$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa File: 612ea9aa-fef5-3461-89b7-4f93773ef913.roa (raw, json) Hash identifier: tzyeNLNrNUv50a0lj7/P1S9D5MGEsO5kFrvrwQd8BCg= Subject key identifier: EA:4A:95:B8:D6:37:4A:67:5D:A2:BC:03:A9:D8:B8:98:D6:92:02:DF Certificate issuer: /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Certificate serial: 010D0C9F432858495EEED543D870D1A8E4285A40 Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 10103 IP address blocks: 23.187.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:d5:43:d8:70:d1:a8:e4:28:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=3efb8614-6e19-49fa-9fe5-cbe3b2ca3a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:0b:1f:0e:fc:74:4b:a1:ac:8c:09:ae:8d: d5:c9:62:46:82:b9:32:54:44:73:2d:e7:c7:92:15: 6b:71:3b:5c:6d:7e:bf:4e:2b:c6:d5:4d:21:b1:ee: 22:29:49:8b:91:91:af:cc:2b:6b:96:ba:89:68:dc: 77:16:f3:1c:cc:0c:db:2e:c7:1f:55:b1:7b:de:59: 8f:52:61:96:c4:3e:4e:0b:ed:52:56:72:f6:c2:97: d6:c7:26:c2:ff:97:f4:4b:5a:38:03:41:2c:c2:5d: 17:61:67:8c:ad:4b:9a:5e:e9:75:0d:2f:8a:1d:49: 73:20:33:f7:7d:86:50:ab:9c:fa:68:09:8c:40:85: f2:62:b9:c2:ed:5d:4a:53:00:f1:48:b3:4e:4f:8b: d6:72:b4:0b:1c:3c:35:61:1d:0d:a6:93:c3:fd:75: 36:e0:5f:1b:e3:ce:68:90:1a:d1:4d:67:0f:04:2d: 8d:ba:3e:23:7c:cc:fc:87:bf:a9:3f:32:5a:fe:71: 54:13:7b:00:1c:7f:ad:06:89:80:db:ee:71:08:47: a0:47:d0:67:ba:5e:a0:08:15:1e:1c:59:51:56:8a: 39:f2:f9:5c:07:61:27:43:3c:8b:e9:fd:3f:7d:6d: dd:a6:34:d3:6b:dc:5e:7c:31:27:62:72:cc:69:cb: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4A:95:B8:D6:37:4A:67:5D:A2:BC:03:A9:D8:B8:98:D6:92:02:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl X509v3 Authority Key Identifier: keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer sbgp-ipAddrBlock: critical IPv4: 23.187.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5e:52:01:87:e4:71:fd:a7:7e:9c:2b:9a:51:bc:ed:a6:71: 05:cc:52:80:6e:5c:0d:8c:45:8f:2a:51:1c:db:e6:f0:f5:1a: 28:03:7e:e9:0b:2b:72:85:8c:f1:2e:9d:89:5d:c8:50:26:42: 16:23:95:70:91:b3:78:a1:de:74:47:30:d1:12:92:ad:27:43: b8:f9:4f:28:9f:b8:37:fa:24:16:40:ed:56:1e:39:1a:dd:84: fc:e1:65:ce:30:cc:36:a4:3b:5b:75:47:27:77:19:6c:6c:8d: 10:8f:a3:7c:59:b2:3a:04:f6:8c:86:80:d3:e5:88:f3:1b:a3: 25:f1:13:a2:c9:ba:ba:dc:e7:3d:6b:4d:53:a1:6b:15:31:9f: 58:74:bc:5a:1b:d8:43:b8:31:be:e3:8d:22:74:14:c3:4c:56: 8d:fe:9c:79:f3:70:93:76:21:05:a0:9d:ea:09:53:35:96:90: 06:02:d4:49:c9:1a:ef:93:8e:77:9a:53:05:31:88:16:22:c7: 3f:9c:69:d0:d9:14:06:0b:63:bf:f8:a5:c5:3d:b7:cb:60:5e: 85:d3:21:3b:8f:18:a4:47:66:7c:ac:08:86:f4:e5:b5:60:9b: 87:d5:1c:09:83:dc:ff:6d:86:9a:26:76:79:bd:70:a6:3d:09: 14:79:44:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tVD2HDRqOQoWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNzBiMGQtZWUyMi00OWMyLWIzMWQtYTllMGRlNDM3 NGFhMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk M2VmYjg2MTQtNmUxOS00OWZhLTlmZTUtY2JlM2IyY2EzYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYsLHw78dEuhrIwJro3VyWJGgrkyVERzLefH khVrcTtcbX6/TivG1U0hse4iKUmLkZGvzCtrlrqJaNx3FvMczAzbLscfVbF73lmP UmGWxD5OC+1SVnL2wpfWxybC/5f0S1o4A0Eswl0XYWeMrUuaXul1DS+KHUlzIDP3 fYZQq5z6aAmMQIXyYrnC7V1KUwDxSLNOT4vWcrQLHDw1YR0NppPD/XU24F8b485o kBrRTWcPBC2Nuj4jfMz8h7+pPzJa/nFUE3sAHH+tBomA2+5xCEegR9Bnul6gCBUe HFlRVoo58vlcB2EnQzyL6f0/fW3dpjTTa9xefDEnYnLMacsD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpKlbjWN0pnXaK8A6nYuJjWkgLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3 MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUwZGU0Mzc0YWEvNjEyZWE5YWEtZmVmNS0z NDYxLTg5YjctNGY5Mzc3M2VmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJkNzBiMGQtZWUyMi00OWMyLWIz MWQtYTllMGRlNDM3NGFhLzIyZDcwYjBkLWVlMjItNDljMi1iMzFkLWE5ZTBkZTQz NzRhYS5jcmwwHwYDVR0jBBgwFoAUMZKqBz4fp9Q1AmGPEYcxAg86peEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUw ZGU0Mzc0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7soMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZeUgGH5HH9p36cK5pRvO2mcQXMUoBuXA2MRY8qURzb5vD1GigDfukL K3KFjPEunYldyFAmQhYjlXCRs3ih3nRHMNESkq0nQ7j5TyifuDf6JBZA7VYeORrd hPzhZc4wzDakO1t1Ryd3GWxsjRCPo3xZsjoE9oyGgNPliPMboyXxE6LJurrc5z1r TVOhaxUxn1h0vFob2EO4Mb7jjSJ0FMNMVo3+nHnzcJN2IQWgneoJUzWWkAYC1EnJ Gu+TjneaUwUxiBYixz+cadDZFAYLY7/4pcU9t8tgXoXTITuPGKRHZnysCIb05bVg m4fVHAmD3P9thpomdnm9cKY9CRR5REM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:19 2025 by rpki-client