$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa File: abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa (raw, json) Hash identifier: YfB9NgzPupeI8HmYpMa/E1MGdEKZ4xtzBLWTU1gttr4= Subject key identifier: 16:E1:5F:A7:10:E5:11:00:EE:DD:45:FE:80:99:A7:EF:BC:54:18:B3 Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F432858498CFF11EFD853EE2B26E36060 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 395201 IP address blocks: 23.227.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:11:ef:d8:53:ee:2b:26:e3:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=1947a240-972f-45c5-a3ab-5ae804934438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:6b:5c:3f:2c:07:21:6d:4f:29:f3:86:ff: f5:bd:8f:90:b6:88:e1:74:3d:0f:bd:a9:fd:ef:61: e2:cb:48:8d:42:7d:0f:56:85:7c:26:75:6d:99:e0: 3d:a5:e7:93:8a:34:f9:b1:e2:eb:96:c3:80:61:e9: 0f:7d:cb:f5:35:3d:8e:da:0a:59:33:06:43:8d:73: 97:c5:26:b3:7c:4f:85:02:74:b1:5b:a6:1f:62:09: 07:b1:3a:81:b8:fa:c9:56:79:87:d4:83:f5:dd:fc: d2:ee:04:bf:3f:bd:12:e5:54:58:13:83:fe:f6:63: 7e:68:04:a3:18:45:17:c7:dc:8a:75:a4:de:f8:b4: 87:04:fa:f7:3c:c0:b4:c6:05:8e:09:43:25:43:aa: 79:e3:47:ca:ac:55:9d:c5:70:43:07:67:40:02:24: 23:6f:76:f0:85:f8:69:87:62:dd:20:a4:ca:c3:9d: 29:0f:0c:d0:61:98:eb:a3:9a:70:ef:81:d6:f1:e0: f5:d7:8e:95:5a:a5:a9:0c:ca:6b:c9:31:91:10:59: 65:0f:2d:fb:f9:18:26:8d:35:b2:b2:27:8e:1c:4a: 35:d5:f7:ea:ed:30:9d:a7:03:de:38:13:c2:ce:a5: ee:6b:10:13:ad:19:ae:0a:f5:4c:d6:0a:47:52:b4: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E1:5F:A7:10:E5:11:00:EE:DD:45:FE:80:99:A7:EF:BC:54:18:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 23.227.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a9:24:7a:da:46:a8:2e:fb:e5:b2:a0:d2:0c:db:92:d6:2a: 28:ba:86:a7:fa:c2:8e:b9:e3:24:42:91:29:bd:f7:0f:2f:e9: e0:c8:a8:e3:01:14:20:3d:37:fb:06:ea:69:d4:c2:7f:5e:d2: 00:fa:67:16:0d:82:3b:6f:18:9a:9d:7d:76:9a:8e:39:c3:99: 09:f1:6f:e4:46:34:26:fb:73:61:0d:0f:d4:92:1f:8f:0a:74: a2:63:18:60:a7:86:11:db:de:01:19:5f:f7:2c:31:8b:0b:d7: 33:f7:07:ba:3b:80:35:b2:88:99:ac:8f:75:d5:5a:ab:ca:4b: 58:d9:3a:82:9d:57:ff:6b:68:a9:1a:cf:6f:9a:22:ea:87:63: d7:92:28:10:7a:c2:a5:6c:cd:08:2c:db:82:2d:b9:e1:cb:27: d7:c1:11:55:9f:e7:73:b1:3d:6a:9b:97:89:61:23:ca:c8:32: 95:34:4b:c1:63:9d:ed:d0:50:07:c7:ed:a5:a1:89:07:31:2c: 67:82:bf:59:5f:2a:a8:11:3d:50:a4:4d:30:93:7c:5d:b4:96: 59:a5:c8:74:26:d5:0a:b6:61:ad:52:ea:e5:ea:3e:fb:d0:e9: 8a:c3:36:67:9f:3b:13:51:ef:e0:44:73:dd:a1:c9:1f:bc:0b: 9e:e2:91:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xHv2FPuKybjYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MTk0N2EyNDAtOTcyZi00NWM1LWEzYWItNWFlODA0OTM0NDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOtrXD8sByFtTynzhv/1vY+QtojhdD0Pvan9 72Hiy0iNQn0PVoV8JnVtmeA9peeTijT5seLrlsOAYekPfcv1NT2O2gpZMwZDjXOX xSazfE+FAnSxW6YfYgkHsTqBuPrJVnmH1IP13fzS7gS/P70S5VRYE4P+9mN+aASj GEUXx9yKdaTe+LSHBPr3PMC0xgWOCUMlQ6p540fKrFWdxXBDB2dAAiQjb3bwhfhp h2LdIKTKw50pDwzQYZjro5pw74HW8eD1146VWqWpDMpryTGREFllDy37+RgmjTWy sieOHEo11ffq7TCdpwPeOBPCzqXuaxATrRmuCvVM1gpHUrS9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbhX6cQ5REA7t1F/oCZp++8VBizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvYWJkN2NiOGQtMzcwMC0z OTUzLTliMDgtNTVlZjcyMWNkMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqpJHraRqgu++WyoNIM25LWKii6hqf6wo654yRCkSm99w8v6eDIqOMB FCA9N/sG6mnUwn9e0gD6ZxYNgjtvGJqdfXaajjnDmQnxb+RGNCb7c2END9SSH48K dKJjGGCnhhHb3gEZX/csMYsL1zP3B7o7gDWyiJmsj3XVWqvKS1jZOoKdV/9raKka z2+aIuqHY9eSKBB6wqVszQgs24ItueHLJ9fBEVWf53OxPWqbl4lhI8rIMpU0S8Fj ne3QUAfH7aWhiQcxLGeCv1lfKqgRPVCkTTCTfF20llmlyHQm1Qq2Ya1S6uXqPvvQ 6YrDNmefOxNR7+BEc92hyR+8C57ikfY= -----END CERTIFICATE-----Generated at Wed Apr 30 23:46:06 2025 by rpki-client