$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa File: fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa (raw, json) Hash identifier: aPnmEe78X3VVbiz+QlfRTtUzTryFuudTIKQR+tS+vvo= Subject key identifier: 49:64:87:20:0F:7D:EF:B7:9B:64:99:E1:75:77:7D:B1:CB:E0:8C:19 Certificate issuer: /CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0 Certificate serial: 010D0C9F432858495ABEE52B7694A217EF39CA90 Authority key identifier: 10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 397945 IP address blocks: 23.141.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e5:2b:76:94:a2:17:ef:39:ca:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=5b44ae8c-e1fc-45a0-9c78-15b569350951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3d:97:22:5d:da:c1:a0:7d:ac:9d:0b:98:b7: df:7e:ac:8a:96:d6:69:dd:52:bc:1c:3a:b6:e4:6e: 76:06:a4:f9:50:f1:a4:3d:28:5f:aa:3a:50:3a:c5: c3:0d:1e:05:24:c9:a6:77:22:35:59:b1:7b:e2:85: c8:fa:0c:79:13:cf:c2:88:ba:7d:8d:99:3a:8c:b5: 28:e5:db:64:b4:20:78:6a:e1:aa:9e:b5:22:f2:24: a6:12:86:fb:38:bf:4d:06:d1:f1:b5:77:1c:78:66: 1b:17:54:47:c0:ad:5f:7e:07:e0:15:89:1b:86:4a: 8f:e0:19:95:2b:1e:ad:a3:fd:95:6c:1d:61:ad:10: d8:d4:3e:6d:d0:6b:60:69:d1:2a:e3:95:e2:2e:8f: 20:ce:15:d3:ca:ab:c6:d5:7d:1f:91:66:a3:97:c4: 8e:82:25:f5:36:3f:06:01:b8:cd:f0:44:aa:43:4b: a0:d7:62:1b:24:85:42:a2:b1:9c:16:cc:ef:7c:08: c1:1e:3c:18:b2:5c:06:93:bc:fc:a0:07:fd:67:a3: ca:01:7f:5f:ea:9f:8a:e8:da:6e:a8:db:53:de:8d: f3:0c:b2:8e:96:12:ce:63:13:49:fd:bd:0a:05:04: b4:f2:e6:b3:88:08:76:e5:21:04:b5:86:e1:55:62: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:87:20:0F:7D:EF:B7:9B:64:99:E1:75:77:7D:B1:CB:E0:8C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl X509v3 Authority Key Identifier: keyid:10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer sbgp-ipAddrBlock: critical IPv4: 23.141.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ea:f1:83:b1:86:fe:8b:02:a0:0d:c9:7a:0c:e0:0c:54:d5: 77:de:41:a3:d7:32:83:27:89:2a:e7:61:73:9c:d1:8f:76:0d: d8:b9:81:7a:f3:33:a4:2d:3c:89:da:f2:bc:b7:69:c9:1e:10: a7:03:9a:da:53:2f:71:ed:c3:a7:d1:9e:40:94:a4:c0:04:fa: 26:7b:e9:c5:5f:f6:50:fb:64:20:3d:be:45:35:72:3f:a7:1b: 22:d9:cd:7e:54:09:80:e3:55:98:02:d3:7f:d5:34:7b:a5:66: 0a:2b:62:d5:c6:b4:f2:33:93:20:5e:52:d3:be:b3:8c:07:e6: 42:b7:09:0d:7c:0d:53:b3:e7:fe:11:22:a6:19:bb:8b:4a:14: e1:95:2e:71:f2:49:48:c4:79:ad:86:cb:eb:83:20:98:6f:6f: 07:34:5e:36:ac:63:c6:44:e2:71:ea:f8:15:2f:57:ce:67:04: e2:cd:61:b9:6f:5d:eb:a7:43:f0:06:22:9c:85:f1:09:48:7d: 7f:14:8c:00:74:f6:e3:78:15:ff:e6:c3:6e:34:58:7f:f6:5b: 77:4d:f3:1d:07:29:0b:e6:32:ec:a0:99:a5:a7:f1:bd:34:07: 2f:74:e2:e7:a4:65:f5:00:e8:93:83:0e:4b:d8:80:6b:4a:d5: c7:df:df:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuUrdpSiF+85ypAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAwNjcwOWEtM2Y1ZS00YjgxLWFhNzUtN2NhM2VkNWQw M2UwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NWI0NGFlOGMtZTFmYy00NWEwLTljNzgtMTViNTY5MzUwOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j2XIl3awaB9rJ0LmLfffqyKltZp3VK8HDq2 5G52BqT5UPGkPShfqjpQOsXDDR4FJMmmdyI1WbF74oXI+gx5E8/CiLp9jZk6jLUo 5dtktCB4auGqnrUi8iSmEob7OL9NBtHxtXcceGYbF1RHwK1ffgfgFYkbhkqP4BmV Kx6to/2VbB1hrRDY1D5t0GtgadEq45XiLo8gzhXTyqvG1X0fkWajl8SOgiX1Nj8G AbjN8ESqQ0ug12IbJIVCorGcFszvfAjBHjwYslwGk7z8oAf9Z6PKAX9f6p+K6Npu qNtT3o3zDLKOlhLOYxNJ/b0KBQS08uaziAh25SEEtYbhVWLBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElkhyAPfe+3m2SZ4XV3fbHL4IwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMDA2 NzA5YS0zZjVlLTRiODEtYWE3NS03Y2EzZWQ1ZDAzZTAvZmQ3OGE5YzctZTg2MS0z NGJiLTk4MWItMmIyZTJlZmNkZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjAwNjcwOWEtM2Y1ZS00YjgxLWFh NzUtN2NhM2VkNWQwM2UwLzIwMDY3MDlhLTNmNWUtNGI4MS1hYTc1LTdjYTNlZDVk MDNlMC5jcmwwHwYDVR0jBBgwFoAUELFE6auD4vlTinxYbmGfvK7B0kcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMDA2NzA5YS0zZjVlLTRiODEtYWE3NS03Y2Ez ZWQ1ZDAzZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/q8YOxhv6LAqANyXoM4AxU1XfeQaPXMoMniSrnYXOc0Y92Ddi5gXrz M6QtPIna8ry3ackeEKcDmtpTL3Htw6fRnkCUpMAE+iZ76cVf9lD7ZCA9vkU1cj+n GyLZzX5UCYDjVZgC03/VNHulZgorYtXGtPIzkyBeUtO+s4wH5kK3CQ18DVOz5/4R IqYZu4tKFOGVLnHySUjEea2Gy+uDIJhvbwc0XjasY8ZE4nHq+BUvV85nBOLNYblv XeunQ/AGIpyF8QlIfX8UjAB09uN4Ff/mw240WH/2W3dN8x0HKQvmMuygmaWn8b00 By904uekZfUA6JODDkvYgGtK1cff32A= -----END CERTIFICATE-----Generated at Mon Apr 28 12:33:44 2025 by rpki-client