$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json) Hash identifier: GjOfNfXPtbqiskhfECeGfl1UjboSJJAS6Tcum1djO4E= Subject key identifier: D5:94:DA:08:77:17:45:89:60:89:15:1B:86:28:0C:70:8E:D9:83:A7 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858491246AE3505C4E9D587764F00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 19437 IP address blocks: 23.235.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ae:35:05:c4:e9:d5:87:76:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=c1d6bb55-6740-427f-aa15-436ba01db084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:14:52:7f:19:fe:8e:f5:a7:96:7d:6f:26: 8f:35:4c:18:df:75:1c:20:7d:93:61:af:54:3f:be: 99:2f:c0:36:f9:38:a3:16:bc:8e:6a:5f:2c:ea:6c: 9b:dd:23:2f:b8:e2:ca:b0:1e:c0:ac:ce:f3:90:e2: 3a:6d:e3:b4:65:61:4c:87:27:2c:31:ff:2e:3f:19: ff:12:45:61:62:16:c2:00:f5:d0:1e:55:04:f3:a1: 42:af:a1:d0:1a:68:d7:c8:69:2f:84:cc:13:34:1f: 3b:79:d9:ee:02:ab:0b:df:ac:bf:e4:ad:bc:f2:6a: c0:5f:fa:f7:a4:58:fd:f3:8b:49:c4:ab:c4:28:0f: 0d:56:17:9e:2f:7f:2d:b5:55:08:f4:bd:8f:f9:74: 19:2c:c3:09:8e:37:c9:96:57:be:e8:e1:c0:6d:21: d9:81:76:02:1a:6d:44:11:5e:b2:ff:eb:34:d1:83: 0b:e6:29:6b:68:9e:56:77:46:83:5a:df:c3:f3:4e: f4:a1:82:ed:5a:ae:03:4a:7f:ab:96:70:fb:12:37: 39:18:57:82:5c:e6:b7:49:44:a8:d0:07:b7:8f:f1: d5:b9:be:36:78:a8:7f:cb:66:46:f4:57:98:c3:d6: cd:92:b6:77:26:cf:e7:aa:5f:6a:4f:38:eb:f7:ed: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:94:DA:08:77:17:45:89:60:89:15:1B:86:28:0C:70:8E:D9:83:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:7a:fa:83:c9:16:e5:dd:a6:78:45:01:5c:01:04:5d:d0:23: 2d:43:01:41:08:91:74:36:16:4b:23:07:a4:72:90:51:dd:10: 78:2e:b9:ac:a4:dd:58:b9:c1:09:6f:33:c0:c9:06:4a:9b:ab: b5:ff:1a:70:67:b7:c1:ea:c5:3c:38:e9:29:c6:23:60:49:8b: 6b:ac:ba:b7:eb:27:c4:31:21:f0:57:2b:77:ef:47:92:6b:be: 91:b1:b3:68:15:10:a7:77:b8:76:93:50:4b:72:11:17:9c:9d: 56:03:1e:4a:30:fa:ab:0b:d5:ed:07:9a:76:97:15:48:02:70: 8e:9b:3b:8a:9b:7e:7b:c7:94:91:7c:d9:f8:45:5b:14:92:72: f1:72:21:53:92:c1:02:50:19:0c:8f:05:2e:43:73:6c:db:e2: e9:9a:b3:8b:ee:23:3e:f2:09:db:8e:68:20:1a:c9:1d:29:3d: 8b:95:5e:bf:27:48:e1:1f:7d:82:2a:24:b3:82:c3:2d:ac:00: 73:d3:9b:54:55:a8:ae:c2:2f:26:d1:e6:59:a1:6d:5c:a7:7b: f0:05:91:47:e8:24:2c:50:b5:b4:45:b7:be:f2:85:36:b2:0d: 76:ba:04:c1:78:5c:dd:68:50:57:97:bc:07:e0:30:1f:3a:cf: 3d:eb:c1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq41BcTp1Yd2TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YzFkNmJiNTUtNjc0MC00MjdmLWFhMTUtNDM2YmEwMWRiMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnwUUn8Z/o71p5Z9byaPNUwY33UcIH2TYa9U P76ZL8A2+TijFryOal8s6myb3SMvuOLKsB7ArM7zkOI6beO0ZWFMhycsMf8uPxn/ EkVhYhbCAPXQHlUE86FCr6HQGmjXyGkvhMwTNB87ednuAqsL36y/5K288mrAX/r3 pFj984tJxKvEKA8NVheeL38ttVUI9L2P+XQZLMMJjjfJlle+6OHAbSHZgXYCGm1E EV6y/+s00YML5ilraJ5Wd0aDWt/D8070oYLtWq4DSn+rlnD7Ejc5GFeCXOa3SUSo 0Ae3j/HVub42eKh/y2ZG9FeYw9bNkrZ3Js/nql9qTzjr9+1yowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWU2gh3F0WJYIkVG4YoDHCO2YOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWYxNjM3M2MtMzI4Ny0z NDFhLWE3YjQtMWNlYzFhNWM5ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh6+oPJFuXdpnhFAVwBBF3QIy1DAUEIkXQ2FksjB6RykFHdEHguuayk 3Vi5wQlvM8DJBkqbq7X/GnBnt8HqxTw46SnGI2BJi2usurfrJ8QxIfBXK3fvR5Jr vpGxs2gVEKd3uHaTUEtyERecnVYDHkow+qsL1e0HmnaXFUgCcI6bO4qbfnvHlJF8 2fhFWxSScvFyIVOSwQJQGQyPBS5Dc2zb4umas4vuIz7yCduOaCAayR0pPYuVXr8n SOEffYIqJLOCwy2sAHPTm1RVqK7CLybR5lmhbVyne/AFkUfoJCxQtbRFt77yhTay DXa6BMF4XN1oUFeXvAfgMB86zz3rweU= -----END CERTIFICATE-----Generated at Tue May 6 10:59:55 2025 by rpki-client