$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa File: e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa (raw, json) Hash identifier: uWCkiyb9s8Zfl7IWhEEj3i7wzuBJPJ88AU6a2Z0asg0= Subject key identifier: D5:43:40:73:5D:85:F8:8B:31:3C:94:2C:EF:79:EF:F9:C7:C9:1E:41 Certificate issuer: /CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624 Certificate serial: 010D0C9F4328584A07D535D4CB9E0DD23634CF10 Authority key identifier: 6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 393610 IP address blocks: 23.190.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:35:d4:cb:9e:0d:d2:36:34:cf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=a1de4b7e-8304-4a93-8179-7b8a072cd934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8f:6d:b3:be:e6:2b:14:4f:e3:9d:f3:d8:ff: cb:f4:02:c2:af:a2:69:d9:ee:39:ed:97:47:b6:23: 88:1b:fe:f4:0d:ea:16:8e:04:99:80:d6:5d:18:06: ae:09:76:76:6b:ae:c4:3e:84:c3:bb:f5:7a:4f:5a: 73:3c:0e:25:9b:ca:c6:83:a7:48:13:2f:52:d7:1f: 16:30:85:8c:3e:2d:db:ef:2f:85:f7:51:79:28:dd: 27:d7:a7:90:8c:67:75:4d:30:ff:a9:2e:4e:ee:8f: 85:7c:0a:6d:2c:50:27:ed:f9:38:50:13:22:4f:81: 1f:db:07:1a:a5:a9:23:7f:90:68:9b:b9:46:ff:91: c8:42:32:a5:ed:51:44:a1:ad:fa:f1:74:99:53:b4: 00:e0:c3:b9:8c:44:67:07:93:7e:ea:2e:63:64:5a: 86:3e:3d:c7:de:2f:6e:c2:a9:b4:3f:f8:78:e2:55: 96:9f:19:bb:d8:8c:be:e2:f8:60:af:5e:9d:25:6b: 71:51:ad:c1:2f:20:26:0d:3d:f1:8f:3a:6b:00:8c: e0:2b:7d:53:ca:67:49:87:4e:4d:00:bd:fa:a1:c4: 05:8e:c7:64:e7:67:f1:9c:85:c2:03:2d:5e:bb:b4: 38:f2:d1:b6:86:64:0b:eb:0a:5b:15:96:25:6d:86: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:40:73:5D:85:F8:8B:31:3C:94:2C:EF:79:EF:F9:C7:C9:1E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl X509v3 Authority Key Identifier: keyid:6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer sbgp-ipAddrBlock: critical IPv4: 23.190.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8b:48:b6:0b:8c:99:22:96:1a:62:88:8f:17:fa:9c:23:01: da:6e:f6:19:e6:25:86:4a:ad:70:bc:49:7c:07:dc:dc:cd:a0: 88:a4:60:40:b7:f7:0b:37:fb:a4:6a:e6:26:58:64:c0:80:22: f1:2a:00:e2:d8:4d:b4:4f:39:4b:e7:e9:56:33:90:7d:fc:54: c5:75:17:af:6f:d9:bb:60:63:b9:32:bc:14:17:3f:27:f5:cf: 16:15:dc:f2:8d:47:1c:b2:c9:ae:54:58:2c:1a:81:53:0f:a1: 24:02:44:65:ee:64:04:30:3c:80:d2:d7:e9:9e:ce:73:e7:9d: 9c:b6:a8:73:87:26:9d:aa:fa:19:f5:54:c0:21:f0:60:37:02: a4:49:3f:de:11:9a:9a:57:49:69:5b:7a:3e:0c:fc:85:2a:04: eb:c5:f8:c5:26:21:41:c6:31:5b:96:8d:05:55:5e:71:ba:8d: ce:0e:fb:af:45:6b:ab:18:8f:ee:bf:8b:82:d6:21:e9:fe:6d: 35:53:ef:44:90:4e:f9:5a:65:8f:42:62:a2:f6:bc:96:85:a9: 54:62:90:34:2a:7a:77:64:21:3a:62:63:84:b2:22:55:cc:c9: 90:fc:9d:e6:c7:ab:c6:bb:42:c0:ba:c6:fd:5d:92:28:2e:28: d8:79:30:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TXUy54N0jY0zxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU3Y2VhNWItZjlmZC00YmJmLWFlN2YtN2IxMWM2OTBi NjI0MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk YTFkZTRiN2UtODMwNC00YTkzLTgxNzktN2I4YTA3MmNkOTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7o9ts77mKxRP453z2P/L9ALCr6Jp2e457ZdH tiOIG/70DeoWjgSZgNZdGAauCXZ2a67EPoTDu/V6T1pzPA4lm8rGg6dIEy9S1x8W MIWMPi3b7y+F91F5KN0n16eQjGd1TTD/qS5O7o+FfAptLFAn7fk4UBMiT4Ef2wca pakjf5Bom7lG/5HIQjKl7VFEoa368XSZU7QA4MO5jERnB5N+6i5jZFqGPj3H3i9u wqm0P/h44lWWnxm72Iy+4vhgr16dJWtxUa3BLyAmDT3xjzprAIzgK31TymdJh05N AL36ocQFjsdk52fxnIXCAy1eu7Q48tG2hmQL6wpbFZYlbYabaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVDQHNdhfiLMTyULO957/nHyR5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NTdj ZWE1Yi1mOWZkLTRiYmYtYWU3Zi03YjExYzY5MGI2MjQvZTFlNjhmYTQtOWFjMi0z ODU1LWFhNWItYjBiMDRiODlhYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTU3Y2VhNWItZjlmZC00YmJmLWFl N2YtN2IxMWM2OTBiNjI0Lzk1N2NlYTViLWY5ZmQtNGJiZi1hZTdmLTdiMTFjNjkw YjYyNC5jcmwwHwYDVR0jBBgwFoAUbvTrOKM2cOX0HQRSEB/j7LWUsWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85NTdjZWE1Yi1mOWZkLTRiYmYtYWU3Zi03YjEx YzY5MGI2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF77IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuLSLYLjJkilhpiiI8X+pwjAdpu9hnmJYZKrXC8SXwH3NzNoIikYEC3 9ws3+6Rq5iZYZMCAIvEqAOLYTbRPOUvn6VYzkH38VMV1F69v2btgY7kyvBQXPyf1 zxYV3PKNRxyyya5UWCwagVMPoSQCRGXuZAQwPIDS1+meznPnnZy2qHOHJp2q+hn1 VMAh8GA3AqRJP94RmppXSWlbej4M/IUqBOvF+MUmIUHGMVuWjQVVXnG6jc4O+69F a6sYj+6/i4LWIen+bTVT70SQTvlaZY9CYqL2vJaFqVRikDQqendkITpiY4SyIlXM yZD8nebHq8a7QsC6xv1dkiguKNh5MGc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:55:33 2025 by rpki-client