$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa File: 43049f14-aa13-3e5b-9852-030af82b41df.roa (raw, json) Hash identifier: xEv6kRZSVJPacWytX/74Nax7GxPk6tZnp7agzZ7MfvE= Subject key identifier: 80:62:DF:E2:C1:0A:8B:EB:AB:23:7E:EC:84:7F:CA:3B:84:3B:CE:C6 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F43285849A4BA4E652B9AA0D9111C2400 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 11870 IP address blocks: 167.23.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4e:65:2b:9a:a0:d9:11:1c:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a1b04aea-eb71-4d64-ac87-1529198118bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:e3:88:11:92:92:03:46:92:5b:4b:a7:9f: e5:e9:22:f9:70:e8:e3:45:53:6e:0a:93:a9:39:04: e5:6e:53:59:e7:66:2e:d0:f1:c5:6a:52:f0:69:05: 88:de:9f:10:36:9c:10:09:e5:7e:09:46:a1:60:4a: cb:92:d9:76:3f:92:e0:fd:ed:6d:82:9b:56:ba:c8: 48:ed:49:3a:25:d4:17:2d:c0:a1:a8:1e:3e:82:23: ca:d9:26:6c:31:39:74:91:41:14:d3:4e:52:55:9c: d0:6b:c0:63:51:c5:9a:53:f3:89:f8:02:bc:de:d0: 4f:dd:1a:e2:ec:16:41:ee:d5:2b:65:02:79:8e:0e: 2c:d8:1c:24:0c:37:a1:77:31:c4:46:d0:46:5c:0e: db:b9:90:8c:03:8c:e7:86:c9:a0:45:8d:32:78:69: 6e:11:2e:3c:01:34:22:53:3b:34:1d:ed:54:98:b9: 31:75:d8:87:59:ef:6a:ef:c0:94:d9:cb:9f:d2:37: 44:1b:90:ac:c9:a9:3a:7e:39:b8:18:fc:0a:cc:db: a3:99:e0:8f:b9:97:67:f7:69:a4:59:1d:f6:c7:1b: f3:26:89:5b:7d:2d:99:3f:8c:10:18:d1:b6:d1:ae: 7d:4d:22:e6:41:42:44:39:b2:9b:9f:8c:55:e6:00: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:62:DF:E2:C1:0A:8B:EB:AB:23:7E:EC:84:7F:CA:3B:84:3B:CE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:74:0c:fa:43:08:ab:73:83:bf:50:af:9d:68:a1:e9:ce:29: 7b:ee:bd:f2:85:49:9d:e8:a4:81:14:50:0e:0b:ee:59:ea:b9: a4:d7:7c:72:d6:6a:c5:a7:19:ec:e0:dd:43:5c:e9:8d:57:9f: 52:8a:83:47:9f:9f:36:3c:ff:8f:b1:c6:7e:24:bf:59:23:83: 01:36:e6:b3:83:fb:70:48:58:86:54:94:df:26:eb:0d:a0:e3: 8b:2a:29:68:1c:a6:00:b8:4f:93:a7:e6:4b:a2:83:a4:aa:b1: 5f:bd:a1:93:74:57:ac:58:04:43:0d:f5:73:c6:f5:8c:85:0a: 99:3d:c8:cf:5f:42:33:45:22:b8:cf:a1:cc:37:69:bf:4c:ba: a1:82:6b:bb:6c:2d:54:86:5b:ba:b4:74:26:d7:57:54:5e:d5: 14:f3:35:1e:7f:44:a0:92:f6:47:57:fb:09:2f:60:01:21:d2: 87:08:e9:43:72:e5:ba:b3:3b:21:21:d0:a8:09:44:da:89:f9: 91:d1:c4:dd:f3:db:5d:63:24:2f:81:f0:a3:60:76:0e:ab:ef: fd:29:80:78:bc:d1:54:40:8d:b1:a3:66:99:b9:1e:b6:28:82: f3:fe:a3:e3:ec:5d:18:bc:e9:95:4f:ed:36:e0:05:81:8c:1b: 90:5c:ef:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk5lK5qg2REcJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTFiMDRhZWEtZWI3MS00ZDY0LWFjODctMTUyOTE5ODExOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2PjiBGSkgNGkltLp5/l6SL5cOjjRVNuCpOp OQTlblNZ52Yu0PHFalLwaQWI3p8QNpwQCeV+CUahYErLktl2P5Lg/e1tgptWushI 7Uk6JdQXLcChqB4+giPK2SZsMTl0kUEU005SVZzQa8BjUcWaU/OJ+AK83tBP3Rri 7BZB7tUrZQJ5jg4s2BwkDDehdzHERtBGXA7buZCMA4znhsmgRY0yeGluES48ATQi Uzs0He1UmLkxddiHWe9q78CU2cuf0jdEG5Csyak6fjm4GPwKzNujmeCPuZdn92mk WR32xxvzJolbfS2ZP4wQGNG20a59TSLmQUJEObKbn4xV5gATUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBi3+LBCovrqyN+7IR/yjuEO87GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvNDMwNDlmMTQtYWExMy0z ZTViLTk4NTItMDMwYWY4MmI0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId0DPpDCKtzg79Qr51ooenOKXvuvfKFSZ3opIEUUA4L7lnquaTXfHLW asWnGezg3UNc6Y1Xn1KKg0efnzY8/4+xxn4kv1kjgwE25rOD+3BIWIZUlN8m6w2g 44sqKWgcpgC4T5On5kuig6SqsV+9oZN0V6xYBEMN9XPG9YyFCpk9yM9fQjNFIrjP ocw3ab9MuqGCa7tsLVSGW7q0dCbXV1Re1RTzNR5/RKCS9kdX+wkvYAEh0ocI6UNy 5bqzOyEh0KgJRNqJ+ZHRxN3z211jJC+B8KNgdg6r7/0pgHi80VRAjbGjZpm5HrYo gvP+o+PsXRi86ZVP7TbgBYGMG5Bc71M= -----END CERTIFICATE-----Generated at Mon Apr 28 22:07:42 2025 by rpki-client