$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa File: cf738f03-939e-3c47-ac2d-324d33da8d13.roa (raw, json) Hash identifier: mEEk2dfwCBqomKqAP74Hj+mQqJ+3KIPXCb7o9Lfib98= Subject key identifier: 9B:21:19:74:C6:6F:6D:4E:93:64:D4:70:AE:6F:E4:DE:78:87:57:33 Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648 Certificate serial: 010D0C9F432858494F93E7027CCE92F64B4E0600 Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 23470 IP address blocks: 23.172.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:e7:02:7c:ce:92:f6:4b:4e:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=5b157338-b08f-43e1-afff-f5caecd7966d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:72:32:0c:91:6b:19:64:51:75:3a:1e:61: 2a:46:01:2f:6f:fc:75:98:8b:1e:9a:2d:d2:c5:1c: c1:47:3d:be:39:33:15:4f:69:d5:1a:47:40:8b:39: 4a:81:14:7b:91:e9:2a:2f:96:ba:dc:93:e7:e4:31: 89:5e:02:2d:3e:de:44:6e:4d:a2:e5:b0:db:02:02: 4d:57:a1:07:57:57:74:d0:fe:f7:04:b6:3c:b9:e8: 9e:14:ce:10:ae:e5:59:2c:c9:54:ee:4b:dc:7a:cb: 63:df:a5:b9:ce:93:26:af:89:08:76:e9:aa:18:71: 27:3b:f1:63:43:19:09:38:c8:54:a1:30:09:7d:1e: f1:1b:39:a4:60:70:bd:aa:b0:92:0e:b4:a2:82:5d: e6:d4:90:38:32:a3:d1:a1:dd:14:ed:22:93:3c:be: fd:f3:db:15:58:ae:96:00:fb:80:60:13:cb:b8:5b: bd:11:74:14:35:d2:1e:9c:d7:29:12:00:04:e6:a0: 32:1c:68:9d:a7:f3:2f:6d:73:d2:68:f8:50:38:4e: 98:bf:00:93:0f:6a:35:5c:64:a4:82:68:c9:84:93: 8c:fb:4d:e3:f7:56:89:b5:31:98:f2:94:65:df:b7: 14:20:56:0d:c6:d0:8e:f2:95:3e:ae:5e:fc:cb:7e: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:21:19:74:C6:6F:6D:4E:93:64:D4:70:AE:6F:E4:DE:78:87:57:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl X509v3 Authority Key Identifier: keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer sbgp-ipAddrBlock: critical IPv4: 23.172.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:bb:1a:ea:69:2c:c9:86:fc:cc:90:4c:d5:7b:d2:06:a1:26: 39:93:f3:36:13:af:77:61:69:64:cc:21:12:8f:65:a4:be:10: ee:6d:24:45:eb:62:06:f9:5f:ee:11:dc:43:ea:5a:57:75:98: 5e:2a:23:db:4e:d1:5c:27:b5:1c:51:7a:42:ba:62:e2:62:94: 54:2e:ca:93:7f:f8:62:90:55:72:be:b9:d2:9d:5e:ea:51:a1: 27:40:8c:f0:46:a8:0d:4d:a2:4c:8e:f8:5c:6f:d7:98:bb:b8: 11:ab:11:18:75:c0:df:55:91:a8:f8:c9:7c:8f:67:2c:6f:d9: 1a:c2:1d:18:6b:f2:76:eb:64:e5:2d:d9:68:07:24:ae:06:06: a1:a3:f4:b1:b0:b6:10:78:7c:b3:39:74:ff:76:c0:c4:42:bc: e0:17:aa:4f:bf:ec:71:65:55:c7:29:ad:85:1d:e6:0c:49:d8: d6:97:3a:d9:76:2e:fc:1e:40:ef:7e:1c:cc:a6:e1:40:9f:e7: 2e:f7:c4:96:c6:9e:85:c3:17:54:97:78:b0:f9:fa:17:84:40: 7f:53:a3:97:36:0d:1a:88:05:00:1a:52:31:3b:b3:7b:ef:60: 14:40:49:5d:dc:db:46:e1:19:7d:12:b5:0e:64:86:dc:15:9e: c1:82:52:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+cCfM6S9ktOBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy NjQ4MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk NWIxNTczMzgtYjA4Zi00M2UxLWFmZmYtZjVjYWVjZDc5NjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU5yMgyRaxlkUXU6HmEqRgEvb/x1mIsemi3S xRzBRz2+OTMVT2nVGkdAizlKgRR7kekqL5a63JPn5DGJXgItPt5Ebk2i5bDbAgJN V6EHV1d00P73BLY8ueieFM4QruVZLMlU7kvcestj36W5zpMmr4kIdumqGHEnO/Fj QxkJOMhUoTAJfR7xGzmkYHC9qrCSDrSigl3m1JA4MqPRod0U7SKTPL7989sVWK6W APuAYBPLuFu9EXQUNdIenNcpEgAE5qAyHGidp/MvbXPSaPhQOE6YvwCTD2o1XGSk gmjJhJOM+03j91aJtTGY8pRl37cUIFYNxtCO8pU+rl78y36POQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJshGXTGb21Ok2TUcK5v5N54h1czMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5 MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvY2Y3MzhmMDMtOTM5ZS0z YzQ3LWFjMmQtMzI0ZDMzZGE4ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi MWVhMzI2NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALG7GuppLMmG/MyQTNV70gahJjmT8zYTr3dhaWTMIRKPZaS+EO5tJEXr Ygb5X+4R3EPqWld1mF4qI9tO0VwntRxRekK6YuJilFQuypN/+GKQVXK+udKdXupR oSdAjPBGqA1NokyO+Fxv15i7uBGrERh1wN9Vkaj4yXyPZyxv2RrCHRhr8nbrZOUt 2WgHJK4GBqGj9LGwthB4fLM5dP92wMRCvOAXqk+/7HFlVccprYUd5gxJ2NaXOtl2 LvweQO9+HMym4UCf5y73xJbGnoXDF1SXeLD5+heEQH9To5c2DRqIBQAaUjE7s3vv YBRASV3c20bhGX0StQ5khtwVnsGCUkk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:47:34 2025 by rpki-client