$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa File: d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa (raw, json) Hash identifier: n/rrAAEiRVtR6PrDNKgyzLSK73i6kHyTw4WhvWMCcBc= Subject key identifier: 0C:AC:9C:C6:3B:CF:1C:ED:B3:75:71:17:0F:82:AC:D0:AC:42:B2:F7 Certificate issuer: /CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Certificate serial: 010D0C9F43285849912F2F34523F79E56A869100 Authority key identifier: 1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 395898 IP address blocks: 23.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2f:34:52:3f:79:e5:6a:86:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=5884b30e-d984-4932-98bd-39c2c6368236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bc:95:e7:0b:a3:6f:71:c8:b3:21:d9:19:9a: a5:e7:61:18:57:88:74:a3:d1:b5:46:0d:e0:ce:94: 6f:96:92:bc:ff:2c:72:b1:4c:a0:74:a1:27:32:78: 60:6f:74:30:6b:d7:fa:a5:7f:a3:7c:af:b2:df:f0: a3:41:f3:f0:d0:9d:3e:9e:55:a0:0e:99:c6:c9:c8: c7:7c:f1:c2:3a:d5:17:a9:40:0e:90:c7:93:18:b8: a0:8c:a4:59:66:62:1e:84:e6:be:1f:fd:bf:c9:10: b1:4f:5f:74:35:ae:5d:66:e7:39:2f:29:18:af:55: 7c:84:60:ea:dc:c1:96:6c:c2:8d:ac:3a:94:80:40: d8:63:76:89:2f:8a:37:e2:ad:3b:33:1e:8d:28:95: 18:88:6c:98:b0:02:94:9e:57:34:a8:69:b1:02:78: 39:61:fe:30:bb:15:00:5d:2a:ab:dc:ea:4d:83:f3: 7a:79:7a:76:20:62:8e:42:b2:56:13:05:56:d9:ea: 2d:cd:62:d2:71:d9:12:ae:34:72:27:fb:d8:a0:5a: e2:6b:4e:b0:d6:2d:b7:82:61:cd:cf:f1:0b:f4:d3: 69:79:71:07:98:66:7b:b2:28:ef:8b:3a:35:55:df: 40:95:7d:22:c7:84:ae:42:15:31:5c:f2:5d:55:e4: 3d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AC:9C:C6:3B:CF:1C:ED:B3:75:71:17:0F:82:AC:D0:AC:42:B2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl X509v3 Authority Key Identifier: keyid:1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer sbgp-ipAddrBlock: critical IPv4: 23.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:de:a3:bd:53:8c:8a:86:88:e6:4e:99:cd:51:02:59:ab:d1: b6:bd:92:67:e6:68:f6:a1:c1:fc:67:33:4f:4f:f8:b7:78:d1: 86:4c:91:f6:48:37:9c:e9:23:72:55:83:03:20:15:b3:e1:6f: 6e:db:e5:84:0e:3a:28:55:7f:59:c8:65:3e:8a:f2:e8:d1:05: c6:6d:39:bb:81:01:7d:1b:80:58:2e:29:1f:fc:48:9a:46:5c: a4:98:40:47:13:de:a7:8d:8b:25:47:92:42:b8:41:08:e4:df: a2:f2:2f:29:73:10:09:de:e0:30:59:e3:98:2e:b8:d8:3c:ff: 92:25:8b:05:61:ff:f0:1c:8b:f5:0c:71:34:ea:02:dc:fc:95: 94:53:04:e5:99:37:fb:fd:44:26:17:28:85:a7:13:8f:3c:6e: 53:60:1d:9d:a1:4a:20:06:29:c1:b8:48:15:84:f2:fa:39:af: ef:1b:b4:2b:2d:9b:b6:3b:eb:45:51:38:86:d5:d1:5b:8d:8a: 32:0c:b1:74:f1:58:e2:ab:f4:47:9a:40:24:06:5c:06:68:76: 5a:50:43:76:30:ad:da:c9:27:1a:51:32:e0:c2:b1:de:39:90: b6:c0:ed:22:94:e9:a4:4b:72:be:6c:b0:ac:61:b4:a5:98:6f: 73:1d:5e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy80Uj955WqGkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg5YjIxMzctZmMzOS00OGNhLTliNzUtMmI4NTc0YzFh MTQzMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NTg4NGIzMGUtZDk4NC00OTMyLTk4YmQtMzljMmM2MzY4MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8byV5wujb3HIsyHZGZql52EYV4h0o9G1Rg3g zpRvlpK8/yxysUygdKEnMnhgb3Qwa9f6pX+jfK+y3/CjQfPw0J0+nlWgDpnGycjH fPHCOtUXqUAOkMeTGLigjKRZZmIehOa+H/2/yRCxT190Na5dZuc5LykYr1V8hGDq 3MGWbMKNrDqUgEDYY3aJL4o34q07Mx6NKJUYiGyYsAKUnlc0qGmxAng5Yf4wuxUA XSqr3OpNg/N6eXp2IGKOQrJWEwVW2eotzWLScdkSrjRyJ/vYoFria06w1i23gmHN z/EL9NNpeXEHmGZ7sijvizo1Vd9AlX0ix4SuQhUxXPJdVeQ9cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAysnMY7zxzts3VxFw+CrNCsQrL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mODli MjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1NzRjMWExNDMvZDk2MDQ1N2UtMmVhNC0z MTY2LWI4YTMtOGZkYzdkN2VkYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjg5YjIxMzctZmMzOS00OGNhLTli NzUtMmI4NTc0YzFhMTQzL2Y4OWIyMTM3LWZjMzktNDhjYS05Yjc1LTJiODU3NGMx YTE0My5jcmwwHwYDVR0jBBgwFoAUGxS8Xj/L9LUFYOtZHwtMAXbkit4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mODliMjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1 NzRjMWExNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/eo71TjIqGiOZOmc1RAlmr0ba9kmfmaPahwfxnM09P+Ld40YZMkfZI N5zpI3JVgwMgFbPhb27b5YQOOihVf1nIZT6K8ujRBcZtObuBAX0bgFguKR/8SJpG XKSYQEcT3qeNiyVHkkK4QQjk36LyLylzEAne4DBZ45guuNg8/5IliwVh//Aci/UM cTTqAtz8lZRTBOWZN/v9RCYXKIWnE488blNgHZ2hSiAGKcG4SBWE8vo5r+8btCst m7Y760VROIbV0VuNijIMsXTxWOKr9EeaQCQGXAZodlpQQ3YwrdrJJxpRMuDCsd45 kLbA7SKU6aRLcr5ssKxhtKWYb3MdXt0= -----END CERTIFICATE-----Generated at Thu May 1 10:43:29 2025 by rpki-client