$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa File: 8e2b994c-1b4c-3add-91c2-76c003453ce8.roa (raw, json) Hash identifier: 2YEzIy0f7698cQU8vz5KTPAP3VNeOvg1HOqL9LgTYJA= Subject key identifier: 66:F5:DD:33:C2:7C:18:8B:C1:35:02:86:80:9F:CE:90:B0:E2:6C:2E Certificate issuer: /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Certificate serial: 010D0C9F432858494CC94F30D91119230D0D0F00 Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 401401 IP address blocks: 23.191.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4f:30:d9:11:19:23:0d:0d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=a3c7600c-7f43-4506-ad30-2022087fc14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:e3:58:17:c4:3c:de:e2:9a:9b:86:71:f8: 0d:16:90:56:39:bf:f5:57:ca:66:24:fd:e2:c6:fc: 01:e0:5d:ae:66:d0:bb:3a:26:b8:90:50:6f:53:6c: f2:79:24:7c:d8:ec:16:b0:dc:44:52:a4:af:59:67: 80:30:40:db:27:13:33:42:04:a7:a7:44:1d:2a:de: 18:7d:ac:a6:92:e2:78:88:7e:a8:5f:18:8f:4a:2c: 20:1a:f2:f6:20:5d:6f:f8:d1:bc:6c:f7:e9:3c:63: 21:ac:94:96:08:e8:b9:98:78:7e:3e:7c:67:e0:c7: b7:ac:99:75:12:a0:6a:87:22:40:09:ac:2e:9f:c2: 0e:09:1d:35:cd:23:af:19:35:a6:77:6d:42:7a:36: e8:42:b9:5f:16:8b:51:38:96:03:e9:2d:2e:54:ff: 5e:a0:61:e0:dd:ff:63:87:6a:68:e6:5b:a5:7f:42: 5e:14:dd:76:75:c2:74:96:28:7f:47:33:83:49:a6: ac:d1:0e:2f:41:61:0f:4a:3d:43:a6:09:80:20:a7: bc:2d:db:02:58:8b:ad:b3:1b:f6:04:f3:d8:07:fc: 9e:87:f1:60:05:a9:d1:fa:19:97:a2:17:d1:a3:0c: 40:ef:1c:c9:4d:b0:df:36:0c:23:35:87:a8:66:fa: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F5:DD:33:C2:7C:18:8B:C1:35:02:86:80:9F:CE:90:B0:E2:6C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl X509v3 Authority Key Identifier: keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer sbgp-ipAddrBlock: critical IPv4: 23.191.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:18:35:4e:ba:68:8d:be:e3:c1:93:ad:16:cb:57:44:ac:06: 53:da:56:73:d9:1f:02:59:79:b4:84:84:51:1a:a5:91:a6:32: 85:9d:e3:d7:c1:c7:ba:0b:d8:23:93:fd:c2:2c:c7:9d:a9:84: 77:43:92:0a:e5:52:f8:a6:e2:b4:5b:a4:8b:06:72:0b:fe:e3: 5c:6d:b9:7a:2c:a0:49:d4:b3:f5:55:84:99:ad:55:52:5e:69: ee:93:41:c3:72:3d:ba:cb:d5:6a:b2:99:43:1b:01:64:47:9b: 6d:1b:5e:91:16:4c:a5:bf:66:64:37:ae:b1:64:d1:36:25:c7: b1:ff:5c:e4:2e:0a:b4:0b:dd:d7:da:32:49:15:27:5b:ec:30: 68:9c:4b:45:bb:c2:62:f6:69:62:8c:49:a3:62:65:01:e2:2d: 9f:67:6b:3f:cf:16:62:16:79:24:a9:3e:78:71:a0:e9:44:4b: 48:bd:b3:d9:bf:14:32:6e:75:ab:bc:54:3f:5b:f1:8e:f4:b7: 33:23:e6:73:85:7d:f1:d2:75:98:08:7f:25:d3:e0:da:40:4c: 15:92:aa:31:eb:5a:2a:b1:80:28:46:5b:a7:a8:65:aa:4f:11: 79:e5:65:89:65:5b:60:f2:cd:72:e2:fa:cf:76:2b:e6:70:b5: 5c:f4:c3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU8w2REZIw0NDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhYjI0ZTYtNTlmNy00YzJhLWEzN2ItMGNlOThmYWEz ZGM4MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YTNjNzYwMGMtN2Y0My00NTA2LWFkMzAtMjAyMjA4N2ZjMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/DjWBfEPN7impuGcfgNFpBWOb/1V8pmJP3i xvwB4F2uZtC7Oia4kFBvU2zyeSR82OwWsNxEUqSvWWeAMEDbJxMzQgSnp0QdKt4Y faymkuJ4iH6oXxiPSiwgGvL2IF1v+NG8bPfpPGMhrJSWCOi5mHh+Pnxn4Me3rJl1 EqBqhyJACawun8IOCR01zSOvGTWmd21CejboQrlfFotROJYD6S0uVP9eoGHg3f9j h2po5lulf0JeFN12dcJ0lih/RzODSaas0Q4vQWEPSj1DpgmAIKe8LdsCWIutsxv2 BPPYB/yeh/FgBanR+hmXohfRowxA7xzJTbDfNgwjNYeoZvobXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb13TPCfBiLwTUChoCfzpCw4mwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFi MjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5OGZhYTNkYzgvOGUyYjk5NGMtMWI0Yy0z YWRkLTkxYzItNzZjMDAzNDUzY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhYjI0ZTYtNTlmNy00YzJhLWEz N2ItMGNlOThmYWEzZGM4LzIyYWIyNGU2LTU5ZjctNGMyYS1hMzdiLTBjZTk4ZmFh M2RjOC5jcmwwHwYDVR0jBBgwFoAU1rGGLT44xLWpmfCp24J9jeG1G6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFiMjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5 OGZhYTNkYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUYNU66aI2+48GTrRbLV0SsBlPaVnPZHwJZebSEhFEapZGmMoWd49fB x7oL2COT/cIsx52phHdDkgrlUvim4rRbpIsGcgv+41xtuXosoEnUs/VVhJmtVVJe ae6TQcNyPbrL1WqymUMbAWRHm20bXpEWTKW/ZmQ3rrFk0TYlx7H/XOQuCrQL3dfa MkkVJ1vsMGicS0W7wmL2aWKMSaNiZQHiLZ9naz/PFmIWeSSpPnhxoOlES0i9s9m/ FDJudau8VD9b8Y70tzMj5nOFffHSdZgIfyXT4NpATBWSqjHrWiqxgChGW6eoZapP EXnlZYllW2DyzXLi+s92K+ZwtVz0w9A= -----END CERTIFICATE-----Generated at Sun Apr 27 23:50:31 2025 by rpki-client