$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa File: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (raw, json) Hash identifier: yXZbvV8fbSLRAPAXcWWYza8qrx0d8MilPSJwAPWusdE= Subject key identifier: FC:46:0D:9E:C9:56:13:9A:92:B3:EB:74:44:74:FE:5F:FF:D4:7F:46 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F43285849D42FB5540AE2DBABABF3B580 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 40205 IP address blocks: 23.189.216.0/24 maxlen: 24 2620:cd:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b5:54:0a:e2:db:ab:ab:f3:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=a5af229b-def2-4e57-a3a3-8625edb48bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:ca:11:de:e0:fc:4e:7a:9e:42:22:54:55: 5f:e4:f0:0e:53:03:29:3b:6e:fb:49:d0:02:c8:d7: c9:16:25:76:01:ae:37:04:26:66:43:4b:e3:43:af: 1c:8a:bc:ea:be:92:7b:d3:bd:c9:36:1d:7f:d4:d2: 6e:02:0b:47:ac:f3:f7:9c:2b:67:9c:d3:e1:ec:f0: 9f:29:50:c9:29:3a:65:94:1d:3f:36:94:3e:67:f5: bf:1b:b8:bc:f7:57:b2:d1:9f:ed:c5:91:a6:45:40: c7:eb:ab:e3:0d:0e:bb:27:61:c1:04:02:c6:e7:5d: 0b:5e:43:19:61:3f:51:45:d2:b4:4c:95:e6:92:1e: e1:91:18:cd:52:94:fb:16:43:d7:ec:bb:53:ee:97: cb:ae:bf:2e:14:e0:d8:d0:ea:61:3c:90:d4:43:84: b7:41:72:ee:df:54:11:84:39:34:c6:c2:1c:d3:00: 69:bf:70:c5:eb:cd:86:4b:56:ae:ae:e7:0c:d6:db: 16:ec:01:28:65:9c:8a:4b:07:47:3b:e5:31:25:d6: 65:2a:a1:e1:e6:d6:0d:49:cc:09:37:0c:a9:74:11: ab:5b:1d:0e:1f:d9:cd:e8:48:f9:31:8b:a5:f2:31: dd:d0:69:bf:fd:31:ef:6c:66:07:1a:a0:1a:dd:24: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:46:0D:9E:C9:56:13:9A:92:B3:EB:74:44:74:FE:5F:FF:D4:7F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: 23.189.216.0/24 IPv6: 2620:cd:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:56:9e:7e:52:75:6d:6b:f1:42:20:6e:06:64:fd:89:61:ef: 6a:c3:da:68:46:ba:d3:d0:56:11:ba:5d:7b:3f:99:95:8b:cb: 69:5e:72:9f:2b:ba:ae:db:f0:1a:35:c1:22:37:54:6d:19:12: 74:69:4c:ce:f7:61:82:d2:4d:17:a6:28:40:b6:70:77:c5:9b: b3:8d:b4:8f:c3:a0:8e:82:b5:7b:bd:91:cb:7c:00:7f:e3:4c: 41:96:21:f1:4c:ab:1d:8c:19:10:fd:27:53:9b:1c:d7:45:58: b1:f5:5c:e7:2a:52:0b:eb:9d:f6:df:06:8a:bd:c1:6b:00:33: f6:66:b5:15:e6:67:92:22:5d:05:bf:81:fc:54:ca:5f:6d:68: ab:7c:ee:b2:d0:ba:fa:e2:3b:f4:41:59:13:21:b3:53:d0:a0: fd:c8:2a:e6:1c:a1:ba:21:e0:d1:32:2d:cb:5b:ec:d3:77:8a: b5:3b:47:89:ef:d2:47:78:6f:3f:19:af:d9:ad:8f:49:c8:90: 5f:3a:0b:a3:22:54:42:a2:f4:81:91:a2:55:52:ac:36:77:39: 91:13:74:22:d6:3e:5b:0b:de:a9:32:89:5f:ad:13:aa:cc:33: 97:72:60:44:f3:1c:fa:13:3b:ce:7d:c6:ab:a4:48:73:f2:d3: 9c:b1:b5:48 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnUL7VUCuLbq6vztYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTVhZjIyOWItZGVmMi00ZTU3LWEzYTMtODYyNWVkYjQ4YmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqODKEd7g/E56nkIiVFVf5PAOUwMpO277SdAC yNfJFiV2Aa43BCZmQ0vjQ68cirzqvpJ7073JNh1/1NJuAgtHrPP3nCtnnNPh7PCf KVDJKTpllB0/NpQ+Z/W/G7i891ey0Z/txZGmRUDH66vjDQ67J2HBBALG510LXkMZ YT9RRdK0TJXmkh7hkRjNUpT7FkPX7LtT7pfLrr8uFODY0OphPJDUQ4S3QXLu31QR hDk0xsIc0wBpv3DF682GS1aurucM1tsW7AEoZZyKSwdHO+UxJdZlKqHh5tYNScwJ NwypdBGrWx0OH9nN6Ej5MYul8jHd0Gm//THvbGYHGqAa3SRe/wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPxGDZ7JVhOakrPrdER0/l//1H9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMDU0NWM4ZDgtMmJlNS0z ODcyLThmYTEtNTU2NjhkMWYxOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF73YMA8E AgACMAkDBwAmIADNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPlaeflJ1bWvxQiBuBmT9iWHvasPaaEa6 09BWEbpdez+ZlYvLaV5ynyu6rtvwGjXBIjdUbRkSdGlMzvdhgtJNF6YoQLZwd8Wb s420j8OgjoK1e72Ry3wAf+NMQZYh8UyrHYwZEP0nU5sc10VYsfVc5ypSC+ud9t8G ir3BawAz9ma1FeZnkiJdBb+B/FTKX21oq3zustC6+uI79EFZEyGzU9Cg/cgq5hyh uiHg0TIty1vs03eKtTtHie/SR3hvPxmv2a2PSciQXzoLoyJUQqL0gZGiVVKsNnc5 kRN0ItY+WwveqTKJX60Tqswzl3JgRPMc+hM7zn3Gq6RIc/LTnLG1SA== -----END CERTIFICATE-----Generated at Wed May 14 15:43:38 2025 by rpki-client