$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa File: 64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa (raw, json) Hash identifier: 6fC4EPFjry12u0aIGnssk9K/9ohFm4LWyi0m8qIL3i8= Subject key identifier: B1:27:A8:27:E1:ED:49:44:2C:EB:31:50:D0:87:39:F5:82:0D:E5:11 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F432858499294A88115E62A4C79864480 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 20057 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a8:81:15:e6:2a:4c:79:86:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=c7d04189-0849-470b-8c33-dfeea3ed0969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:7c:28:bc:6e:3a:7e:3c:51:c4:8e:5f:45: 28:e2:b7:e0:8b:3b:57:4d:7b:e2:fe:de:7e:63:c0: 8a:dc:3a:17:63:44:6a:d2:28:7e:d1:44:34:1a:81: 31:e2:37:05:eb:1e:2b:a9:23:c2:46:a0:d8:d1:57: f1:0b:d4:68:8f:13:f5:66:20:ae:ec:a0:83:45:74: c1:48:81:f7:7c:07:88:1c:63:72:44:00:fd:e3:4d: 62:6f:6c:93:a0:a8:3f:26:e2:dd:10:83:17:d8:51: 94:c2:0f:a3:e1:40:1c:71:8a:fb:48:61:f5:99:14: 38:e8:ff:52:5e:49:06:a1:0c:0e:cf:09:18:6b:71: e7:96:f7:64:8e:81:5b:a0:f8:04:d7:cd:f4:e5:1d: 2f:5f:fd:2e:01:47:19:18:92:d9:d2:36:28:91:10: 87:d8:27:57:01:e8:eb:2f:fe:57:49:49:aa:ce:6f: 64:ea:91:ee:5d:18:f4:9d:a1:1c:f7:59:a5:f0:0a: c9:4d:88:09:d5:c2:8e:b2:e9:ec:69:d9:7f:0a:d8: 25:4b:eb:16:53:bd:9f:d0:1f:f4:21:7e:44:87:60: 97:bb:7c:0c:a8:dc:38:eb:66:62:6b:c2:87:17:8a: 0d:66:a1:e5:27:1b:aa:97:ec:4d:e0:e1:bc:04:57: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:A8:27:E1:ED:49:44:2C:EB:31:50:D0:87:39:F5:82:0D:E5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a4:22:00:09:5f:48:c0:12:8c:73:41:31:da:94:b9:1a:34: 67:da:4b:ad:53:6c:d9:25:c5:ef:74:b6:f4:bb:72:d3:96:c7: a0:4d:a4:6d:8a:cc:41:bc:a2:a9:c4:c6:11:c4:46:98:0e:48: f2:2e:f4:04:21:d5:ff:e4:f7:bf:bb:a9:b5:f2:af:42:57:48: a8:c6:7d:10:83:e4:3d:e1:2a:9d:09:1d:67:50:3b:9b:6a:b1: 78:46:6b:ea:11:32:e3:7b:2c:47:87:02:89:1e:99:fb:09:73: 51:3c:16:3d:1f:4b:f1:a1:15:a1:38:71:bf:b9:cf:38:95:de: 23:14:77:26:d3:bc:21:49:4b:d4:22:0f:af:84:8c:45:aa:35: 3a:0f:f4:31:51:36:3c:02:b4:dd:73:9a:20:3f:87:b3:e3:7f: 65:b2:4f:5f:b6:3a:31:74:56:bf:0f:f1:e1:1d:60:be:32:fc: 52:1d:40:cc:ef:25:12:ec:27:10:f8:dd:86:b1:7d:2f:78:75: e3:d7:1e:1b:e6:c6:6e:49:a2:57:bf:1c:f5:28:d7:54:89:a6: 0c:39:52:a7:b1:81:45:44:b6:ab:ef:14:dc:37:49:d9:93:df: d6:f9:da:d2:74:0c:f3:ce:b3:e1:8f:5f:14:71:88:8d:f8:bb: 5a:a9:0c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKiBFeYqTHmGRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YzdkMDQxODktMDg0OS00NzBiLThjMzMtZGZlZWEzZWQwOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh18KLxuOn48UcSOX0Uo4rfgiztXTXvi/t5+ Y8CK3DoXY0Rq0ih+0UQ0GoEx4jcF6x4rqSPCRqDY0VfxC9RojxP1ZiCu7KCDRXTB SIH3fAeIHGNyRAD9401ib2yToKg/JuLdEIMX2FGUwg+j4UAccYr7SGH1mRQ46P9S XkkGoQwOzwkYa3HnlvdkjoFboPgE18305R0vX/0uAUcZGJLZ0jYokRCH2CdXAejr L/5XSUmqzm9k6pHuXRj0naEc91ml8ArJTYgJ1cKOsunsadl/CtglS+sWU72f0B/0 IX5Eh2CXu3wMqNw462Zia8KHF4oNZqHlJxuql+xN4OG8BFfBuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEnqCfh7UlELOsxUNCHOfWCDeURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNjRiYjhhMmMtNTI1NS0z N2JiLTgzZDMtYTE1YzhhNjhhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOkIgAJX0jAEoxzQTHalLkaNGfaS61TbNklxe90tvS7ctOWx6BNpG2K zEG8oqnExhHERpgOSPIu9AQh1f/k97+7qbXyr0JXSKjGfRCD5D3hKp0JHWdQO5tq sXhGa+oRMuN7LEeHAokemfsJc1E8Fj0fS/GhFaE4cb+5zziV3iMUdybTvCFJS9Qi D6+EjEWqNToP9DFRNjwCtN1zmiA/h7Pjf2WyT1+2OjF0Vr8P8eEdYL4y/FIdQMzv JRLsJxD43YaxfS94dePXHhvmxm5Jole/HPUo11SJpgw5UqexgUVEtqvvFNw3SdmT 39b52tJ0DPPOs+GPXxRxiI34u1qpDJU= -----END CERTIFICATE-----Generated at Tue Apr 29 09:17:22 2025 by rpki-client