$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa File: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (raw, json) Hash identifier: KzW5rwmyo1LroX3OzeUjLe/OrlroOTz2Vx22B+0vsbI= Subject key identifier: F0:60:10:84:76:82:13:BA:92:F8:8F:40:AB:CC:FB:2C:3D:F3:D2:DC Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F432858496FAF11ADBAA4FC0F919C0940 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 209242 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:11:ad:ba:a4:fc:0f:91:9c:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=da1d40a9-ba63-4450-bd2d-429537a6a6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:dd:e7:19:56:51:4c:1f:48:f8:54:d9:29: bf:2e:4d:26:48:d5:dd:7a:4b:7b:10:60:6d:66:dc: 6e:8c:9e:fa:9e:9e:5c:ba:0d:d1:47:41:41:40:d4: 2c:86:90:8d:92:ab:b5:c2:b9:96:c6:c2:b2:c7:be: 12:1f:34:20:00:af:df:f6:f1:d3:44:62:77:ca:f3: 13:93:f6:38:ba:88:9d:78:22:39:66:ca:ea:3b:4b: 94:cf:a0:be:60:97:0f:ca:f5:6d:82:d3:07:b5:41: 7a:1a:21:af:7e:8f:56:b8:a2:a8:02:89:0b:35:d7: bb:70:16:5a:a0:3a:c4:25:d8:e2:57:44:d8:31:70: e3:6f:b9:a1:40:e0:02:b1:ae:98:8b:8f:c5:02:04: cb:0a:5f:72:35:2e:6b:a3:c3:4c:c3:8c:e3:cf:42: d1:fa:52:22:28:cf:52:d9:72:07:d4:2d:78:38:d6: 19:cc:f4:78:c6:f4:0e:57:47:ea:ce:f4:6c:36:6f: 8b:9d:98:75:46:09:da:c4:6a:17:c9:56:44:75:81: 1d:c9:dc:5c:f7:1f:f0:39:b5:b6:a2:35:d2:28:81: 87:e8:a9:10:fc:74:0d:18:b6:6b:d0:cb:16:09:cc: 6a:4d:11:3f:bd:bc:76:b2:f7:b9:ae:a8:ac:34:0a: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:10:84:76:82:13:BA:92:F8:8F:40:AB:CC:FB:2C:3D:F3:D2:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:84:0e:09:6c:e8:b5:2a:96:33:0c:16:43:5c:6b:45:2f:cb: 28:55:f8:5f:8d:61:2c:65:c0:af:fd:aa:20:bc:46:f8:ca:44: 06:e5:a7:94:fb:9f:66:d1:d5:03:5d:c5:4b:d5:37:e0:14:45: c2:62:d5:f1:ad:6b:89:46:5d:18:a5:65:c3:5b:58:68:b5:f9: 51:a3:6b:6c:d2:b5:42:5d:0f:93:d4:41:5b:a2:95:be:4b:bf: fb:bc:ec:f7:bb:57:a9:3a:be:ce:61:67:a3:65:83:71:ba:78: 1d:47:70:e9:e5:64:f4:65:55:55:28:df:13:2c:69:1d:fd:5c: a4:67:a3:e5:51:0c:1b:55:34:3f:ed:88:56:76:76:86:c7:d3: 47:a9:7a:cf:76:c2:ac:30:e4:c5:43:9e:47:c8:13:60:19:72: 51:18:6b:ee:de:73:b8:c9:7d:45:93:71:83:93:e2:51:95:1d: 5c:8d:80:1e:bc:11:87:9e:10:66:43:ec:15:27:06:6d:43:e9: 6f:8f:f2:d4:6c:bc:39:05:e4:f6:84:f0:b5:fb:b2:87:2e:e5: 53:16:64:94:f9:ed:e9:6c:c7:b9:30:ba:b2:77:f2:5a:ee:c8: 0e:52:73:b9:f7:fd:28:34:a5:29:26:93:35:e4:a9:6f:0e:f5: 79:df:1b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxGtuqT8D5GcCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGExZDQwYTktYmE2My00NDUwLWJkMmQtNDI5NTM3YTZhNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUrd5xlWUUwfSPhU2Sm/Lk0mSNXdekt7EGBt ZtxujJ76np5cug3RR0FBQNQshpCNkqu1wrmWxsKyx74SHzQgAK/f9vHTRGJ3yvMT k/Y4uoideCI5ZsrqO0uUz6C+YJcPyvVtgtMHtUF6GiGvfo9WuKKoAokLNde7cBZa oDrEJdjiV0TYMXDjb7mhQOACsa6Yi4/FAgTLCl9yNS5ro8NMw4zjz0LR+lIiKM9S 2XIH1C14ONYZzPR4xvQOV0fqzvRsNm+LnZh1RgnaxGoXyVZEdYEdydxc9x/wObW2 ojXSKIGH6KkQ/HQNGLZr0MsWCcxqTRE/vbx2sve5rqisNAollQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBgEIR2ghO6kviPQKvM+yw989LcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2I0YjVlZTYtYmMwOC0z ZDYwLTkxOWEtODhmNzkyYzdiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWEDgls6LUqljMMFkNca0UvyyhV+F+NYSxlwK/9qiC8RvjKRAblp5T7 n2bR1QNdxUvVN+AURcJi1fGta4lGXRilZcNbWGi1+VGja2zStUJdD5PUQVuilb5L v/u87Pe7V6k6vs5hZ6Nlg3G6eB1HcOnlZPRlVVUo3xMsaR39XKRno+VRDBtVND/t iFZ2dobH00epes92wqww5MVDnkfIE2AZclEYa+7ec7jJfUWTcYOT4lGVHVyNgB68 EYeeEGZD7BUnBm1D6W+P8tRsvDkF5PaE8LX7socu5VMWZJT57elsx7kwurJ38lru yA5Sc7n3/Sg0pSkmkzXkqW8O9XnfGz0= -----END CERTIFICATE-----Generated at Sat Apr 26 18:27:53 2025 by rpki-client