$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa File: 394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa (raw, json) Hash identifier: BTi/iR1VBlI9MPX1Yml2MPXjPjjpmWXb159S1iIts1U= Subject key identifier: 74:88:F1:BB:AB:F6:EC:1E:B3:A7:C1:80:AC:04:2B:9B:BA:A0:39:E4 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F43285849E22528BF079FF88C227751A0 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 63072 IP address blocks: 23.135.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:28:bf:07:9f:f8:8c:22:77:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=849c4132-d507-4400-a53c-c496e8f8cbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:e6:0b:06:f9:44:20:0b:54:01:fa:95:0f: e6:5f:6a:ec:0e:a2:15:b5:e0:41:2c:62:bf:8a:27: 78:f1:a4:9c:12:bf:e6:42:f8:06:7b:a7:11:58:d3: d7:60:c4:ad:8f:47:0e:55:45:56:7d:b5:c6:01:fb: b0:9a:d8:f9:22:ad:a8:18:81:31:97:9c:bf:44:d8: cd:71:58:5c:51:99:ff:e1:20:97:2c:b5:a7:d6:fc: bf:49:05:a9:31:10:c0:b9:23:89:af:05:4a:a0:39: ea:b3:b6:17:5d:c1:31:e0:e0:54:bc:60:f7:0b:d7: 49:bb:82:50:4f:88:67:58:61:39:f6:a7:e9:30:fb: 65:7f:71:07:af:a2:45:81:9a:8c:9e:43:4a:38:dc: cb:03:e3:b0:4f:a9:11:6d:84:df:0d:3a:be:d5:ea: 63:18:d6:75:22:ac:30:37:a2:20:7d:b1:b7:78:4c: c1:da:fb:98:e5:77:43:44:ce:96:b2:52:ee:89:f6: 56:22:e7:d6:02:dd:8e:12:34:0d:7b:81:6d:a8:12: 21:10:e2:32:af:1a:90:bc:f2:b1:da:0c:9d:42:91: f6:31:77:9c:62:e3:78:c2:5f:92:c7:dd:93:82:36: 27:e5:21:ca:9f:8b:9a:dc:99:ae:66:25:7f:0a:a9: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:F1:BB:AB:F6:EC:1E:B3:A7:C1:80:AC:04:2B:9B:BA:A0:39:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:28:1f:a1:ee:10:a6:c0:87:e4:50:97:14:fd:af:13:ca:76: a8:8a:2f:49:49:66:1e:e9:5c:3b:2d:6c:c8:ba:da:16:85:42: 4f:c0:f6:a6:ea:dc:c1:46:7a:d2:53:fc:f9:01:33:2a:be:d5: 92:d0:fa:7c:7f:c8:54:d2:26:2d:1b:8e:2b:74:28:d1:d8:d8: f4:4b:b8:99:3b:df:0d:fa:53:27:e9:55:22:5a:c1:36:3c:5a: 40:e4:4a:df:95:62:0d:fe:78:9b:71:d7:c9:5a:3d:e2:5c:8e: 2b:bf:78:31:b9:27:fc:b7:9d:d6:e4:05:54:3e:b7:22:f2:ff: 6d:c9:a0:51:cb:8b:68:0c:1c:4d:8a:a2:b8:53:74:f8:88:26: b9:e4:d7:44:40:86:98:93:ca:bd:d0:33:39:89:e7:d0:e8:97: 1a:ab:f3:9a:c9:66:59:51:13:e7:66:2c:d4:df:ee:39:a1:46: 9f:de:a2:9a:41:78:d4:2a:4b:fe:b4:4c:e1:3a:64:83:39:8c: c8:15:1d:b7:cf:4d:9c:9e:f5:65:da:1d:29:d9:18:8e:80:97: 45:ce:96:1d:f4:27:71:36:0e:7b:38:af:14:17:ef:73:f2:cf: 8e:1e:60:c7:d6:70:1c:26:71:b2:46:0a:5a:30:71:91:d5:71: f3:e0:04:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSi/B5/4jCJ3UaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ODQ5YzQxMzItZDUwNy00NDAwLWE1M2MtYzQ5NmU4ZjhjYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb7mCwb5RCALVAH6lQ/mX2rsDqIVteBBLGK/ iid48aScEr/mQvgGe6cRWNPXYMStj0cOVUVWfbXGAfuwmtj5Iq2oGIExl5y/RNjN cVhcUZn/4SCXLLWn1vy/SQWpMRDAuSOJrwVKoDnqs7YXXcEx4OBUvGD3C9dJu4JQ T4hnWGE59qfpMPtlf3EHr6JFgZqMnkNKONzLA+OwT6kRbYTfDTq+1epjGNZ1Iqww N6IgfbG3eEzB2vuY5XdDRM6WslLuifZWIufWAt2OEjQNe4FtqBIhEOIyrxqQvPKx 2gydQpH2MXecYuN4wl+Sx92TgjYn5SHKn4ua3JmuZiV/CqlXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSI8bur9uwes6fBgKwEK5u6oDnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMzk0ZDg3ODYtMTg1Yy0z YmZiLTllNWEtMmE0YTU3MTQ2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0oH6HuEKbAh+RQlxT9rxPKdqiKL0lJZh7pXDstbMi62haFQk/A9qbq 3MFGetJT/PkBMyq+1ZLQ+nx/yFTSJi0bjit0KNHY2PRLuJk73w36UyfpVSJawTY8 WkDkSt+VYg3+eJtx18laPeJcjiu/eDG5J/y3ndbkBVQ+tyLy/23JoFHLi2gMHE2K orhTdPiIJrnk10RAhpiTyr3QMzmJ59Dolxqr85rJZllRE+dmLNTf7jmhRp/eoppB eNQqS/60TOE6ZIM5jMgVHbfPTZye9WXaHSnZGI6Al0XOlh30J3E2Dns4rxQX73Py z44eYMfWcBwmcbJGClowcZHVcfPgBGI= -----END CERTIFICATE-----Generated at Sun Jun 15 23:02:01 2025 by rpki-client