$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa File: 3a59a8dd-9438-357b-9270-804aa380967c.roa (raw, json) Hash identifier: 5vlEFG/2txpyZCdllTeN6kVxTuwtfqCP4LyWh7tFdWg= Subject key identifier: CC:03:75:B5:18:68:33:91:FD:55:BA:8A:53:AA:34:69:4A:67:12:AD Certificate issuer: /CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Certificate serial: 010D0C9F43285849C904F30B73E96B23EF6480C0 Authority key identifier: 9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 395549 IP address blocks: 23.129.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f3:0b:73:e9:6b:23:ef:64:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=948b002a-5f63-406b-89b4-b44c83843078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:a2:d6:16:96:16:c0:a0:6d:bd:d3:eb:e0: 3e:ab:7c:1f:fe:b1:ed:10:c1:bc:df:1d:f5:91:8f: 2c:84:0f:0c:bb:6f:93:1f:57:18:e1:97:f3:d5:20: d0:8a:4a:4d:a1:ee:c6:64:98:fc:f8:1d:cc:3f:2e: 74:53:46:ee:f0:f7:8e:de:e2:dd:e3:3d:05:f0:99: 34:55:cc:a7:2d:62:0e:52:72:67:78:38:27:93:cf: 49:7e:8f:51:22:7f:1b:c9:d7:f3:10:93:12:4c:ed: 03:c7:3f:1c:d6:ea:c4:73:f4:c1:13:fa:c2:da:aa: 7c:af:99:f0:4e:d4:6c:06:03:84:cf:64:74:c7:0c: b0:47:87:86:6a:24:91:ca:64:0e:e2:28:bd:d4:37: 30:c0:28:62:c0:cc:fc:45:b9:50:84:b9:e8:56:72: 34:b3:7c:65:c0:15:5e:be:b6:f4:a7:5e:76:8b:e6: 35:f1:4f:ae:b9:37:d2:f8:57:0c:53:d2:c8:e3:23: 32:7c:00:58:86:0e:26:61:45:8f:f8:65:bd:1c:80: c1:4c:85:0f:b6:cc:57:97:3a:11:1e:bd:d5:d9:9d: 3f:14:35:02:35:c6:83:7c:6f:c9:98:4e:90:62:2b: ac:0a:64:bd:5a:43:6d:bf:2c:f1:a6:6f:90:02:89: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:03:75:B5:18:68:33:91:FD:55:BA:8A:53:AA:34:69:4A:67:12:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl X509v3 Authority Key Identifier: keyid:9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer sbgp-ipAddrBlock: critical IPv4: 23.129.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:78:52:9d:68:00:71:99:40:4e:a3:ca:c8:79:75:15:fd:39: 61:72:f1:5e:40:bc:e6:27:b3:d5:fb:21:95:06:fc:69:4c:7e: 8d:d2:38:8b:af:26:0d:b3:c5:ee:38:02:c0:b9:74:fa:32:a6: ab:da:60:69:31:1e:08:7b:63:57:90:f1:24:26:36:52:4d:d4: 27:76:b0:8f:d4:0d:63:57:f4:bc:a1:b1:64:f4:ef:bb:f8:c8: 82:27:0e:16:d5:bb:05:53:3c:ee:fa:1f:ba:4f:ae:71:c8:5c: b9:bb:6e:e9:d8:df:97:4f:93:f4:1d:da:d0:25:c6:ac:54:92: 29:98:5c:bd:aa:8e:b7:d6:29:18:26:52:67:82:9c:9f:6b:be: ce:95:e5:60:48:38:89:80:bd:80:d4:21:ae:0a:10:c5:56:61: 67:0d:47:b0:32:47:cb:e5:23:cd:70:44:63:2a:dc:67:40:83: 7c:10:9f:d9:15:5d:5e:00:75:e5:c4:0b:c4:af:4b:73:bd:4c: 7d:92:78:9f:39:9f:a1:f2:a4:ac:3b:4d:b9:6b:59:f8:15:70: be:31:dd:0c:c3:66:6f:8d:c0:9b:2d:99:3d:78:c1:a2:2a:68: cb:1a:dd:ad:3b:19:d0:0b:c9:8a:61:78:8f:b5:6a:b3:23:37: c8:de:e3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPMLc+lrI+9kgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZjViMDQtOTk4Yy00ZThhLWJmM2UtZmQ5YWI5NmEy ZDI4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk OTQ4YjAwMmEtNWY2My00MDZiLTg5YjQtYjQ0YzgzODQzMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Wi1haWFsCgbb3T6+A+q3wf/rHtEMG83x31 kY8shA8Mu2+TH1cY4Zfz1SDQikpNoe7GZJj8+B3MPy50U0bu8PeO3uLd4z0F8Jk0 VcynLWIOUnJneDgnk89Jfo9RIn8bydfzEJMSTO0Dxz8c1urEc/TBE/rC2qp8r5nw TtRsBgOEz2R0xwywR4eGaiSRymQO4ii91DcwwChiwMz8RblQhLnoVnI0s3xlwBVe vrb0p152i+Y18U+uuTfS+FcMU9LI4yMyfABYhg4mYUWP+GW9HIDBTIUPtsxXlzoR Hr3V2Z0/FDUCNcaDfG/JmE6QYiusCmS9WkNtvyzxpm+QAomrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwDdbUYaDOR/VW6ilOqNGlKZxKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTdm NWIwNC05OThjLTRlOGEtYmYzZS1mZDlhYjk2YTJkMjgvM2E1OWE4ZGQtOTQzOC0z NTdiLTkyNzAtODA0YWEzODA5NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk3ZjViMDQtOTk4Yy00ZThhLWJm M2UtZmQ5YWI5NmEyZDI4Lzk5N2Y1YjA0LTk5OGMtNGU4YS1iZjNlLWZkOWFiOTZh MmQyOC5jcmwwHwYDVR0jBBgwFoAUmxMtCHZIK14G6wbEdyIg8AnNPtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTdmNWIwNC05OThjLTRlOGEtYmYzZS1mZDlh Yjk2YTJkMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV4Up1oAHGZQE6jysh5dRX9OWFy8V5AvOYns9X7IZUG/GlMfo3SOIuv Jg2zxe44AsC5dPoypqvaYGkxHgh7Y1eQ8SQmNlJN1Cd2sI/UDWNX9LyhsWT077v4 yIInDhbVuwVTPO76H7pPrnHIXLm7bunY35dPk/Qd2tAlxqxUkimYXL2qjrfWKRgm UmeCnJ9rvs6V5WBIOImAvYDUIa4KEMVWYWcNR7AyR8vlI81wRGMq3GdAg3wQn9kV XV4AdeXEC8SvS3O9TH2SeJ85n6HypKw7TblrWfgVcL4x3QzDZm+NwJstmT14waIq aMsa3a07GdALyYpheI+1arMjN8je450= -----END CERTIFICATE-----Generated at Mon Jun 16 20:47:24 2025 by rpki-client