$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa File: aff7f59a-de88-3f24-af6f-6932047f3217.roa (raw, json) Hash identifier: Cgjq5Lj+K9jEJNb8msxu31sjYWEKySIQHi7PDgnTLEM= Subject key identifier: FE:21:38:72:DD:06:3D:01:33:86:9A:6E:16:8F:3D:B5:88:7C:0C:25 Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F432858499829CF1E8120D080E6C65000 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 33099 IP address blocks: 23.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cf:1e:81:20:d0:80:e6:c6:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=fd1e2eee-af15-4730-af57-c0b10efa6841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:87:ed:62:49:54:0f:d9:db:ec:8c:51:2b: f7:16:be:14:97:ec:f5:53:a6:c8:ad:96:5d:90:5a: 15:65:e5:ce:0c:56:ea:06:9a:7e:38:5d:aa:ce:da: cf:bc:83:b7:d4:6c:72:ab:23:91:69:20:ca:cc:56: 94:6b:7f:33:32:83:b7:93:79:a3:7d:72:b6:8e:fa: 9d:b0:b9:84:b7:62:63:66:58:17:4e:6b:01:41:c0: 1a:02:22:df:eb:2d:4e:27:89:b3:5f:05:28:19:3d: 8e:5f:da:4b:ff:17:4c:83:67:65:50:26:f2:7a:a5: f0:22:e7:f1:78:88:b7:42:b6:db:cd:03:2a:c7:ab: ef:41:d8:dd:7c:9a:c1:63:a3:c8:03:f7:1e:74:43: 13:1c:a3:5e:49:c5:c8:2e:b6:7e:8d:8f:d1:dc:ba: ea:5f:ba:96:25:8f:7f:53:ac:b0:55:fa:a2:44:7e: 10:03:cc:da:3e:83:63:69:dd:9d:72:f4:fd:c0:e2: cf:62:60:01:cc:90:1c:62:04:69:29:cf:a9:c5:b8: 9e:5d:c5:86:ae:73:27:2b:73:0b:ac:f5:86:06:05: be:43:97:d7:f7:0a:23:99:08:d2:86:4b:55:13:5f: 63:a4:45:7a:c7:4e:34:75:d0:c8:03:4c:da:67:8e: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:38:72:DD:06:3D:01:33:86:9A:6E:16:8F:3D:B5:88:7C:0C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:13:49:d3:27:51:06:39:be:c0:23:f7:0f:b9:a8:e3:04:50: 9b:2f:ac:f6:d1:b3:c8:86:60:c9:1a:de:20:09:70:97:d7:41: e7:96:89:19:4b:b4:29:29:ff:55:fa:f3:79:d8:db:13:91:af: 73:d6:41:e3:a5:3d:34:15:9b:7c:65:a5:b5:da:bf:67:3a:d5: 93:7b:be:eb:e3:57:9f:02:9b:9e:0f:11:18:25:f4:c7:b1:f0: de:3d:86:e1:7e:6d:2c:e3:1a:33:39:21:57:6b:23:be:b5:e1: e6:2a:5d:d0:f6:ea:ab:e1:7f:05:40:8d:67:3f:a5:97:a8:23: 0e:6c:30:c7:05:5d:ab:8d:8b:c4:56:52:42:ea:7c:e1:db:20: 98:86:23:ae:bb:0a:04:95:cf:61:8d:a9:28:84:4a:23:1f:4c: 90:b6:e6:89:e1:07:ff:30:a3:2f:2c:37:8f:17:b3:25:8e:af: c4:8d:1e:2a:c0:f9:47:b7:1a:39:89:c1:a0:d3:23:8f:18:b0: 79:57:a0:54:03:f8:86:4e:c0:3b:01:11:a6:38:8b:32:25:ad: 20:66:5b:6f:3a:02:cb:40:b3:be:7c:5a:69:d5:30:ae:4b:0a: cb:ac:24:b7:ec:cb:60:1c:16:70:25:72:f7:27:f6:f2:df:1d: 97:3c:00:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKc8egSDQgObGUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZmQxZTJlZWUtYWYxNS00NzMwLWFmNTctYzBiMTBlZmE2ODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZiH7WJJVA/Z2+yMUSv3Fr4Ul+z1U6bIrZZd kFoVZeXODFbqBpp+OF2qztrPvIO31GxyqyORaSDKzFaUa38zMoO3k3mjfXK2jvqd sLmEt2JjZlgXTmsBQcAaAiLf6y1OJ4mzXwUoGT2OX9pL/xdMg2dlUCbyeqXwIufx eIi3QrbbzQMqx6vvQdjdfJrBY6PIA/cedEMTHKNeScXILrZ+jY/R3LrqX7qWJY9/ U6ywVfqiRH4QA8zaPoNjad2dcvT9wOLPYmABzJAcYgRpKc+pxbieXcWGrnMnK3ML rPWGBgW+Q5fX9wojmQjShktVE19jpEV6x040ddDIA0zaZ45g9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4hOHLdBj0BM4aabhaPPbWIfAwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvYWZmN2Y1OWEtZGU4OC0z ZjI0LWFmNmYtNjkzMjA0N2YzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0TSdMnUQY5vsAj9w+5qOMEUJsvrPbRs8iGYMka3iAJcJfXQeeWiRlL tCkp/1X683nY2xORr3PWQeOlPTQVm3xlpbXav2c61ZN7vuvjV58Cm54PERgl9Mex 8N49huF+bSzjGjM5IVdrI7614eYqXdD26qvhfwVAjWc/pZeoIw5sMMcFXauNi8RW UkLqfOHbIJiGI667CgSVz2GNqSiESiMfTJC25onhB/8woy8sN48XsyWOr8SNHirA +Ue3GjmJwaDTI48YsHlXoFQD+IZOwDsBEaY4izIlrSBmW286AstAs758WmnVMK5L CsusJLfsy2AcFnAlcvcn9vLfHZc8AL0= -----END CERTIFICATE-----Generated at Wed Apr 30 19:34:34 2025 by rpki-client