$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa File: 70a46534-e8e5-3181-abb5-2f44dc79049a.roa (raw, json) Hash identifier: t19NbfB34xAl8FIna0WZxFYXbMZmPfhEVgH3Z/JyuXY= Subject key identifier: CB:E1:CC:57:D3:F2:FC:3C:10:AF:75:39:33:36:7A:CB:68:5D:92:4E Certificate issuer: /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Certificate serial: 010D0C9F43285849CAAC76A91BC28A3148DED380 Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa Signing time: Fri 09 May 2025 03:14:36 +0000 ROA not before: Fri 09 May 2025 03:14:36 +0000 ROA not after: Thu 07 Aug 2025 03:14:36 +0000 asID: 209699 IP address blocks: 23.138.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ca:ac:76:a9:1b:c2:8a:31:48:de:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Validity Not Before: May 9 03:14:36 2025 GMT Not After : Aug 7 03:14:36 2025 GMT Subject: CN=34660689-5431-41e2-82a1-93d305f43dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:59:d7:dc:07:6e:88:f7:41:a4:9b:52:33: 8c:b3:60:45:6b:49:1e:e1:97:a4:18:4d:33:a3:0d: af:c8:e2:74:4e:35:44:2a:8c:3a:3b:72:71:53:a5: ba:09:6a:31:b6:41:00:50:5e:a5:7f:44:24:3d:10: 70:47:90:a2:dc:f8:f0:c9:6c:36:27:b0:f2:52:e8: 27:a7:05:76:89:e4:2b:63:28:d9:c4:7e:32:5a:47: 06:66:27:0f:a8:46:46:3b:f5:d9:6e:35:15:fb:61: 79:8e:b8:ca:a2:e4:ad:8b:e7:b7:44:36:e7:64:57: da:4a:fa:d8:d7:06:83:e9:ad:f1:b2:99:76:cb:47: a7:a6:81:50:bc:98:40:22:81:02:a5:df:22:70:10: 1d:53:23:e1:28:7c:21:21:09:f4:d3:62:01:10:91: a9:d0:b8:9c:c3:fa:89:2b:b2:23:e8:44:2b:8e:db: f5:5e:58:75:1a:a8:6b:05:61:f8:c2:1b:85:3a:2a: a1:65:2f:aa:0c:e9:d5:01:dc:a2:e6:60:7f:b5:c2: a8:d1:27:9c:f0:16:16:7c:5e:4f:45:08:2b:d9:7d: 93:47:5c:8f:8a:e7:26:0f:68:bc:8d:8b:e8:af:0e: 6e:83:9e:1c:ad:37:62:c7:32:9e:4a:44:a0:bb:58: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E1:CC:57:D3:F2:FC:3C:10:AF:75:39:33:36:7A:CB:68:5D:92:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl X509v3 Authority Key Identifier: keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cf:df:2e:d2:16:b3:a5:14:de:07:2e:29:0b:ea:e2:fc:00: 50:df:65:26:e7:eb:40:f5:af:ec:1d:89:5f:3e:ee:d2:06:60: cd:11:48:6c:8e:be:63:94:bf:cb:0c:fc:df:31:a5:a8:93:a8: 2f:ab:23:84:ce:2d:e6:e7:96:f5:07:ee:07:2b:b9:5b:a5:ff: 9c:ae:0d:71:30:b0:8e:f3:f4:52:25:d9:84:57:7d:25:15:72: 54:c6:d8:e8:96:e9:2b:90:12:9a:e1:aa:f1:b7:4a:34:88:0d: 25:25:eb:0a:db:89:93:0f:3d:2f:b5:d6:2d:8b:d2:de:8b:e6: 97:89:85:73:ac:d7:15:36:23:30:d2:f3:28:b0:6a:eb:3c:ae: 22:fb:a7:89:7a:61:5c:26:8d:2e:3c:56:a1:54:ed:d8:d6:49: 3f:08:8f:e7:6a:b4:5f:6b:71:38:db:9d:ca:e0:8f:4f:d1:77: 31:1b:3b:12:cc:bf:80:cb:bb:7e:56:13:03:7a:0c:5f:0c:3b: 7b:a2:9e:8e:34:7e:1b:a6:41:a1:83:13:e8:a3:1f:24:26:6e: 40:7b:fe:6f:5f:ae:fa:14:c9:1d:63:d5:93:0d:63:4c:49:c5: f1:00:d7:36:02:a3:3c:a7:77:72:3a:2e:6f:84:d5:1f:09:c4: 69:5e:b7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnKrHapG8KKMUje04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMzZGRiYjItZmYyMS00YjA3LWI0ZTctMjY2ZDZkZjVh NmI1MB4XDTI1MDUwOTAzMTQzNloXDTI1MDgwNzAzMTQzNlowLzEtMCsGA1UEAxMk MzQ2NjA2ODktNTQzMS00MWUyLTgyYTEtOTNkMzA1ZjQzZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYtZ19wHboj3QaSbUjOMs2BFa0ke4ZekGE0z ow2vyOJ0TjVEKow6O3JxU6W6CWoxtkEAUF6lf0QkPRBwR5Ci3PjwyWw2J7DyUugn pwV2ieQrYyjZxH4yWkcGZicPqEZGO/XZbjUV+2F5jrjKouSti+e3RDbnZFfaSvrY 1waD6a3xspl2y0enpoFQvJhAIoECpd8icBAdUyPhKHwhIQn002IBEJGp0Licw/qJ K7Ij6EQrjtv1Xlh1GqhrBWH4whuFOiqhZS+qDOnVAdyi5mB/tcKo0Sec8BYWfF5P RQgr2X2TR1yPiucmD2i8jYvorw5ug54crTdixzKeSkSgu1ggVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvhzFfT8vw8EK91OTM2estoXZJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNk ZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZkNmRmNWE2YjUvNzBhNDY1MzQtZThlNS0z MTgxLWFiYjUtMmY0NGRjNzkwNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjMzZGRiYjItZmYyMS00YjA3LWI0 ZTctMjY2ZDZkZjVhNmI1L2IzM2RkYmIyLWZmMjEtNGIwNy1iNGU3LTI2NmQ2ZGY1 YTZiNS5jcmwwHwYDVR0jBBgwFoAU2/Ttm+j9vTSYXGp/0tGrKinYiuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNkZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZk NmRmNWE2YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/P3y7SFrOlFN4HLikL6uL8AFDfZSbn60D1r+wdiV8+7tIGYM0RSGyO vmOUv8sM/N8xpaiTqC+rI4TOLebnlvUH7gcruVul/5yuDXEwsI7z9FIl2YRXfSUV clTG2OiW6SuQEprhqvG3SjSIDSUl6wrbiZMPPS+11i2L0t6L5peJhXOs1xU2IzDS 8yiwaus8riL7p4l6YVwmjS48VqFU7djWST8Ij+dqtF9rcTjbncrgj0/RdzEbOxLM v4DLu35WEwN6DF8MO3uino40fhumQaGDE+ijHyQmbkB7/m9frvoUyR1j1ZMNY0xJ xfEA1zYCozynd3I6Lm+E1R8JxGletxM= -----END CERTIFICATE-----Generated at Tue May 13 06:21:42 2025 by rpki-client