$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa File: b8ed32fa-028c-3cfb-950c-51608cf30050.roa (raw, json) Hash identifier: pWhhr238LQJSvbYO6XxDarIuQOAekPh1WMdwubRDjoI= Subject key identifier: E1:F9:3F:8A:55:77:5A:70:B2:41:0D:32:9B:AF:F5:B0:72:D0:59:8A Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F43285849A1EF7451270FE1620B06E100 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 11913 IP address blocks: 23.163.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:74:51:27:0f:e1:62:0b:06:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=ddfa978c-3aaa-4337-862c-f6982388bc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:4e:cf:87:4b:30:d7:9a:bb:4c:91:26:06: d9:e7:f6:59:02:aa:78:94:20:ca:07:7b:07:cc:9a: 55:0a:88:dc:99:c0:df:8a:43:00:3e:e9:64:e1:be: 31:bb:e2:b2:61:00:bd:48:02:f1:23:50:2b:8f:dd: 04:75:1c:71:d9:67:fd:d0:52:93:69:53:05:7d:cc: 1a:61:e0:d3:32:ab:75:3e:24:33:95:51:0d:2e:11: f1:27:85:9b:17:ff:9b:f6:74:60:52:12:d8:56:27: 95:90:1e:1f:23:40:96:be:56:10:b4:e6:a0:06:03: dc:a9:64:4a:5b:42:87:74:f8:0f:aa:c8:00:ec:4f: 03:3f:db:24:b4:b0:32:05:c4:77:d8:a7:84:a5:57: 19:67:e2:6f:b1:41:a9:f7:1c:71:42:27:86:0c:1a: f2:b3:3c:72:db:37:9f:4d:54:53:85:f3:91:15:f9: ba:f4:fd:40:4e:84:b5:d0:c9:a8:4a:03:d8:d0:99: 0a:a2:fb:97:d8:53:dc:bc:76:a3:f8:87:72:9d:aa: 08:dc:7c:87:37:6c:76:68:d4:7f:1e:0d:a5:f2:a5: 7d:c0:87:eb:80:f7:9b:9b:9f:80:88:83:2d:00:aa: ff:1b:5a:b3:c1:28:73:03:48:df:b0:e1:d4:ff:ba: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F9:3F:8A:55:77:5A:70:B2:41:0D:32:9B:AF:F5:B0:72:D0:59:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:90:08:5e:4b:48:9e:bd:bc:a0:f9:1e:fa:06:6c:6f:56:85: 28:c4:ac:f1:ca:ac:e5:ad:40:dd:51:9f:c7:1a:4e:cf:34:6b: 98:22:25:31:19:f2:f9:e5:6e:b1:fa:69:24:b3:99:7e:1c:23: bb:ee:bb:d4:b7:cb:3a:11:72:2b:c7:d6:2d:13:13:be:e7:1b: 0b:17:45:97:17:f4:e7:91:50:3b:8c:6e:64:73:17:fe:19:d3: af:87:c4:73:1b:ee:68:f2:c4:51:6b:8a:9c:32:81:8b:d1:6d: 74:e6:c1:bd:3b:b7:33:5e:b4:aa:ea:15:5f:26:73:c5:13:a8: fc:09:98:77:4d:c1:56:88:6b:e5:dc:62:da:96:ae:39:9b:db: 3d:bc:bb:5c:d3:3e:04:34:0e:06:84:b6:9c:6f:2e:08:3e:28: 2d:a5:1a:8e:6a:b2:5c:89:54:48:7f:72:a4:c8:1d:7e:77:09: 7c:d2:5b:4d:7e:a5:06:45:da:96:b1:4c:cd:de:b0:f6:46:25: 2a:1f:cb:55:01:bd:70:aa:6d:56:55:81:7b:2b:88:49:91:a8: 9a:38:b6:4b:31:fc:d9:3c:2a:de:a7:c6:09:cd:ad:94:29:67: f7:a1:21:f8:cf:2c:0b:03:0f:8c:d8:7d:0e:24:ab:9c:c9:bf: c0:13:e7:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73RRJw/hYgsG4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGRmYTk3OGMtM2FhYS00MzM3LTg2MmMtZjY5ODIzODhiYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGFOz4dLMNeau0yRJgbZ5/ZZAqp4lCDKB3sH zJpVCojcmcDfikMAPulk4b4xu+KyYQC9SALxI1Arj90EdRxx2Wf90FKTaVMFfcwa YeDTMqt1PiQzlVENLhHxJ4WbF/+b9nRgUhLYVieVkB4fI0CWvlYQtOagBgPcqWRK W0KHdPgPqsgA7E8DP9sktLAyBcR32KeEpVcZZ+JvsUGp9xxxQieGDBryszxy2zef TVRThfORFfm69P1AToS10MmoSgPY0JkKovuX2FPcvHaj+IdynaoI3HyHN2x2aNR/ Hg2l8qV9wIfrgPebm5+AiIMtAKr/G1qzwShzA0jfsOHU/7pZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOH5P4pVd1pwskENMpuv9bBy0FmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvYjhlZDMyZmEtMDI4Yy0z Y2ZiLTk1MGMtNTE2MDhjZjMwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2QCF5LSJ69vKD5HvoGbG9WhSjErPHKrOWtQN1Rn8caTs80a5giJTEZ 8vnlbrH6aSSzmX4cI7vuu9S3yzoRcivH1i0TE77nGwsXRZcX9OeRUDuMbmRzF/4Z 06+HxHMb7mjyxFFripwygYvRbXTmwb07tzNetKrqFV8mc8UTqPwJmHdNwVaIa+Xc YtqWrjmb2z28u1zTPgQ0DgaEtpxvLgg+KC2lGo5qslyJVEh/cqTIHX53CXzSW01+ pQZF2paxTM3esPZGJSofy1UBvXCqbVZVgXsriEmRqJo4tksx/Nk8Kt6nxgnNrZQp Z/ehIfjPLAsDD4zYfQ4kq5zJv8AT5zY= -----END CERTIFICATE-----Generated at Tue Apr 29 08:48:59 2025 by rpki-client