$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa File: 86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa (raw, json) Hash identifier: d+e0AJjRvtPbyKrl3rufj5zxLSZAfcAry0x3O+gMB20= Subject key identifier: 37:93:0C:29:87:46:05:4D:7F:96:F4:0D:B5:1A:42:A8:8C:02:38:0F Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F4328584981D4600EF37AC5EBC17D95C0 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 396423 IP address blocks: 23.132.8.0/24 maxlen: 24 198.62.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:60:0e:f3:7a:c5:eb:c1:7d:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=f3e5bd4f-3794-4b64-a021-30ee2d197080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:37:dc:96:84:60:ec:cd:a3:f8:59:46:81: 2e:d7:c1:82:88:4b:4e:7a:bd:a4:cc:73:ef:c8:94: 91:a8:8d:30:34:6c:d1:40:16:48:40:6d:cc:0e:db: 9a:7f:5a:36:97:97:83:98:d8:b5:10:00:24:3d:71: 5e:40:38:49:0e:1a:86:90:c5:6c:c4:89:de:22:76: 18:31:b4:b5:ba:38:ba:f2:8a:b9:89:32:f3:f2:a9: 69:b8:79:80:88:30:a3:43:6a:83:b0:3c:72:b4:e0: 49:78:b9:de:31:49:fc:02:ff:6e:ae:17:61:f9:b4: 68:22:ad:96:79:c6:95:db:54:2e:4d:7b:18:9c:bf: 24:7f:a2:f9:ca:d1:b6:8c:70:1d:80:0d:1c:f8:99: 23:ed:a7:9f:e2:37:7c:16:ba:59:f4:c3:4e:fe:65: 6a:67:04:9a:33:20:af:20:00:ed:85:24:93:af:7c: 8b:dd:71:be:70:88:d4:84:1b:e6:ed:a8:0c:b1:e8: d4:ae:82:44:fb:0e:0b:9c:76:68:c6:2f:4e:93:b2: 9a:91:97:c8:fb:6d:90:8e:f8:e7:83:c2:39:23:2f: 02:cc:be:2c:80:e9:c3:13:e3:03:5a:47:f2:12:4a: d4:8d:75:50:0b:04:48:02:51:56:68:47:3e:1c:a6: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:93:0C:29:87:46:05:4D:7F:96:F4:0D:B5:1A:42:A8:8C:02:38:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 198.62.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:86:f5:8b:d4:33:02:3a:be:cb:95:63:64:bd:1a:3a:e4:45: 81:94:ef:89:b1:29:dd:a2:84:66:e2:48:4c:12:7c:81:f5:00: 99:36:81:ce:12:ec:e7:ed:0b:9f:b4:39:0d:68:0b:af:e1:8d: cb:6a:6b:ef:69:d9:17:ec:18:fc:42:4e:28:a8:1c:3f:43:b5: 10:4a:74:3e:e6:e9:1e:ce:78:b3:9e:fd:ac:f5:b8:53:db:ca: 84:f8:aa:f7:82:1e:8d:f2:e9:5d:a5:b5:53:5c:3f:87:c8:a0: 2d:57:67:12:89:8c:f9:7c:ff:46:e7:c6:61:06:7c:be:6d:36: a8:b5:82:de:b8:85:dc:21:01:34:d0:17:62:de:4c:27:66:7a: 4a:15:8a:ea:02:a9:57:65:9d:a9:98:ce:c7:58:06:90:38:f5: c9:c0:70:76:06:78:82:c4:2f:d2:92:2b:10:ed:80:69:9d:5b: e8:84:78:3f:e8:47:aa:a4:fb:55:03:3b:21:fb:4b:88:08:b9: 9b:50:8d:a7:83:d3:1c:96:99:24:34:0d:a2:bb:2d:1e:09:78: d0:bf:29:76:4e:02:81:97:cc:01:06:95:8a:1f:57:db:a9:87: 65:17:7c:f7:cd:8f:0d:52:7c:a4:fc:06:12:d7:47:ec:cf:ba: df:f2:45:99 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmB1GAO83rF68F9lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk ZjNlNWJkNGYtMzc5NC00YjY0LWEwMjEtMzBlZTJkMTk3MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dI33JaEYOzNo/hZRoEu18GCiEtOer2kzHPv yJSRqI0wNGzRQBZIQG3MDtuaf1o2l5eDmNi1EAAkPXFeQDhJDhqGkMVsxIneInYY MbS1uji68oq5iTLz8qlpuHmAiDCjQ2qDsDxytOBJeLneMUn8Av9urhdh+bRoIq2W ecaV21QuTXsYnL8kf6L5ytG2jHAdgA0c+Jkj7aef4jd8FrpZ9MNO/mVqZwSaMyCv IADthSSTr3yL3XG+cIjUhBvm7agMsejUroJE+w4LnHZoxi9Ok7KakZfI+22Qjvjn g8I5Iy8CzL4sgOnDE+MDWkfyEkrUjXVQCwRIAlFWaEc+HKaC5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDeTDCmHRgVNf5b0DbUaQqiMAjgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvODZkOWM1NTAtZWU1Ny0z ZWE1LTg5ZTMtYmNiMDA3ZjY2NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4QIAwQA xj6IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFWG9YvUMwI6vsuVY2S9GjrkRYGU74mxKd2ihGbiSEwSfIH1 AJk2gc4S7OftC5+0OQ1oC6/hjctqa+9p2RfsGPxCTiioHD9DtRBKdD7m6R7OeLOe /az1uFPbyoT4qveCHo3y6V2ltVNcP4fIoC1XZxKJjPl8/0bnxmEGfL5tNqi1gt64 hdwhATTQF2LeTCdmekoViuoCqVdlnamYzsdYBpA49cnAcHYGeILEL9KSKxDtgGmd W+iEeD/oR6qk+1UDOyH7S4gIuZtQjaeD0xyWmSQ0DaK7LR4JeNC/KXZOAoGXzAEG lYofV9uph2UXfPfNjw1SfKT8BhLXR+zPut/yRZk= -----END CERTIFICATE-----Generated at Sun Apr 27 23:03:31 2025 by rpki-client