$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json) Hash identifier: qbrZTQiUExZt2lhbQoRkA2jZsCUDpqixCjP1j9vZ4mY= Subject key identifier: 8F:AA:DA:9D:B7:21:AD:40:DA:0F:3E:FC:CF:A8:79:96:04:DF:00:22 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F43285849B5E938265F8B9426772B8900 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa Signing time: Thu 01 May 2025 16:45:03 +0000 ROA not before: Thu 01 May 2025 16:45:03 +0000 ROA not after: Wed 30 Jul 2025 16:45:03 +0000 asID: 54143 IP address blocks: 23.166.112.0/24 maxlen: 24 2606:7180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:e9:38:26:5f:8b:94:26:77:2b:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: May 1 16:45:03 2025 GMT Not After : Jul 30 16:45:03 2025 GMT Subject: CN=0b90b0d3-0ede-41d8-9a1b-2aaf3cb7b4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:aa:b9:d4:6a:59:11:0f:75:2d:c1:55:a7: 71:16:7f:43:6c:d9:6d:19:3f:4a:86:46:9e:25:35: 4c:b6:5b:a6:9a:13:c9:48:85:c2:50:01:e4:98:06: 01:a5:d4:f2:24:1c:d7:2c:ff:bc:2d:f0:cc:da:08: d3:9c:d0:6f:79:28:1e:9d:46:7d:7f:74:42:e9:75: 09:fc:59:11:2f:ff:4a:69:5f:e5:9f:1e:6f:bb:d8: a5:a9:23:1b:ef:35:5f:97:ce:95:f0:fa:0a:2a:a4: 60:8e:06:1f:56:83:d1:a5:c9:f0:e0:d8:6c:aa:bb: 65:17:9c:54:4a:87:1e:18:b3:44:46:85:af:d0:ef: fb:81:a0:91:df:9e:4c:99:1e:a2:83:58:dd:1d:13: 83:8a:5f:21:04:0c:e9:d4:96:c0:92:93:a9:72:51: e3:19:11:42:66:55:1a:59:a9:48:0d:0c:41:49:f6: 34:b9:8d:9f:95:10:ef:b4:c0:df:6d:b9:ef:a0:b7: fc:99:90:8a:4d:ed:fa:b0:26:08:a7:c6:54:63:9d: 61:79:5a:8c:59:d5:22:d6:a1:3e:a2:99:60:fe:34: 34:b0:d7:2c:54:1d:55:52:26:84:b9:f1:08:12:2b: a0:3d:99:8c:70:38:e7:59:35:39:62:97:26:16:2e: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AA:DA:9D:B7:21:AD:40:DA:0F:3E:FC:CF:A8:79:96:04:DF:00:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.112.0/24 IPv6: 2606:7180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f3:fd:f8:84:ab:bb:87:02:dc:57:f2:0a:c3:12:31:65:53: 36:e0:d0:a9:72:75:b0:ab:8a:d2:96:aa:c8:1b:28:68:22:b1: cd:52:60:7f:85:eb:e2:0e:6e:00:f9:23:a2:27:82:3a:07:1d: 77:dd:63:16:af:3a:87:42:6f:5e:11:a9:b3:5d:22:68:59:79: 79:2c:b9:dc:9b:c1:81:79:f5:74:1c:84:ab:02:fe:b4:3d:11: 10:22:53:93:83:1c:5e:84:8d:d4:f2:72:3a:ae:8b:60:37:94: e3:cb:0d:3e:c4:4e:a2:d3:cc:3f:48:44:68:84:26:b7:ec:1e: df:bf:df:11:13:44:99:0a:5e:fc:43:a7:74:92:4d:a5:0d:69: f3:f5:f0:37:7f:02:59:15:c4:eb:f8:ea:10:3c:ec:2e:a4:25: c5:71:b3:66:59:9d:17:9a:fd:f6:4e:c3:11:55:92:43:0a:6e: 8d:1b:48:d2:f4:4e:3a:03:78:a6:ad:55:1b:6e:31:73:fc:52: 92:59:1e:86:0c:fa:98:42:43:7c:37:0b:20:4e:28:8d:59:09: 18:39:9d:82:68:5c:5c:1e:fa:33:4b:fa:0e:b7:b5:e4:4d:25: 61:4b:79:17:f5:54:cc:c9:77:09:7d:05:57:90:66:0f:87:e9: e6:2e:3b:19 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEm16TgmX4uUJncriQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MDUwMTE2NDUwM1oXDTI1MDczMDE2NDUwM1owLzEtMCsGA1UEAxMk MGI5MGIwZDMtMGVkZS00MWQ4LTlhMWItMmFhZjNjYjdiNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkiqudRqWREPdS3BVadxFn9DbNltGT9Khkae JTVMtlummhPJSIXCUAHkmAYBpdTyJBzXLP+8LfDM2gjTnNBveSgenUZ9f3RC6XUJ /FkRL/9KaV/lnx5vu9ilqSMb7zVfl86V8PoKKqRgjgYfVoPRpcnw4NhsqrtlF5xU SoceGLNERoWv0O/7gaCR355MmR6ig1jdHRODil8hBAzp1JbAkpOpclHjGRFCZlUa WalIDQxBSfY0uY2flRDvtMDfbbnvoLf8mZCKTe36sCYIp8ZUY51heVqMWdUi1qE+ oplg/jQ0sNcsVB1VUiaEufEIEiugPZmMcDjnWTU5YpcmFi64jwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFI+q2p23Ia1A2g8+/M+oeZYE3wAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvY2FhZjFjN2MtZWNmMS0z NzY0LTk2MDgtYjZhMjEzZTNiZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6ZwMA0E AgACMAcDBQAmBnGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGrz/fiEq7uHAtxX8grDEjFlUzbg0KlydbCr itKWqsgbKGgisc1SYH+F6+IObgD5I6IngjoHHXfdYxavOodCb14RqbNdImhZeXks udybwYF59XQchKsC/rQ9ERAiU5ODHF6EjdTycjqui2A3lOPLDT7ETqLTzD9IRGiE JrfsHt+/3xETRJkKXvxDp3SSTaUNafP18Dd/AlkVxOv46hA87C6kJcVxs2ZZnRea /fZOwxFVkkMKbo0bSNL0TjoDeKatVRtuMXP8UpJZHoYM+phCQ3w3CyBOKI1ZCRg5 nYJoXFwe+jNL+g63teRNJWFLeRf1VMzJdwl9BVeQZg+H6eYuOxk= -----END CERTIFICATE-----Generated at Tue May 13 09:50:47 2025 by rpki-client