$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa File: c084590b-3ab2-32dd-af28-d65751098d7b.roa (raw, json) Hash identifier: OX/0DR2Jm91tyIHuZLlj6HgSEhs4+YLoOz7jhtJeqUw= Subject key identifier: FC:14:4F:21:BE:05:1F:BA:75:89:2C:DC:9D:94:B9:94:9B:54:19:38 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584975444BA8260980E105CB6E80 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 146806 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:4b:a8:26:09:80:e1:05:cb:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=149ed479-da66-4c92-8ffd-15fe48a66d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:3b:57:9c:b9:c6:c6:20:62:cd:b4:e7:06: 5f:65:7d:13:a8:e0:ea:80:34:e9:88:33:46:f2:15: e6:c4:da:21:25:14:16:24:8e:9f:0e:9f:6f:86:4e: 7b:c9:4e:4c:2a:f0:aa:87:57:44:0a:4e:70:9a:12: 9f:4c:8d:b1:c9:64:20:3d:24:f8:2f:55:3a:d7:22: 68:e8:f7:03:ab:33:94:de:e3:96:9c:00:66:ae:35: 74:24:97:f6:88:49:e6:d2:6d:74:0a:40:fd:a9:fa: 3c:4f:84:87:cc:5a:78:8d:a2:40:55:c4:f5:f6:22: 64:33:46:26:96:ab:88:3c:bc:02:a1:82:68:89:11: 42:f1:de:bb:92:16:43:50:b5:16:0f:a5:fc:1c:a4: 60:b9:61:c6:3b:e9:8d:da:e7:e9:9d:fe:20:38:5c: ab:46:f7:a1:82:bb:e0:15:8b:9f:1c:89:0b:28:d4: 92:ab:24:d4:c9:57:85:60:15:4b:67:e9:57:1d:ae: 0d:62:fe:cf:c6:ba:74:90:d9:de:2f:bc:0c:3c:f3: 3f:96:e6:e1:91:af:3e:f1:9c:c4:b6:79:44:c6:33: 62:02:c5:2b:2d:da:d1:01:e0:e6:35:9f:4e:50:08: 99:05:c8:94:f2:b5:be:a4:4c:99:6d:02:dd:2d:68: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:14:4F:21:BE:05:1F:BA:75:89:2C:DC:9D:94:B9:94:9B:54:19:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:12:1f:a4:8f:69:4b:be:5a:eb:9c:18:ed:98:96:c1:a5:74: d5:a0:ce:0e:15:15:fe:78:da:88:0f:e9:1c:31:58:0f:ad:94: c3:83:10:97:ec:53:91:29:59:37:63:9b:cd:c9:fe:ec:5a:fb: 65:30:dd:e3:07:e3:78:f7:35:75:20:08:f0:b5:ba:a5:34:e6: 71:fa:36:c0:2d:90:63:2b:ec:7b:74:eb:a0:9e:7f:28:8b:df: 2e:a6:0d:26:68:57:a4:8b:a8:aa:0e:a5:06:4d:1f:40:f8:7a: 00:3f:ef:7d:6d:70:b4:cf:96:d3:7d:e4:b6:9f:0e:0e:c2:0d: 96:10:3f:3b:a3:21:45:3b:9f:b6:3a:a7:a5:89:71:1f:21:9c: fe:df:5e:5e:00:fd:56:08:fc:34:06:04:ce:eb:8d:97:2a:de: 99:bc:1a:53:dc:86:7f:dc:7d:a4:c9:3b:97:06:a1:37:1c:83: 91:16:4e:01:85:bd:8b:35:a0:8a:ed:42:ca:18:83:c8:e2:48: 3e:cc:46:dd:22:c9:01:f3:4a:5f:8d:6d:3a:11:05:3c:ac:0b: e7:ab:02:61:c5:e0:1b:9c:16:2a:f8:56:ee:46:06:86:f1:40: 4c:7e:05:75:51:92:d7:6f:65:9a:db:2b:59:1b:17:5e:ed:e6: ff:c9:36:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1REuoJgmA4QXLboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MTQ5ZWQ0NzktZGE2Ni00YzkyLThmZmQtMTVmZTQ4YTY2ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltM7V5y5xsYgYs205wZfZX0TqODqgDTpiDNG 8hXmxNohJRQWJI6fDp9vhk57yU5MKvCqh1dECk5wmhKfTI2xyWQgPST4L1U61yJo 6PcDqzOU3uOWnABmrjV0JJf2iEnm0m10CkD9qfo8T4SHzFp4jaJAVcT19iJkM0Ym lquIPLwCoYJoiRFC8d67khZDULUWD6X8HKRguWHGO+mN2ufpnf4gOFyrRvehgrvg FYufHIkLKNSSqyTUyVeFYBVLZ+lXHa4NYv7Pxrp0kNneL7wMPPM/lubhka8+8ZzE tnlExjNiAsUrLdrRAeDmNZ9OUAiZBciU8rW+pEyZbQLdLWjMewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwUTyG+BR+6dYks3J2UuZSbVBk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvYzA4NDU5MGItM2FiMi0z MmRkLWFmMjgtZDY1NzUxMDk4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQSH6SPaUu+WuucGO2YlsGldNWgzg4VFf542ogP6RwxWA+tlMODEJfs U5EpWTdjm83J/uxa+2Uw3eMH43j3NXUgCPC1uqU05nH6NsAtkGMr7Ht066CefyiL 3y6mDSZoV6SLqKoOpQZNH0D4egA/731tcLTPltN95LafDg7CDZYQPzujIUU7n7Y6 p6WJcR8hnP7fXl4A/VYI/DQGBM7rjZcq3pm8GlPchn/cfaTJO5cGoTccg5EWTgGF vYs1oIrtQsoYg8jiSD7MRt0iyQHzSl+NbToRBTysC+erAmHF4BucFir4Vu5GBobx QEx+BXVRktdvZZrbK1kbF17t5v/JNs0= -----END CERTIFICATE-----Generated at Sat May 10 00:27:31 2025 by rpki-client