$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa File: 16782b21-eed6-3014-9710-b3c789353a34.roa (raw, json) Hash identifier: p0JV0Rs/zm4cAmAjgT5PO3uZ4FKVHpvJts2JpCYpZGs= Subject key identifier: 34:3A:51:FA:0D:D4:FA:C9:DC:86:8B:E1:54:44:D1:59:AC:89:9C:4A Certificate issuer: /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452 Certificate serial: 010D0C9F43285849B6DF4A96E79FBF29FF14CF80 Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 397709 IP address blocks: 23.148.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4a:96:e7:9f:bf:29:ff:14:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=bd42f15d-56cd-4b30-95d2-a25c8acfc2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:d8:e3:e2:93:31:1f:37:e8:2e:3d:0c:dc: 11:45:bf:17:e6:8c:18:d9:b9:d6:06:4f:ea:ac:b5: 4c:bd:41:0a:7f:75:3f:ee:ce:20:62:73:c8:07:aa: 46:c8:4c:cc:44:f4:1c:52:b4:3f:c3:28:4c:7a:6d: 72:28:a5:a3:a2:5d:80:4b:d3:78:af:0d:1a:42:31: 7f:a3:7d:d3:87:ca:63:30:8b:ab:46:04:cd:fe:b2: da:30:80:b1:7d:72:23:ee:22:11:55:7e:f2:62:67: 95:aa:ee:51:9b:44:e7:df:fe:c6:09:cf:da:ac:aa: f7:75:b6:dc:7b:89:21:08:3a:e7:dc:5d:63:53:0c: 57:73:72:94:72:66:05:fc:45:f1:df:96:13:8d:42: c3:aa:3c:79:e1:71:5d:c2:fe:ed:e1:f8:29:1d:0c: e8:e8:10:0b:42:3e:22:fb:36:73:fe:68:b3:08:4d: 2e:51:8e:00:83:4c:63:04:0a:e0:68:52:6e:16:35: 7d:73:a7:e2:02:44:9d:b5:f4:9b:65:26:6e:96:c7: 89:7a:26:e6:44:c5:c2:41:d5:66:c5:4b:38:f7:db: 26:de:f5:09:45:52:bd:ac:0c:4b:66:d3:aa:de:25: c4:d2:fe:5d:67:79:1c:11:da:89:d3:27:d7:ad:0d: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3A:51:FA:0D:D4:FA:C9:DC:86:8B:E1:54:44:D1:59:AC:89:9C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl X509v3 Authority Key Identifier: keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer sbgp-ipAddrBlock: critical IPv4: 23.148.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:99:37:a4:c6:c4:51:d1:c2:40:89:f8:53:a6:9d:48:b2: 67:2e:d0:cc:ba:93:6c:67:95:9e:85:59:5a:62:72:4e:26:9f: f6:ce:31:57:e1:6d:84:b7:d4:46:ee:0d:00:96:d3:c9:24:72: 3c:82:cb:bc:ac:a1:5b:88:9e:b9:6c:1b:92:9d:e6:11:88:9e: 8d:4a:30:94:c5:4a:a4:6a:1d:91:96:a2:f9:a3:38:fc:da:47: d8:9d:4d:e1:ec:21:d2:f7:c8:21:18:53:dc:f6:a0:a5:08:bd: e1:ba:a0:cf:5f:60:54:1f:43:bc:f6:16:38:8e:81:78:78:45: 21:50:95:40:00:11:d7:6b:60:f0:0d:ef:58:1f:c3:6b:46:64: f2:da:8b:75:0f:ec:24:4f:de:79:94:52:24:66:f3:04:12:59: c6:8e:62:6b:a5:21:af:b9:1c:aa:8a:c4:2b:d2:57:e5:ca:a0: cf:4c:88:c8:19:3e:cd:3e:27:89:01:9c:ea:3f:de:5a:b8:4c: 54:f2:c9:6f:e0:49:76:94:11:da:39:af:83:03:5f:0b:52:73: 13:19:de:8a:1e:7c:01:46:1a:b3:c1:5c:c1:3e:95:4e:63:d2: db:c9:29:53:06:bd:b4:38:e8:28:36:a8:9c:72:f4:57:91:9b: 42:26:16:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230qW55+/Kf8Uz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlNTAzZmQtMmI2Yi00M2JhLWFjMmUtNGZkNDY5N2Fj NDUyMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk YmQ0MmYxNWQtNTZjZC00YjMwLTk1ZDItYTI1YzhhY2ZjMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15zY4+KTMR836C49DNwRRb8X5owY2bnWBk/q rLVMvUEKf3U/7s4gYnPIB6pGyEzMRPQcUrQ/wyhMem1yKKWjol2AS9N4rw0aQjF/ o33Th8pjMIurRgTN/rLaMICxfXIj7iIRVX7yYmeVqu5Rm0Tn3/7GCc/arKr3dbbc e4khCDrn3F1jUwxXc3KUcmYF/EXx35YTjULDqjx54XFdwv7t4fgpHQzo6BALQj4i +zZz/mizCE0uUY4Ag0xjBArgaFJuFjV9c6fiAkSdtfSbZSZulseJeibmRMXCQdVm xUs499sm3vUJRVK9rAxLZtOq3iXE0v5dZ3kcEdqJ0yfXrQ0ojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ6UfoN1PrJ3IaL4VRE0VmsiZxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1 MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0Njk3YWM0NTIvMTY3ODJiMjEtZWVkNi0z MDE0LTk3MTAtYjNjNzg5MzUzYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFlNTAzZmQtMmI2Yi00M2JhLWFj MmUtNGZkNDY5N2FjNDUyLzRhZTUwM2ZkLTJiNmItNDNiYS1hYzJlLTRmZDQ2OTdh YzQ1Mi5jcmwwHwYDVR0jBBgwFoAU6TxgaZlr8Ypxvn55tq8B+oqhO1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0 Njk3YWM0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxlmTekxsRR0cJAifhTpp1Ismcu0My6k2xnlZ6FWVpick4mn/bOMVfh bYS31EbuDQCW08kkcjyCy7ysoVuInrlsG5Kd5hGIno1KMJTFSqRqHZGWovmjOPza R9idTeHsIdL3yCEYU9z2oKUIveG6oM9fYFQfQ7z2FjiOgXh4RSFQlUAAEddrYPAN 71gfw2tGZPLai3UP7CRP3nmUUiRm8wQSWcaOYmulIa+5HKqKxCvSV+XKoM9MiMgZ Ps0+J4kBnOo/3lq4TFTyyW/gSXaUEdo5r4MDXwtScxMZ3ooefAFGGrPBXME+lU5j 0tvJKVMGvbQ46Cg2qJxy9FeRm0ImFok= -----END CERTIFICATE-----Generated at Fri May 2 10:27:29 2025 by rpki-client