$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa File: a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa (raw, json) Hash identifier: c67RY07rio1wrs5Lv5n2xEczdPlN9Zn3ZMiKUZ9AQJI= Subject key identifier: E4:7F:EE:DE:34:51:64:E5:67:93:89:E3:46:B0:19:85:B5:35:55:63 Certificate issuer: /CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Certificate serial: 010D0C9F432858499AF48F4024BB0312B662D400 Authority key identifier: FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 13737 IP address blocks: 23.129.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8f:40:24:bb:03:12:b6:62:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ca3e3a31-6869-4891-ba1b-367b7bfc7734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:92:b3:14:f4:58:32:5d:ce:e4:e1:52:b5: 25:b5:80:10:4e:b9:51:d2:b6:a3:41:70:c5:c4:d9: e8:60:79:33:a5:37:0d:56:b3:7e:c6:ad:8d:2a:6f: be:d8:61:62:5b:bc:10:21:92:c4:a3:b7:4e:c2:b6: b4:7a:ff:06:05:90:88:b6:b9:77:9f:b9:43:73:16: 2e:d6:83:62:38:a6:3d:11:fe:7e:83:11:0c:03:91: 88:bc:19:cf:45:05:2f:94:fc:16:01:0f:1b:a1:e6: bd:7e:c2:ec:21:fa:5d:50:87:47:22:60:a0:19:6d: bc:9d:27:29:03:67:14:2a:a7:28:0a:6b:d7:de:08: 20:56:1b:c7:45:98:95:af:87:49:b2:6b:d8:64:c5: ad:4a:aa:39:86:79:b5:d9:f6:9a:40:91:29:6e:65: 3c:e1:4c:c8:1d:2d:91:89:1e:60:95:62:b0:11:f3: e2:84:0f:e7:c8:e0:57:93:6c:2c:33:e9:8d:2c:89: f7:e4:a0:fc:47:31:e5:c4:36:e0:25:0e:0a:f8:f5: c9:d4:eb:2d:a8:00:b1:50:ed:bf:5a:e1:88:dd:d5: e3:e1:11:cd:dd:a5:f4:d5:6c:49:0c:4c:3b:22:ca: b4:36:e0:37:e6:90:09:23:d1:14:ee:3a:28:5a:a6: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7F:EE:DE:34:51:64:E5:67:93:89:E3:46:B0:19:85:B5:35:55:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl X509v3 Authority Key Identifier: keyid:FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer sbgp-ipAddrBlock: critical IPv4: 23.129.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9f:31:b3:8b:e5:a6:ec:40:f8:25:27:7e:cb:13:4b:aa:97: b9:5c:0e:d3:e5:15:10:cc:58:d5:85:6e:2d:19:5f:3f:60:bf: b1:13:f0:31:d2:a1:21:51:1a:43:07:b8:77:39:81:7c:ae:51: 1f:cd:6d:49:f4:76:92:7c:f8:40:9f:24:5c:38:76:24:8b:81: 0e:65:27:6a:d4:57:fe:8f:96:a1:f5:bf:93:ad:8d:96:a3:4d: fe:37:94:16:85:96:6e:d3:57:94:db:9c:76:87:e4:f7:e6:c2: 76:b4:45:94:d5:22:0c:f3:50:db:04:b3:67:78:82:aa:23:95: 83:c6:38:89:63:d8:64:0d:8d:56:7f:f9:cc:cd:36:6a:dd:3d: 7e:d6:18:ff:aa:ec:c5:63:be:38:da:06:c0:17:a1:61:02:fa: a7:bf:7b:08:82:60:26:89:fe:8f:70:e3:cf:27:1e:e5:45:97: 4c:36:79:36:b8:e0:82:76:c1:c0:18:eb:ee:41:42:17:8e:85: 7e:dc:06:35:a5:f0:97:23:00:f1:b7:a2:3f:ec:20:1a:94:0f: 9a:23:3a:a1:4c:cb:b5:0b:70:b9:be:26:72:4a:0c:68:d0:c1: ca:d3:64:79:db:50:41:25:7c:f0:54:c5:d4:08:c6:4d:8a:80: 77:20:74:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9I9AJLsDErZi1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTNkODMtNWU2OC00M2U2LWI1ZmUtNzhhMmM0NTQ2 NTQ2MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2EzZTNhMzEtNjg2OS00ODkxLWJhMWItMzY3YjdiZmM3NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LCSsxT0WDJdzuThUrUltYAQTrlR0rajQXDF xNnoYHkzpTcNVrN+xq2NKm++2GFiW7wQIZLEo7dOwra0ev8GBZCItrl3n7lDcxYu 1oNiOKY9Ef5+gxEMA5GIvBnPRQUvlPwWAQ8boea9fsLsIfpdUIdHImCgGW28nScp A2cUKqcoCmvX3gggVhvHRZiVr4dJsmvYZMWtSqo5hnm12faaQJEpbmU84UzIHS2R iR5glWKwEfPihA/nyOBXk2wsM+mNLIn35KD8RzHlxDbgJQ4K+PXJ1OstqACxUO2/ WuGI3dXj4RHN3aX01WxJDEw7Isq0NuA35pAJI9EU7jooWqZkdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR/7t40UWTlZ5OJ40awGYW1NVVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1 M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEyYzQ1NDY1NDYvYTZjZDM2M2EtOTU5YS0z YTZiLTk5ZmEtOGFhMmFjYTcxZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjNiNTNkODMtNWU2OC00M2U2LWI1 ZmUtNzhhMmM0NTQ2NTQ2LzIzYjUzZDgzLTVlNjgtNDNlNi1iNWZlLTc4YTJjNDU0 NjU0Ni5jcmwwHwYDVR0jBBgwFoAU+v+87d2vk5tSjRwfpyf83ZKQ3iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEy YzQ1NDY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOfMbOL5absQPglJ37LE0uql7lcDtPlFRDMWNWFbi0ZXz9gv7ET8DHS oSFRGkMHuHc5gXyuUR/NbUn0dpJ8+ECfJFw4diSLgQ5lJ2rUV/6PlqH1v5OtjZaj Tf43lBaFlm7TV5TbnHaH5Pfmwna0RZTVIgzzUNsEs2d4gqojlYPGOIlj2GQNjVZ/ +czNNmrdPX7WGP+q7MVjvjjaBsAXoWEC+qe/ewiCYCaJ/o9w488nHuVFl0w2eTa4 4IJ2wcAY6+5BQheOhX7cBjWl8JcjAPG3oj/sIBqUD5ojOqFMy7ULcLm+JnJKDGjQ wcrTZHnbUEElfPBUxdQIxk2KgHcgdJ8= -----END CERTIFICATE-----Generated at Tue Apr 29 18:47:24 2025 by rpki-client