$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa File: 29949da6-8cb5-3545-95c6-65e47a0cc103.roa (raw, json) Hash identifier: w9o3p3ZFYEqhd8IGXuwz/sGzSQr+ETFyVrvqjROKZ6g= Subject key identifier: 3C:18:E9:01:24:A4:38:BC:63:6E:05:53:63:50:C4:31:64:98:2F:DF Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Certificate serial: 010D0C9F4328584972799E9A467D0B9EA6311BC0 Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 26886 IP address blocks: 23.167.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:9e:9a:46:7d:0b:9e:a6:31:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=08f3fe21-320b-4a36-ab23-135f59d56262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4f:67:73:a9:9d:2d:e2:ff:31:a0:59:e2:6d: b9:04:58:2e:3c:61:21:15:9a:e8:5f:6b:e9:bb:0f: 83:94:35:c3:85:53:d4:b6:06:84:25:b1:69:e5:e4: 5d:e4:cc:8f:74:d1:4b:1e:b2:e6:34:39:72:5f:28: 43:a9:04:c6:af:2e:12:d3:f7:33:92:23:d0:8b:b5: fc:7c:5a:9a:da:4a:9d:be:d1:7c:89:36:75:06:35: 13:d3:4d:7f:eb:76:ce:5e:18:8d:88:fb:48:d5:e6: 12:fd:f9:3d:ce:3b:f3:14:26:45:cd:bd:aa:2c:67: 59:03:78:58:d3:2a:3d:a5:44:df:27:03:21:13:b1: 43:88:76:e1:9c:aa:33:d4:f3:bd:79:c6:83:97:fd: e0:51:05:a2:95:2d:75:5c:61:d1:af:bc:17:f7:89: b8:9f:d7:bf:16:06:0f:3b:1c:b7:70:58:32:96:d3: 3a:33:95:a3:eb:5a:3e:a6:c7:fc:e7:11:9a:b0:8c: 11:9c:59:d1:f4:3d:39:3f:04:9d:79:34:1d:1e:83: a9:34:e1:ad:f3:8a:93:ad:31:bc:ab:96:b8:18:0d: ac:03:9e:e2:7a:8d:15:90:e1:6f:40:31:ba:72:1c: d6:1b:f7:30:79:a3:08:ba:3f:40:ed:f3:90:b3:b0: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:18:E9:01:24:A4:38:BC:63:6E:05:53:63:50:C4:31:64:98:2F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl X509v3 Authority Key Identifier: keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer sbgp-ipAddrBlock: critical IPv4: 23.167.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c5:af:61:3d:d8:c3:82:f8:05:62:f1:80:47:14:43:12:56: 1c:65:9f:8d:9e:94:00:a6:22:16:3a:64:df:38:cc:f7:ef:10: 8d:3c:ae:a7:f6:11:c0:fb:95:64:aa:7d:73:26:45:79:49:dc: 0e:5b:9b:45:79:ab:28:cf:88:d9:b9:2a:8b:19:c4:b7:55:aa: 44:62:2d:dc:9b:c3:95:59:28:c9:97:46:65:e3:ce:fe:c2:01: 7d:48:32:da:70:8d:3b:77:74:7e:0e:ee:e8:42:ce:e3:8b:50: ca:cb:9e:81:e5:1f:a2:3d:bb:e9:16:ed:ce:c1:9d:4c:34:4f: 23:a1:dd:eb:d2:e2:c1:b1:0c:50:20:03:dc:8b:21:e3:53:06: 64:af:f9:ee:40:9a:c9:87:dd:78:4f:10:9d:54:e5:81:bd:34: 86:d2:50:7d:0e:04:09:03:78:50:f7:d1:78:09:8a:f6:75:69: eb:43:7a:84:97:68:e3:16:8b:ed:ae:62:b7:66:c5:82:b0:74: 66:4b:28:39:d2:9b:d1:d0:c2:da:13:ae:2a:23:21:eb:d0:b6: 75:0b:11:7b:10:0f:47:11:93:7d:3d:33:7a:8f:c2:12:69:21: dd:4c:22:60:3e:a6:0b:ca:43:37:c6:02:0a:86:40:cd:0e:19: a3:92:ea:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeZ6aRn0LnqYxG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJi MTQ4MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MDhmM2ZlMjEtMzIwYi00YTM2LWFiMjMtMTM1ZjU5ZDU2MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU9nc6mdLeL/MaBZ4m25BFguPGEhFZroX2vp uw+DlDXDhVPUtgaEJbFp5eRd5MyPdNFLHrLmNDlyXyhDqQTGry4S0/czkiPQi7X8 fFqa2kqdvtF8iTZ1BjUT001/63bOXhiNiPtI1eYS/fk9zjvzFCZFzb2qLGdZA3hY 0yo9pUTfJwMhE7FDiHbhnKoz1PO9ecaDl/3gUQWilS11XGHRr7wX94m4n9e/FgYP Oxy3cFgyltM6M5Wj61o+psf85xGasIwRnFnR9D05PwSdeTQdHoOpNOGt84qTrTG8 q5a4GA2sA57ieo0VkOFvQDG6chzWG/cweaMIuj9A7fOQs7DNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwY6QEkpDi8Y24FU2NQxDFkmC/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUy NzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvMjk5NDlkYTYtOGNiNS0z NTQ1LTk1YzYtNjVlNDdhMGNjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhlMjczYzEtZTM5Zi00NjRiLThj MWYtYjQ1YzhkZjJiMTQ4LzY4ZTI3M2MxLWUzOWYtNDY0Yi04YzFmLWI0NWM4ZGYy YjE0OC5jcmwwHwYDVR0jBBgwFoAUTS+LfVGd0REBVTtzG9uaer5iv6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVj OGRmMmIxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfFr2E92MOC+AVi8YBHFEMSVhxln42elACmIhY6ZN84zPfvEI08rqf2 EcD7lWSqfXMmRXlJ3A5bm0V5qyjPiNm5KosZxLdVqkRiLdybw5VZKMmXRmXjzv7C AX1IMtpwjTt3dH4O7uhCzuOLUMrLnoHlH6I9u+kW7c7BnUw0TyOh3evS4sGxDFAg A9yLIeNTBmSv+e5AmsmH3XhPEJ1U5YG9NIbSUH0OBAkDeFD30XgJivZ1aetDeoSX aOMWi+2uYrdmxYKwdGZLKDnSm9HQwtoTriojIevQtnULEXsQD0cRk309M3qPwhJp Id1MImA+pgvKQzfGAgqGQM0OGaOS6u0= -----END CERTIFICATE-----Generated at Tue Apr 29 07:03:43 2025 by rpki-client