$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa File: 9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa (raw, json) Hash identifier: i2GcDqw6mru3aFkRt6jlAIvp9UZMQzCey23fVFXqINg= Subject key identifier: BC:36:F2:9C:75:F0:EC:4D:4D:CE:81:7F:F6:9C:F2:83:9C:25:9F:1E Certificate issuer: /CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b Certificate serial: 010D0C9F43285849350E9F7AD70CAE6E9BB8FB00 Authority key identifier: E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 63023 IP address blocks: 23.168.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9f:7a:d7:0c:ae:6e:9b:b8:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=23e601ab-57a5-4dd5-ba4e-bc9cba2060f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:64:4e:f3:e7:59:1a:89:d4:2d:fe:27:ed: f7:53:b0:dc:29:0b:c6:49:85:af:24:54:d2:ff:03: e3:6c:72:fa:c9:84:f5:99:2d:e9:44:fd:23:44:68: 49:2b:39:b7:5b:dd:52:fd:e6:1e:db:5a:7b:81:66: e2:6a:3f:40:02:56:dd:04:06:9d:ec:e0:b7:0e:f9: 15:d1:a5:c6:a5:b1:4e:fe:25:34:5b:45:fc:44:89: ab:f3:5b:d8:1e:43:15:71:a3:f8:ea:12:7b:81:cb: 69:c8:5e:cb:ab:28:17:15:06:2d:01:75:34:9b:ab: ed:d9:51:2c:42:57:71:da:9f:6c:48:77:ac:d4:a1: 44:02:46:d6:ae:b3:ed:3e:9e:8b:3d:fa:6b:d0:bc: 69:60:de:f4:d5:bc:2a:18:cd:36:b6:c1:4e:5a:4d: 80:89:1f:e6:8c:6c:c4:9e:be:7c:83:44:da:59:56: f7:8d:47:f2:bd:85:b7:d0:c2:c1:a9:62:4c:ef:5e: 17:ee:0f:b5:e1:e7:8a:02:eb:bd:cb:25:6d:70:0e: 47:b3:ce:c2:57:12:b0:1b:00:c8:48:db:14:c6:1e: 12:61:d4:f5:3b:f2:6c:5e:c5:5c:14:41:d0:0d:df: b9:35:f9:8c:11:a6:31:c4:5b:05:09:af:45:b1:3b: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:36:F2:9C:75:F0:EC:4D:4D:CE:81:7F:F6:9C:F2:83:9C:25:9F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl X509v3 Authority Key Identifier: keyid:E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer sbgp-ipAddrBlock: critical IPv4: 23.168.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c9:e2:ed:90:b0:f0:24:d1:a3:a9:d3:6b:16:23:b1:ff:6c: fa:70:07:e2:37:80:fa:6d:cf:4b:6c:6c:b3:f7:77:d2:34:45: e9:f4:5b:53:eb:e2:be:c1:85:48:cd:85:cc:b3:29:2a:ae:85: bb:9d:47:23:45:16:0f:61:0f:85:1b:35:82:68:e6:8d:b6:07: ea:44:6c:5b:56:2a:b2:15:da:09:6b:66:b5:4c:4e:1c:53:60: dd:94:a3:1a:e4:b4:3a:df:31:04:ec:0f:5d:4d:84:50:e9:bf: f2:87:75:31:b9:d9:c0:f8:84:65:c6:65:a8:8b:2a:b7:4c:1f: 80:07:cc:70:4a:d1:0d:86:04:af:4b:e6:31:4c:09:17:87:3f: 92:d1:fe:58:26:ba:ad:73:f9:ea:0b:db:87:e8:d1:bc:b2:23: fd:3b:43:28:0e:02:a7:34:77:96:1e:b1:5a:99:31:6a:a9:50: b7:f8:8c:4d:b7:5e:23:af:12:f1:87:28:b8:90:57:7c:9a:64: 7c:8d:a1:99:be:ee:2f:73:33:dc:f8:59:a4:09:7e:cb:23:92: d5:83:88:3e:1e:a9:4e:65:91:b4:71:45:de:a5:02:52:7c:98: 96:64:db:0c:22:84:80:f1:da:c4:a2:4e:ca:d7:76:a4:04:a3: c2:87:70:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dp961wyubpu4+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZmYzZDMtMmYxOS00M2E0LWEzNmQtZWNlMWVlMDUw NTViMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjNlNjAxYWItNTdhNS00ZGQ1LWJhNGUtYmM5Y2JhMjA2MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoARkTvPnWRqJ1C3+J+33U7DcKQvGSYWvJFTS /wPjbHL6yYT1mS3pRP0jRGhJKzm3W91S/eYe21p7gWbiaj9AAlbdBAad7OC3DvkV 0aXGpbFO/iU0W0X8RImr81vYHkMVcaP46hJ7gctpyF7LqygXFQYtAXU0m6vt2VEs Qldx2p9sSHes1KFEAkbWrrPtPp6LPfpr0LxpYN701bwqGM02tsFOWk2AiR/mjGzE nr58g0TaWVb3jUfyvYW30MLBqWJM714X7g+14eeKAuu9yyVtcA5Hs87CVxKwGwDI SNsUxh4SYdT1O/JsXsVcFEHQDd+5NfmMEaYxxFsFCa9FsTvgbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw28px18OxNTc6Bf/ac8oOcJZ8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm ZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2UxZWUwNTA1NWIvOTIyMWM5YjItMjFlNS0z NGU1LWFlOTAtZTVhMDFkY2NlZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZmYzZDMtMmYxOS00M2E0LWEz NmQtZWNlMWVlMDUwNTViLzRhN2ZmM2QzLTJmMTktNDNhNC1hMzZkLWVjZTFlZTA1 MDU1Yi5jcmwwHwYDVR0jBBgwFoAU56FueZOtHDWx7mQtJb5nXQKd7XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2Ux ZWUwNTA1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvJ4u2QsPAk0aOp02sWI7H/bPpwB+I3gPptz0tsbLP3d9I0Ren0W1Pr 4r7BhUjNhcyzKSquhbudRyNFFg9hD4UbNYJo5o22B+pEbFtWKrIV2glrZrVMThxT YN2UoxrktDrfMQTsD11NhFDpv/KHdTG52cD4hGXGZaiLKrdMH4AHzHBK0Q2GBK9L 5jFMCReHP5LR/lgmuq1z+eoL24fo0byyI/07QygOAqc0d5YesVqZMWqpULf4jE23 XiOvEvGHKLiQV3yaZHyNoZm+7i9zM9z4WaQJfssjktWDiD4eqU5lkbRxRd6lAlJ8 mJZk2wwihIDx2sSiTsrXdqQEo8KHcO8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:08 2025 by rpki-client