$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f7346aa-04ca-31b9-bb2d-2e823a303874.roa File: 0f7346aa-04ca-31b9-bb2d-2e823a303874.roa (raw, json) Hash identifier: q+aowM/WyJXF8QJ2nzGCmmKOtJDGwxUwEXv5jfNNEhg= Subject key identifier: ED:D8:9B:30:DA:EA:C1:99:07:C8:C9:C2:DC:76:DA:5F:7E:8F:C3:1F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858492414E95A2494FF11C48A8080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f7346aa-04ca-31b9-bb2d-2e823a303874.roa Signing time: Mon 10 Mar 2025 11:05:04 +0000 ROA not before: Mon 10 Mar 2025 11:05:04 +0000 ROA not after: Sun 08 Jun 2025 11:05:04 +0000 asID: 400536 IP address blocks: 23.230.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:14:e9:5a:24:94:ff:11:c4:8a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 10 11:05:04 2025 GMT Not After : Jun 8 11:05:04 2025 GMT Subject: CN=c8eb5017-45ac-4af0-bf81-39e3dd9ec0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:aa:7e:0a:e1:e1:f1:db:cd:5e:80:01:1a:78: 9f:ff:66:87:85:e3:47:29:9f:76:b1:54:c7:19:d4: 0c:a7:f8:17:18:db:28:eb:02:e0:99:10:8b:b3:40: 35:12:59:0f:7d:75:8f:ea:46:b6:ae:89:1f:80:95: 97:ea:9a:f3:19:9b:83:19:b3:a8:99:22:bc:3b:5b: 23:58:bd:58:c0:7b:19:68:bb:17:1e:0f:32:eb:88: 58:aa:35:51:c4:a5:65:7d:44:18:cb:80:ac:48:a9: a3:fe:34:96:c8:41:a0:82:61:48:4a:75:16:c9:7c: 39:48:74:cd:70:cb:02:4f:6b:05:0b:4c:ec:37:d5: b3:5f:d5:e3:53:d7:a6:63:d3:89:2c:3c:c1:01:5e: 62:e1:1d:00:35:c3:aa:ad:76:b8:b1:68:46:47:5e: dc:bb:24:dd:0b:7c:cb:91:f5:49:51:d1:42:2e:ff: 9d:54:ce:6e:71:2d:19:b4:55:88:cc:07:be:42:9b: 3f:36:2f:6f:97:87:a9:04:96:b1:26:f3:55:3a:90: a3:b5:16:47:a5:18:64:3a:66:19:6e:be:85:0e:14: 24:ba:38:be:bc:11:c9:76:cc:18:6b:ba:e7:38:60: fb:3a:36:56:2b:0a:61:04:7a:da:57:83:28:07:cb: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D8:9B:30:DA:EA:C1:99:07:C8:C9:C2:DC:76:DA:5F:7E:8F:C3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f7346aa-04ca-31b9-bb2d-2e823a303874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:10:93:c9:ee:ee:23:9a:55:9d:b1:79:7f:b6:df:29:cf:18: 7c:1f:41:12:05:cb:0e:69:81:bc:e0:f8:c3:c6:11:01:cc:43: 97:90:f9:29:87:a2:43:6d:c6:66:5f:ac:6a:3e:12:f2:a6:96: 5c:8f:cf:6c:90:bf:23:ed:1a:2f:1b:8a:4a:c1:19:bc:78:35: 6b:28:ff:70:03:5d:de:6f:d4:40:59:85:5f:ac:a2:a1:31:2b: 89:27:ca:c1:18:3d:b2:95:41:e3:df:f9:20:03:82:bd:af:74: 65:53:b4:50:3e:51:87:40:80:75:32:a9:fd:f6:19:19:27:a1: bf:be:df:4c:f4:c6:02:8b:bc:d4:ab:43:37:a6:5e:1e:c7:d5: 1a:c6:8f:b1:61:7c:3a:63:73:18:c1:4f:7c:56:9d:35:10:5c: 9d:5e:2b:89:82:73:68:65:55:e2:bb:b5:21:84:12:3a:d3:0e: 50:35:0d:9b:b8:73:f7:bd:f8:a5:ec:e4:d7:43:bd:1f:df:78: 5d:30:75:90:11:de:da:62:94:a1:ad:88:08:fe:5f:64:72:9e: 2f:34:4c:d3:a5:14:d4:a1:1c:b6:ff:a9:7f:1b:8f:f1:78:ef: d2:0a:e1:2b:4e:d1:b9:16:2d:c4:99:43:82:73:ac:32:81:b2: 49:0d:b7:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkFOlaJJT/EcSKgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMxMDExMDUwNFoXDTI1MDYwODExMDUwNFowLzEtMCsGA1UEAxMk YzhlYjUwMTctNDVhYy00YWYwLWJmODEtMzllM2RkOWVjMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgap+CuHh8dvNXoABGnif/2aHheNHKZ92sVTH GdQMp/gXGNso6wLgmRCLs0A1ElkPfXWP6ka2rokfgJWX6przGZuDGbOomSK8O1sj WL1YwHsZaLsXHg8y64hYqjVRxKVlfUQYy4CsSKmj/jSWyEGggmFISnUWyXw5SHTN cMsCT2sFC0zsN9WzX9XjU9emY9OJLDzBAV5i4R0ANcOqrXa4sWhGR17cuyTdC3zL kfVJUdFCLv+dVM5ucS0ZtFWIzAe+Qps/Ni9vl4epBJaxJvNVOpCjtRZHpRhkOmYZ br6FDhQkuji+vBHJdswYa7rnOGD7OjZWKwphBHraV4MoB8ul9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3YmzDa6sGZB8jJwtx22l9+j8MfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGY3MzQ2YWEtMDRjYS0z MWI5LWJiMmQtMmU4MjNhMzAzODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwQk8nu7iOaVZ2xeX+23ynPGHwfQRIFyw5pgbzg+MPGEQHMQ5eQ+SmH okNtxmZfrGo+EvKmllyPz2yQvyPtGi8bikrBGbx4NWso/3ADXd5v1EBZhV+soqEx K4knysEYPbKVQePf+SADgr2vdGVTtFA+UYdAgHUyqf32GRknob++30z0xgKLvNSr QzemXh7H1RrGj7FhfDpjcxjBT3xWnTUQXJ1eK4mCc2hlVeK7tSGEEjrTDlA1DZu4 c/e9+KXs5NdDvR/feF0wdZAR3tpilKGtiAj+X2Ryni80TNOlFNShHLb/qX8bj/F4 79IK4StO0bkWLcSZQ4JzrDKBskkNtz4= -----END CERTIFICATE-----Generated at Sun Apr 27 04:22:11 2025 by rpki-client