$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa File: 1c619daa-16a4-38fb-850d-9cd5873b1468.roa (raw, json) Hash identifier: /J20E0vlFNwNTYVEYoTvfo6ZgdgmcEl9Fl8rvx0Ef/o= Subject key identifier: CA:3B:37:81:C8:37:7F:EB:77:8B:AD:DD:22:27:58:E6:14:53:AD:68 Certificate issuer: /CN=25d202df-6bec-4085-8c1b-d1f141557cfe Certificate serial: 010D0C9F4328584930DE71B168654FC4B0991890 Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 61317 IP address blocks: 23.144.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:71:b1:68:65:4f:c4:b0:99:18:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=bf734348-79fb-40fe-8233-a26395bbd645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:96:d3:60:b3:39:1d:33:6f:f3:ee:fe:fa: 6c:e6:6f:9a:70:4d:39:85:ad:80:26:c2:4b:ed:d4: be:18:e8:7a:da:bb:a1:a4:ae:9c:01:b3:95:83:fd: 25:92:ce:46:ab:8c:11:9b:84:c2:7c:4b:f8:cb:03: ed:0c:64:16:f0:a6:18:a2:da:61:cf:6e:0f:8b:c4: 54:14:1a:d6:51:a7:80:e6:cc:a8:35:cd:0d:1d:34: 9f:f4:8f:f2:f0:f3:58:37:06:cf:ca:64:2d:4b:dc: db:dc:94:a1:fb:5e:81:e5:23:2d:2f:05:f6:38:40: f7:6d:c2:06:62:0a:73:4a:8b:d0:64:a8:b4:d6:c0: 37:5d:0f:c1:de:43:16:92:40:c4:d4:f2:c3:28:41: 0a:29:a5:8f:1c:fc:76:93:ae:5b:28:8d:44:8b:a1: 88:8f:59:cf:30:3e:5b:a5:8c:b3:a9:c7:71:9f:de: 48:40:67:c3:f9:6e:53:2f:97:99:26:8c:3b:80:e7: 5e:4f:7e:e0:7d:96:86:21:ec:ee:ec:af:c3:bb:8e: 9b:ed:c0:e2:a6:f4:c8:79:68:95:0f:7f:f1:1f:3f: 7d:08:9c:a9:6d:28:fc:6a:2a:2c:ba:81:a4:40:d0: ab:cd:60:05:f5:cc:83:8c:cc:86:7b:41:25:47:0f: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3B:37:81:C8:37:7F:EB:77:8B:AD:DD:22:27:58:E6:14:53:AD:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl X509v3 Authority Key Identifier: keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer sbgp-ipAddrBlock: critical IPv4: 23.144.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:28:25:db:6d:7b:72:df:04:af:5e:e7:e6:a3:c3:b7:4c:9d: 1c:d7:44:2c:30:cd:70:c2:0f:85:e2:23:20:65:29:63:eb:70: 0c:ca:2b:a7:c4:c2:0f:fc:3c:8d:f3:90:93:93:12:8e:e2:a3: 62:9b:e4:bb:c6:a5:32:9f:50:70:87:6c:f1:4e:3d:9b:3c:83: 53:cd:7c:49:0d:6c:13:af:6a:07:a1:0a:e4:e5:e2:77:21:4d: 72:8b:52:12:dd:8a:e8:b1:47:64:fc:bf:e1:3c:a0:95:1a:6f: 6f:86:a7:e9:b8:7d:f2:f6:ef:98:d0:34:7e:59:b3:b5:1e:e1: 7f:52:9c:7f:2f:de:30:bd:15:cf:57:c9:7f:e4:d5:f6:6d:81: 36:ef:11:f0:e4:bb:05:a0:92:7c:0a:a3:9b:15:ca:e5:04:a9: 29:ce:1c:07:88:ad:57:47:5a:54:32:ec:0e:59:96:dc:67:2d: 4e:58:de:0c:6d:e2:a8:bf:a7:81:b5:58:66:0a:81:03:40:04: 5a:eb:cf:2d:74:c8:29:f2:fb:d8:a8:bd:ac:aa:25:90:33:7c: 27:7f:67:52:ca:66:fd:f7:30:46:29:6a:4d:4b:92:6f:fd:83: 47:a0:10:b7:9f:5b:81:b1:16:b1:31:66:f4:ae:6a:5d:e9:49: 36:ed:f3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nGxaGVPxLCZGJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3 Y2ZlMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YmY3MzQzNDgtNzlmYi00MGZlLTgyMzMtYTI2Mzk1YmJkNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfWW02CzOR0zb/Pu/vps5m+acE05ha2AJsJL 7dS+GOh62ruhpK6cAbOVg/0lks5Gq4wRm4TCfEv4ywPtDGQW8KYYotphz24Pi8RU FBrWUaeA5syoNc0NHTSf9I/y8PNYNwbPymQtS9zb3JSh+16B5SMtLwX2OED3bcIG YgpzSovQZKi01sA3XQ/B3kMWkkDE1PLDKEEKKaWPHPx2k65bKI1Ei6GIj1nPMD5b pYyzqcdxn95IQGfD+W5TL5eZJow7gOdeT37gfZaGIezu7K/Du46b7cDipvTIeWiV D3/xHz99CJypbSj8aiosuoGkQNCrzWAF9cyDjMyGe0ElRw9d5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo7N4HIN3/rd4ut3SInWOYUU61oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNWQy MDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvMWM2MTlkYWEtMTZhNC0z OGZiLTg1MGQtOWNkNTg3M2IxNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjVkMjAyZGYtNmJlYy00MDg1LThj MWItZDFmMTQxNTU3Y2ZlLzI1ZDIwMmRmLTZiZWMtNDA4NS04YzFiLWQxZjE0MTU1 N2NmZS5jcmwwHwYDVR0jBBgwFoAUYik2b2+4Uftu+aehcRHrWEcEEckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYx NDE1NTdjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcoJdtte3LfBK9e5+ajw7dMnRzXRCwwzXDCD4XiIyBlKWPrcAzKK6fE wg/8PI3zkJOTEo7io2Kb5LvGpTKfUHCHbPFOPZs8g1PNfEkNbBOvagehCuTl4nch TXKLUhLdiuixR2T8v+E8oJUab2+Gp+m4ffL275jQNH5Zs7Ue4X9SnH8v3jC9Fc9X yX/k1fZtgTbvEfDkuwWgknwKo5sVyuUEqSnOHAeIrVdHWlQy7A5ZltxnLU5Y3gxt 4qi/p4G1WGYKgQNABFrrzy10yCny+9iovayqJZAzfCd/Z1LKZv33MEYpak1Lkm/9 g0egELefW4GxFrExZvSual3pSTbt800= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:51 2025 by rpki-client