$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/e65cd8da-dfed-3bf8-831a-62b853f3c844.roa File: e65cd8da-dfed-3bf8-831a-62b853f3c844.roa (raw, json) Hash identifier: mxVAauHfJIupRN0RlrAS6+Yzk/Q0xFGOvp4TFLRyQeU= Subject key identifier: F9:E4:BA:E0:60:E0:E2:36:DF:54:4D:90:CE:3A:EA:A9:B7:A7:7A:8F Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba Certificate serial: 010D0C9F43285848E59BB5A316F8D3825A94F640 Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/e65cd8da-dfed-3bf8-831a-62b853f3c844.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 19318 IP address blocks: 23.247.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b5:a3:16:f8:d3:82:5a:94:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=e81a4370-f84c-45bf-b951-29a850a51971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:32:7c:6e:7d:30:ba:bd:a0:98:09:3a:40: 4c:47:5f:0c:6f:c6:78:13:c9:2b:08:74:3e:bf:f9: c6:5c:fe:54:8f:aa:68:f4:a5:23:40:a3:e1:68:b2: ef:68:1d:e5:36:1d:e1:a1:aa:b2:22:03:a7:ee:ae: 0d:3e:7c:0c:52:68:3b:57:02:3d:6e:7b:81:94:4b: 8f:a4:cf:1e:84:e3:20:70:4e:f8:7d:8c:7a:3a:3b: 5e:5f:05:8f:ed:44:c6:1b:68:fb:97:d8:27:ac:18: b3:ac:d4:49:81:c1:ab:9e:da:ab:ab:19:82:f5:9c: 63:33:4d:d3:25:58:f6:8c:7f:11:d3:51:85:66:ea: 30:81:a1:5c:73:8c:8c:40:1d:a1:d1:fd:08:78:7a: db:59:d5:c2:36:00:25:e8:16:21:bf:c3:71:11:03: 74:eb:f9:8a:34:68:dd:a5:d7:79:d7:eb:aa:bc:87: a0:0a:64:f4:ce:9e:61:30:45:b1:a8:92:b8:e9:3d: 0b:8e:9e:96:a2:c9:d6:72:d2:52:f9:63:38:84:9a: 80:59:2a:42:47:7b:ce:4f:7c:3e:61:6b:ee:14:5a: 9e:ea:a8:28:63:d7:06:82:94:18:3c:92:42:1b:fe: 68:7d:d1:eb:cf:5e:f7:37:68:02:85:05:f1:1d:cd: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E4:BA:E0:60:E0:E2:36:DF:54:4D:90:CE:3A:EA:A9:B7:A7:7A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/e65cd8da-dfed-3bf8-831a-62b853f3c844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl X509v3 Authority Key Identifier: keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer sbgp-ipAddrBlock: critical IPv4: 23.247.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:65:38:f7:6d:02:1e:4a:c9:c3:22:da:5e:6a:00:8b:00:3c: fb:b6:66:13:75:6d:73:52:0d:fd:61:4b:6a:d3:36:cf:cb:20: 69:4d:0a:22:69:ce:75:36:7a:55:d8:9a:ca:7e:b6:64:61:e0: b1:38:ab:06:67:d7:72:a9:1c:31:6b:53:04:85:7b:1a:f2:24: 47:e3:43:b7:54:65:a5:33:3b:03:bb:bf:02:e7:25:c4:0d:24: ab:bb:9f:53:47:00:d9:37:c8:40:e0:df:ba:73:c3:29:27:9a: c6:84:92:c9:25:99:b9:ef:2f:8a:38:d5:6f:31:03:dc:a7:29: fe:d9:12:e9:4b:1d:27:a5:41:4b:91:e3:27:c3:81:f9:2e:e3: 14:13:b4:3a:e4:59:b8:96:b7:80:87:af:17:cf:c8:6e:ce:bb: 03:e2:aa:31:35:9a:8e:c5:15:f0:14:eb:b3:d3:67:4e:44:2a: 97:f8:65:bc:49:47:b2:92:8d:c7:12:10:dd:8c:95:f5:07:c1: 12:6a:d1:94:56:bc:05:1c:eb:2d:a3:91:3a:55:ad:c0:87:73: e3:97:06:17:fc:c1:de:bb:25:8d:1e:8e:db:56:13:ae:81:0d: a6:31:7f:cc:db:c4:16:47:49:55:4e:b2:e0:73:da:db:24:f0: ae:ec:d3:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7WjFvjTglqU9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm ZWJhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTgxYTQzNzAtZjg0Yy00NWJmLWI5NTEtMjlhODUwYTUxOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3EyfG59MLq9oJgJOkBMR18Mb8Z4E8krCHQ+ v/nGXP5Uj6po9KUjQKPhaLLvaB3lNh3hoaqyIgOn7q4NPnwMUmg7VwI9bnuBlEuP pM8ehOMgcE74fYx6OjteXwWP7UTGG2j7l9gnrBizrNRJgcGrntqrqxmC9ZxjM03T JVj2jH8R01GFZuowgaFcc4yMQB2h0f0IeHrbWdXCNgAl6BYhv8NxEQN06/mKNGjd pdd51+uqvIegCmT0zp5hMEWxqJK46T0Ljp6WosnWctJS+WM4hJqAWSpCR3vOT3w+ YWvuFFqe6qgoY9cGgpQYPJJCG/5ofdHrz173N2gChQXxHc1RwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnkuuBg4OI231RNkM466qm3p3qPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4 NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvZTY1Y2Q4ZGEtZGZlZC0z YmY4LTgzMWEtNjJiODUzZjNjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5 NzMwYWZlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/e1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBlOPdtAh5KycMi2l5qAIsAPPu2ZhN1bXNSDf1hS2rTNs/LIGlNCiJp znU2elXYmsp+tmRh4LE4qwZn13KpHDFrUwSFexryJEfjQ7dUZaUzOwO7vwLnJcQN JKu7n1NHANk3yEDg37pzwyknmsaEksklmbnvL4o41W8xA9ynKf7ZEulLHSelQUuR 4yfDgfku4xQTtDrkWbiWt4CHrxfPyG7OuwPiqjE1mo7FFfAU67PTZ05EKpf4ZbxJ R7KSjccSEN2MlfUHwRJq0ZRWvAUc6y2jkTpVrcCHc+OXBhf8wd67JY0ejttWE66B DaYxf8zbxBZHSVVOsuBz2tsk8K7s010= -----END CERTIFICATE-----Generated at Sun Apr 27 13:03:03 2025 by rpki-client