$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa File: ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa (raw, json) Hash identifier: tiLL2MJ1iQfvqek2tHtYItgp0/9D+Dfl9/xkQyyD/JM= Subject key identifier: B2:9B:8D:E2:46:3F:5A:28:48:B3:46:CC:9A:93:A3:41:A1:4D:81:62 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F432858498CFF1A0029B23B4C50ECF3A0 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 36168 IP address blocks: 23.175.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1a:00:29:b2:3b:4c:50:ec:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=e2aad539-18f0-4ed3-baec-39bb3c498531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:34:35:d2:f2:57:42:7d:df:9a:bb:c3:95: 7c:5c:a9:c4:6a:d0:bf:9e:cb:f8:cc:e5:28:8b:b5: 26:20:0b:b0:04:d8:64:81:8f:da:b9:fb:c9:3c:ad: df:3a:82:5c:80:0a:66:79:82:f2:e4:45:ce:be:4d: b4:ce:2a:46:b1:f5:0a:79:41:23:7d:ca:0e:1a:61: 25:9e:8c:c8:06:90:c6:6f:88:2b:14:da:2f:b3:38: ce:e6:65:ad:9f:98:84:5d:57:03:bf:db:b3:fb:5c: 4d:81:ec:c3:2b:95:b8:c5:a2:1a:37:37:4f:0e:14: e1:bc:97:37:99:7c:14:82:e1:a8:88:0f:22:ab:d1: f9:91:92:78:bd:c3:26:c6:f5:af:b1:c2:ea:c6:4f: 5b:92:27:68:75:51:cb:05:93:31:52:04:89:2c:9c: 56:af:4b:b7:5d:f2:d9:a1:19:30:cb:32:bb:d1:c5: 49:47:14:a6:f6:a3:4d:72:b5:4c:cb:cb:11:10:41: 94:57:e9:ed:d9:7d:f9:ce:97:fc:87:1a:ec:5e:3b: 91:69:98:53:73:f7:72:70:b7:9a:af:73:39:ac:b9: 1c:db:6f:5b:cc:01:75:13:62:a3:f4:7f:3c:0f:f9: 2e:14:fc:52:d8:00:2d:58:b5:43:45:36:23:6e:96: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9B:8D:E2:46:3F:5A:28:48:B3:46:CC:9A:93:A3:41:A1:4D:81:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 23.175.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8a:5f:89:fd:0a:55:2e:66:fd:ef:d7:8a:88:fb:38:23:5b: eb:5d:62:3e:fa:7e:27:e5:6e:ac:32:11:f2:81:2f:12:80:90: b0:e2:04:04:5f:57:c0:b2:0a:5f:93:66:5f:9d:64:56:f5:b1: d6:06:9f:0b:f0:0c:da:e5:c9:7b:a7:d7:07:f0:18:d8:9d:a8: ac:e9:6c:c9:86:97:30:19:75:7e:c9:60:e8:a8:94:e5:36:ab: 96:36:30:7d:62:b1:67:4a:c3:9a:7d:81:98:1e:b8:e3:68:a2: 71:74:8c:64:46:fa:fb:84:ec:84:2c:67:55:11:62:b7:10:8c: 22:ef:3f:6d:ca:02:d4:e4:99:ce:bd:0c:04:64:cc:84:00:a5: 0f:2d:9b:82:b2:df:d3:b0:0c:7f:1a:7e:6d:52:37:f0:05:d2: 0c:a7:36:8c:36:31:7d:2d:0c:26:18:5e:50:b2:4f:cb:6e:84: e5:0f:95:33:0b:c8:93:27:55:38:54:18:0f:62:73:ef:45:bc: 0d:ae:27:ac:b3:e8:3f:64:f5:02:18:b4:5e:db:04:c6:df:f8: 63:53:b2:1f:40:fa:b1:5a:0f:85:0c:e0:ef:b3:92:26:56:61: 46:e2:2a:ed:d3:36:a9:cf:74:f7:f2:f1:dc:a2:86:17:a5:24: 57:84:63:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xoAKbI7TFDs86AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZTJhYWQ1MzktMThmMC00ZWQzLWJhZWMtMzliYjNjNDk4NTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibI0NdLyV0J935q7w5V8XKnEatC/nsv4zOUo i7UmIAuwBNhkgY/aufvJPK3fOoJcgApmeYLy5EXOvk20zipGsfUKeUEjfcoOGmEl nozIBpDGb4grFNovszjO5mWtn5iEXVcDv9uz+1xNgezDK5W4xaIaNzdPDhThvJc3 mXwUguGoiA8iq9H5kZJ4vcMmxvWvscLqxk9bkidodVHLBZMxUgSJLJxWr0u3XfLZ oRkwyzK70cVJRxSm9qNNcrVMy8sREEGUV+nt2X35zpf8hxrsXjuRaZhTc/dycLea r3M5rLkc229bzAF1E2Kj9H88D/kuFPxS2AAtWLVDRTYjbpaj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKbjeJGP1ooSLNGzJqTo0GhTYFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvZWJmNGExNjctNmM3My0z ZWRkLWFmNDUtMjNkNTNjMWZmMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF694MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiKX4n9ClUuZv3v14qI+zgjW+tdYj76fiflbqwyEfKBLxKAkLDiBARf V8CyCl+TZl+dZFb1sdYGnwvwDNrlyXun1wfwGNidqKzpbMmGlzAZdX7JYOiolOU2 q5Y2MH1isWdKw5p9gZgeuONoonF0jGRG+vuE7IQsZ1URYrcQjCLvP23KAtTkmc69 DARkzIQApQ8tm4Ky39OwDH8afm1SN/AF0gynNow2MX0tDCYYXlCyT8tuhOUPlTML yJMnVThUGA9ic+9FvA2uJ6yz6D9k9QIYtF7bBMbf+GNTsh9A+rFaD4UM4O+zkiZW YUbiKu3TNqnPdPfy8dyihhelJFeEYzc= -----END CERTIFICATE-----Generated at Thu May 1 10:39:56 2025 by rpki-client