$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa File: 4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa (raw, json) Hash identifier: KpyvqpyX5BQcbcmaeFJ3zTvqEVXsUVRL1KpPfMS7j0Y= Subject key identifier: E3:FF:D3:46:0A:BC:0F:BA:EA:A1:B2:AC:D8:C5:C9:CF:19:41:58:F6 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F432858493AA3DC944044045A02F2CB40 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 26548 IP address blocks: 23.156.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:dc:94:40:44:04:5a:02:f2:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=2af70e04-1e9d-46d1-b493-adcc28243851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:3e:a2:13:49:12:c8:86:ed:27:69:50:86: 43:97:bb:b2:d0:f8:e1:1d:83:db:06:7e:b6:c2:90: 91:1d:8f:91:07:ea:ea:7d:19:48:9c:5e:d6:c4:a3: f8:e9:9a:e0:e1:d0:f9:e2:bc:38:30:7a:ae:c6:8f: f5:0c:dc:db:19:cd:6d:a7:86:fe:22:ef:03:76:e9: 17:9a:b6:a7:d9:ac:b1:de:38:e7:04:cf:d5:47:40: 6b:9a:21:78:1f:3a:af:35:df:3e:37:88:56:a9:dc: e8:85:19:20:87:c4:2b:ba:1b:34:fb:de:c5:23:43: 57:bd:5e:07:0f:e7:41:b9:88:fb:89:61:ef:6c:04: 7d:c7:0c:82:53:e6:7c:2f:01:20:d2:ff:ef:60:d4: 4b:41:85:2c:17:60:86:a0:28:60:7c:00:d1:9f:34: 00:95:98:88:1f:29:38:5c:7c:14:db:8f:b7:bf:4b: 2f:83:04:a8:91:44:d6:4d:b1:b7:31:b4:0f:dd:31: e6:b2:7a:d7:97:0e:9f:fa:5e:0c:c9:87:2f:a7:e4: 55:0d:58:7a:d6:11:4e:ba:4a:ff:e3:93:64:4b:a3: eb:38:a0:db:aa:ca:0c:eb:ba:b1:fa:5f:d1:f7:2d: 9a:9e:9d:f2:fd:b5:9f:71:f6:21:24:25:16:cb:44: 59:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FF:D3:46:0A:BC:0F:BA:EA:A1:B2:AC:D8:C5:C9:CF:19:41:58:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 23.156.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8d:63:45:59:69:c2:27:64:8f:f9:1b:4d:be:07:70:46:2c: 30:18:0f:b2:43:aa:46:23:f6:aa:46:96:91:d0:6e:ad:68:8f: ef:55:d0:75:eb:5e:6e:42:96:ef:ff:91:8f:a1:c5:42:64:a9: 82:f8:98:e7:c4:fc:74:6c:70:9d:3b:96:46:24:10:d4:0d:55: b6:0b:a6:35:83:47:7c:6f:5b:6d:23:ca:37:ba:9c:29:e1:9f: 31:ab:6f:49:45:0d:1b:e1:f9:32:f3:f6:02:15:69:da:57:c6: 56:7f:28:03:66:c8:e1:cf:38:02:87:83:85:64:1b:56:ec:88: de:67:f3:2d:82:21:d9:85:d2:45:57:bd:c7:2b:3e:55:0a:96: bc:db:9f:5e:f8:9d:98:d0:af:aa:4d:22:51:74:07:42:bf:36: f9:e5:62:fb:f4:e3:cb:e4:e5:90:6e:27:20:77:9e:d1:bb:c8: 98:6e:2d:1c:0d:ce:28:fe:56:d2:27:c9:f5:b4:99:f8:ec:7c: b0:7d:7e:00:5b:ef:1e:a1:87:1d:63:23:5e:97:36:10:37:da: 99:39:19:85:90:0f:51:1b:79:10:5a:58:57:85:ab:d4:a9:cb: 56:39:ff:f2:48:c0:b0:ab:b5:bd:2b:e6:73:c0:ac:01:dd:c0: 9a:50:6b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o9yUQEQEWgLyy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk MmFmNzBlMDQtMWU5ZC00NmQxLWI0OTMtYWRjYzI4MjQzODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQc+ohNJEsiG7SdpUIZDl7uy0PjhHYPbBn62 wpCRHY+RB+rqfRlInF7WxKP46Zrg4dD54rw4MHquxo/1DNzbGc1tp4b+Iu8DdukX mran2ayx3jjnBM/VR0BrmiF4HzqvNd8+N4hWqdzohRkgh8Qruhs0+97FI0NXvV4H D+dBuYj7iWHvbAR9xwyCU+Z8LwEg0v/vYNRLQYUsF2CGoChgfADRnzQAlZiIHyk4 XHwU24+3v0svgwSokUTWTbG3MbQP3THmsnrXlw6f+l4MyYcvp+RVDVh61hFOukr/ 45NkS6PrOKDbqsoM67qx+l/R9y2anp3y/bWfcfYhJCUWy0RZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP/00YKvA+66qGyrNjFyc8ZQVj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNDUwNGMzOWMtMjJkMS0z ZWRiLWIyYWEtN2NmMGNmNmM2YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWNY0VZacInZI/5G02+B3BGLDAYD7JDqkYj9qpGlpHQbq1oj+9V0HXr Xm5Clu//kY+hxUJkqYL4mOfE/HRscJ07lkYkENQNVbYLpjWDR3xvW20jyje6nCnh nzGrb0lFDRvh+TLz9gIVadpXxlZ/KANmyOHPOAKHg4VkG1bsiN5n8y2CIdmF0kVX vccrPlUKlrzbn174nZjQr6pNIlF0B0K/NvnlYvv048vk5ZBuJyB3ntG7yJhuLRwN zij+VtInyfW0mfjsfLB9fgBb7x6hhx1jI16XNhA32pk5GYWQD1EbeRBaWFeFq9Sp y1Y5//JIwLCrtb0r5nPArAHdwJpQayE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:29 2025 by rpki-client