$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/d443f43f-4243-35bd-a593-22d90c14109b.roa File: d443f43f-4243-35bd-a593-22d90c14109b.roa (raw, json) Hash identifier: m5R9dto6UBagp9tLkkuDbp6nzJ7yH3azLgs6LQT4O90= Subject key identifier: 69:C8:28:27:1D:3D:CA:AA:A4:5E:4F:5B:DC:BE:A5:1B:0B:EF:F8:7D Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F43285849C20A1B39D5990E10C39EEE00 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/d443f43f-4243-35bd-a593-22d90c14109b.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 216458 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1b:39:d5:99:0e:10:c3:9e:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=f85e9444-e20b-4ddf-872a-05693da1712d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:15:b4:8c:d9:7b:a5:3d:b9:de:01:96:14:e4: d4:df:33:31:31:b4:51:1d:16:88:52:29:4b:6e:f4: b8:80:ec:e6:be:75:d0:63:a3:27:f6:3d:9f:10:a5: 1b:a6:5c:ae:f5:a0:62:36:ce:40:9e:6d:1b:fc:98: 91:54:43:90:29:7a:22:37:ed:ce:d3:06:99:e7:7d: 56:5c:f7:e9:98:ff:62:09:fe:5f:04:36:86:17:cd: e2:6d:5c:10:63:05:cb:7c:5c:e1:21:0d:81:1a:87: 9d:9a:aa:7b:a9:70:34:99:6a:90:3e:9d:6a:eb:8a: c0:4e:32:52:78:d8:ef:7a:9b:b8:d3:83:e9:f0:bb: 5a:6f:59:85:cd:c4:f8:6e:9b:42:83:6a:6a:48:45: 12:34:c7:36:34:d4:e6:f0:66:47:f3:58:b1:3a:13: d6:bb:39:ee:1a:42:c6:bf:3a:1a:b6:ed:15:b4:dd: df:5f:3e:68:4c:68:77:17:86:ae:4d:26:5a:14:fd: 2f:8d:75:7c:9c:8b:38:35:c3:ce:0a:05:e3:cf:50: 92:d7:7e:5e:40:17:17:30:8e:44:b2:a8:b2:7a:51: 5a:75:db:20:26:8e:3e:24:90:34:d4:39:be:52:60: 6f:7d:e3:31:98:e4:03:7b:45:b1:45:44:96:a8:e1: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C8:28:27:1D:3D:CA:AA:A4:5E:4F:5B:DC:BE:A5:1B:0B:EF:F8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/d443f43f-4243-35bd-a593-22d90c14109b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:de:b4:17:3e:6f:e2:1b:23:f5:e3:63:9f:2d:4d:5c:53:b2: 4f:aa:51:51:f9:07:09:0e:e1:1c:ac:3b:02:0e:72:86:8d:84: a8:df:11:e8:4c:5b:4e:44:ee:eb:01:67:8c:d9:80:46:f9:9b: d1:4a:e3:42:4f:8a:02:58:e8:9e:1a:55:66:15:de:ae:1d:18: 24:64:e7:6d:e2:a8:a8:b3:16:e6:5c:5a:f7:59:da:35:b7:eb: 2c:ef:f0:20:d9:2a:9c:4f:7f:87:32:bf:ac:7d:ea:31:c9:17: 66:66:8c:4c:b2:45:3b:74:06:89:42:6f:22:3b:52:35:e7:ce: f7:16:73:cd:96:44:e1:1d:cc:e3:b1:04:c3:47:98:e8:d6:d7: ea:69:65:93:9c:a4:56:99:dd:7b:b9:c6:0f:c1:f1:e6:8d:7f: 02:f0:14:72:2e:1b:6e:c7:bd:d4:4d:f4:87:85:58:c0:ef:ff: 4e:19:e2:ff:91:4a:8b:1c:55:04:ce:70:04:0c:27:60:1c:06: 50:45:e1:db:46:ba:ce:71:d5:e2:33:71:69:f5:c0:fd:e2:4c: 78:6c:bd:b2:c2:b3:d3:7d:2b:36:42:f4:10:e4:c7:62:99:4c: e9:40:84:06:cc:8b:13:53:a7:50:fa:be:0a:7a:1f:88:d1:8e: 19:87:e4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChs51ZkOEMOe7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Zjg1ZTk0NDQtZTIwYi00ZGRmLTg3MmEtMDU2OTNkYTE3MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BW0jNl7pT253gGWFOTU3zMxMbRRHRaIUilL bvS4gOzmvnXQY6Mn9j2fEKUbplyu9aBiNs5Anm0b/JiRVEOQKXoiN+3O0waZ531W XPfpmP9iCf5fBDaGF83ibVwQYwXLfFzhIQ2BGoedmqp7qXA0mWqQPp1q64rATjJS eNjvepu404Pp8Ltab1mFzcT4bptCg2pqSEUSNMc2NNTm8GZH81ixOhPWuznuGkLG vzoatu0VtN3fXz5oTGh3F4auTSZaFP0vjXV8nIs4NcPOCgXjz1CS135eQBcXMI5E sqiyelFaddsgJo4+JJA01Dm+UmBvfeMxmOQDe0WxRUSWqOGiwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnIKCcdPcqqpF5PW9y+pRsL7/h9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvZDQ0M2Y0M2YtNDI0My0z NWJkLWE1OTMtMjJkOTBjMTQxMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3etBc+b+IbI/XjY58tTVxTsk+qUVH5BwkO4RysOwIOcoaNhKjfEehM W05E7usBZ4zZgEb5m9FK40JPigJY6J4aVWYV3q4dGCRk523iqKizFuZcWvdZ2jW3 6yzv8CDZKpxPf4cyv6x96jHJF2ZmjEyyRTt0BolCbyI7UjXnzvcWc82WROEdzOOx BMNHmOjW1+ppZZOcpFaZ3Xu5xg/B8eaNfwLwFHIuG27HvdRN9IeFWMDv/04Z4v+R SoscVQTOcAQMJ2AcBlBF4dtGus5x1eIzcWn1wP3iTHhsvbLCs9N9KzZC9BDkx2KZ TOlAhAbMixNTp1D6vgp6H4jRjhmH5JI= -----END CERTIFICATE-----Generated at Sun Jun 15 11:57:00 2025 by rpki-client