$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de9f86d5-f024-3d1c-b581-c322cc307c9d.roa File: de9f86d5-f024-3d1c-b581-c322cc307c9d.roa (raw, json) Hash identifier: ATmXj9lbUJ3vQdoL9NUy2pOudlc0p9q7AE9m+ZJE+QU= Subject key identifier: 22:4F:D4:57:9E:3E:24:21:21:42:CB:25:6B:84:E7:CE:DD:ED:85:E3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499F24DD8D759250F629B31780 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de9f86d5-f024-3d1c-b581-c322cc307c9d.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 23.230.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:dd:8d:75:92:50:f6:29:b3:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3f793ebe-49ed-40c2-b756-1dc8be263e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:a7:c0:b9:8c:1d:6e:59:fd:f1:de:54:42: 14:54:25:d3:00:b5:f9:76:d0:1f:f9:e7:ab:7c:a3: 78:76:a3:aa:f1:c6:e0:ea:b3:b2:81:49:9d:cf:77: 34:cb:9e:09:c3:d8:a5:08:1f:42:75:4c:9a:4a:21: d4:f3:b4:28:f0:af:a6:2b:c2:a7:5e:4c:12:ec:5d: 92:22:a5:71:03:f6:ed:9a:d5:80:61:c7:a8:0a:3a: bd:78:a0:16:51:58:40:1d:9e:50:4c:2c:f7:16:9d: ac:b3:da:28:93:16:0f:00:05:a9:04:42:9e:d5:8c: c7:be:4d:fa:6c:fd:67:f2:79:b3:a7:30:81:e8:20: e7:b6:c0:11:38:12:45:da:cb:d4:17:3d:af:80:df: 99:6e:d9:50:26:88:3c:72:20:db:f0:aa:93:46:80: 62:2f:7f:32:27:f7:8c:bd:da:88:5f:db:f2:50:db: d9:d3:c5:6a:6f:91:cf:6e:04:4e:c8:50:cd:e7:68: 0b:13:94:32:e5:b9:3f:4a:c0:d6:46:78:9f:c5:6f: c1:1b:fa:4a:06:99:79:6d:64:03:51:ee:c4:f2:13: cc:d9:e0:9c:1c:57:a6:fa:9a:08:35:1f:79:82:73: 64:ce:45:a8:2d:f9:8c:54:b4:69:5d:ff:03:be:ec: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4F:D4:57:9E:3E:24:21:21:42:CB:25:6B:84:E7:CE:DD:ED:85:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de9f86d5-f024-3d1c-b581-c322cc307c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f9:2c:3a:3e:3a:f9:7d:d0:fb:c2:ce:a2:33:c9:d1:ce:c3: e6:cb:ed:ec:9b:62:2c:94:cc:5f:ef:9d:b9:3b:a1:1b:8e:a4: 7d:e8:9c:31:b4:7b:55:63:18:9f:8c:98:68:6a:69:0c:61:a0: 6d:4b:b1:e5:ba:0f:44:10:d3:a1:b2:96:a9:ef:69:4d:c5:66: 41:73:68:ce:60:91:5e:dd:be:1b:64:09:bf:56:dc:46:36:0f: 91:ca:dc:60:23:90:90:8f:73:0e:cb:7f:01:d5:dc:34:53:62: 46:72:c0:6c:a5:32:2c:5e:37:04:01:c0:0e:82:5c:f2:b5:f0: c8:e3:52:5a:4d:56:4c:6a:4b:7e:45:60:09:f4:d6:81:e8:95: 9d:1e:3c:54:ef:ce:3a:f3:bc:c5:ff:e0:d3:2f:b9:56:ed:0f: 66:16:10:a9:90:64:59:d5:12:38:4c:6e:18:92:5b:8b:b0:6c: 28:54:91:74:a4:bf:61:d1:86:4f:25:c2:12:7c:18:0e:be:58: 46:54:92:7d:ac:fb:83:e8:b3:87:ee:5e:39:3b:0f:d8:fc:2c: af:03:b5:8a:de:f1:26:50:ef:90:5c:01:e1:35:60:51:a5:2b: 10:4f:17:c3:89:03:35:46:6f:da:d4:32:8c:66:89:0e:d3:77: ac:4d:a5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJN2NdZJQ9imzF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2Y3OTNlYmUtNDllZC00MGMyLWI3NTYtMWRjOGJlMjYzZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS6nwLmMHW5Z/fHeVEIUVCXTALX5dtAf+eer fKN4dqOq8cbg6rOygUmdz3c0y54Jw9ilCB9CdUyaSiHU87Qo8K+mK8KnXkwS7F2S IqVxA/btmtWAYceoCjq9eKAWUVhAHZ5QTCz3Fp2ss9ookxYPAAWpBEKe1YzHvk36 bP1n8nmzpzCB6CDntsAROBJF2svUFz2vgN+ZbtlQJog8ciDb8KqTRoBiL38yJ/eM vdqIX9vyUNvZ08Vqb5HPbgROyFDN52gLE5Qy5bk/SsDWRnifxW/BG/pKBpl5bWQD Ue7E8hPM2eCcHFem+poINR95gnNkzkWoLfmMVLRpXf8DvuyExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJP1FeePiQhIULLJWuE587d7YXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGU5Zjg2ZDUtZjAyNC0z ZDFjLWI1ODEtYzMyMmNjMzA3YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+Z5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv5LDo+Ovl90PvCzqIzydHOw+bL7eybYiyUzF/vnbk7oRuOpH3onDG0 e1VjGJ+MmGhqaQxhoG1LseW6D0QQ06GylqnvaU3FZkFzaM5gkV7dvhtkCb9W3EY2 D5HK3GAjkJCPcw7LfwHV3DRTYkZywGylMixeNwQBwA6CXPK18MjjUlpNVkxqS35F YAn01oHolZ0ePFTvzjrzvMX/4NMvuVbtD2YWEKmQZFnVEjhMbhiSW4uwbChUkXSk v2HRhk8lwhJ8GA6+WEZUkn2s+4Pos4fuXjk7D9j8LK8DtYre8SZQ75BcAeE1YFGl KxBPF8OJAzVGb9rUMoxmiQ7Td6xNpTY= -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:40 2025 by rpki-client