$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa File: 4611c568-faa4-3083-94c1-062a9876a795.roa (raw, json) Hash identifier: rnYB/Hv22vwrC9ny49JoO2YTX0ZYe5+w4FKeeOGO9vM= Subject key identifier: EE:71:F8:DA:83:06:F1:B8:3C:31:18:BF:76:9A:0E:DB:11:A1:5E:E1 Certificate issuer: /CN=268f6692-999f-4dd3-86b7-32b134a18d56 Certificate serial: 010D0C9F43285848FD56CDCC413048268CC30E00 Authority key identifier: 99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 401459 IP address blocks: 23.130.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cd:cc:41:30:48:26:8c:c3:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f6692-999f-4dd3-86b7-32b134a18d56 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=85a04a84-4dfa-43fb-a455-eaab39945fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:24:b0:d4:82:c1:15:0d:61:27:38:46:da: 1d:e9:f2:ed:a1:70:2f:1d:3f:1f:85:30:03:76:bb: 12:3d:c3:a7:d9:97:6f:d2:39:73:85:db:df:b3:18: 05:81:cc:09:0c:70:e6:bc:ff:14:31:a1:b6:fd:d5: 10:a8:48:73:bc:37:32:6c:43:c1:6a:64:ba:e6:2f: e1:74:16:bc:99:af:42:b4:f7:cb:b3:27:47:c2:f5: b9:1a:d2:3f:1d:9a:35:02:c0:a4:f9:cb:91:6d:aa: 1c:de:86:ed:bd:64:8f:cc:22:f7:2e:42:eb:7d:19: 2c:5c:89:2b:38:db:15:73:d5:96:4c:70:04:d9:7a: 08:89:71:62:70:61:a6:06:2a:df:29:dc:73:b2:1d: 47:50:80:fa:3a:11:de:78:69:c5:2f:a1:c9:bd:5f: 09:6c:b7:6e:30:97:1e:3d:58:6c:36:b5:7f:82:6b: 0a:12:bf:fa:63:45:df:8c:ed:4e:4f:94:9f:00:fc: d8:7f:5d:0f:af:89:00:69:96:68:85:7e:10:12:f5: 03:98:79:50:e3:b8:53:a9:18:d2:16:2d:80:46:4d: 24:aa:52:a5:6d:bc:31:2b:c4:3b:d7:44:c1:61:2a: 9d:6e:47:f7:fd:64:6b:f2:7b:6b:9f:9c:4c:3b:42: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:71:F8:DA:83:06:F1:B8:3C:31:18:BF:76:9A:0E:DB:11:A1:5E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl X509v3 Authority Key Identifier: keyid:99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer sbgp-ipAddrBlock: critical IPv4: 23.130.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:51:6c:a3:e0:b7:94:49:78:fe:20:68:17:75:07:7a:cb:e4: 1a:bf:81:2c:12:1a:a1:31:b0:a9:ab:c1:65:95:09:0f:69:69: 93:03:15:63:a6:ae:61:9f:a4:6f:b8:cf:f0:47:d9:11:e0:79: a2:d5:26:cb:5b:b4:05:5c:8a:f0:28:66:e6:3a:ac:a8:62:8e: aa:b4:ab:e0:d9:6e:50:12:b6:88:a8:a1:2d:3b:2a:d3:a9:d2: 2f:39:33:62:ba:e0:f3:e0:3d:7a:36:0e:f6:38:24:f4:63:0a: 56:03:c8:84:d8:ca:ae:68:25:9a:91:ce:ea:2c:02:53:2b:7c: 6e:76:4f:8c:7a:35:d0:65:57:e4:54:f0:5c:93:f1:fc:04:b4: 69:6d:47:cf:cb:1f:fe:4f:6a:73:59:fd:9e:0d:e6:91:52:7b: cf:49:04:02:e1:1f:b8:dd:72:c6:8a:3c:be:8c:c7:fb:3c:87: 31:8d:e4:d8:c0:b2:07:da:90:a7:30:8b:6b:3d:25:c9:05:03: 07:30:5a:f3:3e:3d:c4:b1:7b:62:cb:dd:d0:3b:64:6c:0a:6c: 9d:f5:a8:f5:5f:d7:5c:da:1e:70:39:0c:32:5c:a8:0f:66:08: 26:35:2c:f1:cc:f2:0f:4a:ad:47:28:4c:fd:5c:ca:43:53:91: 31:d3:0a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs3MQTBIJozDDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY4ZjY2OTItOTk5Zi00ZGQzLTg2YjctMzJiMTM0YTE4 ZDU2MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODVhMDRhODQtNGRmYS00M2ZiLWE0NTUtZWFhYjM5OTQ1ZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8AksNSCwRUNYSc4Rtod6fLtoXAvHT8fhTAD drsSPcOn2Zdv0jlzhdvfsxgFgcwJDHDmvP8UMaG2/dUQqEhzvDcybEPBamS65i/h dBa8ma9CtPfLsydHwvW5GtI/HZo1AsCk+cuRbaoc3obtvWSPzCL3LkLrfRksXIkr ONsVc9WWTHAE2XoIiXFicGGmBirfKdxzsh1HUID6OhHeeGnFL6HJvV8JbLduMJce PVhsNrV/gmsKEr/6Y0XfjO1OT5SfAPzYf10Pr4kAaZZohX4QEvUDmHlQ47hTqRjS Fi2ARk0kqlKlbbwxK8Q710TBYSqdbkf3/WRr8ntrn5xMO0K7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5x+NqDBvG4PDEYv3aaDtsRoV7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNjhm NjY5Mi05OTlmLTRkZDMtODZiNy0zMmIxMzRhMThkNTYvNDYxMWM1NjgtZmFhNC0z MDgzLTk0YzEtMDYyYTk4NzZhNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjY4ZjY2OTItOTk5Zi00ZGQzLTg2 YjctMzJiMTM0YTE4ZDU2LzI2OGY2NjkyLTk5OWYtNGRkMy04NmI3LTMyYjEzNGEx OGQ1Ni5jcmwwHwYDVR0jBBgwFoAUmYEPro6tS74cKMer2/z6JV3uR7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNjhmNjY5Mi05OTlmLTRkZDMtODZiNy0zMmIx MzRhMThkNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNRbKPgt5RJeP4gaBd1B3rL5Bq/gSwSGqExsKmrwWWVCQ9paZMDFWOm rmGfpG+4z/BH2RHgeaLVJstbtAVcivAoZuY6rKhijqq0q+DZblAStoiooS07KtOp 0i85M2K64PPgPXo2DvY4JPRjClYDyITYyq5oJZqRzuosAlMrfG52T4x6NdBlV+RU 8FyT8fwEtGltR8/LH/5PanNZ/Z4N5pFSe89JBALhH7jdcsaKPL6Mx/s8hzGN5NjA sgfakKcwi2s9JckFAwcwWvM+PcSxe2LL3dA7ZGwKbJ31qPVf11zaHnA5DDJcqA9m CCY1LPHM8g9KrUcoTP1cykNTkTHTCjc= -----END CERTIFICATE-----Generated at Sat May 10 21:34:06 2025 by rpki-client