$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa File: f069f00f-676a-3490-bfe2-b5427e021c6d.roa (raw, json) Hash identifier: HYY0+9s4JFZaRY28NSpjyQnv+K/ojXneNrUWk5j5zBY= Subject key identifier: 66:AB:76:4D:E8:54:64:07:6C:57:ED:97:BF:02:11:4A:26:8E:0F:83 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F43285849D594ED7DC41AA872F1692280 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 397181 IP address blocks: 23.128.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ed:7d:c4:1a:a8:72:f1:69:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=7673d9ba-a670-4dd8-bc09-c3aa98679f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:b1:68:5a:9b:3f:c3:ca:29:d4:41:9e:2d: d9:22:cb:e3:a9:51:9f:6e:2c:53:ee:50:06:0c:f0: 15:64:bc:76:97:5c:6a:81:ea:f0:c7:62:aa:62:06: 9e:08:bc:cf:e7:b1:92:a0:64:b9:43:25:a9:e2:35: 48:97:1a:47:30:24:ce:80:8d:6b:2b:bf:e5:48:38: b3:33:de:32:55:d2:79:66:c9:a5:df:0a:1d:ff:d5: 5e:3c:81:45:ef:31:5c:9e:6b:65:b1:81:5e:5b:f6: c5:82:53:42:40:66:de:ef:9d:03:14:72:37:b9:f9: 49:95:9d:f0:66:d4:af:d8:7b:49:af:d3:83:ec:b3: 4c:98:52:e4:50:63:ca:49:65:04:33:d4:94:7d:f7: dc:0f:38:01:48:05:1e:81:4e:a3:e2:c6:db:24:ff: 0d:74:73:a5:8a:6a:b3:d3:92:3c:7c:ae:13:50:e3: e3:80:a1:8b:bb:f0:70:6e:fb:d1:aa:fa:1a:c0:8c: b1:54:0b:f2:a2:a9:3c:86:3e:79:ab:17:b5:78:f8: 26:d7:e9:f9:ff:bd:c2:f9:30:8e:b0:24:49:a7:a2: 98:4f:91:59:cc:2d:87:10:38:55:38:8d:85:88:84: 7f:2b:25:0e:4a:8f:3a:1f:25:09:0c:16:e5:12:23: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AB:76:4D:E8:54:64:07:6C:57:ED:97:BF:02:11:4A:26:8E:0F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 23.128.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:52:da:67:fc:01:50:19:c7:29:c5:93:6a:ae:9d:3f:dc:2a: c1:38:58:0c:5a:44:d5:74:5b:12:bb:ca:87:2a:0d:d4:d1:37: df:2e:93:f2:4b:22:2c:23:6c:99:63:cb:a7:90:b3:b8:69:57: 8a:9e:db:a2:d2:53:b6:f8:8f:fc:54:ca:1e:34:d0:7c:9e:0a: f3:7e:e1:ca:6a:c9:38:2e:2c:13:a7:68:d4:d4:56:cd:84:f5: 9f:fa:18:71:74:b2:a0:ee:9d:08:fb:7e:10:10:23:68:ca:d8: 33:c8:35:4c:df:77:9f:a7:2c:f2:8c:87:6f:88:3e:68:9e:66: b2:e5:12:5d:da:0e:c7:d1:1c:29:5a:42:bc:ef:d9:f6:52:d1: b7:57:ac:3f:2e:08:70:df:5c:f4:d7:95:43:34:f0:50:22:26: f8:ea:c4:e0:ee:7b:2c:24:7a:83:8d:ee:7d:e3:0c:50:11:03: 9b:5b:e7:42:db:0f:f0:d0:e0:a8:23:1b:48:d1:0b:35:b5:6e: 67:ea:a4:44:56:6f:b7:2a:5d:98:5e:e6:5b:40:e5:df:7e:7d: 19:5a:b2:64:47:fb:79:63:21:7e:14:2b:9f:f6:f4:0d:4a:ea: df:4e:72:46:a9:bd:3b:69:41:5d:f9:a5:40:1a:53:35:7b:ca: 6d:15:ab:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO19xBqocvFpIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NzY3M2Q5YmEtYTY3MC00ZGQ4LWJjMDktYzNhYTk4Njc5ZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9mxaFqbP8PKKdRBni3ZIsvjqVGfbixT7lAG DPAVZLx2l1xqgerwx2KqYgaeCLzP57GSoGS5QyWp4jVIlxpHMCTOgI1rK7/lSDiz M94yVdJ5Zsml3wod/9VePIFF7zFcnmtlsYFeW/bFglNCQGbe750DFHI3uflJlZ3w ZtSv2HtJr9OD7LNMmFLkUGPKSWUEM9SUfffcDzgBSAUegU6j4sbbJP8NdHOlimqz 05I8fK4TUOPjgKGLu/BwbvvRqvoawIyxVAvyoqk8hj55qxe1ePgm1+n5/73C+TCO sCRJp6KYT5FZzC2HEDhVOI2FiIR/KyUOSo86HyUJDBblEiNeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGardk3oVGQHbFftl78CEUomjg+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvZjA2OWYwMGYtNjc2YS0z NDkwLWJmZTItYjU0MjdlMDIxYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlS2mf8AVAZxynFk2qunT/cKsE4WAxaRNV0WxK7yocqDdTRN98uk/JL IiwjbJljy6eQs7hpV4qe26LSU7b4j/xUyh400HyeCvN+4cpqyTguLBOnaNTUVs2E 9Z/6GHF0sqDunQj7fhAQI2jK2DPINUzfd5+nLPKMh2+IPmieZrLlEl3aDsfRHCla Qrzv2fZS0bdXrD8uCHDfXPTXlUM08FAiJvjqxODueywkeoON7n3jDFARA5tb50Lb D/DQ4KgjG0jRCzW1bmfqpERWb7cqXZhe5ltA5d9+fRlasmRH+3ljIX4UK5/29A1K 6t9OckapvTtpQV35pUAaUzV7ym0Vqz4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:10:16 2025 by rpki-client