$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa File: 73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa (raw, json) Hash identifier: 7pKWcNex9RG4yQoauDi6tZkkbuvw0AETaxBjKehTexA= Subject key identifier: 85:19:E9:BF:13:EF:91:D6:1B:7B:A9:5D:74:11:A7:87:DF:3C:95:7A Certificate issuer: /CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Certificate serial: 010D0C9F43285849CBCF9BCE7C349CE94049F080 Authority key identifier: 90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 400154 IP address blocks: 23.128.168.0/24 maxlen: 24 2606:8cc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9b:ce:7c:34:9c:e9:40:49:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=d01282fe-f989-4af1-a234-fb92ec61f1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:83:fd:08:0d:62:5e:02:07:68:c6:6b:ba: df:01:3c:a6:dc:c9:fe:4a:cd:ae:d3:30:b8:16:07: 3a:7f:2b:3a:97:68:89:67:e5:68:e9:41:83:fe:9c: dd:ad:84:5c:8b:b3:ef:dc:5f:53:ac:7e:1d:26:49: 7b:53:36:e9:79:fb:d0:31:37:49:ad:10:51:6e:4d: ba:5f:57:69:b2:76:f8:19:cc:fb:fd:5c:73:31:1a: c2:5f:66:24:78:9e:9d:2a:8b:c5:b6:6d:f8:64:11: 14:c3:6a:d0:02:00:54:e3:05:94:84:34:06:c4:b1: b0:8c:bd:12:12:62:0b:b3:f7:b6:6c:15:54:b1:6c: 9a:76:63:e6:61:e7:b7:55:e3:c2:12:2c:a0:20:6d: b8:de:5a:92:5e:0b:7d:fc:e1:f3:b6:e9:0b:42:06: 80:c7:88:c0:03:ca:af:08:f4:49:47:34:ff:35:7b: d0:ee:53:d4:cb:9e:ca:9d:28:0c:78:d0:c9:e1:a3: f4:42:54:57:88:d1:b8:a8:50:f1:9a:f9:ba:da:22: b6:b3:7e:f8:06:1d:90:63:53:eb:5b:5b:17:f3:16: f6:a7:8f:ee:97:e3:89:ac:84:e6:9d:00:d1:11:18: 47:54:11:e0:9f:b8:1b:f7:a3:fe:2f:61:69:f5:0d: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:19:E9:BF:13:EF:91:D6:1B:7B:A9:5D:74:11:A7:87:DF:3C:95:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl X509v3 Authority Key Identifier: keyid:90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer sbgp-ipAddrBlock: critical IPv4: 23.128.168.0/24 IPv6: 2606:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:f4:d4:8c:37:eb:15:45:63:37:79:ed:e6:d5:c2:63:74:66: 89:d4:d8:97:f8:a4:52:88:a5:75:3e:f9:76:b3:7c:e6:7f:97: df:26:1a:2f:4c:68:01:4f:e2:9c:a1:f6:5e:ba:81:ee:6f:9a: 9f:e6:be:35:2a:75:31:f4:92:0f:dd:28:a2:f1:1a:68:97:53: 01:24:ff:db:5a:c4:1b:e5:98:5d:ff:6e:ae:8c:8a:c5:fa:6e: 60:08:cd:24:b3:47:af:3e:ca:b1:33:e8:be:e4:7c:9f:ba:b6: 90:14:41:3f:66:c8:7e:92:f9:5a:60:17:b3:b9:1f:4e:32:35: 88:51:d2:35:0a:93:cb:4e:aa:5c:f2:a5:9f:ff:a5:83:f7:73: a0:cb:44:cc:1f:23:c1:de:2e:dd:ac:4f:cd:f6:9f:2e:2e:91: 26:5c:f3:c0:46:24:be:7e:78:87:ad:28:6d:e8:ac:fb:66:bc: 4f:55:43:8c:2a:10:a7:33:da:2f:2c:82:8b:73:21:34:3e:10: 34:b8:05:77:20:3e:9a:c8:94:6d:d4:3b:73:57:2d:e2:c7:04: 07:0f:b5:8b:a3:03:b1:26:58:fd:6f:3b:ba:60:58:98:3f:29: bd:a5:bd:45:ef:de:30:46:6e:67:69:5e:83:d6:db:63:7b:5b: 39:68:36:63 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEnLz5vOfDSc6UBJ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAzZTJjNjgtM2NkZC00N2U0LWJjZTAtMDdmYWFlYmE3 OGUxMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDAxMjgyZmUtZjk4OS00YWYxLWEyMzQtZmI5MmVjNjFmMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkiD/QgNYl4CB2jGa7rfATym3Mn+Ss2u0zC4 Fgc6fys6l2iJZ+Vo6UGD/pzdrYRci7Pv3F9TrH4dJkl7UzbpefvQMTdJrRBRbk26 X1dpsnb4Gcz7/VxzMRrCX2YkeJ6dKovFtm34ZBEUw2rQAgBU4wWUhDQGxLGwjL0S EmILs/e2bBVUsWyadmPmYee3VePCEiygIG243lqSXgt9/OHztukLQgaAx4jAA8qv CPRJRzT/NXvQ7lPUy57KnSgMeNDJ4aP0QlRXiNG4qFDxmvm62iK2s374Bh2QY1Pr W1sX8xb2p4/ul+OJrITmnQDRERhHVBHgn7gb96P+L2Fp9Q0KcQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIUZ6b8T75HWG3upXXQRp4ffPJV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDNl MmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2ZhYWViYTc4ZTEvNzNlNjBmY2UtNDhhZC0z Y2ZmLWJhYWEtOWM2YzFkMWQ0NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTAzZTJjNjgtM2NkZC00N2U0LWJj ZTAtMDdmYWFlYmE3OGUxLzEwM2UyYzY4LTNjZGQtNDdlNC1iY2UwLTA3ZmFhZWJh NzhlMS5jcmwwHwYDVR0jBBgwFoAUkE2cG+aWpWcHKGsyEoCGMIyr1S0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDNlMmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2Zh YWViYTc4ZTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4CoMA0E AgACMAcDBQAmBozAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAMH01Iw36xVFYzd57ebVwmN0ZonU2Jf4pFKI pXU++XazfOZ/l98mGi9MaAFP4pyh9l66ge5vmp/mvjUqdTH0kg/dKKLxGmiXUwEk /9taxBvlmF3/bq6MisX6bmAIzSSzR68+yrEz6L7kfJ+6tpAUQT9myH6S+VpgF7O5 H04yNYhR0jUKk8tOqlzypZ//pYP3c6DLRMwfI8HeLt2sT832ny4ukSZc88BGJL5+ eIetKG3orPtmvE9VQ4wqEKcz2i8sgotzITQ+EDS4BXcgPprIlG3UO3NXLeLHBAcP tYujA7EmWP1vO7pgWJg/Kb2lvUXv3jBGbmdpXoPW22N7WzloNmM= -----END CERTIFICATE-----Generated at Sat May 10 06:22:21 2025 by rpki-client