$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa File: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json) Hash identifier: f0CNQN5Ndd6dEDe2OLaOU1ea2DqgVmapM2oKIYkc3zI= Subject key identifier: 6D:19:7C:4F:7D:B4:FF:C0:65:B2:2B:B6:DF:D6:5B:C2:F8:1B:8D:43 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F432858499294A4071009BADB891B9640 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209242 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a4:07:10:09:ba:db:89:1b:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=02385570-1faa-4fc4-ad62-99f336d7d602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:28:56:a4:5f:13:d1:d1:f2:a4:13:93:ab: b5:0f:4c:85:b7:b5:0d:05:34:f8:be:38:99:a8:9e: eb:12:4e:b7:e3:eb:30:10:3d:31:3b:2e:ab:be:21: b5:b0:79:8b:76:89:c1:e7:63:ed:e8:e7:3b:f0:41: 0d:68:7c:4b:50:a9:fe:18:4d:10:51:4a:95:4f:21: 8b:ba:1a:6f:ae:da:11:86:43:64:c8:b3:fa:04:f0: 31:ad:6e:a4:51:df:fc:75:48:5d:8b:92:31:bf:95: ec:40:31:7c:71:92:a7:61:ec:4b:f1:c0:e9:f8:f4: bb:1f:8a:07:a0:75:7e:a3:c5:c7:42:a1:80:ec:a0: 31:43:14:11:b3:5b:68:3c:b4:b5:02:fa:97:58:e0: 4e:a2:ca:92:a5:ce:df:fa:64:69:58:73:2c:e9:04: 41:da:56:bc:2d:92:74:aa:bb:5d:4e:3e:bc:f2:4a: 59:b3:1b:1b:97:1a:0a:e1:45:04:3e:30:6e:7c:b6: 04:0b:3e:a7:86:4f:f8:1c:4b:47:20:b0:d0:41:c5: f7:76:69:4d:dc:70:b4:a9:5c:d4:ff:b3:c1:3d:57: 41:08:22:02:fb:ad:4c:41:96:a2:69:6b:fb:90:ff: be:e5:4f:b5:9e:c0:ea:38:a7:b3:84:eb:c1:e0:1b: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:7C:4F:7D:B4:FF:C0:65:B2:2B:B6:DF:D6:5B:C2:F8:1B:8D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9f:d9:d4:58:6c:29:08:f6:11:4f:c2:01:54:f9:6f:ac:88: 5f:dd:95:34:a9:0a:0d:03:f4:d2:31:18:c6:f1:f2:74:c1:75: 57:ae:c2:a2:0a:3a:7b:1e:df:25:bf:54:22:cc:cf:88:51:5c: 58:cd:2c:33:4e:62:d0:9e:3b:29:fe:1a:f0:a3:09:b6:8a:c3: 14:41:42:81:fc:90:78:95:98:a2:e9:6a:ba:77:f1:29:9c:d7: f8:67:23:7b:4c:3b:d3:d4:9e:f0:b5:ab:80:d1:d1:85:c2:98: cb:fd:78:f9:02:2c:2d:b8:f7:6b:d7:1d:b2:a7:c0:fa:fc:f7: 03:b1:a3:94:05:b3:d2:8f:6f:54:1a:84:05:48:af:61:c6:a4: 87:f8:d8:25:bf:e3:98:46:55:46:dc:ee:e8:2a:7e:f7:66:11: de:23:ca:c7:1a:13:cf:a8:88:c1:80:bc:d5:83:65:4f:c7:a1: c3:b0:61:27:62:7b:bd:e6:81:f6:d1:49:0d:47:e1:44:c7:bb: 9b:23:ca:fa:a3:8c:d1:d7:6e:1f:b9:01:27:ed:8f:41:88:e1: 7f:28:3a:8e:51:76:b5:92:10:b6:d6:58:c8:47:cc:b9:22:51: 5f:33:d3:d2:c8:c5:d1:e0:2d:67:4b:56:76:51:20:66:2f:07: 87:38:33:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKQHEAm624kblkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MDIzODU1NzAtMWZhYS00ZmM0LWFkNjItOTlmMzM2ZDdkNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDgoVqRfE9HR8qQTk6u1D0yFt7UNBTT4vjiZ qJ7rEk634+swED0xOy6rviG1sHmLdonB52Pt6Oc78EENaHxLUKn+GE0QUUqVTyGL uhpvrtoRhkNkyLP6BPAxrW6kUd/8dUhdi5Ixv5XsQDF8cZKnYexL8cDp+PS7H4oH oHV+o8XHQqGA7KAxQxQRs1toPLS1AvqXWOBOosqSpc7f+mRpWHMs6QRB2la8LZJ0 qrtdTj688kpZsxsblxoK4UUEPjBufLYECz6nhk/4HEtHILDQQcX3dmlN3HC0qVzU /7PBPVdBCCIC+61MQZaiaWv7kP++5U+1nsDqOKezhOvB4Bt2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0ZfE99tP/AZbIrtt/WW8L4G41DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvZDNiNDFjOWYtNWE5OC0z ZGM5LTkwOGUtOGI0YzEwZWU4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJif2dRYbCkI9hFPwgFU+W+siF/dlTSpCg0D9NIxGMbx8nTBdVeuwqIK Onse3yW/VCLMz4hRXFjNLDNOYtCeOyn+GvCjCbaKwxRBQoH8kHiVmKLparp38Smc 1/hnI3tMO9PUnvC1q4DR0YXCmMv9ePkCLC2492vXHbKnwPr89wOxo5QFs9KPb1Qa hAVIr2HGpIf42CW/45hGVUbc7ugqfvdmEd4jyscaE8+oiMGAvNWDZU/HocOwYSdi e73mgfbRSQ1H4UTHu5sjyvqjjNHXbh+5ASftj0GI4X8oOo5RdrWSELbWWMhHzLki UV8z09LIxdHgLWdLVnZRIGYvB4c4Mx8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:30 2025 by rpki-client