$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa File: 9787b498-f81f-37d7-a779-d4e727560c5b.roa (raw, json) Hash identifier: yy8iveFmY8rTKA/6aI5UrxdHtgwOz1Rwk71XFtsZ6is= Subject key identifier: FE:EA:5B:B1:DF:25:0B:4A:F3:63:D8:62:1D:91:DC:13:C9:81:DA:E3 Certificate issuer: /CN=f838c026-61f9-443d-b867-26f60a99d561 Certificate serial: 010D0C9F43285849ABB4A9E26BEFD15701E8D840 Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 30205 IP address blocks: 23.168.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a9:e2:6b:ef:d1:57:01:e8:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=6880b6e2-abcf-4ec7-bc9b-6fceb229920f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:09:b2:4a:90:7c:81:9f:63:98:a9:8f:4f: 46:cb:d5:25:34:60:91:e3:55:ae:32:89:64:70:4d: 39:a3:b7:a7:e6:16:68:e7:99:21:82:c0:f8:e5:f0: f9:98:ad:ae:e8:97:e4:33:09:b2:c7:e6:4b:5e:b4: d4:e5:b0:fd:47:f4:4e:47:8a:5b:8b:6e:0d:b1:d3: fa:ac:f7:ff:2b:32:45:ae:8f:0a:2c:d0:5c:b8:8c: b5:2c:2b:ce:9f:0d:e8:92:87:d0:29:20:b1:82:f8: 20:e5:12:31:f3:14:c1:7e:af:7f:ec:7c:50:b3:ee: 8a:26:a2:86:56:40:26:52:5e:26:f1:77:a6:6d:37: 2c:1d:d1:a6:0f:fd:76:99:5d:c4:23:bf:60:5d:39: d1:c4:c0:e0:7a:df:39:c9:77:56:02:13:04:64:26: 29:6c:b7:ac:57:3b:a5:20:de:47:5a:3b:00:e3:b1: cb:a0:13:37:f8:71:d7:73:d1:06:86:fc:7c:a2:31: bf:5a:46:ee:45:1d:e6:e3:ea:58:e9:83:39:8f:f3: 75:3a:19:bf:b8:1f:6e:5a:48:41:84:30:84:6e:90: 40:30:ee:b4:67:28:60:0a:e6:dd:28:1f:0b:9a:7f: 73:aa:9d:11:37:85:86:24:36:63:d2:ac:5c:cb:00: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:5B:B1:DF:25:0B:4A:F3:63:D8:62:1D:91:DC:13:C9:81:DA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl X509v3 Authority Key Identifier: keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer sbgp-ipAddrBlock: critical IPv4: 23.168.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f7:60:58:42:64:d3:66:d7:de:e2:4c:af:6b:96:93:a9:dc: 4f:30:a3:9e:2f:40:1f:5c:a7:10:9c:1a:bc:45:f5:1c:f2:00: b6:e6:2e:ad:df:07:7c:3d:30:b5:64:ae:63:33:25:e3:82:1f: 23:f5:e0:6c:d1:a7:ed:a2:9c:fd:86:97:20:8e:a8:36:93:21: ed:2e:18:14:a9:b1:e0:2e:1c:69:d4:ae:53:3f:ef:4b:20:70: 74:60:84:b6:17:e6:6d:0e:92:56:5f:80:df:e8:98:26:5c:7e: bd:aa:42:9d:c8:cf:3d:4a:9d:8c:ea:d8:43:04:99:6b:6b:84: 79:5b:d9:a5:da:62:2b:be:36:fd:1a:5c:10:c7:c2:61:ef:ec: 00:0e:c5:3e:9e:ba:63:81:3f:91:89:5b:41:da:45:7f:5e:8f: 33:f9:70:62:08:93:af:19:25:6e:78:fb:a3:23:80:00:8f:07: 56:48:1f:e5:1d:71:7c:58:4e:6e:36:56:86:aa:19:28:64:0f: ce:19:df:e4:e9:61:0c:83:8d:97:6a:55:ee:17:ee:cc:34:19: 0a:89:07:d0:ef:34:a4:f7:2d:38:77:0f:ee:1d:54:85:20:cf: 01:6e:98:f4:b9:3c:28:25:79:1c:84:4c:31:e2:6c:6b:8b:7e: 0a:49:86:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKnia+/RVwHo2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgzOGMwMjYtNjFmOS00NDNkLWI4NjctMjZmNjBhOTlk NTYxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk Njg4MGI2ZTItYWJjZi00ZWM3LWJjOWItNmZjZWIyMjk5MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRkJskqQfIGfY5ipj09Gy9UlNGCR41WuMolk cE05o7en5hZo55khgsD45fD5mK2u6JfkMwmyx+ZLXrTU5bD9R/ROR4pbi24NsdP6 rPf/KzJFro8KLNBcuIy1LCvOnw3okofQKSCxgvgg5RIx8xTBfq9/7HxQs+6KJqKG VkAmUl4m8XembTcsHdGmD/12mV3EI79gXTnRxMDget85yXdWAhMEZCYpbLesVzul IN5HWjsA47HLoBM3+HHXc9EGhvx8ojG/WkbuRR3m4+pY6YM5j/N1Ohm/uB9uWkhB hDCEbpBAMO60ZyhgCubdKB8Lmn9zqp0RN4WGJDZj0qxcywA+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7qW7HfJQtK82PYYh2R3BPJgdrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODM4 YzAyNi02MWY5LTQ0M2QtYjg2Ny0yNmY2MGE5OWQ1NjEvOTc4N2I0OTgtZjgxZi0z N2Q3LWE3NzktZDRlNzI3NTYwYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgzOGMwMjYtNjFmOS00NDNkLWI4 NjctMjZmNjBhOTlkNTYxL2Y4MzhjMDI2LTYxZjktNDQzZC1iODY3LTI2ZjYwYTk5 ZDU2MS5jcmwwHwYDVR0jBBgwFoAUI0cb0q5+FuuhqUXoDoIRiHSasuQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mODM4YzAyNi02MWY5LTQ0M2QtYjg2Ny0yNmY2 MGE5OWQ1NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX3YFhCZNNm197iTK9rlpOp3E8wo54vQB9cpxCcGrxF9RzyALbmLq3f B3w9MLVkrmMzJeOCHyP14GzRp+2inP2GlyCOqDaTIe0uGBSpseAuHGnUrlM/70sg cHRghLYX5m0OklZfgN/omCZcfr2qQp3Izz1KnYzq2EMEmWtrhHlb2aXaYiu+Nv0a XBDHwmHv7AAOxT6eumOBP5GJW0HaRX9ejzP5cGIIk68ZJW54+6MjgACPB1ZIH+Ud cXxYTm42VoaqGShkD84Z3+TpYQyDjZdqVe4X7sw0GQqJB9DvNKT3LTh3D+4dVIUg zwFumPS5PCgleRyETDHibGuLfgpJhig= -----END CERTIFICATE-----Generated at Mon Apr 28 10:38:15 2025 by rpki-client