$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa File: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (raw, json) Hash identifier: Qe6NyKI7uCbDTq0wlXLJEO06xsg4XcM57tDCcDJ836M= Subject key identifier: DF:55:C0:4E:9E:FE:C5:DB:DA:37:61:0C:5A:E8:B9:5E:92:57:24:60 Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F43285849D42FB002CE3AB5564AAD1600 Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 55077 IP address blocks: 23.128.208.0/24 maxlen: 24 103.25.230.0/24 maxlen: 24 104.36.4.0/22 maxlen: 22 198.44.204.0/22 maxlen: 22 2602:ff31::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b0:02:ce:3a:b5:56:4a:ad:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=0444883a-4d9f-497a-a893-33912204102d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:97:d4:b8:8b:bb:0d:ff:d6:21:bf:90:87: 43:b6:a2:57:3a:a1:2f:aa:a7:c2:fd:44:75:29:1f: c9:f5:2e:77:af:2b:a3:82:2c:a0:f7:ec:a6:5c:b2: 75:8f:93:8c:72:31:da:ec:50:c3:88:2f:1f:30:0c: ae:cf:32:ed:8e:ef:25:c9:cc:66:5f:c9:50:c1:66: cb:6f:23:71:db:71:c5:57:e0:bc:25:38:1e:f1:c8: 6c:38:ab:ad:78:87:5f:28:0a:bf:84:b5:14:23:01: d8:06:04:08:9b:ed:26:e2:c3:46:c9:97:e3:59:e2: 22:0a:0e:cd:94:aa:d4:5e:4b:c8:46:84:e2:16:f2: ff:79:16:3b:f8:3a:37:39:66:76:13:b0:63:c4:a7: 1f:9a:79:0c:4b:a8:5d:27:45:81:ba:ff:b9:76:43: 42:71:7e:c2:0b:ff:88:49:89:fa:65:c2:c9:bf:ec: 80:1d:7f:92:5d:f8:93:94:4d:67:36:8a:3e:e5:5c: 21:09:70:ee:1f:da:b2:fe:95:96:29:9c:42:c5:a1: 5f:28:cc:dd:6a:58:be:44:22:f9:b9:85:4e:3d:92: 30:ba:73:f6:9f:b3:47:42:6e:94:4f:8d:37:0e:3c: d6:52:ca:71:95:35:96:2f:40:58:cc:70:3e:c9:c4: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:55:C0:4E:9E:FE:C5:DB:DA:37:61:0C:5A:E8:B9:5E:92:57:24:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: 23.128.208.0/24 103.25.230.0/24 104.36.4.0/22 198.44.204.0/22 IPv6: 2602:ff31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:93:db:06:06:1e:6f:e3:1a:34:3a:8b:42:fb:97:26:6b:52: 47:32:f5:14:f2:60:1a:ac:9b:20:40:b5:0a:41:a4:cb:dc:58: d6:b9:24:1d:f4:f2:a2:de:05:f7:a3:7b:b4:21:c9:51:b6:e4: 7e:6b:dc:2f:34:1d:f3:fc:f8:74:83:4e:cd:c2:78:7a:ff:db: a0:90:41:68:7d:d9:e2:f2:07:f6:28:47:86:a2:38:a6:79:e0: 1b:76:cf:2f:14:b1:b7:a1:c3:a5:0f:fd:f6:b7:0e:94:a2:c4: 08:7b:38:ea:36:fc:2b:d7:7d:e5:68:36:b1:f6:b8:ca:57:d3: fc:91:82:a8:78:db:6b:a0:c7:9b:fe:e8:56:99:c5:1a:ed:e8: 9e:47:09:1e:5f:ed:5e:4d:f2:fb:cb:f8:48:f2:0e:d9:84:3a: a8:7c:69:c2:90:43:2b:d8:35:34:f1:12:6c:47:8d:10:40:73: 53:32:64:75:71:ed:3c:27:40:3d:52:94:56:48:49:ce:ea:6c: 03:de:40:ea:e4:f0:3b:55:7c:5f:21:66:51:39:bd:b7:4c:09: 7f:ff:84:6e:be:d6:98:ee:8f:c9:38:3a:bd:5d:28:5c:0e:4c: ef:19:b1:fa:cb:16:55:69:db:75:fc:ef:89:1a:8d:72:d7:50: be:6c:0b:f9 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEnUL7ACzjq1VkqtFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDQ0NDg4M2EtNGQ5Zi00OTdhLWE4OTMtMzM5MTIyMDQxMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNaX1LiLuw3/1iG/kIdDtqJXOqEvqqfC/UR1 KR/J9S53ryujgiyg9+ymXLJ1j5OMcjHa7FDDiC8fMAyuzzLtju8lycxmX8lQwWbL byNx23HFV+C8JTge8chsOKuteIdfKAq/hLUUIwHYBgQIm+0m4sNGyZfjWeIiCg7N lKrUXkvIRoTiFvL/eRY7+Do3OWZ2E7BjxKcfmnkMS6hdJ0WBuv+5dkNCcX7CC/+I SYn6ZcLJv+yAHX+SXfiTlE1nNoo+5VwhCXDuH9qy/pWWKZxCxaFfKMzdali+RCL5 uYVOPZIwunP2n7NHQm6UT403DjzWUspxlTWWL0BYzHA+ycTWqwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFN9VwE6e/sXb2jdhDFrouV6SVyRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvOTFlYzFiOWEtNTMxOC0z YjBiLThkMGQtMTgxODNlNzFlOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAF4DQAwQA ZxnmAwQCaCQEAwQCxizMMA4EAgACMAgDBgQmAv8xADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBek9sGBh5v 4xo0OotC+5cma1JHMvUU8mAarJsgQLUKQaTL3FjWuSQd9PKi3gX3o3u0IclRtuR+ a9wvNB3z/Ph0g07Nwnh6/9ugkEFofdni8gf2KEeGojimeeAbds8vFLG3ocOlD/32 tw6UosQIezjqNvwr133laDax9rjKV9P8kYKoeNtroMeb/uhWmcUa7eieRwkeX+1e TfL7y/hI8g7ZhDqofGnCkEMr2DU08RJsR40QQHNTMmR1ce08J0A9UpRWSEnO6mwD 3kDq5PA7VXxfIWZROb23TAl//4RuvtaY7o/JODq9XShcDkzvGbH6yxZVadt1/O+J Go1y11C+bAv5 -----END CERTIFICATE-----Generated at Thu May 15 11:13:26 2025 by rpki-client