$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/4daef866-176e-3f7c-aeb5-1898bc95a83b.roa File: 4daef866-176e-3f7c-aeb5-1898bc95a83b.roa (raw, json) Hash identifier: BY1JGQP16AQB9/MQFIXfDI3PCQ9mnMigZa5efGOfAMo= Subject key identifier: 55:AE:72:2C:C2:2D:2B:BA:E9:6F:DB:50:10:88:2A:C0:9B:27:80:39 Certificate issuer: /CN=01498755-7057-4d26-ae43-80f30a8a9011 Certificate serial: 010D0C9F43285849C4D4AE7CDBB6372A0701C380 Authority key identifier: B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/4daef866-176e-3f7c-aeb5-1898bc95a83b.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 40279 IP address blocks: 23.148.200.0/24 maxlen: 24 23.148.201.0/24 maxlen: 24 216.21.4.0/22 maxlen: 24 2602:2a9::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:ae:7c:db:b6:37:2a:07:01:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01498755-7057-4d26-ae43-80f30a8a9011 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=c4fa9daf-c791-488c-866a-fc81515c73cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:92:e2:e3:67:fb:13:5c:5a:cf:f5:2e:e3: e0:7f:a7:ec:5a:54:c4:12:60:82:fd:f3:ee:99:37: 04:38:32:03:87:bb:df:72:ed:5b:b6:22:41:76:11: d3:50:ae:03:34:1c:b9:93:e8:8e:95:db:c9:3d:95: 75:4c:27:ce:02:e4:61:27:99:9a:a0:19:f4:be:1e: 4e:ee:0c:49:c2:15:e8:88:81:1f:0f:3a:6a:f7:54: 52:8b:23:54:4d:46:5c:f5:90:2f:e6:47:ed:15:2f: 49:da:c4:b6:b9:06:c2:25:29:af:90:10:53:c8:a8: 08:4f:fb:4c:7b:d2:07:3d:ef:a5:80:3e:52:ef:21: 3b:a3:ce:03:b8:be:98:11:23:62:bd:23:78:80:ad: 97:82:92:31:eb:e4:bf:a3:b5:fc:20:36:bd:c1:b8: 6d:6e:cd:5a:93:a9:00:a8:e7:5b:d4:bd:2e:aa:f1: 35:e3:91:ff:75:65:b3:5d:49:03:1d:70:eb:7c:0d: 90:8f:e0:36:e7:5e:ef:8b:d6:d9:0c:ac:ca:d6:f3: 89:62:9f:ce:3d:cf:42:c9:e1:d3:2c:ea:ff:0c:df: c4:6d:41:5c:0a:1b:da:87:11:e2:fd:7b:be:59:f4: fe:c3:4f:db:73:22:03:66:5d:7d:a7:31:6c:32:f2: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:72:2C:C2:2D:2B:BA:E9:6F:DB:50:10:88:2A:C0:9B:27:80:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/4daef866-176e-3f7c-aeb5-1898bc95a83b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl X509v3 Authority Key Identifier: keyid:B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer sbgp-ipAddrBlock: critical IPv4: 23.148.200.0/23 216.21.4.0/22 IPv6: 2602:2a9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:52:05:4b:f1:19:aa:b2:f8:fe:dd:52:17:b9:c9:5a:79:c9: ad:ea:72:04:be:fc:70:47:f3:2d:3a:66:8b:e0:8b:ca:65:e2: d1:f1:28:a4:60:4d:0c:83:69:40:52:6b:d3:69:1e:41:3e:b0: 7e:0a:1a:9f:d2:ee:0e:d6:28:c2:e9:b1:92:23:0b:04:81:15: ba:fa:15:52:d7:f7:35:8a:90:67:32:af:0d:9d:d8:03:24:36: 9e:09:2c:43:93:f7:4b:6d:81:28:81:73:68:9f:ea:19:a4:c2: e6:28:1f:44:a5:63:57:06:69:3e:c4:48:dd:69:cf:0d:41:38: e0:78:d9:05:44:e0:d9:34:f4:db:bd:0b:c6:71:ae:f7:64:1a: 0e:79:2f:80:4c:5c:ec:64:49:88:4d:bb:e1:e9:42:a6:ce:2f: 5a:65:b2:cc:39:81:17:40:63:69:aa:42:d2:b6:67:77:f9:6b: f9:0b:bc:35:dc:1e:ec:6f:84:77:22:ea:b1:94:2a:21:11:03: ed:7c:f5:aa:e8:e8:3c:85:68:ef:57:c1:90:e5:3b:6f:73:49: ed:f0:05:a3:1e:07:86:20:bc:14:88:78:8a:f0:b4:23:ae:7b: 34:91:ee:43:7e:66:18:6f:fa:56:1a:9f:a7:9c:9c:d5:19:f2: 43:27:b8:30 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEnE1K5827Y3KgcBw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE0OTg3NTUtNzA1Ny00ZDI2LWFlNDMtODBmMzBhOGE5 MDExMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YzRmYTlkYWYtYzc5MS00ODhjLTg2NmEtZmM4MTUxNWM3M2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBKS4uNn+xNcWs/1LuPgf6fsWlTEEmCC/fPu mTcEODIDh7vfcu1btiJBdhHTUK4DNBy5k+iOldvJPZV1TCfOAuRhJ5maoBn0vh5O 7gxJwhXoiIEfDzpq91RSiyNUTUZc9ZAv5kftFS9J2sS2uQbCJSmvkBBTyKgIT/tM e9IHPe+lgD5S7yE7o84DuL6YESNivSN4gK2XgpIx6+S/o7X8IDa9wbhtbs1ak6kA qOdb1L0uqvE145H/dWWzXUkDHXDrfA2Qj+A2517vi9bZDKzK1vOJYp/OPc9CyeHT LOr/DN/EbUFcChvahxHi/Xu+WfT+w0/bcyIDZl19pzFsMvIIEQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFFWucizCLSu66W/bUBCIKsCbJ4A5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMTQ5 ODc1NS03MDU3LTRkMjYtYWU0My04MGYzMGE4YTkwMTEvNGRhZWY4NjYtMTc2ZS0z ZjdjLWFlYjUtMTg5OGJjOTVhODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDE0OTg3NTUtNzA1Ny00ZDI2LWFl NDMtODBmMzBhOGE5MDExLzAxNDk4NzU1LTcwNTctNGQyNi1hZTQzLTgwZjMwYThh OTAxMS5jcmwwHwYDVR0jBBgwFoAUuBDCKMjYT+BlfSuPF/KAKkOZPOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMTQ5ODc1NS03MDU3LTRkMjYtYWU0My04MGYz MGE4YTkwMTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBF5TIAwQC 2BUEMA4EAgACMAgDBgQmAgKpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuUgVL8Rmqsvj+3VIXuclaecmt 6nIEvvxwR/MtOmaL4IvKZeLR8SikYE0Mg2lAUmvTaR5BPrB+Chqf0u4O1ijC6bGS IwsEgRW6+hVS1/c1ipBnMq8NndgDJDaeCSxDk/dLbYEogXNon+oZpMLmKB9EpWNX Bmk+xEjdac8NQTjgeNkFRODZNPTbvQvGca73ZBoOeS+ATFzsZEmITbvh6UKmzi9a ZbLMOYEXQGNpqkLStmd3+Wv5C7w13B7sb4R3IuqxlCohEQPtfPWq6Og8hWjvV8GQ 5Ttvc0nt8AWjHgeGILwUiHiK8LQjrns0ke5DfmYYb/pWGp+nnJzVGfJDJ7gw -----END CERTIFICATE-----Generated at Thu May 15 13:44:17 2025 by rpki-client