$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa File: 3703ae97-7694-31f8-a5e2-913a128e0be6.roa (raw, json) Hash identifier: WbzgQI2mjYFRd8CwwTwKW/U6ZnRmx9ZuqPMWd0Vw2j4= Subject key identifier: DC:E7:CA:E6:2B:0D:7C:FD:A5:25:78:DF:1A:99:A1:D4:8C:23:EA:73 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849B9AA07D4089091978997F780 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 135.23.0.0/16 maxlen: 16 135.23.0.0/19 maxlen: 19 135.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:07:d4:08:90:91:97:89:97:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=88e7b77c-1714-4aaf-80c9-0c996cf30604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:86:c7:f7:7a:30:f7:69:3a:a9:21:f4:1b: ea:5e:0d:83:9d:03:b8:b5:db:0a:80:c1:2e:a2:d7: 1f:be:db:e6:5c:de:9c:b5:be:b9:30:5a:f7:07:1f: 50:0a:ac:a5:68:4c:d8:18:30:4d:47:ab:9c:04:85: c9:ba:bf:b9:71:b2:b2:b6:fb:d2:fb:ed:06:0c:f7: 29:8b:6a:ad:ac:8b:55:a5:82:d7:9f:6e:7d:a0:2d: c9:e8:df:a8:0d:60:61:ee:4e:a3:b9:00:04:3c:2f: c7:f6:1a:d3:b1:00:93:18:81:4b:1c:90:31:d6:fa: 4c:40:d1:1e:eb:1a:33:ee:6b:7d:e0:11:84:4f:d5: 79:a7:4a:d4:23:97:89:18:51:cd:49:8a:ad:2f:6c: 64:0e:a4:9e:92:21:cb:32:15:f6:5f:cc:97:7f:b3: b4:96:33:de:de:0e:95:ec:6f:48:25:5e:17:5f:8d: f2:e0:09:c4:15:85:db:41:4a:7c:b6:1b:c8:61:f4: 70:55:f5:81:72:80:9f:a2:97:70:16:57:78:2d:f6: fc:4b:5a:15:ad:0e:b6:dc:af:f1:79:11:ff:b3:f9: 82:54:5d:51:a2:7a:3b:20:a2:cf:0a:cc:96:92:a2: 48:94:82:fc:90:2d:0f:19:8e:c0:17:4a:4e:20:5f: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E7:CA:E6:2B:0D:7C:FD:A5:25:78:DF:1A:99:A1:D4:8C:23:EA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 135.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ca:71:45:a5:52:6c:3b:42:8a:31:09:e5:6f:5a:1c:2b:53: f4:f3:10:b2:b5:ad:fd:08:1c:85:e0:e1:77:43:c3:06:90:e9: 13:af:b3:da:f7:48:54:71:05:83:d6:21:f7:38:63:61:88:15: 80:48:76:6b:67:b9:45:e2:cb:56:f0:43:f2:63:b4:46:35:e7: e6:35:d8:3c:ea:1b:3d:12:bd:1a:13:59:d8:73:61:2d:39:46: 96:59:ac:c0:ba:0c:cf:1f:0e:41:60:68:7c:72:5c:ce:d4:58: c4:de:e5:f5:74:d7:76:aa:5e:83:46:2f:e3:93:95:88:75:e9: 6c:ca:21:7d:8e:73:1d:fb:81:66:52:35:ab:42:7e:68:a4:13: df:2d:d1:0b:41:d3:a1:93:79:20:f2:a2:f5:5b:1e:4e:78:64: a8:a5:53:8a:97:f9:c7:30:f0:d4:2a:4e:b9:9b:45:db:7c:4c: 63:fe:b1:1e:13:6b:d8:16:f2:41:bf:59:a8:98:a0:ea:09:30: 19:5d:2b:d4:01:d0:e6:b9:6a:64:96:57:6f:a6:4b:53:6f:79: 43:a3:3d:c2:7b:79:50:c3:2f:42:03:19:89:0a:67:4f:ff:5f: 0a:12:6b:53:fc:8e:c6:ac:f3:de:3a:56:46:8c:23:df:c2:29: 67:e0:f3:22 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEm5qgfUCJCRl4mX94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODhlN2I3N2MtMTcxNC00YWFmLTgwYzktMGM5OTZjZjMwNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdaGx/d6MPdpOqkh9BvqXg2DnQO4tdsKgMEu otcfvtvmXN6ctb65MFr3Bx9QCqylaEzYGDBNR6ucBIXJur+5cbKytvvS++0GDPcp i2qtrItVpYLXn259oC3J6N+oDWBh7k6juQAEPC/H9hrTsQCTGIFLHJAx1vpMQNEe 6xoz7mt94BGET9V5p0rUI5eJGFHNSYqtL2xkDqSekiHLMhX2X8yXf7O0ljPe3g6V 7G9IJV4XX43y4AnEFYXbQUp8thvIYfRwVfWBcoCfopdwFld4Lfb8S1oVrQ623K/x eRH/s/mCVF1Rono7IKLPCsyWkqJIlIL8kC0PGY7AF0pOIF8ObQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNznyuYrDXz9pSV43xqZodSMI+pzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMzcwM2FlOTctNzY5NC0z MWY4LWE1ZTItOTEzYTEyOGUwYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhxcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANcpxRaVSbDtCijEJ5W9aHCtT9PMQsrWt/QgcheDhd0PDBpDpE6+z2vdI VHEFg9Yh9zhjYYgVgEh2a2e5ReLLVvBD8mO0RjXn5jXYPOobPRK9GhNZ2HNhLTlG llmswLoMzx8OQWBofHJcztRYxN7l9XTXdqpeg0Yv45OViHXpbMohfY5zHfuBZlI1 q0J+aKQT3y3RC0HToZN5IPKi9VseTnhkqKVTipf5xzDw1CpOuZtF23xMY/6xHhNr 2BbyQb9ZqJig6gkwGV0r1AHQ5rlqZJZXb6ZLU295Q6M9wnt5UMMvQgMZiQpnT/9f ChJrU/yOxqzz3jpWRowj38IpZ+DzIg== -----END CERTIFICATE-----Generated at Sat May 10 10:27:59 2025 by rpki-client