$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa File: 4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json) Hash identifier: fz6j68rrX3KMNdZTv1LPiiFkCrpnjf3TwGlGwlMC5T4= Subject key identifier: FA:9A:EA:20:87:03:AA:3B:EB:70:9F:3E:22:85:EE:57:D8:2C:44:79 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858495EEEDBBBF07C5348193E8C50 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16509 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:db:bb:f0:7c:53:48:19:3e:8c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=d72adc2f-8826-4e3f-8700-bb1b9b9eb530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:75:ae:29:92:ef:09:a5:d8:60:49:89:67: 5a:35:fb:42:f4:3d:79:75:05:b8:7f:e6:09:1b:c5: ff:d0:a8:9b:76:3d:75:0f:04:85:7a:a4:40:b0:99: f7:57:9c:0d:67:4d:7f:6a:a5:f9:90:c6:89:51:9a: 48:69:43:a6:15:7f:93:2e:91:93:1e:51:b7:fe:a0: 93:e6:33:c4:0e:af:a7:e4:5f:5f:db:db:02:44:74: ce:41:fe:a3:e2:30:f7:5e:60:28:8c:7f:e1:d7:f8: 84:0e:1b:59:95:d1:79:fd:3a:c6:16:fb:ee:67:c9: 71:ae:a3:4e:de:b0:66:9d:0b:65:d0:9f:95:18:e5: d0:dc:fa:5c:47:35:4c:a7:9c:a1:a0:e4:2a:d8:93: fc:5a:11:3d:79:3c:e4:8b:b6:18:a5:cf:88:5d:14: be:63:46:65:02:21:fb:51:d4:6c:f2:02:b6:bd:b2: 6d:7b:e6:e7:7f:89:d7:9c:68:56:a5:38:01:46:09: 9d:b1:39:8c:bf:12:ca:a6:94:56:fd:1b:69:a3:31: a3:e6:e6:99:d3:b1:fc:29:d1:01:75:32:5e:13:30: be:52:a8:28:49:b8:21:e1:60:47:a4:9f:81:48:7b: 2b:90:4b:c5:dd:fb:ec:0f:3c:46:12:59:90:5c:51: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:EA:20:87:03:AA:3B:EB:70:9F:3E:22:85:EE:57:D8:2C:44:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:7a:7a:da:5d:ec:c8:c0:b8:da:da:57:42:54:d6:a2:3b:65: 46:54:7c:10:6f:f7:dd:50:30:0d:ff:38:76:8d:90:d2:16:6e: 98:9f:03:a0:76:60:21:b9:1d:20:9a:57:fe:7a:a5:0f:b9:a0: 9e:d5:5e:5d:98:de:38:5a:3d:30:4c:4d:a5:5a:96:4e:4a:52: d6:8d:49:b1:2d:ab:31:20:36:2d:42:2f:54:6c:3c:64:29:2c: 26:88:2e:f5:8d:49:51:69:33:04:c1:d9:02:d4:f1:99:5d:fb: 3f:d6:a6:75:b2:6e:8c:d7:40:3c:4a:c0:c2:80:42:48:3f:4a: 25:05:f1:e9:9a:4f:8b:85:bb:22:0b:05:6c:7f:76:6b:c5:d1: b0:91:6c:c5:58:83:01:4c:1d:5a:fa:69:78:1c:47:d1:63:4e: b4:ff:fc:4d:8d:40:d6:23:d3:60:6e:9f:9c:cd:18:8d:c1:6d: c1:9c:09:6b:d7:ba:27:9a:70:54:18:47:80:22:63:14:50:70: 85:00:3a:e3:b5:e2:67:78:56:f7:3a:10:bc:1b:c5:23:11:6f: 9d:dd:d7:53:5a:7e:8f:f7:b2:a5:d6:16:d4:f1:39:56:9d:7e: 34:b1:41:46:30:a2:0d:01:ec:fa:e2:3f:a6:a4:4e:ff:5c:c7: f9:5f:e3:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tu78HxTSBk+jFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk ZDcyYWRjMmYtODgyNi00ZTNmLTg3MDAtYmIxYjliOWViNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngh1rimS7wml2GBJiWdaNftC9D15dQW4f+YJ G8X/0Kibdj11DwSFeqRAsJn3V5wNZ01/aqX5kMaJUZpIaUOmFX+TLpGTHlG3/qCT 5jPEDq+n5F9f29sCRHTOQf6j4jD3XmAojH/h1/iEDhtZldF5/TrGFvvuZ8lxrqNO 3rBmnQtl0J+VGOXQ3PpcRzVMp5yhoOQq2JP8WhE9eTzki7YYpc+IXRS+Y0ZlAiH7 UdRs8gK2vbJte+bnf4nXnGhWpTgBRgmdsTmMvxLKppRW/RtpozGj5uaZ07H8KdEB dTJeEzC+UqgoSbgh4WBHpJ+BSHsrkEvF3fvsDzxGElmQXFEdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqa6iCHA6o763CfPiKF7lfYLER5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDA5OGUxMDMtZDA0YS0z NDY1LWE3ZTEtZjNkZWJmN2E5ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp6etpd7MjAuNraV0JU1qI7ZUZUfBBv991QMA3/OHaNkNIWbpifA6B2 YCG5HSCaV/56pQ+5oJ7VXl2Y3jhaPTBMTaValk5KUtaNSbEtqzEgNi1CL1RsPGQp LCaILvWNSVFpMwTB2QLU8Zld+z/WpnWybozXQDxKwMKAQkg/SiUF8emaT4uFuyIL BWx/dmvF0bCRbMVYgwFMHVr6aXgcR9FjTrT//E2NQNYj02Bun5zNGI3BbcGcCWvX uieacFQYR4AiYxRQcIUAOuO14md4Vvc6ELwbxSMRb53d11Nafo/3sqXWFtTxOVad fjSxQUYwog0B7PriP6akTv9cx/lf49Y= -----END CERTIFICATE-----Generated at Sun May 11 01:48:39 2025 by rpki-client