$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa File: 1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa (raw, json) Hash identifier: 5ZQ3yQNG1a8wRedWddNV04do8h4U0wmMEVGzOaX9f+Y= Subject key identifier: 33:64:20:0E:FF:CC:7A:28:B9:9C:9A:C8:16:7B:88:ED:02:20:69:38 Certificate issuer: /CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0 Certificate serial: 010D0C9F4328584965E97E476BCB0143450E0C60 Authority key identifier: D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 16509 IP address blocks: 23.235.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7e:47:6b:cb:01:43:45:0e:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=b6bbf4bd-d2b1-461a-9526-458ae4536df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6c:8c:69:b9:70:4c:d9:e4:79:eb:57:b5:99: 9e:57:85:b9:36:f4:ec:20:2f:ce:64:88:88:ec:27: 4b:50:f6:e5:e0:3a:73:5b:a5:16:f6:0f:cf:63:53: dd:2c:27:da:8a:42:ab:ea:ac:1c:11:5c:8f:a2:f8: 2d:4c:e3:61:b6:b3:5d:ef:8d:e7:4a:f3:d1:7e:47: af:03:ed:f7:a2:ea:ac:41:d7:ad:7e:96:70:9a:f3: f3:83:94:50:03:c9:2c:73:37:7c:08:c8:8d:4c:ae: fe:85:21:dd:51:b9:b7:bb:ff:5d:3d:a9:0e:84:ff: 86:c5:eb:eb:31:84:36:12:ad:29:db:fc:d1:bc:51: 8b:5e:a4:d9:76:c8:6e:b6:ad:9b:63:e7:2a:d8:54: 22:5f:17:5e:97:ab:7c:bf:c4:ae:03:6a:8c:23:d5: 46:b1:51:17:ff:08:5f:9d:44:99:4d:71:b4:05:52: 11:80:9e:a6:07:41:1d:44:29:94:75:7b:8d:1a:0f: 8c:6b:68:57:3f:af:c8:d7:a9:f2:55:cb:fe:48:10: 33:db:8e:5f:7b:5a:4b:f4:43:97:86:72:47:18:37: 3d:7e:b2:32:53:89:31:c0:06:65:fa:72:55:00:92: b1:fd:c5:a2:d1:44:ba:83:72:aa:c2:91:34:76:d2: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:64:20:0E:FF:CC:7A:28:B9:9C:9A:C8:16:7B:88:ED:02:20:69:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl X509v3 Authority Key Identifier: keyid:D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer sbgp-ipAddrBlock: critical IPv4: 23.235.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ca:46:8f:13:2e:c2:b4:40:b7:42:72:82:76:ef:2d:ea:a1: 50:2f:e3:72:87:ff:6e:11:6e:77:03:35:42:41:e8:40:71:51: f6:99:0b:49:21:cf:3d:70:24:2c:43:fa:c8:64:3e:ae:ca:d4: 13:1b:f0:0f:bf:88:e2:e3:62:c6:d0:2d:69:b9:6b:6c:42:c8: 84:45:ff:65:13:c6:0f:44:e0:60:4f:22:86:6f:af:6c:17:07: 1d:71:be:be:59:41:75:2a:2f:e2:25:4c:93:c4:41:e5:5d:e7: 0e:96:54:1e:b7:a9:71:06:5c:7c:76:d1:04:ee:71:b4:44:80: 31:82:c2:a0:ea:05:52:92:85:7e:a3:71:58:36:8c:5f:51:da: 10:25:13:f6:48:25:0f:13:4c:1b:61:80:0e:74:a8:d9:31:28: 43:80:00:74:0b:03:57:d2:1f:b0:e4:e5:4f:9f:9c:0f:b5:1d: 84:d7:ee:11:fd:46:6c:a2:87:76:8c:91:dd:64:2b:0b:49:d2: 89:0f:90:d4:90:03:ea:7f:12:09:73:2c:51:e6:1a:7f:58:2f: 5a:7b:03:e0:f1:fd:fa:ba:e9:0b:f1:57:6c:99:86:de:a4:56: 5c:2e:2d:e7:9d:d8:c9:48:56:ac:d1:81:67:d9:89:46:59:c8: 31:b7:a3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6X5Ha8sBQ0UODGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQyM2M1YWItZTJlNi00Mjk1LWFiYzctYmUzZmFkMmIy NWIwMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YjZiYmY0YmQtZDJiMS00NjFhLTk1MjYtNDU4YWU0NTM2ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmyMablwTNnkeetXtZmeV4W5NvTsIC/OZIiI 7CdLUPbl4DpzW6UW9g/PY1PdLCfaikKr6qwcEVyPovgtTONhtrNd743nSvPRfkev A+33ouqsQdetfpZwmvPzg5RQA8ksczd8CMiNTK7+hSHdUbm3u/9dPakOhP+Gxevr MYQ2Eq0p2/zRvFGLXqTZdshutq2bY+cq2FQiXxdel6t8v8SuA2qMI9VGsVEX/whf nUSZTXG0BVIRgJ6mB0EdRCmUdXuNGg+Ma2hXP6/I16nyVcv+SBAz245fe1pL9EOX hnJHGDc9frIyU4kxwAZl+nJVAJKx/cWi0US6g3KqwpE0dtKauQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNkIA7/zHoouZyayBZ7iO0CIGk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NDIz YzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNmYWQyYjI1YjAvMWFkNzEzNjktNGVlMi0z YzBmLWFjNzAtNmNkOTUyYjQwNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzQyM2M1YWItZTJlNi00Mjk1LWFi YzctYmUzZmFkMmIyNWIwLzc0MjNjNWFiLWUyZTYtNDI5NS1hYmM3LWJlM2ZhZDJi MjViMC5jcmwwHwYDVR0jBBgwFoAU0CVhDSM+xkzR1NNBlEZH2PBarAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NDIzYzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNm YWQyYjI1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+t+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnKRo8TLsK0QLdCcoJ27y3qoVAv43KH/24RbncDNUJB6EBxUfaZC0kh zz1wJCxD+shkPq7K1BMb8A+/iOLjYsbQLWm5a2xCyIRF/2UTxg9E4GBPIoZvr2wX Bx1xvr5ZQXUqL+IlTJPEQeVd5w6WVB63qXEGXHx20QTucbREgDGCwqDqBVKShX6j cVg2jF9R2hAlE/ZIJQ8TTBthgA50qNkxKEOAAHQLA1fSH7Dk5U+fnA+1HYTX7hH9 Rmyih3aMkd1kKwtJ0okPkNSQA+p/EglzLFHmGn9YL1p7A+Dx/fq66QvxV2yZht6k VlwuLeed2MlIVqzRgWfZiUZZyDG3oxI= -----END CERTIFICATE-----Generated at Sat May 10 22:10:05 2025 by rpki-client