$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa File: 856f6f8b-6115-3749-b368-928efb2b3cdb.roa (raw, json) Hash identifier: IjxcE68z/1NqTjnJXis5jjKLZCcYX9k2xRfZ8iIuswo= Subject key identifier: 20:38:EA:F5:FB:7E:3E:AF:2D:35:D1:91:65:7B:30:D1:90:1F:9D:C7 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F43285849EA8523F6957190AB020B9340 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 21738 IP address blocks: 23.150.41.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:23:f6:95:71:90:ab:02:0b:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=40fcc643-7784-4ab6-be0a-9dc5b7e5dfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:64:9b:ed:01:64:85:d0:71:03:41:ba:e3:ef: e3:fc:d4:0d:9d:88:91:93:ba:f5:76:4d:35:5a:75: bc:5a:1b:f9:ac:53:c1:23:b0:9f:28:be:c3:47:0e: 14:1b:90:25:af:19:ac:03:68:81:10:48:c7:b8:2e: 30:16:35:fa:78:3c:91:2b:e6:78:c4:65:01:be:04: 06:ac:a6:28:1d:9b:e4:d4:44:86:97:8e:91:9a:92: 4a:1c:54:80:fb:0b:b1:20:86:62:26:8f:ee:25:6e: ca:fe:53:51:3e:d9:ef:28:dc:fe:ab:3f:63:63:92: a5:da:de:30:5e:d6:b6:48:1c:cf:02:41:e5:a8:85: 0b:fe:9b:52:cd:9e:d7:37:09:be:76:05:86:ae:4a: 08:1a:bd:51:b6:7d:3b:03:0b:22:b3:d2:5e:45:e1: ac:51:c6:15:a7:b7:d4:6c:a5:df:7d:6c:12:d4:cd: cc:82:93:d3:01:f1:9a:98:8c:3c:51:71:4b:c9:09: 74:01:99:b8:8f:ac:65:4c:3d:59:cc:f8:56:1a:54: f3:e4:47:9c:cc:55:5c:6e:d1:29:b9:58:13:20:8a: bd:6f:82:f6:4f:89:1a:ed:17:32:f7:d9:79:4d:a7: f3:f5:d2:32:9b:49:f7:b9:cd:9e:fe:e5:80:4b:32: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:38:EA:F5:FB:7E:3E:AF:2D:35:D1:91:65:7B:30:D1:90:1F:9D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 23.150.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:52:d2:4f:57:70:78:1d:9c:10:a8:6f:4b:d5:30:74:83:2e: 3b:81:a8:f5:58:21:19:40:3b:1c:6b:73:f4:a7:20:87:3e:d7: 93:2d:be:63:5f:b1:8d:5f:99:5d:bb:03:02:73:74:26:1a:24: de:c5:9d:0c:53:33:94:83:b2:ea:9f:ef:1e:7b:ea:0d:d0:aa: 49:8a:b4:d5:fd:a8:fd:7b:24:0d:e7:ec:a3:89:b0:cd:06:8d: 94:91:98:34:7d:1d:1b:51:5c:48:09:3c:02:ef:e3:53:f3:5f: 3d:f2:b5:70:af:4d:0a:a4:1f:90:06:cb:32:fb:74:0b:3f:d7: 45:28:ce:45:9c:8f:bb:55:ac:1a:88:74:b3:75:36:fe:2e:83: 81:d5:68:1d:3e:80:84:d3:5d:9a:36:16:ed:4f:b6:93:b1:18: 18:f0:a5:38:f8:c7:1d:37:37:47:85:f4:2a:36:30:bc:78:bd: 2f:b0:70:38:34:81:f8:eb:15:35:d7:e5:0c:09:fb:19:48:bd: b3:fe:12:0f:5f:e9:d4:de:76:4a:f5:01:17:0c:a9:1d:47:95: 55:38:97:a7:a0:b0:7f:d2:66:40:c8:29:06:73:67:51:c0:9b: da:a3:c6:2e:0e:20:c9:78:0c:4a:4b:ee:50:d6:94:9d:e1:36: 72:a3:de:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSP2lXGQqwILk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NDBmY2M2NDMtNzc4NC00YWI2LWJlMGEtOWRjNWI3ZTVkZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWSb7QFkhdBxA0G64+/j/NQNnYiRk7r1dk01 WnW8Whv5rFPBI7CfKL7DRw4UG5AlrxmsA2iBEEjHuC4wFjX6eDyRK+Z4xGUBvgQG rKYoHZvk1ESGl46RmpJKHFSA+wuxIIZiJo/uJW7K/lNRPtnvKNz+qz9jY5Kl2t4w Xta2SBzPAkHlqIUL/ptSzZ7XNwm+dgWGrkoIGr1Rtn07Awsis9JeReGsUcYVp7fU bKXffWwS1M3MgpPTAfGamIw8UXFLyQl0AZm4j6xlTD1ZzPhWGlTz5EeczFVcbtEp uVgTIIq9b4L2T4ka7Rcy99l5Tafz9dIym0n3uc2e/uWASzJUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA46vX7fj6vLTXRkWV7MNGQH53HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvODU2ZjZmOGItNjExNS0z NzQ5LWIzNjgtOTI4ZWZiMmIzY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9S0k9XcHgdnBCob0vVMHSDLjuBqPVYIRlAOxxrc/SnIIc+15MtvmNf sY1fmV27AwJzdCYaJN7FnQxTM5SDsuqf7x576g3QqkmKtNX9qP17JA3n7KOJsM0G jZSRmDR9HRtRXEgJPALv41PzXz3ytXCvTQqkH5AGyzL7dAs/10UozkWcj7tVrBqI dLN1Nv4ug4HVaB0+gITTXZo2Fu1PtpOxGBjwpTj4xx03N0eF9Co2MLx4vS+wcDg0 gfjrFTXX5QwJ+xlIvbP+Eg9f6dTedkr1ARcMqR1HlVU4l6egsH/SZkDIKQZzZ1HA m9qjxi4OIMl4DEpL7lDWlJ3hNnKj3kk= -----END CERTIFICATE-----Generated at Sun Jun 22 10:11:26 2025 by rpki-client