$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa File: 14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa (raw, json) Hash identifier: cRQc8KKFAGPd1hWCLgVxnM2ccOkUlFeTliCWSraxyTY= Subject key identifier: 70:C3:50:1A:65:BD:75:E5:3C:89:F7:BB:51:8C:1C:9E:94:65:C6:F8 Certificate issuer: /CN=e0010d92-35a7-4dba-807b-0f229b3e2e50 Certificate serial: 010D0C9F4328584996C4B25ECB32F1E376A14640 Authority key identifier: A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 399870 IP address blocks: 23.189.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b2:5e:cb:32:f1:e3:76:a1:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0010d92-35a7-4dba-807b-0f229b3e2e50 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=c5e89080-f1b5-4111-a98c-80dc491f055a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:d8:6a:a2:6e:2b:99:59:df:21:f8:db:80: c4:6a:52:f5:78:0d:79:a7:4a:b8:aa:b9:dd:32:c0: 3a:b3:b3:91:b0:90:8d:60:a9:17:18:db:f0:14:6b: 71:23:0c:87:13:57:2f:f7:39:9f:3b:46:ea:5d:e8: ab:80:a7:ce:f2:15:a3:cd:2f:98:0d:6e:41:95:66: be:36:ad:a3:7f:5d:c4:a4:3c:0c:32:27:5e:3c:3d: 0c:30:62:02:86:37:d7:7e:59:55:80:0a:82:bd:23: 0d:52:12:48:7c:12:7b:12:f6:fd:fe:56:63:a4:88: f6:2b:3c:cc:6f:a2:d6:36:a3:3b:4f:ae:ec:0e:01: cc:3a:46:d4:c3:37:68:f8:18:91:4a:a3:8c:26:98: af:31:39:09:cc:1a:79:43:d6:7b:2c:67:d3:a0:30: 0d:8c:21:3e:1a:97:43:38:ed:12:e3:81:ed:e5:51: 8c:ea:79:74:ce:a5:f6:9b:18:80:39:d5:dd:f9:cb: 56:dc:37:94:86:c1:b7:3d:64:fe:c5:ec:6b:1d:7b: c6:ed:9b:87:0c:56:43:49:57:a8:d4:1d:7b:dd:03: cd:65:0f:8d:e5:f0:3d:5a:7a:25:23:f9:39:34:3e: 46:b6:16:ac:d7:d9:d7:97:cf:ea:41:fe:97:7f:e8: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:50:1A:65:BD:75:E5:3C:89:F7:BB:51:8C:1C:9E:94:65:C6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl X509v3 Authority Key Identifier: keyid:A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer sbgp-ipAddrBlock: critical IPv4: 23.189.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:65:0e:f2:36:19:20:3a:91:7e:32:8d:b2:48:6d:e7:b5:98: aa:b8:59:d5:9c:6c:83:12:92:24:4f:dc:cf:33:c5:e4:cc:3b: 63:e8:08:ed:66:7e:10:f9:f9:27:c8:11:37:2c:dc:73:09:22: bc:c7:5e:f4:3c:00:c5:cf:fc:9c:18:26:79:0d:23:d0:d9:0c: e1:17:8b:1e:1e:02:4f:c0:ca:0b:52:eb:48:9f:66:c6:e8:4a: b8:df:02:56:35:5b:07:ed:03:b5:e0:ce:a3:b8:55:c4:01:ac: 3f:25:13:2f:1a:2a:cc:b5:91:48:f2:ab:14:db:b7:2e:8c:c9: 8f:2a:1b:f1:1e:88:e5:fc:b2:93:49:f7:77:3b:85:9c:20:20: 70:50:ba:71:72:a5:0c:b1:d7:58:a8:7d:fb:fe:68:d6:ad:04: a8:54:7d:9f:c0:50:54:a3:45:b9:32:65:22:fc:31:bf:2d:42: d8:cb:dd:1a:53:6a:8e:2a:54:a1:79:2a:f7:99:1d:7d:65:33: 09:88:66:51:c1:22:05:82:63:11:ea:89:8d:15:9b:8e:aa:95: ce:1a:3b:d8:20:67:c4:f9:c0:07:a2:e7:f4:cf:63:e4:fe:2c: 38:9f:87:4e:43:d2:4a:e9:19:c1:c3:f8:66:28:e9:2f:f5:58: 23:b9:6b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLJeyzLx43ahRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAwMTBkOTItMzVhNy00ZGJhLTgwN2ItMGYyMjliM2Uy ZTUwMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YzVlODkwODAtZjFiNS00MTExLWE5OGMtODBkYzQ5MWYwNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj07YaqJuK5lZ3yH424DEalL1eA15p0q4qrnd MsA6s7ORsJCNYKkXGNvwFGtxIwyHE1cv9zmfO0bqXeirgKfO8hWjzS+YDW5BlWa+ Nq2jf13EpDwMMidePD0MMGIChjfXfllVgAqCvSMNUhJIfBJ7Evb9/lZjpIj2KzzM b6LWNqM7T67sDgHMOkbUwzdo+BiRSqOMJpivMTkJzBp5Q9Z7LGfToDANjCE+GpdD OO0S44Ht5VGM6nl0zqX2mxiAOdXd+ctW3DeUhsG3PWT+xexrHXvG7ZuHDFZDSVeo 1B173QPNZQ+N5fA9WnolI/k5ND5Gthas19nXl8/qQf6Xf+h7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDDUBplvXXlPIn3u1GMHJ6UZcb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDAx MGQ5Mi0zNWE3LTRkYmEtODA3Yi0wZjIyOWIzZTJlNTAvMTRhNzE4N2UtN2U4YS0z OTNjLWJlY2UtYzJjMGJjNmJhZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTAwMTBkOTItMzVhNy00ZGJhLTgw N2ItMGYyMjliM2UyZTUwL2UwMDEwZDkyLTM1YTctNGRiYS04MDdiLTBmMjI5YjNl MmU1MC5jcmwwHwYDVR0jBBgwFoAUqA2k2Q2qmoR4RhwApXXSCNAaPpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDAxMGQ5Mi0zNWE3LTRkYmEtODA3Yi0wZjIy OWIzZTJlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF734MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9lDvI2GSA6kX4yjbJIbee1mKq4WdWcbIMSkiRP3M8zxeTMO2PoCO1m fhD5+SfIETcs3HMJIrzHXvQ8AMXP/JwYJnkNI9DZDOEXix4eAk/AygtS60ifZsbo SrjfAlY1WwftA7XgzqO4VcQBrD8lEy8aKsy1kUjyqxTbty6MyY8qG/EeiOX8spNJ 93c7hZwgIHBQunFypQyx11ioffv+aNatBKhUfZ/AUFSjRbkyZSL8Mb8tQtjL3RpT ao4qVKF5KveZHX1lMwmIZlHBIgWCYxHqiY0Vm46qlc4aO9ggZ8T5wAei5/TPY+T+ LDifh05D0krpGcHD+GYo6S/1WCO5a5c= -----END CERTIFICATE-----Generated at Mon Apr 28 10:33:58 2025 by rpki-client