$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/899de838-d116-3127-a292-1ef985d66d33.roa File: 899de838-d116-3127-a292-1ef985d66d33.roa (raw, json) Hash identifier: YpTioEn6KDn82VMwm2wFgvN4yfe3cjwoY/AX1ho/bNA= Subject key identifier: EF:59:4B:B8:86:CD:AD:5B:B3:E4:FF:32:C0:B5:AA:F8:48:33:61:E9 Certificate issuer: /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Certificate serial: 010D0C9F43285849A1EF6D0516CE6DC1F5BFAC00 Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/899de838-d116-3127-a292-1ef985d66d33.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 11721 IP address blocks: 23.151.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6d:05:16:ce:6d:c1:f5:bf:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=aa5e117c-b3dc-4f11-8926-227b2bdebbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:c2:85:af:ea:9b:35:23:a9:d2:02:0d:49: ef:0c:f6:12:ae:b3:7d:31:0a:d6:55:1a:fa:a8:d1: 1c:ff:0f:25:5c:33:e4:dd:18:00:19:84:ad:a1:d9: e9:99:47:16:ba:b9:4d:06:bb:18:5b:3e:ca:66:13: 8e:17:86:86:28:2f:9b:fb:65:4b:62:5c:b5:2b:d4: 65:15:b0:29:3c:3c:93:2b:b2:8a:4f:49:e7:21:5a: 96:17:6e:90:1b:f1:10:63:b9:40:cf:2b:b4:cb:12: 6c:0c:f4:a8:71:78:9e:bf:11:86:1f:cc:dc:23:1b: 6d:dc:44:d3:6c:4c:c7:95:64:04:f6:24:4c:1b:a3: c8:0c:10:27:a5:51:e5:c5:52:51:44:b5:0a:db:26: ba:8d:e5:e6:5c:d8:a9:98:95:ce:cd:bf:32:a0:4d: ae:fa:8b:94:83:c3:8b:98:06:a5:ac:77:38:c0:05: 32:63:9b:da:b1:05:0b:27:03:fc:ad:20:b5:ca:37: f4:fc:76:ca:c3:38:94:ff:a5:67:31:bf:72:4d:94: fa:24:11:08:63:6f:ef:ff:47:f1:9f:46:b5:ab:f3: 9d:f5:2d:bd:f8:d7:2c:13:15:f6:3e:75:09:38:57: b4:75:c5:a0:15:7b:28:43:f8:42:c8:2c:4d:b3:b0: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:59:4B:B8:86:CD:AD:5B:B3:E4:FF:32:C0:B5:AA:F8:48:33:61:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/899de838-d116-3127-a292-1ef985d66d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl X509v3 Authority Key Identifier: keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer sbgp-ipAddrBlock: critical IPv4: 23.151.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e8:4a:a7:4e:96:68:41:85:9f:c5:59:6d:c8:0b:3e:12:01: 2a:74:b6:e8:48:43:7d:a3:8d:8d:37:99:17:b1:30:d9:88:06: 0a:67:d8:f9:2b:4b:cc:4d:53:52:e3:b4:ea:51:90:4d:c4:5e: 91:71:52:34:a2:d3:8b:40:94:eb:9a:ea:91:65:24:26:60:93: 1b:93:ef:0a:b5:9e:05:2b:cd:59:fe:e1:9d:d6:4e:56:db:d0: 19:af:15:85:6b:8d:99:53:77:99:24:d6:6c:f5:f4:80:73:af: 75:94:13:57:8c:64:e8:9b:d0:87:ee:80:da:f1:bd:09:59:f3: 69:e5:a6:85:d1:09:f1:d5:bc:38:45:f7:02:56:f6:dc:81:f2: f5:29:13:18:7b:8d:7a:76:81:8c:df:74:91:35:21:3c:5e:e5: 2f:84:f5:39:69:ef:a3:c3:75:13:9f:c5:bc:9f:a8:e4:0b:e7: 05:d2:cf:fc:5f:e7:2e:ef:80:2d:9d:08:64:cf:a7:d4:34:24: ca:a5:56:40:dc:f2:80:f9:2c:aa:45:0a:e7:e1:5b:ef:75:2f: 90:66:2c:11:a9:fb:8b:f5:2d:7b:bf:7b:a4:bd:da:ac:36:25: a9:49:be:91:e6:7a:26:b7:27:42:b5:6c:9b:63:bc:30:80:d8: 64:a9:66:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh720FFs5twfW/rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz Yzc4MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YWE1ZTExN2MtYjNkYy00ZjExLTg5MjYtMjI3YjJiZGViYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPCha/qmzUjqdICDUnvDPYSrrN9MQrWVRr6 qNEc/w8lXDPk3RgAGYStodnpmUcWurlNBrsYWz7KZhOOF4aGKC+b+2VLYly1K9Rl FbApPDyTK7KKT0nnIVqWF26QG/EQY7lAzyu0yxJsDPSocXievxGGH8zcIxtt3ETT bEzHlWQE9iRMG6PIDBAnpVHlxVJRRLUK2ya6jeXmXNipmJXOzb8yoE2u+ouUg8OL mAalrHc4wAUyY5vasQULJwP8rSC1yjf0/HbKwziU/6VnMb9yTZT6JBEIY2/v/0fx n0a1q/Od9S29+NcsExX2PnUJOFe0dcWgFXsoQ/hCyCxNs7DmrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9ZS7iGza1bs+T/MsC1qvhIM2HpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvODk5ZGU4MzgtZDExNi0z MTI3LWEyOTItMWVmOTg1ZDY2ZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5 YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw ZTU1MjNjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5cIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHoSqdOlmhBhZ/FWW3ICz4SASp0tuhIQ32jjY03mRexMNmIBgpn2Pkr S8xNU1LjtOpRkE3EXpFxUjSi04tAlOua6pFlJCZgkxuT7wq1ngUrzVn+4Z3WTlbb 0BmvFYVrjZlTd5kk1mz19IBzr3WUE1eMZOib0IfugNrxvQlZ82nlpoXRCfHVvDhF 9wJW9tyB8vUpExh7jXp2gYzfdJE1ITxe5S+E9Tlp76PDdROfxbyfqOQL5wXSz/xf 5y7vgC2dCGTPp9Q0JMqlVkDc8oD5LKpFCufhW+91L5BmLBGp+4v1LXu/e6S92qw2 JalJvpHmeia3J0K1bJtjvDCA2GSpZgU= -----END CERTIFICATE-----Generated at Tue Apr 29 08:31:38 2025 by rpki-client