$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa File: ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa (raw, json) Hash identifier: X8wemV5gQZ+gnRFw72djoptIGe+sUMr1y2vewuDp0Iw= Subject key identifier: B4:BF:91:93:67:8D:A0:E2:96:34:0D:8C:1C:4F:BA:BE:30:71:74:51 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB66ED9BC3EDD09DA441B0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 23.236.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:66:ed:9b:c3:ed:d0:9d:a4:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=853faabb-f7b7-4579-a46c-1425e1f4b345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:d0:b7:44:28:a2:8e:82:82:a1:67:f6:d4: 43:bc:df:40:30:53:9a:33:77:94:17:22:19:d8:44: 97:96:d3:9d:4f:f2:5d:fb:0e:a0:87:76:7c:8a:4d: ff:72:89:52:a1:c4:ef:0f:66:00:9c:45:70:a3:32: 26:6c:f2:f0:86:9a:29:11:ee:37:77:1b:c1:4a:31: 2c:c8:c0:ea:30:05:3d:bb:9f:c3:70:57:c7:f8:63: 6d:57:af:51:ab:92:17:9b:60:4a:8d:ce:18:3a:32: 35:3e:4d:67:8d:d5:94:1f:2e:58:7e:50:8b:31:b4: 9b:21:2e:d6:7b:88:7f:04:07:fc:74:80:68:a5:fe: 69:63:d0:cf:df:b7:d2:dd:cf:5d:94:30:96:83:74: 50:cd:76:09:6f:79:e0:08:34:8f:46:d3:6e:f8:2e: 91:a4:15:9c:71:cc:7a:01:49:27:e8:75:ed:88:4f: 05:cc:9b:9b:1c:d1:61:45:cc:ff:52:07:91:5a:cc: 3e:d8:02:3a:29:ea:6b:c9:12:d0:38:d2:46:56:67: 50:70:64:9f:4b:9a:49:35:7f:a7:1b:86:09:30:41: 26:7e:c0:71:ad:70:d5:44:bb:88:48:c0:75:6d:0e: 50:9f:5c:4f:47:3b:00:ff:db:1d:2d:09:e6:52:f6: 34:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:91:93:67:8D:A0:E2:96:34:0D:8C:1C:4F:BA:BE:30:71:74:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0a:29:48:7c:ba:68:d4:d6:c7:ec:9e:9b:31:20:8a:e4:a7: b1:b1:92:10:6d:17:d3:c6:b0:6a:63:e0:45:8c:a8:66:b1:87: e9:db:00:99:b4:ff:99:e9:94:f4:21:bb:05:9e:ea:04:92:e2: bb:71:fd:b5:02:6f:d9:9f:03:55:00:0a:06:98:f1:5e:98:91: e9:09:b5:db:d1:de:ad:86:09:5b:ed:e6:9e:57:4d:a2:5a:4a: 08:26:e9:9c:e0:fd:82:a5:50:53:8d:94:f9:9a:a9:2a:c9:59: d7:da:56:5d:17:3b:1e:3c:6d:66:ff:9a:72:eb:ad:7d:17:8f: a2:dc:25:e1:6b:e0:ba:08:50:c6:95:04:e2:4c:4a:d7:cb:8c: 4d:e4:11:90:7c:d6:53:f0:c2:f2:22:15:e9:47:44:27:5f:3b: bb:bd:32:fc:46:ea:48:3b:fb:67:03:cd:49:0a:85:b0:1c:db: 79:b5:df:9e:15:57:d2:7e:01:c1:82:48:74:60:c9:b5:3c:8c: 23:f7:b1:41:78:ef:18:17:45:20:c8:8a:03:0c:b1:90:97:11: c5:88:40:89:5c:6e:ba:79:c5:d5:9d:b6:a9:31:9b:a9:b5:14: c8:32:18:87:74:7f:4c:5f:0b:ef:b3:ea:1c:64:2c:a1:1c:a1: 0e:9e:74:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2btm8Pt0J2kQbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODUzZmFhYmItZjdiNy00NTc5LWE0NmMtMTQyNWUxZjRiMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgHQt0Qooo6CgqFn9tRDvN9AMFOaM3eUFyIZ 2ESXltOdT/Jd+w6gh3Z8ik3/colSocTvD2YAnEVwozImbPLwhpopEe43dxvBSjEs yMDqMAU9u5/DcFfH+GNtV69Rq5IXm2BKjc4YOjI1Pk1njdWUHy5YflCLMbSbIS7W e4h/BAf8dIBopf5pY9DP37fS3c9dlDCWg3RQzXYJb3ngCDSPRtNu+C6RpBWcccx6 AUkn6HXtiE8FzJubHNFhRcz/UgeRWsw+2AI6KepryRLQONJGVmdQcGSfS5pJNX+n G4YJMEEmfsBxrXDVRLuISMB1bQ5Qn1xPRzsA/9sdLQnmUvY0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS/kZNnjaDiljQNjBxPur4wcXRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2UzNGIzZmItZjE0NC0z ODZiLThhMmEtYzljMWM0Y2Q1YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+w7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAKKUh8umjU1sfsnpsxIIrkp7GxkhBtF9PGsGpj4EWMqGaxh+nbAJm0 /5nplPQhuwWe6gSS4rtx/bUCb9mfA1UACgaY8V6YkekJtdvR3q2GCVvt5p5XTaJa Sggm6Zzg/YKlUFONlPmaqSrJWdfaVl0XOx48bWb/mnLrrX0Xj6LcJeFr4LoIUMaV BOJMStfLjE3kEZB81lPwwvIiFelHRCdfO7u9MvxG6kg7+2cDzUkKhbAc23m1354V V9J+AcGCSHRgybU8jCP3sUF47xgXRSDIigMMsZCXEcWIQIlcbrp5xdWdtqkxm6m1 FMgyGId0f0xfC++z6hxkLKEcoQ6edBQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:21 2025 by rpki-client