$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa File: a4c4c21b-f7d9-308d-86f5-145f67870890.roa (raw, json) Hash identifier: gw2ARPkkWJ4QyT3XPvGkHCLWU1OFrqaf8wh/0b3WZIo= Subject key identifier: CE:E7:8C:61:9A:EA:C2:2F:FB:5B:32:D5:7F:F0:8C:D4:3D:B6:46:C0 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F432858499DBF2FCF0E42A28A12915080 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 54702 IP address blocks: 23.182.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2f:cf:0e:42:a2:8a:12:91:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=b86328f0-341c-4e4d-bd0f-6212823d425a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:83:10:eb:d2:d8:58:68:4a:8d:26:7a:32: 1b:89:6e:d2:5f:dc:d9:ba:c1:91:05:4f:52:61:a0: 32:56:19:68:b8:f2:12:92:ea:fb:40:e7:17:22:d1: 5e:20:cf:a7:d5:d0:6f:bf:db:c5:cd:5e:71:a5:da: 82:f6:22:85:d7:2b:9a:96:ad:83:78:98:90:a9:82: 15:37:dd:d9:ac:a9:ad:7d:70:6f:3f:09:b0:6f:2c: fb:28:a6:ba:63:84:54:86:13:41:41:df:72:2a:3d: a4:48:4a:20:86:39:9f:a2:2a:2d:57:69:64:a9:4d: 9a:b5:06:df:d1:f3:83:37:44:44:a3:f2:03:61:99: 1e:6f:45:39:cf:74:98:e1:d1:bd:45:10:af:12:62: 4f:d5:d6:57:05:d4:0d:90:b1:98:33:42:99:53:7f: 39:29:52:2c:1a:72:00:9f:00:4e:39:6f:2f:f6:67: 33:a1:e5:cd:c9:fc:73:09:0c:15:c1:f4:23:d2:e7: c1:ad:fd:56:3c:1b:48:89:ca:4e:5c:b2:c7:e1:a8: 0e:a2:15:85:6e:b5:33:d5:de:65:d5:bc:a5:fc:2a: 2f:8d:b4:07:dc:c2:88:50:a2:45:db:51:a5:93:ab: 04:2c:3c:01:1e:b6:7c:dd:e7:97:a8:58:34:bd:4b: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E7:8C:61:9A:EA:C2:2F:FB:5B:32:D5:7F:F0:8C:D4:3D:B6:46:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 23.182.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b5:88:9a:40:7e:ab:a5:21:06:3d:c5:80:2f:7f:4e:50:0e: 2d:9b:26:e2:21:07:c1:62:cc:e1:f5:e6:e3:e4:8a:96:c6:fa: a5:9c:9c:9d:db:07:49:f6:a3:81:63:63:43:49:4a:2b:79:28: b2:a3:59:ee:e1:9f:0f:ef:53:b3:e1:93:1f:73:4b:2d:1c:e8: 91:8e:99:15:92:43:0f:66:11:c3:e7:5c:94:95:cd:27:a8:ed: 04:fc:ea:6c:99:87:72:c6:f7:9b:27:7c:11:bc:37:c4:fb:d6: b0:49:2b:e6:2b:b5:11:07:1e:4c:d7:ea:76:3a:cf:69:21:d6: 12:cf:00:6a:03:5a:f5:a2:38:e6:84:bb:db:95:3d:5d:cb:c6: b8:65:b5:31:6a:3b:8c:84:91:c6:7d:57:0a:ce:39:54:1b:08: 64:ab:6f:2d:ee:17:60:ae:bc:68:2f:40:ad:99:ab:04:09:a4: ef:94:d6:07:4c:ed:a0:72:68:44:51:58:ab:f8:31:a7:c5:aa: 61:ff:c1:50:82:f6:fc:9b:5c:7a:43:f1:ed:63:2a:33:0a:16: 14:28:a0:ed:7b:6b:c9:a1:da:a4:cc:31:af:1b:6f:a7:27:1c: 26:8f:5e:74:9d:6e:ba:bf:1f:ef:54:54:74:2a:8a:90:82:2d: 04:33:a0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvy/PDkKiihKRUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk Yjg2MzI4ZjAtMzQxYy00ZTRkLWJkMGYtNjIxMjgyM2Q0MjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcCDEOvS2FhoSo0mejIbiW7SX9zZusGRBU9S YaAyVhlouPISkur7QOcXItFeIM+n1dBvv9vFzV5xpdqC9iKF1yualq2DeJiQqYIV N93ZrKmtfXBvPwmwbyz7KKa6Y4RUhhNBQd9yKj2kSEoghjmfoiotV2lkqU2atQbf 0fODN0REo/IDYZkeb0U5z3SY4dG9RRCvEmJP1dZXBdQNkLGYM0KZU385KVIsGnIA nwBOOW8v9mczoeXNyfxzCQwVwfQj0ufBrf1WPBtIicpOXLLH4agOohWFbrUz1d5l 1byl/CovjbQH3MKIUKJF21Glk6sELDwBHrZ83eeXqFg0vUtH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7njGGa6sIv+1sy1X/wjNQ9tkbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvYTRjNGMyMWItZjdkOS0z MDhkLTg2ZjUtMTQ1ZjY3ODcwODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa1iJpAfqulIQY9xYAvf05QDi2bJuIhB8FizOH15uPkipbG+qWcnJ3b B0n2o4FjY0NJSit5KLKjWe7hnw/vU7Phkx9zSy0c6JGOmRWSQw9mEcPnXJSVzSeo 7QT86myZh3LG95snfBG8N8T71rBJK+YrtREHHkzX6nY6z2kh1hLPAGoDWvWiOOaE u9uVPV3LxrhltTFqO4yEkcZ9VwrOOVQbCGSrby3uF2CuvGgvQK2ZqwQJpO+U1gdM 7aByaERRWKv4MafFqmH/wVCC9vybXHpD8e1jKjMKFhQooO17a8mh2qTMMa8bb6cn HCaPXnSdbrq/H+9UVHQqipCCLQQzoJE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:51 2025 by rpki-client