$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa File: 011ade8c-5158-3ad0-b3a4-f792372a4d23.roa (raw, json) Hash identifier: Qo9mdwCRQvl1cHTpQyxFninWXNPT1128IH8+VsONwbs= Subject key identifier: 9A:D0:7B:10:E6:96:49:B8:BD:20:9F:A5:9B:2C:60:AB:C0:21:E7:79 Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Certificate serial: 010D0C9F43285849D85F866015BB439572CF5B40 Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 398987 IP address blocks: 23.128.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:86:60:15:bb:43:95:72:cf:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ae570b4b-60f9-4823-b1c3-8428e45fc575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:99:eb:e8:d1:b9:c6:eb:20:9e:af:be:d6: 5f:34:e9:de:39:2f:54:b1:58:51:d6:75:7b:32:8e: 8e:27:ff:7f:5a:03:32:4b:91:65:4c:86:f3:56:8d: 87:a1:d1:d9:69:89:dd:01:1b:85:ec:83:f3:1c:d7: 7f:76:4e:43:9f:fa:c3:7c:1a:05:a0:10:0f:04:ef: ed:79:df:2b:a1:dc:5d:12:3d:c4:47:94:0b:72:74: 01:34:eb:d2:ed:ed:6a:01:66:c1:c6:1b:6e:97:62: 6a:75:03:0b:c9:6c:5e:ea:65:e8:4e:df:1a:54:fd: 99:99:9c:94:a0:30:0b:2c:39:71:a0:25:55:fd:b6: 46:8d:c8:4c:c9:08:95:08:43:5c:f2:69:dc:4e:4c: 70:20:05:81:54:73:8d:ca:49:71:68:be:ed:13:29: 21:01:e9:97:d0:1c:91:84:e2:f5:01:8e:81:65:c0: c7:60:4f:15:c1:e2:fa:3b:55:62:c6:7e:ae:69:7c: 9e:38:21:58:d3:19:dc:47:be:32:ee:b3:62:14:5f: fc:d2:a9:90:a1:df:18:e2:52:56:66:01:ba:4c:a9: 62:d8:69:78:0e:86:94:0e:d5:76:cb:3c:31:0f:02: 69:5e:8d:0b:44:8b:6e:a6:32:86:c2:e1:a4:c9:19: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D0:7B:10:E6:96:49:B8:BD:20:9F:A5:9B:2C:60:AB:C0:21:E7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl X509v3 Authority Key Identifier: keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer sbgp-ipAddrBlock: critical IPv4: 23.128.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:69:23:ec:96:1b:66:b4:b7:9e:b8:f2:01:56:d2:7a:02:d2: 89:ac:d9:7a:80:d5:13:37:e2:15:6b:b3:16:08:07:dc:9f:64: 7f:ba:95:3a:67:82:f8:a2:3c:6b:a5:33:42:1c:ec:5e:48:79: e0:9f:6c:ea:c9:2c:c6:62:01:2e:b6:d5:55:f8:05:79:e2:cf: f5:cd:3d:98:70:a4:d8:23:ca:c0:b6:b8:95:60:70:fd:5a:f7: 22:e4:29:80:06:c3:56:d1:42:b5:89:cc:1d:69:30:71:a0:51: 8c:89:7f:e5:f2:ff:47:e5:98:cc:02:0c:3d:4b:85:50:7a:3c: 11:48:f7:f4:b6:3e:ff:90:e0:90:30:e0:e3:63:73:47:f1:a6: 41:aa:d9:45:7e:bf:62:ad:5d:56:d1:9f:53:4a:55:71:51:1d: 50:43:1c:7c:d1:79:17:d4:20:b1:34:8a:fd:5b:16:48:1c:84: f1:00:fe:7a:ec:c1:ea:2b:4b:23:14:cc:8e:a9:2b:2a:b7:4a: 3a:6a:51:7d:4e:3f:d0:22:3a:50:1c:e9:90:b6:3e:79:90:90: 88:5b:97:54:af:10:f1:8d:18:5d:20:32:dc:bb:29:35:a7:c1: 9a:4b:89:33:59:e8:5b:8b:4f:5b:08:2b:d2:c8:25:ae:7c:6c: 28:00:df:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4ZgFbtDlXLPW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3NTM1ZjQtZDNmMS00ZTdmLWIzNzktMDgzNWUwMmZi MjgwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWU1NzBiNGItNjBmOS00ODIzLWIxYzMtODQyOGU0NWZjNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9mZ6+jRucbrIJ6vvtZfNOneOS9UsVhR1nV7 Mo6OJ/9/WgMyS5FlTIbzVo2HodHZaYndARuF7IPzHNd/dk5Dn/rDfBoFoBAPBO/t ed8rodxdEj3ER5QLcnQBNOvS7e1qAWbBxhtul2JqdQMLyWxe6mXoTt8aVP2ZmZyU oDALLDlxoCVV/bZGjchMyQiVCENc8mncTkxwIAWBVHONyklxaL7tEykhAemX0ByR hOL1AY6BZcDHYE8VweL6O1Vixn6uaXyeOCFY0xncR74y7rNiFF/80qmQod8Y4lJW ZgG6TKli2Gl4DoaUDtV2yzwxDwJpXo0LRItupjKGwuGkyRkdawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrQexDmlkm4vSCfpZssYKvAIed5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1 MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1ZTAyZmIyODAvMDExYWRlOGMtNTE1OC0z YWQwLWIzYTQtZjc5MjM3MmE0ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2M3NTM1ZjQtZDNmMS00ZTdmLWIz NzktMDgzNWUwMmZiMjgwLzNjNzUzNWY0LWQzZjEtNGU3Zi1iMzc5LTA4MzVlMDJm YjI4MC5jcmwwHwYDVR0jBBgwFoAUanWY7hD2PKRz8peL4giaAPDi2ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1 ZTAyZmIyODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFpI+yWG2a0t5648gFW0noC0oms2XqA1RM34hVrsxYIB9yfZH+6lTpn gviiPGulM0Ic7F5IeeCfbOrJLMZiAS621VX4BXniz/XNPZhwpNgjysC2uJVgcP1a 9yLkKYAGw1bRQrWJzB1pMHGgUYyJf+Xy/0flmMwCDD1LhVB6PBFI9/S2Pv+Q4JAw 4ONjc0fxpkGq2UV+v2KtXVbRn1NKVXFRHVBDHHzReRfUILE0iv1bFkgchPEA/nrs weorSyMUzI6pKyq3SjpqUX1OP9AiOlAc6ZC2PnmQkIhbl1SvEPGNGF0gMty7KTWn wZpLiTNZ6FuLT1sIK9LIJa58bCgA3/c= -----END CERTIFICATE-----Generated at Sun Jun 15 04:53:34 2025 by rpki-client