$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa File: db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa (raw, json) Hash identifier: /0xtSHDwmglNo3DvXA65OF/WEmSx/uuT3f/AeZ5xh5o= Subject key identifier: 87:B4:A3:55:F2:24:C2:77:8E:81:FC:1E:51:B6:3C:20:3C:A3:C3:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAC473D0B4EE291B2BD140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 23.236.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c4:73:d0:b4:ee:29:1b:2b:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ea03cc6e-c405-4c08-bbec-641de5850d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:96:21:62:27:c5:cc:27:eb:90:d2:81:10: ba:cb:f5:2d:70:1b:47:e4:95:33:9c:38:55:99:f0: 34:56:19:48:04:d1:48:55:52:ca:46:bc:8a:16:f3: 56:ba:fe:f2:f9:54:c8:b0:29:0d:8f:34:05:3f:19: 86:b3:1f:d2:99:08:58:db:3b:29:c7:f7:55:9c:57: b8:2a:4c:51:3b:b4:06:f3:55:95:97:f0:38:7c:54: 15:91:d5:da:f4:eb:bf:0d:a6:34:c4:27:b1:36:67: ee:3f:1d:00:3b:bb:2b:6b:84:2c:7c:ab:a0:48:a7: c7:d9:99:7a:00:0f:4f:45:3e:8a:50:00:1d:c6:99: 5f:cc:dd:79:2b:8a:d6:cb:d2:4a:91:fa:c6:78:cb: 1a:b5:28:5b:ef:0c:0c:ae:ed:db:63:58:14:22:9f: 8c:38:ca:cc:2e:f7:12:0c:b1:72:4a:fa:93:b8:77: 07:cd:e6:11:91:dd:f9:19:84:db:b8:3d:9a:de:51: db:b6:c7:1f:85:42:ce:e7:41:8d:d3:36:32:bd:1a: bc:0b:4c:8a:1a:87:e6:8f:4b:aa:3d:d6:ae:7d:49: 52:2d:82:1b:15:64:51:d0:c5:d3:99:cc:9e:48:72: 43:97:a8:23:23:a6:79:59:5a:33:93:33:c4:5c:f4: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B4:A3:55:F2:24:C2:77:8E:81:FC:1E:51:B6:3C:20:3C:A3:C3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:11:99:d7:c2:bc:c3:e0:54:40:67:4f:dd:bf:f9:7e:fc:2c: 60:9c:c3:c6:f4:9e:67:77:18:33:86:fc:7a:a5:a4:e9:a3:9a: bc:00:c5:49:d2:72:cb:01:24:72:56:55:ee:34:b1:aa:74:88: 5d:11:d7:97:b7:3a:b2:74:5c:8b:1f:47:60:02:d2:c3:00:4d: 6b:22:e9:03:11:e8:98:4d:07:7a:8a:bb:07:d1:34:7a:ea:21: 7c:0b:cb:f7:bb:29:8b:6d:d6:12:4f:b8:04:ec:bd:6b:0c:35: 18:bf:58:88:be:4a:19:09:53:cd:6e:16:85:5e:f7:bb:0d:25: 15:ec:34:61:e3:e4:6b:11:da:8c:6a:64:5f:9a:10:3d:06:f7: 19:e5:0e:56:19:0f:73:ea:f3:e4:cf:22:af:84:c5:69:2e:f5: fa:af:88:03:42:aa:7e:ac:3c:5e:2a:78:7b:e7:62:9e:a0:42: 8d:08:fa:da:a1:03:90:46:ff:9d:d7:11:84:c1:6e:f3:a0:9e: 8f:d6:95:09:0c:92:69:ea:2d:02:da:e8:74:2c:d5:ae:68:f5: db:a7:d1:a1:25:8f:e6:fe:f4:5d:59:f0:10:02:0a:8e:b2:d2: 2a:41:f1:f3:73:78:be:33:a9:67:c8:fe:f3:89:8a:f5:39:67: 64:d4:2a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusRz0LTuKRsr0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWEwM2NjNmUtYzQwNS00YzA4LWJiZWMtNjQxZGU1ODUwZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E2WIWInxcwn65DSgRC6y/UtcBtH5JUznDhV mfA0VhlIBNFIVVLKRryKFvNWuv7y+VTIsCkNjzQFPxmGsx/SmQhY2zspx/dVnFe4 KkxRO7QG81WVl/A4fFQVkdXa9Ou/DaY0xCexNmfuPx0AO7sra4QsfKugSKfH2Zl6 AA9PRT6KUAAdxplfzN15K4rWy9JKkfrGeMsatShb7wwMru3bY1gUIp+MOMrMLvcS DLFySvqTuHcHzeYRkd35GYTbuD2a3lHbtscfhULO50GN0zYyvRq8C0yKGofmj0uq PdaufUlSLYIbFWRR0MXTmcyeSHJDl6gjI6Z5WVozkzPEXPQViwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe0o1XyJMJ3joH8HlG2PCA8o8NGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI0YzhhMzktNmFjYy0z MWNmLWJmYjMtMGZhNWVhNjI2ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsRmdfCvMPgVEBnT92/+X78LGCcw8b0nmd3GDOG/HqlpOmjmrwAxUnS cssBJHJWVe40sap0iF0R15e3OrJ0XIsfR2AC0sMATWsi6QMR6JhNB3qKuwfRNHrq IXwLy/e7KYtt1hJPuATsvWsMNRi/WIi+ShkJU81uFoVe97sNJRXsNGHj5GsR2oxq ZF+aED0G9xnlDlYZD3Pq8+TPIq+ExWku9fqviANCqn6sPF4qeHvnYp6gQo0I+tqh A5BG/53XEYTBbvOgno/WlQkMkmnqLQLa6HQs1a5o9dun0aElj+b+9F1Z8BACCo6y 0ipB8fNzeL4zqWfI/vOJivU5Z2TUKmk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:13 2025 by rpki-client