$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa File: c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa (raw, json) Hash identifier: rhL3l5tL8ME4poEsM7G/JlGp1TpkJwpz9mvSi5mIIjs= Subject key identifier: A2:6B:3D:E9:A5:1F:BC:81:68:F2:B9:25:4B:C7:39:E7:85:E7:A5:04 Certificate issuer: /CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2 Certificate serial: 010D0C9F43285849A61F4559F967FEE07967AC40 Authority key identifier: 2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 27458 IP address blocks: 23.169.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:45:59:f9:67:fe:e0:79:67:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=dd193aaf-cec6-44ce-a906-dcc0001d7223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:a5:6f:bf:a1:73:88:29:2d:5c:d0:40:92: 82:69:fc:2d:02:23:d9:a5:88:a9:04:be:ae:92:c9: da:b3:bc:24:95:a9:a3:9b:bf:2d:57:0d:2e:83:b0: 53:f0:83:cd:b4:a7:06:cc:41:e4:e7:27:c7:c8:f5: b8:0d:62:42:82:0b:54:ad:9a:bb:4e:22:c8:8f:a3: 40:8f:aa:34:e7:65:6d:25:b2:03:67:b2:05:6c:52: 36:30:ca:d1:33:88:1a:bb:63:91:af:77:31:3e:16: c8:c0:13:e1:85:57:31:71:90:32:ab:d9:0a:3c:8a: 46:13:e7:ae:f0:47:0b:89:2e:6f:81:6d:1c:85:ce: 37:67:b9:f7:45:50:5f:a0:a7:49:bf:5b:e8:3c:ae: 8c:7e:e6:e6:d8:80:3b:b6:ad:0a:ff:57:0b:1e:1e: 7e:ff:cd:1b:6c:ec:4f:c3:05:38:d3:50:ba:ea:cb: bf:e3:85:5f:7c:bc:5f:c6:d2:18:67:d3:28:ae:af: ba:8c:57:6d:98:25:f1:ae:24:34:e2:a5:d6:d1:d6: 8c:f2:92:a8:e5:de:41:a5:29:69:f1:d3:de:e3:a0: 94:dc:24:0b:5f:c9:25:38:c8:34:fd:26:35:16:23: 0b:cf:5d:d9:5a:90:48:e8:13:ff:6c:da:e2:2c:e9: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:3D:E9:A5:1F:BC:81:68:F2:B9:25:4B:C7:39:E7:85:E7:A5:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.crl X509v3 Authority Key Identifier: keyid:2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a8:25:cb:e7:a0:dd:71:74:0b:14:13:b7:9a:5f:4d:af:2e: 2a:04:f4:62:9b:23:3d:03:78:4f:31:8a:d8:02:5d:2c:00:6b: 06:2d:95:da:d6:2f:87:43:67:86:49:ff:f3:9d:75:d3:99:22: 85:8f:d6:6a:5c:58:c4:91:a7:34:1a:06:8f:68:d6:6e:9d:10: 3d:d1:30:72:15:f2:94:53:0b:2b:b1:03:4a:73:52:5e:3e:b4: a5:0b:4a:67:9a:96:7b:8b:cb:c6:a6:c9:cd:aa:cd:a9:72:2b: fa:39:65:3b:f5:ef:c1:7b:4e:db:a5:6f:f5:34:f5:6b:96:53: 0d:83:7c:e5:9c:5b:60:08:71:6a:31:aa:21:26:fa:90:6d:29: 6f:fd:b4:e3:af:76:13:3d:6f:1f:b8:a7:9b:59:85:17:d3:4f: 56:9d:01:41:86:e3:2b:f6:1b:34:77:a4:ce:90:a1:cc:04:38: 3f:ec:84:8f:33:80:d5:00:12:c9:ac:92:30:90:2f:e8:a3:fd: 9d:2f:92:11:e1:4e:e4:ab:86:14:47:13:00:05:27:db:f4:84: 05:a4:77:10:ae:80:4a:cc:4d:4a:88:8f:1d:2f:a8:1d:9e:47: 2f:ac:d2:11:eb:cf:cb:72:eb:f3:e8:2e:81:65:88:82:a8:04: 78:29:84:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0VZ+Wf+4HlnrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiYjYxZGEtMmU4Yi00MzI5LTk2ZjctYjQwOGIxN2Nk NmQyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZGQxOTNhYWYtY2VjNi00NGNlLWE5MDYtZGNjMDAwMWQ3MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe2lb7+hc4gpLVzQQJKCafwtAiPZpYipBL6u ksnas7wklamjm78tVw0ug7BT8IPNtKcGzEHk5yfHyPW4DWJCggtUrZq7TiLIj6NA j6o052VtJbIDZ7IFbFI2MMrRM4gau2ORr3cxPhbIwBPhhVcxcZAyq9kKPIpGE+eu 8EcLiS5vgW0chc43Z7n3RVBfoKdJv1voPK6Mfubm2IA7tq0K/1cLHh5+/80bbOxP wwU401C66su/44VffLxfxtIYZ9Morq+6jFdtmCXxriQ04qXW0daM8pKo5d5BpSlp 8dPe46CU3CQLX8klOMg0/SY1FiMLz13ZWpBI6BP/bNriLOn4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJrPemlH7yBaPK5JUvHOeeF56UEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZGJi NjFkYS0yZThiLTQzMjktOTZmNy1iNDA4YjE3Y2Q2ZDIvYzlkMmFlZTgtOWUyYy0z MGExLTk5YjktMDU4M2NjNGZmNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGRiYjYxZGEtMmU4Yi00MzI5LTk2 ZjctYjQwOGIxN2NkNmQyLzRkYmI2MWRhLTJlOGItNDMyOS05NmY3LWI0MDhiMTdj ZDZkMi5jcmwwHwYDVR0jBBgwFoAULB4L+pyKLahhgDRfXClUBRE9ZLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZGJiNjFkYS0yZThiLTQzMjktOTZmNy1iNDA4 YjE3Y2Q2ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCoJcvnoN1xdAsUE7eaX02vLioE9GKbIz0DeE8xitgCXSwAawYtldrW L4dDZ4ZJ//OdddOZIoWP1mpcWMSRpzQaBo9o1m6dED3RMHIV8pRTCyuxA0pzUl4+ tKULSmealnuLy8amyc2qzalyK/o5ZTv178F7Ttulb/U09WuWUw2DfOWcW2AIcWox qiEm+pBtKW/9tOOvdhM9bx+4p5tZhRfTT1adAUGG4yv2GzR3pM6QocwEOD/shI8z gNUAEsmskjCQL+ij/Z0vkhHhTuSrhhRHEwAFJ9v0hAWkdxCugErMTUqIjx0vqB2e Ry+s0hHrz8ty6/PoLoFliIKoBHgphP0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:42:43 2025 by rpki-client