$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa File: 0209baa9-389a-393c-b685-be2cd86201f7.roa (raw, json) Hash identifier: cNe35cbrp+bdXtmEvffV/ZODRcas95uARmfqzi8eb/Y= Subject key identifier: 5E:D9:DF:F4:13:4B:EB:4F:6E:9A:80:52:35:A7:E9:F5:C3:97:B9:74 Certificate issuer: /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Certificate serial: 010D0C9F43285849C4D4C12FA0297DB88C18BE00 Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 398310 IP address blocks: 23.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c1:2f:a0:29:7d:b8:8c:18:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=b91ff971-286f-4103-8b5a-d9738f25ff36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8b:5c:10:2f:8d:48:fb:b6:32:3e:d5:c8:f5: 2a:51:20:c0:e6:76:ca:ce:58:32:90:d0:8e:7c:34: ac:6c:2a:e0:c1:b4:7d:a5:77:0b:14:16:e1:4a:98: ad:52:d0:f3:19:49:26:1a:5c:b5:f5:a3:c1:f9:11: de:95:65:b9:bd:24:c3:09:34:a3:b6:3c:bf:9d:26: a8:26:9a:8b:41:c8:1b:35:bc:f6:21:fb:32:d6:34: 9a:57:30:d9:36:c3:10:30:d8:b1:fd:31:f4:f8:97: 97:11:29:bd:b4:26:8c:9c:94:ce:bd:c3:45:77:1d: f0:fc:82:4b:42:07:de:1a:bd:02:5a:86:21:25:f4: e2:44:c9:84:9b:3f:77:a2:fb:97:e5:14:fc:0b:2f: 04:6f:8b:df:27:e7:be:c5:21:dd:d5:e6:88:59:bf: 24:75:17:23:15:37:17:f6:91:3c:7e:52:5d:8d:97: aa:c3:03:fc:3b:40:c6:f2:2b:a2:96:c4:67:0c:f2: e8:f9:77:56:11:fb:75:c6:ba:db:fd:34:c4:f5:d5: cb:e1:4c:47:99:41:83:c1:f6:30:ec:5b:4f:66:98: 29:a0:23:43:ac:fb:3e:70:1d:ce:8f:d9:54:62:7f: 4a:3d:75:16:78:76:36:8b:13:9a:c4:e0:08:e0:21: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D9:DF:F4:13:4B:EB:4F:6E:9A:80:52:35:A7:E9:F5:C3:97:B9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl X509v3 Authority Key Identifier: keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer sbgp-ipAddrBlock: critical IPv4: 23.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7a:fb:a5:52:ad:d0:a3:bf:7e:a0:50:97:11:c8:24:f0:52: 2b:b7:cc:bc:00:a3:d6:b1:cc:e2:18:ac:4d:f7:6d:94:e7:5f: ae:57:74:4c:be:77:c9:2a:de:78:6e:4b:b2:66:3b:eb:0a:45: dd:fe:df:ed:59:50:66:2e:f6:0e:dd:0e:53:f5:f9:f3:bd:a9: a6:14:5e:44:5c:7e:a9:57:88:8f:d7:28:06:7e:34:ee:39:a2: 7d:60:b9:10:ab:9f:50:52:ae:1d:43:1a:f7:d0:68:6c:b0:c1: 6d:09:2b:9a:80:6b:9c:17:6a:08:a4:f2:35:88:95:e3:f4:46: 40:b8:65:b3:09:ca:a9:0e:49:a5:81:6e:fc:9f:85:8b:7f:bd: 80:41:fa:01:7d:45:58:c1:dc:29:ff:04:b5:0f:07:04:42:56: 5b:91:7f:dd:fd:7b:82:2e:66:85:f6:da:31:c6:24:ef:c1:62: 06:7d:1a:03:b2:f5:41:cd:67:ed:28:24:21:09:06:33:1f:51: 8e:75:13:25:22:98:ba:1b:2f:d8:5a:fc:a0:b7:a5:ab:da:55: 33:53:7e:bf:f9:3a:9f:4f:ac:b2:c0:0b:9a:a1:15:5d:3c:49: 93:04:e5:6b:55:e2:9c:8b:e7:5c:5c:a5:c2:4f:1d:87:9e:95: 0b:a3:e3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MEvoCl9uIwYvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1MjYwZjUtODI2Mi00YTM0LWI0OWMtZTk5M2RiYWRk MWIxMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YjkxZmY5NzEtMjg2Zi00MTAzLThiNWEtZDk3MzhmMjVmZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+otcEC+NSPu2Mj7VyPUqUSDA5nbKzlgykNCO fDSsbCrgwbR9pXcLFBbhSpitUtDzGUkmGly19aPB+RHelWW5vSTDCTSjtjy/nSao JpqLQcgbNbz2Ifsy1jSaVzDZNsMQMNix/TH0+JeXESm9tCaMnJTOvcNFdx3w/IJL QgfeGr0CWoYhJfTiRMmEmz93ovuX5RT8Cy8Eb4vfJ+e+xSHd1eaIWb8kdRcjFTcX 9pE8flJdjZeqwwP8O0DG8iuilsRnDPLo+XdWEft1xrrb/TTE9dXL4UxHmUGDwfYw 7FtPZpgpoCNDrPs+cB3Oj9lUYn9KPXUWeHY2ixOaxOAI4CEeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7Z3/QTS+tPbpqAUjWn6fXDl7l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUy NjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkzZGJhZGQxYjEvMDIwOWJhYTktMzg5YS0z OTNjLWI2ODUtYmUyY2Q4NjIwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM1MjYwZjUtODI2Mi00YTM0LWI0 OWMtZTk5M2RiYWRkMWIxLzVjNTI2MGY1LTgyNjItNGEzNC1iNDljLWU5OTNkYmFk ZDFiMS5jcmwwHwYDVR0jBBgwFoAUaGFKIbv731uEAPKgQN4kBuPq31MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUyNjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkz ZGJhZGQxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF6+6VSrdCjv36gUJcRyCTwUiu3zLwAo9axzOIYrE33bZTnX65XdEy+ d8kq3nhuS7JmO+sKRd3+3+1ZUGYu9g7dDlP1+fO9qaYUXkRcfqlXiI/XKAZ+NO45 on1guRCrn1BSrh1DGvfQaGywwW0JK5qAa5wXagik8jWIleP0RkC4ZbMJyqkOSaWB bvyfhYt/vYBB+gF9RVjB3Cn/BLUPBwRCVluRf939e4IuZoX22jHGJO/BYgZ9GgOy 9UHNZ+0oJCEJBjMfUY51EyUimLobL9ha/KC3pavaVTNTfr/5Op9PrLLAC5qhFV08 SZME5WtV4pyL51xcpcJPHYeelQuj43M= -----END CERTIFICATE-----Generated at Mon May 12 14:35:37 2025 by rpki-client