$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/e6fbc970-6240-37e6-a71a-09105bb5456a.roa File: e6fbc970-6240-37e6-a71a-09105bb5456a.roa (raw, json) Hash identifier: cy8e8QEW5D3jqBKAtV5tbsygXR3TJRk30cIyNLKRgrY= Subject key identifier: 9E:16:E9:31:C0:48:29:DB:CB:C3:67:05:9C:DA:2E:1C:00:F3:D6:62 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F432858498CFF14D712C2F735521FA780 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/e6fbc970-6240-37e6-a71a-09105bb5456a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 46733 IP address blocks: 23.165.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:14:d7:12:c2:f7:35:52:1f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=59c938e7-ceb7-47ce-ab2c-3a1310d8d3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5a:3d:ba:c3:21:36:3c:5a:4b:d1:94:20:ec: 0e:cf:c7:1e:6f:57:52:fa:dc:c8:03:cd:36:a6:c4: 67:c8:fa:7a:59:a4:a7:15:42:17:09:7c:b9:ed:f6: fb:37:b0:85:28:c0:84:1c:32:ca:e6:26:2e:c9:ca: f2:b9:de:3a:fe:ba:7a:22:b5:02:fa:02:8b:fc:77: 10:d5:cd:cb:91:d9:cd:f8:a5:77:71:45:83:af:c1: 6f:77:96:84:0f:92:43:43:14:2a:6b:95:6a:4f:aa: de:c6:87:51:f3:39:4c:4a:fa:2e:80:91:2e:59:2b: 04:8e:78:77:bd:98:32:bf:bb:a4:46:f5:f4:4d:71: 09:c2:85:25:22:95:28:98:50:5b:22:16:21:d1:23: e9:29:fe:1a:8b:97:6e:69:31:c4:c3:61:0b:52:b2: 5a:46:ad:f4:a1:e5:dc:8e:5b:51:9a:d2:d9:71:a3: 1e:ac:a5:2a:ec:e6:96:93:d0:da:7d:5d:51:be:09: e1:36:68:75:d9:e4:97:c3:1d:60:55:d4:a7:0b:80: c9:e6:eb:70:61:f6:cc:b8:0c:07:ef:8e:8e:09:6e: dd:4f:a9:7e:a8:4b:55:7f:dd:8e:45:b1:b8:81:26: 4a:0e:78:7e:ca:ed:33:8d:a5:47:e8:e2:ef:30:5d: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:16:E9:31:C0:48:29:DB:CB:C3:67:05:9C:DA:2E:1C:00:F3:D6:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/e6fbc970-6240-37e6-a71a-09105bb5456a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b6:a7:d8:d3:0f:12:c6:ad:de:9d:80:93:1d:09:96:1c:e4: e5:4b:07:7f:ef:13:00:b0:0f:4f:b5:02:a2:0a:04:f1:0f:63: 03:97:54:af:b0:f0:ab:bb:6d:f1:b2:00:d0:4e:d1:93:2d:e6: 15:d2:87:ee:9b:28:4b:17:17:21:6d:0b:04:18:22:f1:d9:a1: 1a:2e:d4:a5:91:67:d3:72:09:7a:3f:c4:e9:e4:40:df:c6:0b: 81:d4:3d:14:25:b5:d9:2f:46:5b:64:df:4a:06:57:3e:59:7d: f4:6f:92:a8:0c:ca:92:6e:37:39:4e:13:88:cb:f8:2b:d1:74: a9:35:6c:20:9c:1c:f2:d4:52:51:fa:83:fa:dd:1d:6a:5c:e3: 12:4d:91:c8:db:e9:a2:b5:8b:17:a7:74:69:da:14:20:28:ba: de:10:34:6d:b4:8e:52:db:9d:b6:67:c0:22:7c:f3:85:69:3c: a3:f8:be:6a:9c:3c:d9:1a:70:e3:41:24:38:09:f2:8e:f9:8d: 0c:22:35:c2:e9:19:d8:9f:d0:6a:ff:f2:98:80:f6:78:c3:ae: 2c:ec:2c:31:86:88:f4:ab:96:50:a7:a1:40:b8:fa:5f:37:11: d7:26:12:0b:97:e6:10:e4:e7:a3:fc:d5:00:d7:fb:fc:7f:9b: d1:4e:c7:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xTXEsL3NVIfp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NTljOTM4ZTctY2ViNy00N2NlLWFiMmMtM2ExMzEwZDhkM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lo9usMhNjxaS9GUIOwOz8ceb1dS+tzIA802 psRnyPp6WaSnFUIXCXy57fb7N7CFKMCEHDLK5iYuycryud46/rp6IrUC+gKL/HcQ 1c3LkdnN+KV3cUWDr8Fvd5aED5JDQxQqa5VqT6rexodR8zlMSvougJEuWSsEjnh3 vZgyv7ukRvX0TXEJwoUlIpUomFBbIhYh0SPpKf4ai5duaTHEw2ELUrJaRq30oeXc jltRmtLZcaMerKUq7OaWk9DafV1RvgnhNmh12eSXwx1gVdSnC4DJ5utwYfbMuAwH 746OCW7dT6l+qEtVf92ORbG4gSZKDnh+yu0zjaVH6OLvMF3vtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4W6THASCnby8NnBZzaLhwA89ZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvZTZmYmM5NzAtNjI0MC0z N2U2LWE3MWEtMDkxMDViYjU0NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq2p9jTDxLGrd6dgJMdCZYc5OVLB3/vEwCwD0+1AqIKBPEPYwOXVK+w 8Ku7bfGyANBO0ZMt5hXSh+6bKEsXFyFtCwQYIvHZoRou1KWRZ9NyCXo/xOnkQN/G C4HUPRQltdkvRltk30oGVz5ZffRvkqgMypJuNzlOE4jL+CvRdKk1bCCcHPLUUlH6 g/rdHWpc4xJNkcjb6aK1ixendGnaFCAout4QNG20jlLbnbZnwCJ884VpPKP4vmqc PNkacONBJDgJ8o75jQwiNcLpGdif0Gr/8piA9njDrizsLDGGiPSrllCnoUC4+l83 EdcmEguX5hDk56P81QDX+/x/m9FOx8Q= -----END CERTIFICATE-----Generated at Tue Apr 29 08:30:50 2025 by rpki-client