0-79328177a32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl X509v3 Authority Key Identifier: keyid:3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer sbgp-ipAddrBlock: critical IPv4: 23.189.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1b:69:26:99:72:69:6a:0a:36:16:4c:a8:07:10:30:0a:99: a5:21:07:87:10:6a:29:70:07:bf:96:74:28:20:8c:aa:d1:e2: 75:c8:32:e6:9e:84:12:8c:95:de:20:c8:aa:14:70:f4:42:7c: 3d:54:28:b3:86:b5:74:1c:01:79:4e:1b:c9:50:bd:ab:42:5b: 64:ad:cc:c3:a2:83:d5:1e:99:51:1e:d1:a4:33:c4:54:ee:76: 83:e7:cb:53:80:5e:cf:33:bb:a7:b2:6e:58:af:8c:0a:f1:a6: 19:b6:79:07:94:6a:01:18:93:25:39:5c:42:06:b3:89:f7:6a: b6:13:18:71:0f:6c:a0:12:d1:59:a7:0a:3f:4f:a0:db:0c:7a: ce:b5:55:40:54:f0:fa:05:18:28:84:73:0f:a7:8e:3f:a7:14: f7:8a:66:98:99:79:af:20:61:ee:43:c4:fb:99:8b:f3:f3:5a: 6f:c9:ce:1d:da:81:58:f3:e9:61:5f:e2:2e:0a:87:2b:77:33: a1:e4:8a:2a:4f:69:be:57:47:d4:a8:a9:71:f6:23:78:ed:09: 75:62:e6:d9:8a:a5:b7:de:34:4e:bc:cd:3d:9e:e3:b5:3c:77: ed:fc:57:41:0a:e1:1b:a2:23:1f:72:ca:6f:86:d5:71:63:35: 1a:2c:e6:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2dwP3t1OHWBwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYxYjhiMjctN2M1ZS00ZjA3LTk5MDMtYjQyNWVlOWVh MWEzMB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk YmE1ZTZlOGItNzE2ZS00NTk2LTgwMDYtZWY0YzMzMDdjYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMi85Yyn2MUD7rOvSK765NO54nWrA8iirP5V cPZkpUJqZN1jl+Ny0T+zfrL8JX6IBFFneic+TawX5evwp9z53ezo2Z0voZOlnGug 3cBXyCyhFeGiJu/NDOAQbf3H3uPLYChT6vHs2YftQv0lklWzHj6NnlOHUzKxrxTJ j5dwDDDJxIGamdaTkmP95A+ksRmb9TsBZ1Ffrwr/ZawJIuZZCMOF7RSML4PxqiQ9 x67Y1O1KDror22dM4Gso7N0O7LoPG+L/UC5f0cpZVHj91gdFMNS2QmU50Az/QARd nsopwa5OTOB6rzwypCMv3lBFhd4y1xRFdAt+rArldkwdhj7uJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzRt2Z7ep4mKl2nBUfh4xmim7anMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNjFi OGIyNy03YzVlLTRmMDctOTkwMy1iNDI1ZWU5ZWExYTMvYzRlZWNiNDQtOTQ2OC0z MjdkLWE0ZTAtNzkzMjgxNzdhMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTYxYjhiMjctN2M1ZS00ZjA3LTk5 MDMtYjQyNWVlOWVhMWEzLzE2MWI4YjI3LTdjNWUtNGYwNy05OTAzLWI0MjVlZTll YTFhMy5jcmwwHwYDVR0jBBgwFoAUO2tLi+c+KqDXWvN+ilZy2VtYaZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNjFiOGIyNy03YzVlLTRmMDctOTkwMy1iNDI1 ZWU5ZWExYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF70oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcbaSaZcmlqCjYWTKgHEDAKmaUhB4cQailwB7+WdCggjKrR4nXIMuae hBKMld4gyKoUcPRCfD1UKLOGtXQcAXlOG8lQvatCW2StzMOig9UemVEe0aQzxFTu doPny1OAXs8zu6eyblivjArxphm2eQeUagEYkyU5XEIGs4n3arYTGHEPbKAS0Vmn Cj9PoNsMes61VUBU8PoFGCiEcw+njj+nFPeKZpiZea8gYe5DxPuZi/PzWm/Jzh3a gVjz6WFf4i4Khyt3M6HkiipPab5XR9SoqXH2I3jtCXVi5tmKpbfeNE68zT2e47U8 d+38V0EK4RuiIx9yym+G1XFjNRos5t4= -----END CERTIFICATE-----Generated at Sun May 11 02:04:32 2025 by rpki-client