$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa File: db4190ad-5350-383b-b3b5-9d97a927e02f.roa (raw, json) Hash identifier: qGEWzI0hpAfZmRpWBcAE5BwrYH/FJ3k6bnJ6x/w/QVY= Subject key identifier: C6:32:CD:49:E7:A6:9F:71:FA:5E:23:BF:E2:FA:26:63:16:37:14:E6 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F432858499829D1DD9F5B225604A07480 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 21859 IP address blocks: 23.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d1:dd:9f:5b:22:56:04:a0:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=ead951f2-6646-43bf-be1b-c2bb8b5da88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:14:c6:62:b5:95:c9:f7:45:ab:98:a2:e7: 21:1e:2d:4b:42:29:20:5b:3e:a6:56:b7:62:34:e9: 8e:9c:ba:c7:3d:90:3f:50:40:ab:33:9f:d0:19:d9: f0:e1:6a:a4:8a:e5:53:0f:e2:75:26:bf:58:4d:c8: aa:a6:67:c5:29:62:dd:52:02:71:1b:cd:87:c9:ed: 96:23:d8:2e:b8:1c:cd:84:83:66:d0:60:10:21:6a: 7f:2c:b4:65:28:b9:4f:b2:0a:45:10:53:69:e0:95: 69:87:ad:77:7e:22:9b:80:00:6f:01:45:35:89:21: de:42:f8:e8:ac:68:fb:be:ce:a9:30:8e:b6:c0:27: 45:6b:98:7b:1d:dd:7a:17:66:fb:2c:44:c7:ea:d1: df:b4:4a:8f:55:0d:d0:29:af:d6:90:57:5a:1f:8e: d9:3f:87:b8:06:fb:65:cb:94:2c:3d:ef:72:98:d0: b3:f1:60:97:d4:8e:97:be:45:cb:52:a5:8a:ee:e0: 82:c7:a4:08:77:7f:3c:1e:57:50:94:b3:36:78:84: 92:34:58:2b:7c:1b:fa:03:e4:fa:55:95:15:21:43: 4a:d2:2c:9d:0b:f3:df:c0:a3:d0:be:2e:da:4c:3a: 14:b0:84:11:1a:e3:f1:93:c6:c7:d5:5d:e1:33:1c: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:32:CD:49:E7:A6:9F:71:FA:5E:23:BF:E2:FA:26:63:16:37:14:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ed:57:4b:d6:84:ce:0a:2b:2c:b9:d9:88:c3:46:7a:1f:23: d3:4b:c4:6d:21:79:c1:b7:ef:b6:b6:ab:4c:3b:f1:db:e1:1f: 99:8f:11:e0:fa:9d:e7:cc:be:3e:1b:90:45:27:04:d4:91:5e: 5a:77:d5:f8:d1:68:77:71:68:63:37:e5:5d:c8:8c:89:9c:45: 94:a1:64:ef:42:44:20:96:35:eb:db:f3:fc:99:2e:f1:2a:a7: b4:68:fd:af:4c:1d:3b:4e:e8:c4:d9:11:8d:b8:f0:65:18:40: 13:e4:5d:4a:2b:3b:21:a2:24:66:72:07:5b:5c:af:73:27:4d: 99:61:c4:ed:d3:7f:42:6c:3e:e8:bf:51:70:54:13:91:39:a1: 3e:b6:a9:68:fe:ad:70:f8:32:a9:a0:0f:14:36:f5:09:89:80: 46:e0:9b:a6:98:61:7d:53:bd:f0:dd:32:fd:79:fd:08:f1:d4: 72:e6:9c:17:bb:cf:85:19:99:61:8b:8d:42:f3:6d:63:6d:89: c8:b0:15:08:cd:1c:5b:42:b3:60:c8:f2:20:20:ac:33:8b:13: d8:01:a7:6d:4d:6e:c4:91:40:b7:b7:d3:59:99:f4:a0:03:c4: 8c:34:43:d2:a5:ed:63:e9:55:42:64:54:34:49:d2:db:1c:3a: 6c:22:d6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdHdn1siVgSgdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZWFkOTUxZjItNjY0Ni00M2JmLWJlMWItYzJiYjhiNWRhODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TEUxmK1lcn3RauYouchHi1LQikgWz6mVrdi NOmOnLrHPZA/UECrM5/QGdnw4WqkiuVTD+J1Jr9YTciqpmfFKWLdUgJxG82Hye2W I9guuBzNhINm0GAQIWp/LLRlKLlPsgpFEFNp4JVph613fiKbgABvAUU1iSHeQvjo rGj7vs6pMI62wCdFa5h7Hd16F2b7LETH6tHftEqPVQ3QKa/WkFdaH47ZP4e4Bvtl y5QsPe9ymNCz8WCX1I6XvkXLUqWK7uCCx6QId388HldQlLM2eISSNFgrfBv6A+T6 VZUVIUNK0iydC/PfwKPQvi7aTDoUsIQRGuPxk8bH1V3hMxxJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYyzUnnpp9x+l4jv+L6JmMWNxTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvZGI0MTkwYWQtNTM1MC0z ODNiLWIzYjUtOWQ5N2E5MjdlMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDtV0vWhM4KKyy52YjDRnofI9NLxG0hecG377a2q0w78dvhH5mPEeD6 nefMvj4bkEUnBNSRXlp31fjRaHdxaGM35V3IjImcRZShZO9CRCCWNevb8/yZLvEq p7Ro/a9MHTtO6MTZEY248GUYQBPkXUorOyGiJGZyB1tcr3MnTZlhxO3Tf0JsPui/ UXBUE5E5oT62qWj+rXD4MqmgDxQ29QmJgEbgm6aYYX1TvfDdMv15/Qjx1HLmnBe7 z4UZmWGLjULzbWNticiwFQjNHFtCs2DI8iAgrDOLE9gBp21NbsSRQLe301mZ9KAD xIw0Q9Kl7WPpVUJkVDRJ0tscOmwi1k4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:59 2025 by rpki-client