$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa File: 2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa (raw, json) Hash identifier: pKRaqcduBmG6qIirwZpWEoigyk8fqiuxZQuBXbYvMzM= Subject key identifier: 69:1F:98:47:F1:3E:4E:AE:0C:E3:50:42:4F:5A:76:B7:C2:8D:FF:D3 Certificate issuer: /CN=5039f611-54f3-4a44-9153-55949e05704b Certificate serial: 010D0C9F432858498FC9BC1D8918954A85A30E00 Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 11004 IP address blocks: 23.161.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:bc:1d:89:18:95:4a:85:a3:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=ea2e8bfb-218e-4a5b-87d9-75f1bfc6e918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:02:2f:0f:a3:c7:a5:c6:3f:d9:89:26:e1: 8e:27:ed:ff:cf:57:51:da:14:09:d3:fd:79:fa:09: 68:0b:96:3d:cc:85:93:02:1d:f2:b4:fe:eb:92:b3: 48:d7:0b:9a:f8:b5:0d:4d:40:5c:ec:a2:6a:19:06: c1:4d:8f:ec:f8:dd:b3:cd:53:36:68:29:54:b8:66: 25:17:ea:93:7c:27:cf:89:f0:e8:df:44:43:c1:b2: ec:c8:d7:1a:78:7c:bf:a4:01:63:81:c6:11:2d:ca: 96:30:97:d4:c0:d4:9f:96:e4:24:4f:43:49:11:dd: ea:a5:43:c9:66:d6:9f:35:3d:e0:b3:87:fa:db:74: 28:ec:38:21:3a:7d:e8:78:dc:8d:b9:11:03:a2:23: a8:7b:f4:85:35:12:17:ca:d9:bd:c9:7e:18:f4:2f: 42:d4:d5:81:a4:a0:43:95:82:3c:66:53:60:af:86: 5e:4b:cc:c2:7a:b6:2e:87:29:34:67:0d:bc:cc:ad: 0c:6c:54:51:70:1c:c3:02:b4:fc:61:da:72:eb:d5: 69:bb:0d:95:cf:4c:ad:45:09:50:69:c4:65:ca:55: ad:cb:28:9a:fd:ed:14:ee:40:e0:e8:0c:0e:f8:86: 53:06:3e:a7:f5:35:29:12:df:e3:c5:91:08:f2:06: ed:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1F:98:47:F1:3E:4E:AE:0C:E3:50:42:4F:5A:76:B7:C2:8D:FF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl X509v3 Authority Key Identifier: keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer sbgp-ipAddrBlock: critical IPv4: 23.161.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:36:60:5f:6c:a8:45:6d:af:6c:28:1e:7e:f6:29:cc:cb:e9: d4:6e:ab:0e:7f:85:52:61:6c:d7:83:cb:38:3c:24:8e:71:cb: 8d:d1:06:ec:68:c5:f5:80:a4:92:1d:54:46:7a:14:a5:d7:5c: e6:76:6d:e6:c4:e0:30:6e:dd:a3:04:52:7f:92:97:b1:b2:13: ea:27:3c:db:b6:67:5b:42:74:2d:93:dd:8c:61:c3:83:a1:ac: c4:87:37:b9:85:53:30:44:d6:7e:06:98:d4:c7:d7:41:79:b2: 66:20:e0:bf:8e:6c:94:a9:c5:69:8d:0f:88:ff:4d:b6:3b:6e: 6c:a2:15:ea:5c:c7:b8:20:2c:39:a7:47:c8:c3:a0:b9:95:0b: b4:52:84:ea:32:ab:27:0f:30:3f:38:98:a7:a5:ca:b3:d9:51: 1f:69:9d:2b:a4:6b:53:a4:05:6a:ea:fc:16:e9:79:9e:f8:1f: a7:51:5e:3b:7f:39:d5:3a:15:47:8c:f5:f9:28:1c:54:77:f1: 7d:42:8a:42:c7:ff:ea:ec:c9:fb:93:35:75:ce:ca:11:bb:41: f5:18:f6:8b:d0:83:0b:b4:13:69:ad:77:bf:24:be:dc:50:cc: ca:39:3a:ee:e7:e8:30:9c:22:77:b0:20:70:aa:41:ad:e7:04: 97:86:66:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybwdiRiVSoWjDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzOWY2MTEtNTRmMy00YTQ0LTkxNTMtNTU5NDllMDU3 MDRiMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZWEyZThiZmItMjE4ZS00YTViLTg3ZDktNzVmMWJmYzZlOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDYCLw+jx6XGP9mJJuGOJ+3/z1dR2hQJ0/15 +gloC5Y9zIWTAh3ytP7rkrNI1wua+LUNTUBc7KJqGQbBTY/s+N2zzVM2aClUuGYl F+qTfCfPifDo30RDwbLsyNcaeHy/pAFjgcYRLcqWMJfUwNSfluQkT0NJEd3qpUPJ ZtafNT3gs4f623Qo7DghOn3oeNyNuREDoiOoe/SFNRIXytm9yX4Y9C9C1NWBpKBD lYI8ZlNgr4ZeS8zCerYuhyk0Zw28zK0MbFRRcBzDArT8Ydpy69Vpuw2Vz0ytRQlQ acRlylWtyyia/e0U7kDg6AwO+IZTBj6n9TUpEt/jxZEI8gbteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkfmEfxPk6uDONQQk9adrfCjf/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5 ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0OWUwNTcwNGIvMmUzNjY5NGEtMGNjMy0z YzA0LWE2ZDMtMGU4Nzk0MmMyZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTAzOWY2MTEtNTRmMy00YTQ0LTkx NTMtNTU5NDllMDU3MDRiLzUwMzlmNjExLTU0ZjMtNGE0NC05MTUzLTU1OTQ5ZTA1 NzA0Yi5jcmwwHwYDVR0jBBgwFoAUmzTH91h/g2BjZbWXystOcVbwZMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0 OWUwNTcwNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6F4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ2YF9sqEVtr2woHn72KczL6dRuqw5/hVJhbNeDyzg8JI5xy43RBuxo xfWApJIdVEZ6FKXXXOZ2bebE4DBu3aMEUn+Sl7GyE+onPNu2Z1tCdC2T3Yxhw4Oh rMSHN7mFUzBE1n4GmNTH10F5smYg4L+ObJSpxWmND4j/TbY7bmyiFepcx7ggLDmn R8jDoLmVC7RShOoyqycPMD84mKelyrPZUR9pnSuka1OkBWrq/BbpeZ74H6dRXjt/ OdU6FUeM9fkoHFR38X1CikLH/+rsyfuTNXXOyhG7QfUY9ovQgwu0E2mtd78kvtxQ zMo5Ou7n6DCcInewIHCqQa3nBJeGZnE= -----END CERTIFICATE-----Generated at Sun Apr 27 11:16:36 2025 by rpki-client