$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa File: f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa (raw, json) Hash identifier: ZcX09xMmAOn3HXyh6QwwUM3pTk5Qh45CPBQZoYuKS9M= Subject key identifier: 1B:1D:C9:03:F7:40:26:22:D4:68:50:D4:F0:3E:8C:FB:52:F0:CE:00 Certificate issuer: /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Certificate serial: 010D0C9F43285849AE7F371D04B5320EE83FE260 Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 7837 IP address blocks: 23.189.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:37:1d:04:b5:32:0e:e8:3f:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=431b4d89-03d0-4f16-82b8-8c302be6a6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fc:54:4f:99:16:2c:53:b1:1a:d8:a0:c5:41: 84:a2:5c:aa:61:cd:1a:48:08:a6:26:41:f4:36:02: f2:6b:5f:1a:ac:3c:ba:b1:25:d5:d7:50:98:8f:d7: e9:03:2d:f9:da:86:fc:f2:17:d7:b9:10:25:07:6d: e4:9f:c4:51:97:03:8f:a0:bc:9d:f2:0a:53:98:cd: 87:13:f9:2b:20:4b:d5:88:4f:58:c4:17:ca:5b:7c: 8a:b2:4e:08:0b:00:68:d9:df:c5:cc:03:66:81:ff: e4:98:5b:77:76:e9:cc:5f:a3:65:df:42:fc:b8:18: be:24:cf:fd:93:e2:69:b6:72:d7:f0:5e:73:8a:1a: 2e:ba:9e:d4:e1:a2:a3:7b:59:de:0b:f2:2c:51:ba: 3b:9c:bc:f8:4d:a9:90:e7:79:21:73:07:b0:30:73: b5:17:fc:a0:1e:12:37:43:74:68:0f:e1:fe:20:3a: c7:2f:6d:fa:40:cc:4a:62:9b:6b:1f:5c:15:1c:e0: f8:c7:33:e7:3e:b9:6e:39:9f:51:69:b3:d3:83:7f: bd:fe:52:08:ed:ed:2e:bc:68:b3:10:89:42:9e:18: 89:6a:f6:21:22:02:8f:f1:c5:fc:68:3c:b9:c5:d4: fe:cf:c7:10:20:64:f0:c3:b1:57:4e:f6:f8:cf:c7: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1D:C9:03:F7:40:26:22:D4:68:50:D4:F0:3E:8C:FB:52:F0:CE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl X509v3 Authority Key Identifier: keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer sbgp-ipAddrBlock: critical IPv4: 23.189.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6f:9d:27:f1:3b:2f:a1:27:ea:79:06:0c:65:2f:4d:02:5d: b6:53:d9:e9:f8:76:33:cd:b2:df:92:4c:41:5a:72:a9:07:bb: 85:25:81:26:b1:37:3c:6d:7f:58:d6:75:7a:3a:8e:78:8b:5b: 29:37:79:4d:10:87:23:fa:d4:d5:37:ca:bf:ac:5c:5a:98:ca: 7e:32:35:56:58:28:90:b7:51:8e:4c:7a:ab:8e:8c:23:0e:24: e7:a4:27:cf:90:48:a9:a1:e9:ab:4d:a5:11:a5:dd:50:c3:6f: de:79:1f:c0:97:fa:62:61:93:2b:49:34:c8:f9:fb:de:4b:43: da:1c:1d:4c:04:18:59:21:14:fe:0d:e8:09:33:6e:12:5f:09: 3f:65:99:7a:bb:dc:ef:8d:a1:72:57:42:04:a4:b9:3e:8c:1a: 8e:a8:5c:9d:f5:3d:fa:6b:85:30:a3:68:a5:86:fa:65:63:61: 8c:b3:15:13:65:c5:65:c7:58:1e:ec:b5:aa:d5:20:e9:2c:9a: 18:32:11:62:d0:55:a5:d9:1a:e1:41:bb:4a:d3:56:ab:4b:10: 10:ec:1b:d5:07:41:ef:9c:78:a8:39:55:c1:86:23:60:4b:dc: af:9e:fc:95:c8:4d:71:ef:4d:ae:6c:65:71:f6:56:a4:0f:5d: aa:df:09:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmufzcdBLUyDug/4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZTBlNGYtMTkyNy00NTgxLTgyMWYtNjg2ZjRlNWZk NmJlMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk NDMxYjRkODktMDNkMC00ZjE2LTgyYjgtOGMzMDJiZTZhNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPxUT5kWLFOxGtigxUGEolyqYc0aSAimJkH0 NgLya18arDy6sSXV11CYj9fpAy352ob88hfXuRAlB23kn8RRlwOPoLyd8gpTmM2H E/krIEvViE9YxBfKW3yKsk4ICwBo2d/FzANmgf/kmFt3dunMX6Nl30L8uBi+JM/9 k+JptnLX8F5zihouup7U4aKje1neC/IsUbo7nLz4TamQ53khcwewMHO1F/ygHhI3 Q3RoD+H+IDrHL236QMxKYptrH1wVHOD4xzPnPrluOZ9RabPTg3+9/lII7e0uvGiz EIlCnhiJavYhIgKP8cX8aDy5xdT+z8cQIGTww7FXTvb4z8fm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsdyQP3QCYi1GhQ1PA+jPtS8M4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Nl MGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZmNGU1ZmQ2YmUvZjFiMzY2ZGEtM2FiZi0z ZjdmLThiMjktNWIwOTliMmU5MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNjZTBlNGYtMTkyNy00NTgxLTgy MWYtNjg2ZjRlNWZkNmJlLzFjY2UwZTRmLTE5MjctNDU4MS04MjFmLTY4NmY0ZTVm ZDZiZS5jcmwwHwYDVR0jBBgwFoAU6p79cF69oIvTbmffU4WPHK5H1pEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2NlMGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZm NGU1ZmQ2YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNvnSfxOy+hJ+p5BgxlL00CXbZT2en4djPNst+STEFacqkHu4UlgSax Nzxtf1jWdXo6jniLWyk3eU0QhyP61NU3yr+sXFqYyn4yNVZYKJC3UY5MequOjCMO JOekJ8+QSKmh6atNpRGl3VDDb955H8CX+mJhkytJNMj5+95LQ9ocHUwEGFkhFP4N 6AkzbhJfCT9lmXq73O+NoXJXQgSkuT6MGo6oXJ31PfprhTCjaKWG+mVjYYyzFRNl xWXHWB7starVIOksmhgyEWLQVaXZGuFBu0rTVqtLEBDsG9UHQe+ceKg5VcGGI2BL 3K+e/JXITXHvTa5sZXH2VqQPXarfCbM= -----END CERTIFICATE-----Generated at Wed Apr 30 01:32:41 2025 by rpki-client