$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bf6a823-9a3b-3c1d-8e01-bb2f3ca1ee32.roa File: 7bf6a823-9a3b-3c1d-8e01-bb2f3ca1ee32.roa (raw, json) Hash identifier: mPRMoTW8SFVhcZLWhls7CPk79nODHP8tBs/DOoyAXTA= Subject key identifier: AA:79:B6:AB:4C:7C:C5:BB:9F:28:02:4A:4E:CF:2F:43:87:3A:63:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAC8571DBC5B65FD200BE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bf6a823-9a3b-3c1d-8e01-bb2f3ca1ee32.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 23.251.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c8:57:1d:bc:5b:65:fd:20:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ca13d067-2bf1-430f-b5c7-e2bb69ca6aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:c7:b0:86:38:59:a7:2f:4f:9d:7c:4b:13: 1f:35:5e:eb:29:cd:99:a5:38:a8:81:41:1a:7e:78: 12:f9:09:3b:c6:88:7f:12:b8:27:66:e3:4f:ab:2b: 40:47:33:f5:a7:1c:97:60:7c:45:6a:2c:cb:5a:8b: 10:76:8f:84:76:7a:ac:cb:54:32:e7:52:f2:64:a0: 4d:6d:bc:09:86:21:cf:24:53:1f:9f:1b:67:11:51: 6e:d4:6d:0b:4d:49:c1:f5:fd:86:69:fe:bf:2f:d4: 26:b3:7f:d2:87:8c:9e:d6:ad:37:ab:76:ee:86:b4: d9:2a:d0:b4:ef:5a:0b:46:5d:73:82:48:75:7b:b7: 83:c8:f1:14:fa:9f:d3:b7:33:30:34:7a:d9:b6:19: 17:5a:0b:76:cc:f1:61:20:3c:4b:b2:8c:75:fe:84: 4c:94:15:f4:72:1c:9b:c9:1e:31:6e:fc:43:f5:e3: 04:a8:a0:ba:d8:41:92:ef:da:89:a6:03:f1:06:db: 4d:21:2a:38:d1:31:e2:5d:50:b6:6c:51:42:64:96: 42:a5:72:ae:28:d9:5f:3f:d1:c8:0a:a9:a0:59:c2: 46:18:1b:82:40:a3:e5:b1:c6:86:0e:c9:cf:7a:5b: eb:e5:b9:81:37:85:48:27:83:75:62:5e:2c:f1:f1: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:79:B6:AB:4C:7C:C5:BB:9F:28:02:4A:4E:CF:2F:43:87:3A:63:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bf6a823-9a3b-3c1d-8e01-bb2f3ca1ee32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:fc:13:73:0b:53:9c:ae:8c:63:86:04:58:c7:ba:f2:61:11: 2b:62:96:da:3f:0b:ef:51:e6:08:30:5c:03:86:ed:27:fd:71: 5b:c6:16:15:b8:61:64:f7:df:a0:88:18:29:e4:87:4f:87:4a: 97:32:da:13:fe:3d:ca:6b:08:88:72:69:bc:e9:6c:dd:6d:e6: fa:39:39:f0:b2:95:8f:19:9b:e8:6b:64:cb:be:6d:af:41:60: 5e:c5:e4:ad:19:bb:53:41:ca:ef:78:b1:de:04:ee:95:66:91: fb:72:8c:d8:a2:29:bc:00:27:04:74:ca:e0:b0:6f:0d:3b:ce: 6f:2d:9d:37:9e:9b:69:d4:36:6a:d4:24:62:76:ae:1e:19:51: dd:11:ad:02:67:c4:39:6f:cd:cf:05:2b:66:2d:02:13:01:91: fd:32:5c:01:a1:7d:b6:79:f2:4f:5c:6f:82:24:54:4e:fa:d1: da:88:3f:73:af:68:bc:09:b7:fe:a7:a6:9f:44:e1:0a:07:83: 06:99:9f:44:e0:9f:1a:e1:54:9c:43:67:8f:26:f4:40:2b:01: f4:e0:53:1f:48:3b:65:2d:3c:66:c1:5a:28:4c:fc:c7:55:3b: 4e:95:06:14:42:7a:cc:31:13:a8:69:b5:d3:67:a3:d4:25:08: 8a:63:25:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkushXHbxbZf0gC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2ExM2QwNjctMmJmMS00MzBmLWI1YzctZTJiYjY5Y2E2YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD7HsIY4WacvT518SxMfNV7rKc2ZpTiogUEa fngS+Qk7xoh/ErgnZuNPqytARzP1pxyXYHxFaizLWosQdo+Ednqsy1Qy51LyZKBN bbwJhiHPJFMfnxtnEVFu1G0LTUnB9f2Gaf6/L9Qms3/Sh4ye1q03q3buhrTZKtC0 71oLRl1zgkh1e7eDyPEU+p/TtzMwNHrZthkXWgt2zPFhIDxLsox1/oRMlBX0chyb yR4xbvxD9eMEqKC62EGS79qJpgPxBttNISo40THiXVC2bFFCZJZCpXKuKNlfP9HI CqmgWcJGGBuCQKPlscaGDsnPelvr5bmBN4VIJ4N1Yl4s8fG24QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp5tqtMfMW7nygCSk7PL0OHOmP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2JmNmE4MjMtOWEzYi0z YzFkLThlMDEtYmIyZjNjYTFlZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT8E3MLU5yujGOGBFjHuvJhEStilto/C+9R5ggwXAOG7Sf9cVvGFhW4 YWT336CIGCnkh0+HSpcy2hP+PcprCIhyabzpbN1t5vo5OfCylY8Zm+hrZMu+ba9B YF7F5K0Zu1NByu94sd4E7pVmkftyjNiiKbwAJwR0yuCwbw07zm8tnTeem2nUNmrU JGJ2rh4ZUd0RrQJnxDlvzc8FK2YtAhMBkf0yXAGhfbZ58k9cb4IkVE760dqIP3Ov aLwJt/6npp9E4QoHgwaZn0TgnxrhVJxDZ48m9EArAfTgUx9IO2UtPGbBWihM/MdV O06VBhRCeswxE6hptdNno9QlCIpjJUE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:28 2025 by rpki-client