$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89581af2-795b-3183-8d0d-8ed71ec17c4f.roa File: 89581af2-795b-3183-8d0d-8ed71ec17c4f.roa (raw, json) Hash identifier: 2PMEqocF87Oqphoc8gwIg4YSOXWPnEblGURMSjIvuvo= Subject key identifier: 48:42:3E:77:BB:47:DF:40:B2:B5:83:CB:69:22:D8:E8:2E:F9:7F:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BABAABDB67C907C845D220 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89581af2-795b-3183-8d0d-8ed71ec17c4f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 23.236.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ba:ab:db:67:c9:07:c8:45:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fcb066c1-03e6-4998-bfa6-a40188669254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:e6:b3:95:d8:c3:37:52:8b:c1:25:3a:99: 2c:f2:bc:ba:89:3b:61:b7:db:2a:e4:56:e7:36:df: e0:ff:14:32:2c:a4:27:ad:f9:41:57:8c:ec:a4:c7: 06:95:3a:0a:17:f0:71:0a:2d:6d:a6:15:0a:b8:21: 73:04:3e:94:c8:34:2d:ff:15:7f:e4:63:49:37:a2: a8:e9:51:f8:a2:c6:66:c4:b0:e9:c2:ba:ba:2e:a9: 69:34:81:fd:6f:d8:a6:5b:12:93:1a:32:dc:39:4f: 04:41:e2:45:5f:a0:07:3e:b7:3a:b4:85:73:ed:e1: bd:5f:c2:00:af:9f:72:61:63:a5:79:e3:c1:04:59: 7e:8d:ea:ff:f2:df:e4:31:99:16:c8:e0:17:7b:0a: 8a:86:49:32:97:18:27:db:93:8c:c8:8b:dc:a8:89: cb:3a:0d:4d:6a:a0:ef:8e:b2:0a:6a:c5:6c:cb:d7: 5d:1b:00:84:69:02:13:71:be:3b:33:b4:b9:9c:f5: be:f6:a7:5d:c9:8c:a1:a6:4d:87:95:52:00:37:8a: 6d:09:9c:a9:04:4e:cb:b6:38:4d:0b:d2:d0:b1:be: 86:a0:7d:f8:56:1f:a5:a3:22:c9:ac:a1:40:b6:83: 5a:d2:44:93:10:f1:79:35:d0:60:4a:bf:eb:17:1b: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:3E:77:BB:47:DF:40:B2:B5:83:CB:69:22:D8:E8:2E:F9:7F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89581af2-795b-3183-8d0d-8ed71ec17c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6d:a3:3c:22:cd:67:84:9f:3f:4f:1d:18:23:6a:d4:a2:a4: aa:99:2e:d8:01:e5:b1:b7:6d:13:f9:c6:89:61:5d:60:34:ee: a0:57:7c:27:09:74:d0:e9:27:80:5e:77:67:d8:25:03:9b:c0: 7d:0e:ea:5a:09:4d:02:56:43:ab:70:3d:49:29:16:02:cf:2f: f5:67:04:41:53:d9:48:7a:be:1d:56:8f:95:db:05:5a:9f:bd: 25:26:84:09:a7:6d:01:ec:12:3d:6e:c1:28:7e:05:a1:38:94: 4d:15:32:e1:2c:11:27:3e:71:0b:d8:42:a1:70:62:ca:da:94: fe:9d:62:13:74:fd:ba:ae:79:7c:c3:8a:b2:d3:5b:f0:94:e8: e3:1c:7f:12:20:d6:78:3c:f3:1b:3c:74:3f:7d:8d:ec:84:38: 5b:28:0e:29:7c:a0:5a:d3:3b:d9:37:a9:0f:09:11:8a:3c:88: 8c:44:57:7e:5e:a7:82:59:d1:37:f6:ed:ec:91:83:81:da:c0: 49:a9:46:78:80:c3:d4:d3:22:fe:45:7b:99:09:84:aa:bf:d2: 9e:21:db:48:83:41:e1:44:b7:2a:17:6d:fd:e7:58:f1:90:c5: 7c:49:cf:cb:4a:5c:f0:d3:fb:4f:f2:ed:0b:3c:47:3a:30:5e: 9f:b3:a2:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurqr22fJB8hF0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmNiMDY2YzEtMDNlNi00OTk4LWJmYTYtYTQwMTg4NjY5MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpPms5XYwzdSi8ElOpks8ry6iTtht9sq5Fbn Nt/g/xQyLKQnrflBV4zspMcGlToKF/BxCi1tphUKuCFzBD6UyDQt/xV/5GNJN6Ko 6VH4osZmxLDpwrq6LqlpNIH9b9imWxKTGjLcOU8EQeJFX6AHPrc6tIVz7eG9X8IA r59yYWOleePBBFl+jer/8t/kMZkWyOAXewqKhkkylxgn25OMyIvcqInLOg1NaqDv jrIKasVsy9ddGwCEaQITcb47M7S5nPW+9qddyYyhpk2HlVIAN4ptCZypBE7LtjhN C9LQsb6GoH34Vh+loyLJrKFAtoNa0kSTEPF5NdBgSr/rFxvxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhCPne7R99AsrWDy2ki2Ogu+X9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk1ODFhZjItNzk1Yi0z MTgzLThkMGQtOGVkNzFlYzE3YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+w1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVtozwizWeEnz9PHRgjatSipKqZLtgB5bG3bRP5xolhXWA07qBXfCcJ dNDpJ4Bed2fYJQObwH0O6loJTQJWQ6twPUkpFgLPL/VnBEFT2Uh6vh1Wj5XbBVqf vSUmhAmnbQHsEj1uwSh+BaE4lE0VMuEsESc+cQvYQqFwYsralP6dYhN0/bqueXzD irLTW/CU6OMcfxIg1ng88xs8dD99jeyEOFsoDil8oFrTO9k3qQ8JEYo8iIxEV35e p4JZ0Tf27eyRg4HawEmpRniAw9TTIv5Fe5kJhKq/0p4h20iDQeFEtyoXbf3nWPGQ xXxJz8tKXPDT+0/y7Qs8RzowXp+zopg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:26 2025 by rpki-client