$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/6baba012-218c-3bcb-ac7a-45c289968d81.roa File: 6baba012-218c-3bcb-ac7a-45c289968d81.roa (raw, json) Hash identifier: zff0Zba3ajE05QeYfNZ8xECOd8K/4t4BkzYIIqp2j6M= Subject key identifier: 9D:E1:9E:25:99:A7:78:9A:8D:58:C3:65:D7:E0:1F:D4:FF:39:2F:5B Certificate issuer: /CN=cfe58959-04ed-4c71-a14d-8066ccb1353a Certificate serial: 010D0C9F43285849BDDA221B9379E69868F2C880 Authority key identifier: 13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/6baba012-218c-3bcb-ac7a-45c289968d81.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 400323 IP address blocks: 23.130.88.0/24 maxlen: 24 2620:a2:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:22:1b:93:79:e6:98:68:f2:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe58959-04ed-4c71-a14d-8066ccb1353a Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=ff482f6b-06ff-4aa7-bb56-45ec0f0d4fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:98:67:e7:58:e9:75:4f:59:a0:c0:7f:47: da:fe:90:ee:df:6d:b4:a8:eb:eb:fa:0f:af:af:e6: d8:d1:8a:9e:98:19:90:85:22:74:30:c2:46:d2:0f: f0:0d:52:e9:8f:dd:c2:d4:b7:99:05:35:bc:4f:cc: 60:68:9a:01:28:6e:94:16:45:f3:5d:ca:e5:02:3a: dd:80:03:14:1e:84:1b:e9:81:46:5d:13:1f:af:03: 16:c5:90:74:b4:cc:b0:2e:25:65:71:e8:64:51:93: 95:7c:58:2d:1f:1c:96:d0:bc:01:0c:f1:da:09:c2: 11:c6:a0:e3:97:8b:2a:b5:81:7d:15:dd:fe:d1:30: 5c:6b:fe:43:02:99:1b:fb:12:39:ee:f9:c4:a6:9b: 70:e9:ff:d0:fb:e9:9a:a8:e0:ba:a2:9d:0f:8a:35: 47:37:f8:50:4a:88:68:d5:95:0c:ec:83:fc:67:97: 90:60:1d:56:d6:6b:36:12:28:f6:14:22:6c:4a:c0: 77:bb:19:8c:63:7d:a0:5c:a2:61:24:7f:0e:06:90: 62:21:7a:b7:51:f1:8d:a3:8b:8b:25:8d:de:c5:b2: b4:b5:27:88:4e:c0:68:dd:da:d6:64:b4:c8:ed:93: 4f:9f:5b:1d:52:23:13:a6:73:6d:88:a6:d8:f0:00: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E1:9E:25:99:A7:78:9A:8D:58:C3:65:D7:E0:1F:D4:FF:39:2F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/6baba012-218c-3bcb-ac7a-45c289968d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.crl X509v3 Authority Key Identifier: keyid:13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer sbgp-ipAddrBlock: critical IPv4: 23.130.88.0/24 IPv6: 2620:a2:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c0:93:6e:96:28:b3:34:94:cb:a4:9b:19:26:9e:7b:29:dc: f0:f9:02:f3:87:00:4d:d7:9b:6e:ab:f0:06:64:e7:23:0d:ce: bd:3e:3a:f8:f2:7f:5b:29:64:4a:ad:e4:08:6a:fe:81:b0:92: 98:eb:d9:55:41:18:6d:ee:8f:36:59:79:15:66:6a:01:ed:ea: bd:7a:6d:a2:da:8e:01:9b:10:f5:b2:f0:9f:8a:7f:0d:a1:62: 4a:02:dd:03:78:05:64:65:c2:c0:dd:f7:82:12:2b:d9:b3:ed: 69:7c:66:a8:25:60:c9:8e:13:5c:b2:45:64:bc:a0:f2:59:b7: 29:56:9c:ec:9b:8d:95:6b:2e:f6:56:f4:a4:d5:2e:58:67:f2: c2:fe:4f:ad:2a:b0:2b:22:b3:5c:0e:a5:d8:1a:53:ad:b0:85: 6a:f4:16:3b:c1:2e:97:9e:96:ca:53:e7:03:ad:fa:e4:10:44: 05:66:6e:e0:de:8e:43:ae:2d:64:c2:7a:39:04:5a:c5:66:fd: 35:c5:ba:a4:f6:a3:2c:00:7f:aa:82:25:d1:f2:55:3f:bc:72: 90:e0:aa:4c:e3:0a:a5:ac:64:9f:e3:a0:67:2b:70:27:d0:17: c8:6d:76:86:aa:0e:8c:2c:7d:9f:45:fa:cd:f1:a4:d9:9d:01: 05:c7:67:22 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEm92iIbk3nmmGjyyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZlNTg5NTktMDRlZC00YzcxLWExNGQtODA2NmNjYjEz NTNhMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZmY0ODJmNmItMDZmZi00YWE3LWJiNTYtNDVlYzBmMGQ0ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEGYZ+dY6XVPWaDAf0fa/pDu3220qOvr+g+v r+bY0YqemBmQhSJ0MMJG0g/wDVLpj93C1LeZBTW8T8xgaJoBKG6UFkXzXcrlAjrd gAMUHoQb6YFGXRMfrwMWxZB0tMywLiVlcehkUZOVfFgtHxyW0LwBDPHaCcIRxqDj l4sqtYF9Fd3+0TBca/5DApkb+xI57vnEpptw6f/Q++maqOC6op0PijVHN/hQSoho 1ZUM7IP8Z5eQYB1W1ms2Eij2FCJsSsB3uxmMY32gXKJhJH8OBpBiIXq3UfGNo4uL JY3exbK0tSeITsBo3drWZLTI7ZNPn1sdUiMTpnNtiKbY8ACtWwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJ3hniWZp3iajVjDZdfgH9T/OS9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZmU1 ODk1OS0wNGVkLTRjNzEtYTE0ZC04MDY2Y2NiMTM1M2EvNmJhYmEwMTItMjE4Yy0z YmNiLWFjN2EtNDVjMjg5OTY4ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2ZlNTg5NTktMDRlZC00YzcxLWEx NGQtODA2NmNjYjEzNTNhL2NmZTU4OTU5LTA0ZWQtNGM3MS1hMTRkLTgwNjZjY2Ix MzUzYS5jcmwwHwYDVR0jBBgwFoAUEw963dwvaZ0yeGSXvXm6W0XNxeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZmU1ODk1OS0wNGVkLTRjNzEtYTE0ZC04MDY2 Y2NiMTM1M2EuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4JYMA8E AgACMAkDBwAmIACioAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMcCTbpYoszSUy6SbGSaeeync8PkC84cA TdebbqvwBmTnIw3OvT46+PJ/WylkSq3kCGr+gbCSmOvZVUEYbe6PNll5FWZqAe3q vXptotqOAZsQ9bLwn4p/DaFiSgLdA3gFZGXCwN33ghIr2bPtaXxmqCVgyY4TXLJF ZLyg8lm3KVac7JuNlWsu9lb0pNUuWGfywv5PrSqwKyKzXA6l2BpTrbCFavQWO8Eu l56WylPnA6365BBEBWZu4N6OQ64tZMJ6OQRaxWb9NcW6pPajLAB/qoIl0fJVP7xy kOCqTOMKpaxkn+OgZytwJ9AXyG12hqoOjCx9n0X6zfGk2Z0BBcdnIg== -----END CERTIFICATE-----Generated at Sat May 10 03:11:20 2025 by rpki-client