$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/01e5b1f0-5d86-3f06-aef1-563471c3540e.roa File: 01e5b1f0-5d86-3f06-aef1-563471c3540e.roa (raw, json) Hash identifier: q29pe+AiOVB8K8Cup4nyea9OQz0ek0rHKfSa0PeoUoU= Subject key identifier: 02:EF:1B:76:74:2E:0C:2D:CE:D3:7D:5B:1B:F6:12:45:B7:F0:10:C9 Certificate issuer: /CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf Certificate serial: 010D0C9F43285848F39064453D995464F6DDD200 Authority key identifier: 82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/01e5b1f0-5d86-3f06-aef1-563471c3540e.roa Signing time: Fri 21 Feb 2025 01:59:15 +0000 ROA not before: Fri 21 Feb 2025 01:59:15 +0000 ROA not after: Thu 22 May 2025 00:59:15 +0000 asID: 401541 IP address blocks: 23.155.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:90:64:45:3d:99:54:64:f6:dd:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf Validity Not Before: Feb 21 01:59:15 2025 GMT Not After : May 22 00:59:15 2025 GMT Subject: CN=21533dab-c790-4d99-a937-322b56fed94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:c3:46:90:69:8a:54:be:0e:66:e2:01:ed: 54:17:f4:a0:7a:00:56:c2:ee:e9:93:78:b0:99:93: ee:91:0b:92:f3:d3:8b:51:a1:9f:10:91:6f:19:45: 9b:25:43:1f:d5:7a:0c:08:b4:ac:3a:84:29:54:d8: 0c:27:1b:2e:c7:70:d6:d3:f2:20:94:5a:0e:62:58: 3c:1e:3e:e2:d3:19:c6:b0:8e:c7:67:9b:b8:6e:ea: 7b:c7:f8:f9:c9:3f:82:93:15:29:fc:38:77:9c:d4: 75:c8:b4:9e:ca:1c:8b:17:50:b7:9b:6d:03:1d:0b: 71:52:f5:cc:3d:51:83:55:c3:3c:23:ee:ab:de:32: 91:2f:45:08:d6:f4:1f:46:8f:5d:fc:2c:26:ce:62: f4:e5:38:0d:f2:66:98:71:08:0f:de:fc:f6:4b:41: 7c:4b:16:be:66:ec:78:e9:d1:2f:d0:d7:35:7f:ca: 0f:9b:72:c3:16:7f:45:8c:6f:e4:eb:bb:9f:f4:6c: 6d:83:f6:77:c3:60:9d:2a:d3:8f:b5:a2:f0:71:88: 78:7b:29:cf:c2:b6:3b:8e:e1:91:a6:e5:54:2c:ec: 17:05:65:87:cb:9c:f0:b3:03:04:bf:e0:7c:86:74: 66:46:89:31:ef:32:3f:ce:87:61:64:e4:f4:9c:47: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EF:1B:76:74:2E:0C:2D:CE:D3:7D:5B:1B:F6:12:45:B7:F0:10:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/01e5b1f0-5d86-3f06-aef1-563471c3540e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl X509v3 Authority Key Identifier: keyid:82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer sbgp-ipAddrBlock: critical IPv4: 23.155.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:58:c4:1a:45:44:f4:d8:3e:f6:c1:a8:dd:98:12:d5:b2:28: ad:dd:f5:fa:22:2b:c7:3f:72:79:f5:7f:48:96:1d:52:c4:e9: bf:35:e1:08:48:83:6f:d4:06:29:60:55:d1:09:02:63:9a:6f: d4:48:bc:3c:8f:16:00:67:cc:e3:92:e9:86:09:ed:38:be:bb: ba:66:9e:fb:45:6c:bf:61:9d:06:cd:7e:31:da:bb:88:5d:76: c9:7d:38:96:16:b2:27:04:b6:f6:fa:a7:53:ee:43:b1:59:d0: 70:79:3d:4f:b0:ce:e8:1c:c7:57:9c:a5:2a:9d:bc:80:5d:77: 9f:53:03:59:2b:84:25:d7:41:02:6b:3c:52:1e:c4:2e:2b:ff: 41:15:e1:3d:8d:e5:01:26:c8:05:8e:b8:8f:28:f7:ca:a3:77: 48:04:72:59:5c:83:45:24:f2:07:bb:0d:c6:30:7a:c3:78:9d: bb:bd:a2:99:ac:6f:6b:f2:f4:e3:78:e7:1b:d6:8d:da:e6:2b: 51:e2:dd:29:34:b1:1c:99:54:80:48:a7:4d:ad:a2:ee:b4:79: aa:b9:e8:01:63:70:2a:23:70:aa:93:d0:ee:ea:0f:12:54:ee: 41:6f:bd:93:48:d6:a2:7a:ca:bf:1c:a5:63:21:67:d1:88:46: a4:2e:fe:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjzkGRFPZlUZPbd0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmVkYzlkZjgtNTk2ZS00ZTMzLWI4YWMtNjg1N2NmN2Y1 NmNmMB4XDTI1MDIyMTAxNTkxNVoXDTI1MDUyMjAwNTkxNVowLzEtMCsGA1UEAxMk MjE1MzNkYWItYzc5MC00ZDk5LWE5MzctMzIyYjU2ZmVkOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1fDRpBpilS+DmbiAe1UF/SgegBWwu7pk3iw mZPukQuS89OLUaGfEJFvGUWbJUMf1XoMCLSsOoQpVNgMJxsux3DW0/IglFoOYlg8 Hj7i0xnGsI7HZ5u4bup7x/j5yT+CkxUp/Dh3nNR1yLSeyhyLF1C3m20DHQtxUvXM PVGDVcM8I+6r3jKRL0UI1vQfRo9d/CwmzmL05TgN8maYcQgP3vz2S0F8Sxa+Zux4 6dEv0Nc1f8oPm3LDFn9FjG/k67uf9Gxtg/Z3w2CdKtOPtaLwcYh4eynPwrY7juGR puVULOwXBWWHy5zwswMEv+B8hnRmRokx7zI/zodhZOT0nEcTdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALvG3Z0LgwtztN9Wxv2EkW38BDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZWRj OWRmOC01OTZlLTRlMzMtYjhhYy02ODU3Y2Y3ZjU2Y2YvMDFlNWIxZjAtNWQ4Ni0z ZjA2LWFlZjEtNTYzNDcxYzM1NDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmVkYzlkZjgtNTk2ZS00ZTMzLWI4 YWMtNjg1N2NmN2Y1NmNmL2JlZGM5ZGY4LTU5NmUtNGUzMy1iOGFjLTY4NTdjZjdm NTZjZi5jcmwwHwYDVR0jBBgwFoAUgv866NVINlTTQK2Gd9R+Zslr4ZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZWRjOWRmOC01OTZlLTRlMzMtYjhhYy02ODU3 Y2Y3ZjU2Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5u5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9YxBpFRPTYPvbBqN2YEtWyKK3d9foiK8c/cnn1f0iWHVLE6b814QhI g2/UBilgVdEJAmOab9RIvDyPFgBnzOOS6YYJ7Ti+u7pmnvtFbL9hnQbNfjHau4hd dsl9OJYWsicEtvb6p1PuQ7FZ0HB5PU+wzugcx1ecpSqdvIBdd59TA1krhCXXQQJr PFIexC4r/0EV4T2N5QEmyAWOuI8o98qjd0gEcllcg0Uk8ge7DcYwesN4nbu9opms b2vy9ON45xvWjdrmK1Hi3Sk0sRyZVIBIp02tou60eaq56AFjcCojcKqT0O7qDxJU 7kFvvZNI1qJ6yr8cpWMhZ9GIRqQu/sM= -----END CERTIFICATE-----Generated at Mon Apr 28 06:08:26 2025 by rpki-client