$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa File: 47c9278e-dc66-39c2-884a-deec4ee4f615.roa (raw, json) Hash identifier: 8h2eNbKxZsAU8Th0J3elXKggvsk8vzf/Y65G8b0CEVE= Subject key identifier: A3:B6:76:DD:FD:C2:0C:D8:02:96:A5:6D:B1:00:34:E7:C9:F3:A6:5F Certificate issuer: /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Certificate serial: 010D0C9F432858499AF48101EF8B1B0F1F3F0640 Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20473 IP address blocks: 23.158.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:81:01:ef:8b:1b:0f:1f:3f:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=7ab10c15-bb7d-47b6-88a9-5de43705499a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:96:32:84:65:de:17:d5:54:e9:19:72:c7: bd:30:c3:45:5f:f0:5c:a7:4e:1a:53:19:28:f8:c1: db:08:8a:68:6a:f5:03:a9:f0:6b:f2:0e:29:24:5c: 2f:06:0c:fc:d2:e2:c7:db:63:2a:dc:25:e1:e2:1f: c3:a6:ab:26:76:ce:2e:e3:6b:08:0d:b3:fd:29:f6: ca:41:3c:ff:30:17:1e:c9:8e:cc:15:57:96:f1:80: 2b:b7:b6:a5:50:1c:f5:df:54:96:db:56:40:9c:58: 8c:1a:bb:4b:9e:7c:e4:85:1f:cc:9f:78:13:98:a5: 94:c6:88:1d:c2:5f:54:68:e4:63:c1:93:fe:a7:55: 0c:0d:89:01:20:7e:ae:58:3e:b4:ec:48:b5:cf:7b: 0a:d9:69:d2:34:4d:47:5b:8e:d2:b4:2c:99:bc:53: d4:19:e7:11:e6:ba:66:c2:b3:37:4c:c2:99:91:6c: ad:0e:c9:50:bc:b7:19:be:13:7d:ca:49:4b:0f:cb: 98:32:66:c6:56:05:37:52:bc:09:a2:49:c3:bf:37: 8b:a4:0d:ab:d9:30:0d:e4:fc:be:cb:48:f1:d1:ea: b4:02:42:94:5f:51:1e:c4:68:65:40:b4:c1:75:55: 09:c8:0c:66:07:ea:50:3d:db:86:1b:f8:db:d0:ec: fe:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B6:76:DD:FD:C2:0C:D8:02:96:A5:6D:B1:00:34:E7:C9:F3:A6:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl X509v3 Authority Key Identifier: keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer sbgp-ipAddrBlock: critical IPv4: 23.158.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8f:72:80:f6:f4:7a:a1:5e:07:e0:15:86:84:f2:47:34:dc: 01:53:e7:47:b9:d4:45:e5:b1:50:bd:c2:c4:da:10:13:9d:bd: 72:87:88:d9:d6:24:50:9e:ce:57:88:93:bc:69:51:72:fd:2c: a5:61:e0:47:c7:2d:18:52:06:19:78:f2:d5:72:9a:3c:0a:aa: d8:6a:d1:a0:8e:42:d9:4b:d9:28:de:4a:13:54:ff:ad:39:89: 43:9b:83:75:72:7f:bc:44:ea:da:a2:47:1e:5e:66:b2:61:6e: 8d:86:18:e6:c8:d3:49:6b:6e:63:76:f4:38:94:6d:ca:96:b1: 8b:a0:86:b9:57:b6:16:5a:2a:74:cc:1c:7d:b9:70:08:16:14: 4f:ab:24:46:40:76:67:a0:e3:ff:d4:03:fd:4b:bc:27:ac:76: 77:9a:e9:a3:98:1c:75:59:97:d3:75:d5:d3:1b:0d:b4:a1:bd: b5:eb:1d:bb:36:bd:64:fd:3b:70:98:6c:df:93:0e:79:d9:5a: 17:f5:6f:26:9a:7b:12:4b:bd:16:ef:1b:2f:7e:10:ca:0c:c9: 7f:73:0c:10:ec:3d:00:cf:14:f2:65:47:ed:f5:a6:8b:1c:27: 71:3d:75:0b:55:1c:60:9f:89:70:02:13:20:20:5f:74:82:f0: f5:9d:cd:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IEB74sbDx8/BkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlYTRmNmEtYmI0ZS00NmJlLWIzMjctMzMwYmY4Zjdl MjA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk N2FiMTBjMTUtYmI3ZC00N2I2LTg4YTktNWRlNDM3MDU0OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2yWMoRl3hfVVOkZcse9MMNFX/Bcp04aUxko +MHbCIpoavUDqfBr8g4pJFwvBgz80uLH22Mq3CXh4h/Dpqsmds4u42sIDbP9KfbK QTz/MBceyY7MFVeW8YArt7alUBz131SW21ZAnFiMGrtLnnzkhR/Mn3gTmKWUxogd wl9UaORjwZP+p1UMDYkBIH6uWD607Ei1z3sK2WnSNE1HW47StCyZvFPUGecR5rpm wrM3TMKZkWytDslQvLcZvhN9yklLD8uYMmbGVgU3UrwJoknDvzeLpA2r2TAN5Py+ y0jx0eq0AkKUX1EexGhlQLTBdVUJyAxmB+pQPduGG/jb0Oz++QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO2dt39wgzYApalbbEANOfJ86ZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVh NGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBiZjhmN2UyMDkvNDdjOTI3OGUtZGM2Ni0z OWMyLTg4NGEtZGVlYzRlZTRmNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmZlYTRmNmEtYmI0ZS00NmJlLWIz MjctMzMwYmY4ZjdlMjA5LzJmZWE0ZjZhLWJiNGUtNDZiZS1iMzI3LTMzMGJmOGY3 ZTIwOS5jcmwwHwYDVR0jBBgwFoAURri9dl6NDsmaHWINCw4t6L5O1xEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVhNGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBi ZjhmN2UyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF55YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWPcoD29HqhXgfgFYaE8kc03AFT50e51EXlsVC9wsTaEBOdvXKHiNnW JFCezleIk7xpUXL9LKVh4EfHLRhSBhl48tVymjwKqthq0aCOQtlL2SjeShNU/605 iUObg3Vyf7xE6tqiRx5eZrJhbo2GGObI00lrbmN29DiUbcqWsYughrlXthZaKnTM HH25cAgWFE+rJEZAdmeg4//UA/1LvCesdnea6aOYHHVZl9N11dMbDbShvbXrHbs2 vWT9O3CYbN+TDnnZWhf1byaaexJLvRbvGy9+EMoMyX9zDBDsPQDPFPJlR+31posc J3E9dQtVHGCfiXACEyAgX3SC8PWdzU8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:47:26 2025 by rpki-client