$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa File: f0621ac2-276f-3c57-aad1-63daa946e435.roa (raw, json) Hash identifier: 9QgYw9DcDnc3DaBwx/efE7nOu4o9f0T9r1TYnWrTNb8= Subject key identifier: 83:84:BA:CD:CB:17:9A:17:B9:51:FF:89:12:8C:01:3B:F5:23:C9:8C Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F432858498E6488ED3586EBDADB79A480 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 23539 IP address blocks: 23.138.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:88:ed:35:86:eb:da:db:79:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=481c9bf5-397b-45e2-815e-bd3a31b67c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:94:bc:10:bc:bb:99:84:0c:e9:0e:53:a7: b8:93:a6:57:19:ae:05:74:8f:49:9d:2b:aa:75:eb: 57:4e:d4:b5:9b:15:76:65:61:a9:57:57:f1:4c:44: 43:0a:b7:a4:e4:54:01:9a:aa:f0:36:22:05:8c:54: 75:88:e9:bc:f4:ef:be:b3:79:6b:e0:c8:ec:a4:1b: 49:ac:b5:6b:fb:71:ca:21:c5:d5:78:26:c8:22:fc: 6f:00:29:ac:14:1e:e7:f5:1f:ce:25:6a:65:cd:29: ef:0b:e1:2b:5c:ec:ad:56:d1:db:ef:14:ec:ce:e6: a9:04:77:b4:b6:b7:f6:ab:c0:58:56:3d:73:45:bb: 62:b2:51:3d:39:4e:f4:bc:7a:fe:2b:c3:14:b6:3c: 10:7d:15:e7:23:b6:0f:48:65:7e:b2:3c:59:f0:1b: 4b:56:fa:97:1a:72:a9:1d:94:00:98:36:07:7f:b5: 45:fc:53:5c:9f:ad:97:bd:b0:b8:55:d2:c0:82:49: e0:cf:14:42:c8:d6:17:ee:8c:fd:82:79:3f:55:8e: 2b:6c:30:4b:3c:3a:30:72:b9:29:c2:fe:8d:08:76: f4:9b:fc:4c:fc:5a:ff:14:79:a6:82:2e:5e:c1:93: 07:73:57:07:9c:4c:2d:04:8a:c6:88:17:76:68:07: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:84:BA:CD:CB:17:9A:17:B9:51:FF:89:12:8C:01:3B:F5:23:C9:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 23.138.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0a:8a:21:be:c9:8d:a3:c3:b6:81:09:1f:23:49:c1:55:57: 8d:a4:7b:ce:d6:a8:a1:0e:3a:7e:8a:f6:f4:3d:49:5a:d7:8e: c9:1f:6c:8f:58:f9:46:df:7b:9c:ef:a6:0b:47:23:2c:5f:f8: 6a:0e:8f:02:5c:62:a8:21:05:1d:8e:63:a9:cc:25:13:b8:43: 7e:ff:32:e9:cf:a2:6e:31:3a:7d:d5:f0:e1:86:66:c0:01:41: 26:a1:de:8c:c8:9b:9a:eb:e8:16:83:cd:55:6b:75:8a:1f:e8: 7f:d9:d8:eb:b8:51:53:db:cd:b6:c4:c9:de:1d:6e:4d:0c:33: bc:fd:8f:78:78:27:89:e9:70:4f:67:8d:13:c6:14:de:36:c6: 44:44:3b:bb:02:5d:f0:9b:87:c3:c0:c0:aa:98:a3:ee:a9:2b: 0b:ee:a7:b9:b3:ac:3b:47:9b:86:3a:d6:8c:4a:23:ce:01:60: 21:96:c4:23:c7:22:5d:94:45:bb:07:74:bf:07:5e:c6:5c:26: bc:f4:1a:95:d4:d8:6a:5e:d1:9e:6c:6a:d3:47:f4:1b:16:f6: a5:89:64:4b:4f:08:09:68:41:db:c9:aa:e5:45:ad:2e:b0:21: b4:cb:67:ef:02:52:9f:61:de:e6:30:5f:ff:fc:19:ac:57:b4: d4:a2:e9:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIjtNYbr2tt5pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NDgxYzliZjUtMzk3Yi00NWUyLTgxNWUtYmQzYTMxYjY3YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG+UvBC8u5mEDOkOU6e4k6ZXGa4FdI9JnSuq detXTtS1mxV2ZWGpV1fxTERDCrek5FQBmqrwNiIFjFR1iOm89O++s3lr4MjspBtJ rLVr+3HKIcXVeCbIIvxvACmsFB7n9R/OJWplzSnvC+ErXOytVtHb7xTszuapBHe0 trf2q8BYVj1zRbtislE9OU70vHr+K8MUtjwQfRXnI7YPSGV+sjxZ8BtLVvqXGnKp HZQAmDYHf7VF/FNcn62XvbC4VdLAgkngzxRCyNYX7oz9gnk/VY4rbDBLPDowcrkp wv6NCHb0m/xM/Fr/FHmmgi5ewZMHc1cHnEwtBIrGiBd2aAeNWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOEus3LF5oXuVH/iRKMATv1I8mMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvZjA2MjFhYzItMjc2Zi0z YzU3LWFhZDEtNjNkYWE5NDZlNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsKiiG+yY2jw7aBCR8jScFVV42ke87WqKEOOn6K9vQ9SVrXjskfbI9Y +Ubfe5zvpgtHIyxf+GoOjwJcYqghBR2OY6nMJRO4Q37/MunPom4xOn3V8OGGZsAB QSah3ozIm5rr6BaDzVVrdYof6H/Z2Ou4UVPbzbbEyd4dbk0MM7z9j3h4J4npcE9n jRPGFN42xkREO7sCXfCbh8PAwKqYo+6pKwvup7mzrDtHm4Y61oxKI84BYCGWxCPH Il2URbsHdL8HXsZcJrz0GpXU2Gpe0Z5satNH9BsW9qWJZEtPCAloQdvJquVFrS6w IbTLZ+8CUp9h3uYwX//8GaxXtNSi6bU= -----END CERTIFICATE-----Generated at Wed Apr 30 13:02:34 2025 by rpki-client