$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa File: cf670401-9d4b-3637-856f-5c947821a74c.roa (raw, json) Hash identifier: P9a6IJ1sUsBVwq0PDokDFAoijU3fi/HvVEKaRFc9H5I= Subject key identifier: 54:B3:0A:BC:67:84:17:39:90:B2:57:99:B9:09:24:1B:F4:4E:8B:64 Certificate issuer: /CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Certificate serial: 010D0C9F43285849D16514BA4B00C9E534B57200 Authority key identifier: F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 15333 IP address blocks: 23.189.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:14:ba:4b:00:c9:e5:34:b5:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=7456ff61-1f6a-462c-b851-1c896f25bf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:67:8f:62:6b:07:e2:07:5f:b9:34:2f:9f: 61:7f:25:83:e2:b7:60:7b:55:f7:48:a7:56:8c:57: 27:f1:cc:42:31:91:e6:08:ff:91:f5:f6:cc:96:76: c1:c1:09:7b:a6:bc:2f:e9:60:d4:fa:8f:c6:a5:2f: 41:ae:fb:8c:64:75:ec:8e:41:cf:d9:23:22:b0:63: 46:08:99:99:54:62:bb:90:0c:c0:5b:05:21:2a:20: a9:89:76:05:66:ee:c2:ee:a5:03:00:9e:ad:a1:76: 74:82:5f:62:3d:f0:1d:63:81:8f:e5:09:01:86:28: 3e:42:8f:63:f9:46:4a:1c:7e:79:bf:74:87:19:74: 75:f5:a3:a3:f0:3a:e1:9e:89:ab:cf:56:87:86:b0: 03:4e:d9:20:32:2b:f8:ac:41:d3:aa:b8:2f:1c:7d: fd:90:06:67:ae:2a:bf:19:ce:19:66:40:c1:b6:cb: 5c:a4:49:5e:ce:01:73:93:3c:95:5e:4b:02:c0:81: c8:69:4a:31:2b:a1:56:ac:c5:f0:86:77:df:96:e9: 19:45:e4:98:4c:e2:e8:f0:63:6a:05:c0:0a:84:72: 83:b5:1d:19:e9:9f:7f:33:48:af:85:b9:e3:dc:7c: c9:87:35:ca:83:35:38:1d:f5:c7:42:b9:97:fc:fe: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B3:0A:BC:67:84:17:39:90:B2:57:99:B9:09:24:1B:F4:4E:8B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl X509v3 Authority Key Identifier: keyid:F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer sbgp-ipAddrBlock: critical IPv4: 23.189.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:95:36:0d:dc:d8:aa:ee:b0:45:a7:b0:3c:0a:41:49:50:99: b1:ec:b8:66:bc:48:42:2b:9e:a7:d8:9d:1e:cd:7b:9a:0b:70: 6e:95:ce:94:95:1f:f8:c4:49:46:70:7a:3b:7e:43:3d:16:c0: 4c:8f:43:75:65:25:84:c6:bb:ea:46:4f:42:39:18:ad:8b:8a: a8:33:c1:6f:39:c1:8f:a7:64:06:44:10:f0:2e:30:6b:f3:49: ef:e8:81:23:7f:9c:bc:88:48:24:f2:ec:30:f1:a7:d9:e6:e1: 8f:e3:15:09:5b:0b:1c:b4:e1:b1:1f:e4:3d:42:a8:12:21:d4: 57:43:87:36:ca:8f:ed:89:df:f2:95:73:74:77:4b:07:95:d6: e7:54:e6:40:7e:29:42:01:bb:62:ee:82:82:19:df:80:3c:90: 56:41:f9:31:05:fa:03:6c:5a:99:bc:3e:e7:c3:3f:87:6d:63: c0:ba:74:21:28:6b:76:49:86:4c:9e:c9:fa:89:bc:93:7a:cb: ff:a5:47:b5:b0:36:f6:9c:e7:4c:7d:b5:1c:ce:59:cb:af:d0: 16:0f:ce:d5:de:73:f3:06:f0:70:d7:70:3c:14:38:ab:e0:48: 9c:79:23:62:87:22:b8:41:f7:40:66:1e:19:3a:69:b6:d7:d6: 85:e5:ce:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRS6SwDJ5TS1cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzYWZjYjYtMDhmYi00YmEyLTlkOTYtYTRlMGMzYzFl Mjk5MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzQ1NmZmNjEtMWY2YS00NjJjLWI4NTEtMWM4OTZmMjViZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZhnj2JrB+IHX7k0L59hfyWD4rdge1X3SKdW jFcn8cxCMZHmCP+R9fbMlnbBwQl7prwv6WDU+o/GpS9BrvuMZHXsjkHP2SMisGNG CJmZVGK7kAzAWwUhKiCpiXYFZu7C7qUDAJ6toXZ0gl9iPfAdY4GP5QkBhig+Qo9j +UZKHH55v3SHGXR19aOj8Drhnomrz1aHhrADTtkgMiv4rEHTqrgvHH39kAZnriq/ Gc4ZZkDBtstcpElezgFzkzyVXksCwIHIaUoxK6FWrMXwhnfflukZReSYTOLo8GNq BcAKhHKDtR0Z6Z9/M0ivhbnj3HzJhzXKgzU4HfXHQrmX/P6ZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSzCrxnhBc5kLJXmbkJJBv0TotkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNh ZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUwYzNjMWUyOTkvY2Y2NzA0MDEtOWQ0Yi0z NjM3LTg1NmYtNWM5NDc4MjFhNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWIzYWZjYjYtMDhmYi00YmEyLTlk OTYtYTRlMGMzYzFlMjk5L2ViM2FmY2I2LTA4ZmItNGJhMi05ZDk2LWE0ZTBjM2Mx ZTI5OS5jcmwwHwYDVR0jBBgwFoAU8a57D7k/Lwnk1YXpfkaIRDqFZa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNhZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUw YzNjMWUyOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCVNg3c2KrusEWnsDwKQUlQmbHsuGa8SEIrnqfYnR7Ne5oLcG6VzpSV H/jESUZwejt+Qz0WwEyPQ3VlJYTGu+pGT0I5GK2LiqgzwW85wY+nZAZEEPAuMGvz Se/ogSN/nLyISCTy7DDxp9nm4Y/jFQlbCxy04bEf5D1CqBIh1FdDhzbKj+2J3/KV c3R3SweV1udU5kB+KUIBu2LugoIZ34A8kFZB+TEF+gNsWpm8PufDP4dtY8C6dCEo a3ZJhkyeyfqJvJN6y/+lR7WwNvac50x9tRzOWcuv0BYPztXec/MG8HDXcDwUOKvg SJx5I2KHIrhB90BmHhk6abbX1oXlzgg= -----END CERTIFICATE-----Generated at Wed May 14 15:52:47 2025 by rpki-client