$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa File: b38cb35a-486e-3325-8799-f39704b0b87c.roa (raw, json) Hash identifier: mEV0V8ff5LaZiL5AlL8yoLjcqpOgzEorgQNqoZdq2Bg= Subject key identifier: 43:EA:FB:D0:E3:AC:64:E6:A6:46:29:88:62:0E:6B:97:69:E7:FB:A8 Certificate issuer: /CN=8d335843-a776-4e8d-949e-8217822b7151 Certificate serial: 010D0C9F43285849AACAAF38190AD8FFB776C600 Authority key identifier: F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa Signing time: Sun 27 Apr 2025 17:09:38 +0000 ROA not before: Sun 27 Apr 2025 17:09:38 +0000 ROA not after: Sat 26 Jul 2025 17:09:38 +0000 asID: 29769 IP address blocks: 23.183.176.0/24 maxlen: 24 2602:fc5a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:ca:af:38:19:0a:d8:ff:b7:76:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d335843-a776-4e8d-949e-8217822b7151 Validity Not Before: Apr 27 17:09:38 2025 GMT Not After : Jul 26 17:09:38 2025 GMT Subject: CN=f35a0572-6162-4f44-aaf7-c859052f3ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d1:e1:90:1a:6b:4c:4a:0a:0a:8c:76:df:fc: 70:bc:83:e8:ca:91:05:57:fb:92:4b:23:5c:55:f2: 6a:33:90:0c:56:2d:56:50:00:c7:5f:ca:93:ff:23: 6f:83:b6:d2:2e:6b:da:37:c4:32:7f:eb:1e:10:19: e1:0b:4d:8e:03:99:e5:07:74:bf:6a:54:66:87:f7: 0b:ff:a6:ce:38:6e:01:78:99:9e:23:1a:42:a5:5f: 74:55:13:d8:01:94:0a:09:c0:93:13:96:b9:3c:3f: 6f:24:a4:9a:6d:4f:de:d6:4b:16:b4:b1:44:cf:79: 92:7b:f6:f4:6b:ea:39:94:96:9d:8f:8d:9e:da:24: 22:da:95:30:f8:2f:95:a0:f8:13:35:bc:c8:12:9d: a1:47:8a:9d:fc:e3:16:91:7a:2a:22:ba:ef:79:cd: c5:c1:83:8c:07:47:df:33:3b:f9:c4:81:26:fb:a5: b7:d2:ea:3d:7c:62:5a:57:44:74:74:33:14:75:96: 80:e5:df:73:bd:3f:c2:bc:90:65:99:c0:20:9d:9a: 3f:ec:3d:e5:b2:61:01:d6:ae:2b:08:74:70:f4:36: a3:0c:4d:1d:a6:49:c4:d6:94:0c:30:17:86:3e:bb: 14:15:93:f6:22:c4:a2:f4:5c:7a:e1:d7:8f:e3:21: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EA:FB:D0:E3:AC:64:E6:A6:46:29:88:62:0E:6B:97:69:E7:FB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl X509v3 Authority Key Identifier: keyid:F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer sbgp-ipAddrBlock: critical IPv4: 23.183.176.0/24 IPv6: 2602:fc5a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fc:f3:bf:3c:f9:80:8b:5c:43:54:ec:3b:de:42:25:e3:b5: 7f:79:9a:4b:aa:90:31:dd:3f:73:5d:50:2a:cf:da:5e:fb:a9: 7d:49:11:7d:7c:e9:a6:e9:1a:67:6b:b7:13:29:30:20:c3:1c: 98:f0:dd:17:6d:75:50:7d:01:19:97:53:49:4e:60:55:92:b3: da:a7:56:59:c4:52:52:3c:73:bc:22:6c:00:5e:cc:f1:04:cb: b6:ec:74:38:c6:0e:4a:b2:ff:22:21:a1:42:66:94:27:5d:12: aa:63:ef:05:62:22:7a:0c:07:91:9c:b4:77:22:79:7a:4e:cf: dd:1a:f4:b7:3f:bf:69:4f:17:5a:78:90:7e:e2:f2:29:0e:97: 4a:00:b7:47:55:bc:23:a9:ab:c2:84:f6:6d:37:7f:39:74:26: a4:13:74:ac:0c:9d:e4:d0:03:a9:b7:6a:80:ac:74:1e:fb:aa: b1:8b:5d:1b:36:51:6a:93:0b:58:4e:34:d9:a4:75:67:99:ac: 93:1a:d6:03:0f:25:06:fa:72:ca:64:d9:75:80:80:33:3e:38: 87:dd:ef:48:aa:2c:3b:e1:1b:e6:b9:80:be:0c:9c:40:63:76: 06:65:c2:e8:62:ba:ef:f2:56:5b:a0:20:20:37:05:54:ac:d5: da:40:ee:e1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmqyq84GQrY/7d2xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzMzU4NDMtYTc3Ni00ZThkLTk0OWUtODIxNzgyMmI3 MTUxMB4XDTI1MDQyNzE3MDkzOFoXDTI1MDcyNjE3MDkzOFowLzEtMCsGA1UEAxMk ZjM1YTA1NzItNjE2Mi00ZjQ0LWFhZjctYzg1OTA1MmYzY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9HhkBprTEoKCox23/xwvIPoypEFV/uSSyNc VfJqM5AMVi1WUADHX8qT/yNvg7bSLmvaN8Qyf+seEBnhC02OA5nlB3S/alRmh/cL /6bOOG4BeJmeIxpCpV90VRPYAZQKCcCTE5a5PD9vJKSabU/e1ksWtLFEz3mSe/b0 a+o5lJadj42e2iQi2pUw+C+VoPgTNbzIEp2hR4qd/OMWkXoqIrrvec3FwYOMB0ff Mzv5xIEm+6W30uo9fGJaV0R0dDMUdZaA5d9zvT/CvJBlmcAgnZo/7D3lsmEB1q4r CHRw9DajDE0dpknE1pQMMBeGPrsUFZP2IsSi9Fx64deP4yGKlQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEPq+9DjrGTmpkYpiGIOa5dp5/uoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMz NTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3ODIyYjcxNTEvYjM4Y2IzNWEtNDg2ZS0z MzI1LTg3OTktZjM5NzA0YjBiODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGQzMzU4NDMtYTc3Ni00ZThkLTk0 OWUtODIxNzgyMmI3MTUxLzhkMzM1ODQzLWE3NzYtNGU4ZC05NDllLTgyMTc4MjJi NzE1MS5jcmwwHwYDVR0jBBgwFoAU9NESpozbdVZdrZr9ppIU2QSAiUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMzNTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3 ODIyYjcxNTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7ewMA4E AgACMAgDBgQmAvxaADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz/PO/PPmAi1xDVOw73kIl47V/eZpLqpAx 3T9zXVAqz9pe+6l9SRF9fOmm6Rpna7cTKTAgwxyY8N0XbXVQfQEZl1NJTmBVkrPa p1ZZxFJSPHO8ImwAXszxBMu27HQ4xg5Ksv8iIaFCZpQnXRKqY+8FYiJ6DAeRnLR3 Inl6Ts/dGvS3P79pTxdaeJB+4vIpDpdKALdHVbwjqavChPZtN385dCakE3SsDJ3k 0AOpt2qArHQe+6qxi10bNlFqkwtYTjTZpHVnmayTGtYDDyUG+nLKZNl1gIAzPjiH 3e9Iqiw74RvmuYC+DJxAY3YGZcLoYrrv8lZboCAgNwVUrNXaQO7h -----END CERTIFICATE-----Generated at Tue Jul 1 02:40:23 2025 by rpki-client