$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa File: 7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa (raw, json) Hash identifier: GFH7EUpYJK4XSFyfzicWdVPoKLjpedi6HYOD4mQAoFg= Subject key identifier: 84:21:CC:46:9D:C7:07:23:B5:68:AD:00:9D:74:CD:90:03:78:60:D8 Certificate issuer: /CN=1aea854c-b5a0-4772-a924-0abe91b36c2c Certificate serial: 010D0C9F43285849A61F4955AE95CB9745AFA800 Authority key identifier: DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 17387 IP address blocks: 23.167.72.0/24 maxlen: 24 2602:fa46::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:49:55:ae:95:cb:97:45:af:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aea854c-b5a0-4772-a924-0abe91b36c2c Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=aed347d4-3369-4486-a3e6-1130395ad6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7d:6b:d7:59:8a:66:2f:09:3b:6b:0b:1d:cc: be:5b:a7:d5:36:eb:40:05:e7:10:2a:db:e5:d8:f3: 1e:6d:f4:f2:68:14:ab:40:43:15:e8:3e:d2:d5:78: 29:55:3e:38:c7:9c:76:50:b1:19:53:52:22:46:e8: a7:a7:52:0f:c6:3c:47:56:ba:dc:13:ca:5c:12:1c: c1:d5:c7:9a:d6:49:aa:f0:19:94:39:6d:58:72:57: df:64:4a:95:41:d9:62:fe:28:19:62:29:da:14:0a: 7a:f0:33:08:fc:bb:eb:18:50:22:1f:94:6f:9c:ec: 7e:36:84:1b:82:3d:25:9a:6f:13:0e:f2:e4:66:7e: 38:83:52:80:ac:cb:be:fe:18:77:68:db:56:a7:96: a4:83:7d:93:e3:a7:31:b7:b8:12:57:c9:c5:83:aa: 17:39:e4:ed:87:06:a5:73:12:41:22:c9:ef:78:8f: 5f:99:df:33:0d:cb:6e:62:b7:60:4c:09:ed:4f:75: 52:85:69:3e:06:77:b7:bb:58:7b:02:f2:92:47:37: 47:3d:f1:b2:14:4d:42:0b:5d:c6:50:24:7f:58:26: a9:a9:4f:1d:2c:5f:bc:eb:f8:e3:ee:5c:78:c3:4a: fa:4c:b0:5e:a5:c2:3c:ed:cb:c1:2d:b8:73:5d:7a: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:21:CC:46:9D:C7:07:23:B5:68:AD:00:9D:74:CD:90:03:78:60:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl X509v3 Authority Key Identifier: keyid:DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer sbgp-ipAddrBlock: critical IPv4: 23.167.72.0/24 IPv6: 2602:fa46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:03:4d:8c:5a:a8:78:02:eb:94:55:ce:5c:5a:f2:47:05:35: 02:78:50:d0:c4:a4:0a:ef:a8:9b:e0:28:a5:cd:12:51:e4:24: 2a:4d:6d:e7:fd:54:93:97:b1:0b:b7:b2:bb:7b:2c:35:d1:9c: ab:ae:33:8f:6b:f6:dc:8b:cd:ac:4a:a7:ca:49:c1:8e:d3:df: 1b:48:08:bd:92:8c:2f:47:e9:a4:ac:8b:0f:39:79:3b:82:68: 79:ba:06:61:2e:e1:66:b6:63:b6:2e:6a:14:da:43:cd:51:ef: b3:85:b2:5a:6c:57:45:b9:bc:52:16:0a:4b:2c:cd:33:ca:88: fe:45:c2:f4:25:60:9d:9b:bc:64:e6:1f:6f:ff:89:65:70:1e: 72:e1:20:15:f6:3d:09:a7:0e:71:c2:3f:b9:26:da:85:e4:ec: 21:b0:f8:82:29:95:e3:11:98:87:37:34:a3:be:5c:56:07:09: 7f:77:d5:7d:22:a2:d8:94:54:74:50:06:f5:c4:e6:81:40:27: 6b:bc:af:72:ff:ed:65:c8:4d:06:0f:d0:9e:ab:a5:96:de:63: ca:84:53:8a:c9:62:c2:1f:77:91:9f:5c:0e:79:9b:6f:d2:7a: c7:ae:81:1f:a5:f5:aa:be:0c:76:dc:67:d6:57:86:f3:08:f7: a5:ba:6b:02 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmmH0lVrpXLl0WvqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlYTg1NGMtYjVhMC00NzcyLWE5MjQtMGFiZTkxYjM2 YzJjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YWVkMzQ3ZDQtMzM2OS00NDg2LWEzZTYtMTEzMDM5NWFkNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH1r11mKZi8JO2sLHcy+W6fVNutABecQKtvl 2PMebfTyaBSrQEMV6D7S1XgpVT44x5x2ULEZU1IiRuinp1IPxjxHVrrcE8pcEhzB 1cea1kmq8BmUOW1YclffZEqVQdli/igZYinaFAp68DMI/LvrGFAiH5RvnOx+NoQb gj0lmm8TDvLkZn44g1KArMu+/hh3aNtWp5akg32T46cxt7gSV8nFg6oXOeTthwal cxJBIsnveI9fmd8zDctuYrdgTAntT3VShWk+Bne3u1h7AvKSRzdHPfGyFE1CC13G UCR/WCapqU8dLF+86/jj7lx4w0r6TLBepcI87cvBLbhzXXqjHwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIQhzEadxwcjtWitAJ10zZADeGDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYWVh ODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJlOTFiMzZjMmMvN2YwY2RjZGItN2ZjZC0z M2Y1LWJiM2MtNzQ1NGU2ZDE2ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWFlYTg1NGMtYjVhMC00NzcyLWE5 MjQtMGFiZTkxYjM2YzJjLzFhZWE4NTRjLWI1YTAtNDc3Mi1hOTI0LTBhYmU5MWIz NmMyYy5jcmwwHwYDVR0jBBgwFoAU3q6IeMiz1yM4ebLHvTCo8zBdXPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xYWVhODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJl OTFiMzZjMmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6dIMA4E AgACMAgDBgQmAvpGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxA02MWqh4AuuUVc5cWvJHBTUCeFDQxKQK 76ib4CilzRJR5CQqTW3n/VSTl7ELt7K7eyw10ZyrrjOPa/bci82sSqfKScGO098b SAi9kowvR+mkrIsPOXk7gmh5ugZhLuFmtmO2LmoU2kPNUe+zhbJabFdFubxSFgpL LM0zyoj+RcL0JWCdm7xk5h9v/4llcB5y4SAV9j0Jpw5xwj+5JtqF5OwhsPiCKZXj EZiHNzSjvlxWBwl/d9V9IqLYlFR0UAb1xOaBQCdrvK9y/+1lyE0GD9Ceq6WW3mPK hFOKyWLCH3eRn1wOeZtv0nrHroEfpfWqvgx23GfWV4bzCPelumsC -----END CERTIFICATE-----Generated at Tue May 6 04:45:57 2025 by rpki-client