$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/68bddac4-d52d-3342-bb57-377f9a01075a.roa File: 68bddac4-d52d-3342-bb57-377f9a01075a.roa (raw, json) Hash identifier: 5VosUmq4/ruq9NXh+XS2i8JtSeaGwQKi0QaGqWJf7TA= Subject key identifier: 52:44:73:49:F3:27:AD:76:DB:4A:B9:3B:E7:7F:86:80:DF:41:D5:80 Certificate issuer: /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c Certificate serial: 010D0C9F43285849A23739A281259F7C725B7C00 Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/68bddac4-d52d-3342-bb57-377f9a01075a.roa Signing time: Thu 24 Apr 2025 15:26:03 +0000 ROA not before: Thu 24 Apr 2025 15:26:03 +0000 ROA not after: Wed 23 Jul 2025 15:26:03 +0000 asID: 8095 IP address blocks: 23.155.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:37:39:a2:81:25:9f:7c:72:5b:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c Validity Not Before: Apr 24 15:26:03 2025 GMT Not After : Jul 23 15:26:03 2025 GMT Subject: CN=0d79f59b-f764-4b60-9b1b-e2d497b0f8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ca:6b:bd:1a:9b:a6:3e:ec:a4:0e:34:46:82: 02:1f:4d:91:d3:ff:d8:18:8e:00:10:60:3c:ea:5f: ba:e0:11:4b:59:22:60:67:fa:42:81:dc:ca:fb:3d: e2:ad:04:e6:26:35:f9:48:fe:ad:33:bf:5e:fd:9f: 2a:5e:1a:ca:21:27:17:b1:96:dd:56:5a:90:78:ee: a6:89:4a:19:6b:46:bc:b5:7b:da:36:ee:47:7e:67: 9f:ee:b2:a9:f0:14:f3:b6:73:db:a9:45:66:13:50: e5:1a:ef:04:87:e1:8f:1f:46:4c:0f:8e:a8:78:c8: 2e:84:cf:0f:17:ee:fa:d4:92:e8:3b:25:5a:db:4d: b8:3f:94:de:07:61:57:f2:e5:c1:48:82:da:47:71: 04:4c:55:f9:1c:59:4f:98:c6:28:94:86:f2:e4:18: 94:f2:37:4b:f6:1c:b1:6c:52:88:2c:33:17:e8:68: 92:93:88:15:00:ea:c8:d1:6b:ce:98:20:9d:5f:45: 48:a8:b7:70:5e:41:a7:d6:0a:34:34:90:72:e1:4b: 7d:82:7c:e2:2c:e4:5b:8f:d6:27:50:89:da:8e:fb: 2a:00:39:08:a2:ca:88:d7:0e:9d:01:81:b2:be:ea: 8e:81:c9:d3:ae:e5:96:73:0b:92:b2:9b:58:c2:de: 3f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:44:73:49:F3:27:AD:76:DB:4A:B9:3B:E7:7F:86:80:DF:41:D5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/68bddac4-d52d-3342-bb57-377f9a01075a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl X509v3 Authority Key Identifier: keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer sbgp-ipAddrBlock: critical IPv4: 23.155.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:31:3b:96:fe:c1:3d:a7:f0:29:6a:0d:24:47:b9:71:f3:c3: 60:1a:2c:1b:f2:f8:da:0a:51:27:6e:c4:54:c5:d8:9f:1e:90: 11:9c:71:2d:4c:68:b9:32:34:4a:8f:da:87:d7:0d:01:2a:f0: 08:cc:93:c5:e8:68:fa:97:cd:ed:82:a6:bf:a2:4d:48:5e:6e: fa:83:d2:d2:59:20:63:7f:f8:df:92:d5:89:ec:48:92:63:b9: 6d:7f:bd:de:3e:a1:f4:f6:c7:5f:e1:f4:11:4f:e7:ec:1e:26: ce:9e:09:57:f3:6d:4f:88:c4:df:84:bd:ae:75:5a:cd:ba:8a: 59:97:ac:df:a3:a9:72:22:3f:d9:c9:2e:2b:ee:cc:8a:a3:3b: fe:6b:9b:f7:5b:5f:2e:7d:42:a1:fd:b2:a4:17:bd:97:4a:25: 28:a2:f2:b4:b5:a4:6b:c2:37:71:a8:d7:5c:87:af:0f:a9:fa: 86:c4:30:82:b1:78:72:77:b3:6c:f6:65:da:37:3f:bf:00:ed: 64:a2:65:a9:31:1b:60:aa:89:51:03:25:34:a8:fb:44:38:c9: c5:e2:1b:b8:5b:5f:74:7d:91:ef:0e:87:5b:97:a5:1e:28:e2: b1:8d:fe:c5:fa:71:4a:e2:22:9d:ff:2c:cb:50:75:1d:47:43: 29:d6:59:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiNzmigSWffHJbfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmN2Q2NDItMTJjMC00NTg1LTg5ODEtN2I3YjdhMDU4 YjhjMB4XDTI1MDQyNDE1MjYwM1oXDTI1MDcyMzE1MjYwM1owLzEtMCsGA1UEAxMk MGQ3OWY1OWItZjc2NC00YjYwLTliMWItZTJkNDk3YjBmOGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8prvRqbpj7spA40RoICH02R0//YGI4AEGA8 6l+64BFLWSJgZ/pCgdzK+z3irQTmJjX5SP6tM79e/Z8qXhrKIScXsZbdVlqQeO6m iUoZa0a8tXvaNu5Hfmef7rKp8BTztnPbqUVmE1DlGu8Eh+GPH0ZMD46oeMguhM8P F+761JLoOyVa2024P5TeB2FX8uXBSILaR3EETFX5HFlPmMYolIby5BiU8jdL9hyx bFKILDMX6GiSk4gVAOrI0WvOmCCdX0VIqLdwXkGn1go0NJBy4Ut9gnziLORbj9Yn UInajvsqADkIosqI1w6dAYGyvuqOgcnTruWWcwuSsptYwt4/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJEc0nzJ61220q5O+d/hoDfQdWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOGY3 ZDY0Mi0xMmMwLTQ1ODUtODk4MS03YjdiN2EwNThiOGMvNjhiZGRhYzQtZDUyZC0z MzQyLWJiNTctMzc3ZjlhMDEwNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYThmN2Q2NDItMTJjMC00NTg1LTg5 ODEtN2I3YjdhMDU4YjhjL2E4ZjdkNjQyLTEyYzAtNDU4NS04OTgxLTdiN2I3YTA1 OGI4Yy5jcmwwHwYDVR0jBBgwFoAUDXfjD9GURkqti074zA8935uf9q0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOGY3ZDY0Mi0xMmMwLTQ1ODUtODk4MS03Yjdi N2EwNThiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsxO5b+wT2n8ClqDSRHuXHzw2AaLBvy+NoKUSduxFTF2J8ekBGccS1M aLkyNEqP2ofXDQEq8AjMk8XoaPqXze2Cpr+iTUhebvqD0tJZIGN/+N+S1YnsSJJj uW1/vd4+ofT2x1/h9BFP5+weJs6eCVfzbU+IxN+Eva51Ws26ilmXrN+jqXIiP9nJ LivuzIqjO/5rm/dbXy59QqH9sqQXvZdKJSii8rS1pGvCN3Go11yHrw+p+obEMIKx eHJ3s2z2Zdo3P78A7WSiZakxG2CqiVEDJTSo+0Q4ycXiG7hbX3R9ke8Oh1uXpR4o 4rGN/sX6cUriIp3/LMtQdR1HQynWWXw= -----END CERTIFICATE-----Generated at Sun Apr 27 19:26:30 2025 by rpki-client