$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa File: efac39e6-7c8c-3202-8590-cf9dcc302c63.roa (raw, json) Hash identifier: daiORwc8cGUP1n0YM48nyLqsfHqkwFYm1g26oBDqjzs= Subject key identifier: 3E:2C:8B:4B:E0:09:76:36:97:2B:8C:8D:80:08:0E:F9:D7:EA:5E:04 Certificate issuer: /CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659 Certificate serial: 010D0C9F4328584975445777FAE48AA64C217780 Authority key identifier: 82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 63023 IP address blocks: 23.157.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:57:77:fa:e4:8a:a6:4c:21:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=8bc62c7f-a694-46a3-b7a1-425cad46276f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:b8:a3:46:d0:e4:23:ff:27:33:36:31:32: 13:0c:e2:63:73:2a:0b:69:48:6b:4a:57:b7:a0:96: ce:f7:53:81:f1:b1:ea:2a:b9:1e:00:e5:7a:97:02: 81:a1:54:07:64:4a:73:d3:be:b0:9e:26:90:69:f9: bc:9b:6b:62:46:a1:cd:29:0c:64:c5:00:cf:08:fe: c9:b0:8f:71:fb:84:bb:68:48:e5:5f:33:1e:85:01: 0a:c0:4f:92:62:3c:5d:59:1d:08:cd:21:6a:6d:d5: f8:bb:76:3e:5c:11:49:ba:c0:5f:e2:07:5e:2e:21: de:f4:bc:e5:5d:1c:cf:74:26:3c:29:a5:b0:02:67: dd:3b:40:d0:58:24:94:f8:95:30:9a:7f:53:06:73: 93:40:8c:07:c1:46:7c:97:ad:67:4c:40:25:2a:33: 2e:1f:72:b7:6b:36:62:60:8e:3d:82:f3:1e:22:cc: d5:64:c1:c2:c8:4f:68:b6:a2:81:12:ad:a5:49:1c: b1:aa:a3:2d:1c:01:db:71:26:49:53:39:cb:20:38: 10:4c:2a:8e:2f:54:ed:00:f6:04:e9:92:04:53:5b: fb:34:24:a0:97:ce:6a:40:3d:e1:9e:27:d3:09:a0: 0d:2e:64:a4:19:27:bf:69:6b:3e:bd:e0:46:e8:58: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2C:8B:4B:E0:09:76:36:97:2B:8C:8D:80:08:0E:F9:D7:EA:5E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl X509v3 Authority Key Identifier: keyid:82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer sbgp-ipAddrBlock: critical IPv4: 23.157.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d7:ab:65:a1:e2:ad:5b:2f:b2:82:d6:7f:2b:ac:85:f9:e7: 4c:de:e3:f0:76:b5:26:b0:28:1a:9d:cf:1f:0b:46:fd:5f:5f: 51:da:36:52:00:14:9e:18:01:5f:b3:d6:a9:9a:c5:7d:7f:65: 9c:ed:d2:43:fa:48:0e:78:4e:7e:1d:34:af:fe:37:60:d5:c2: d9:e1:1e:de:bd:20:cd:87:b8:70:9c:b5:56:43:09:b0:55:7d: be:60:93:dc:d7:47:f5:0c:b3:1c:ee:f4:68:4f:9b:d3:94:47: 84:6d:c3:c0:c5:2b:e0:75:0e:46:dc:a5:ed:7b:37:a0:d8:c5: f6:d8:f4:7d:cf:04:8a:e5:fe:30:ad:b5:83:6e:70:09:5e:08: f4:69:66:f0:8d:36:ad:43:8c:db:c4:f8:3e:96:a3:1d:66:27: 96:47:a9:91:37:e2:4c:79:fd:72:c1:a7:21:d6:22:47:5f:eb: 38:60:68:94:c8:0d:71:75:04:0a:fa:b5:0b:ed:82:71:a3:20: d9:97:d4:a4:c3:c1:11:d9:51:53:96:58:20:26:e7:3a:b1:55: 1a:2b:94:80:38:76:4a:9e:bc:9d:1a:a7:0c:3f:9f:0f:b9:52: df:bc:d3:22:32:2a:ef:d1:3e:5c:e1:28:1e:64:0f:11:0e:6c: 19:74:66:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFd3+uSKpkwhd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZjFiOTAtYWE0Zi00YmY0LTliMDgtNmMyYmE0YTUx NjU5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk OGJjNjJjN2YtYTY5NC00NmEzLWI3YTEtNDI1Y2FkNDYyNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+q4o0bQ5CP/JzM2MTITDOJjcyoLaUhrSle3 oJbO91OB8bHqKrkeAOV6lwKBoVQHZEpz076wniaQafm8m2tiRqHNKQxkxQDPCP7J sI9x+4S7aEjlXzMehQEKwE+SYjxdWR0IzSFqbdX4u3Y+XBFJusBf4gdeLiHe9Lzl XRzPdCY8KaWwAmfdO0DQWCSU+JUwmn9TBnOTQIwHwUZ8l61nTEAlKjMuH3K3azZi YI49gvMeIszVZMHCyE9otqKBEq2lSRyxqqMtHAHbcSZJUznLIDgQTCqOL1TtAPYE 6ZIEU1v7NCSgl85qQD3hnifTCaANLmSkGSe/aWs+veBG6FiHnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4si0vgCXY2lyuMjYAIDvnX6l4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Mjhm MWI5MC1hYTRmLTRiZjQtOWIwOC02YzJiYTRhNTE2NTkvZWZhYzM5ZTYtN2M4Yy0z MjAyLTg1OTAtY2Y5ZGNjMzAyYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjI4ZjFiOTAtYWE0Zi00YmY0LTli MDgtNmMyYmE0YTUxNjU5LzYyOGYxYjkwLWFhNGYtNGJmNC05YjA4LTZjMmJhNGE1 MTY1OS5jcmwwHwYDVR0jBBgwFoAUgo34NXEw6byEWwtQWeO4JdfKD2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MjhmMWI5MC1hYTRmLTRiZjQtOWIwOC02YzJi YTRhNTE2NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHXq2Wh4q1bL7KC1n8rrIX550ze4/B2tSawKBqdzx8LRv1fX1HaNlIA FJ4YAV+z1qmaxX1/ZZzt0kP6SA54Tn4dNK/+N2DVwtnhHt69IM2HuHCctVZDCbBV fb5gk9zXR/UMsxzu9GhPm9OUR4Rtw8DFK+B1Dkbcpe17N6DYxfbY9H3PBIrl/jCt tYNucAleCPRpZvCNNq1DjNvE+D6Wox1mJ5ZHqZE34kx5/XLBpyHWIkdf6zhgaJTI DXF1BAr6tQvtgnGjINmX1KTDwRHZUVOWWCAm5zqxVRorlIA4dkqevJ0apww/nw+5 Ut+80yIyKu/RPlzhKB5kDxEObBl0Ztw= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:15 2025 by rpki-client