$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa File: d1a16e87-19b9-34cb-80f5-b2cd02650049.roa (raw, json) Hash identifier: ra0WQuiiSp3Tvtn7oKkFDW5i7lUgEl6lyXkUdoCTIrg= Subject key identifier: 3A:8D:17:A9:06:48:2B:30:E2:71:D8:33:3F:AF:EE:BE:95:57:3A:85 Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Certificate serial: 010D0C9F43285849D85F8ABF8A91553980A21200 Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 398960 IP address blocks: 23.168.145.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:8a:bf:8a:91:55:39:80:a2:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=f65ef602-e843-4e31-95e8-e336415eb5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:d3:ac:58:ee:20:b5:26:3a:6d:8c:b8:fa: 3e:0f:ef:c9:c9:85:73:a5:37:07:f3:41:ca:bc:6f: 19:0e:52:a8:f0:71:25:c2:71:b0:05:71:3e:75:57: 8c:f1:c4:bf:ec:27:ae:c3:3e:ff:df:d3:6c:58:0e: 03:fe:9d:0b:6b:5a:34:c5:84:c6:f8:91:de:13:fd: 5d:a5:20:e7:50:af:1c:4d:53:b4:76:ef:70:a1:54: f8:84:42:f8:8a:eb:4c:4a:79:8b:f8:d8:ff:79:38: 1f:18:db:d2:39:45:17:69:19:25:23:cd:df:29:d0: 09:1d:32:d8:b9:f1:15:ab:f7:65:76:3b:59:98:94: 26:dd:71:60:9d:ff:14:0d:4d:e8:65:65:b0:18:d3: 35:97:0e:17:cf:a9:83:c9:e0:4c:bc:98:6f:40:e4: 9d:36:91:35:c2:c3:96:2f:94:4e:ab:6b:9c:7b:aa: 63:03:66:bc:c4:99:4c:df:0f:2c:dd:34:29:6b:b6: 8c:61:6f:cd:d0:e2:3f:22:c9:fc:0b:10:f2:df:ee: 93:c9:32:59:49:4e:9e:e0:a2:c7:1b:f3:e0:4c:e8: db:c4:fe:07:ef:5d:49:fe:b3:d4:49:7a:3e:68:53: 84:5c:41:b8:c6:e2:03:b6:7e:86:15:30:7a:e8:f6: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:17:A9:06:48:2B:30:E2:71:D8:33:3F:AF:EE:BE:95:57:3A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl X509v3 Authority Key Identifier: keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer sbgp-ipAddrBlock: critical IPv4: 23.168.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b8:cf:31:c2:4f:24:50:57:42:ed:51:07:9f:63:d7:8f:bb: f1:f1:31:2e:ce:78:de:56:e1:b8:2e:f4:29:a9:91:f4:18:6f: 4a:11:eb:a9:78:d5:04:c2:e4:66:3e:60:e9:0e:95:d6:3a:25: 3b:0b:c7:56:86:86:66:5e:b1:93:e5:47:68:f1:07:1d:90:8e: 66:79:71:e8:10:30:79:83:35:1a:9e:72:65:b8:fa:c3:8d:fd: a5:c6:22:d0:47:02:53:a5:d5:7f:da:0d:2c:7b:33:af:0c:f8: a6:fd:14:d1:1d:64:42:e4:59:73:d0:05:7a:c6:83:ce:99:47: 15:8f:d5:3c:7b:81:5b:26:ff:d5:0d:e7:00:46:00:1d:d5:9a: a1:e9:9e:c8:2f:63:e0:55:e6:79:be:4c:35:2d:21:e5:36:c4: bb:1d:e6:21:bc:5d:38:c1:a6:80:68:62:10:6b:3c:b8:f3:7e: 8a:f9:32:dc:71:1e:b0:13:05:ef:18:57:27:31:1f:8b:67:3d: c9:89:25:cd:81:4b:ba:d1:61:39:11:83:84:de:bd:53:42:3e: e1:d1:9d:c7:fe:b7:c5:b4:d2:b4:e0:d3:e5:41:11:15:90:05: 44:56:34:01:29:85:a4:c7:31:1c:34:12:bc:dc:93:57:0d:fa: 03:00:e6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4q/ipFVOYCiEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYy M2RiMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjY1ZWY2MDItZTg0My00ZTMxLTk1ZTgtZTMzNjQxNWViNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIjTrFjuILUmOm2MuPo+D+/JyYVzpTcH80HK vG8ZDlKo8HElwnGwBXE+dVeM8cS/7Ceuwz7/39NsWA4D/p0La1o0xYTG+JHeE/1d pSDnUK8cTVO0du9woVT4hEL4iutMSnmL+Nj/eTgfGNvSOUUXaRklI83fKdAJHTLY ufEVq/dldjtZmJQm3XFgnf8UDU3oZWWwGNM1lw4Xz6mDyeBMvJhvQOSdNpE1wsOW L5ROq2uce6pjA2a8xJlM3w8s3TQpa7aMYW/N0OI/Isn8CxDy3+6TyTJZSU6e4KLH G/PgTOjbxP4H711J/rPUSXo+aFOEXEG4xuIDtn6GFTB66PZeCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqNF6kGSCsw4nHYMz+v7r6VVzqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUy NjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvZDFhMTZlODctMTliOS0z NGNiLTgwZjUtYjJjZDAyNjUwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMThlMjY0OGUtODg2OS00YWZkLWEw YmQtYTFhYzdjMWYyM2RiLzE4ZTI2NDhlLTg4NjktNGFmZC1hMGJkLWExYWM3YzFm MjNkYi5jcmwwHwYDVR0jBBgwFoAUA9CNha/VYO1h+yq5qYqSTv68/rAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFj N2MxZjIzZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi4zzHCTyRQV0LtUQefY9ePu/HxMS7OeN5W4bgu9CmpkfQYb0oR66l4 1QTC5GY+YOkOldY6JTsLx1aGhmZesZPlR2jxBx2QjmZ5cegQMHmDNRqecmW4+sON /aXGItBHAlOl1X/aDSx7M68M+Kb9FNEdZELkWXPQBXrGg86ZRxWP1Tx7gVsm/9UN 5wBGAB3VmqHpnsgvY+BV5nm+TDUtIeU2xLsd5iG8XTjBpoBoYhBrPLjzfor5Mtxx HrATBe8YVycxH4tnPcmJJc2BS7rRYTkRg4TevVNCPuHRncf+t8W00rTg0+VBERWQ BURWNAEphaTHMRw0Erzck1cN+gMA5ik= -----END CERTIFICATE-----Generated at Sun Jun 15 12:08:10 2025 by rpki-client