$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa File: 8b8be658-4911-3e79-adcb-5f756862b67a.roa (raw, json) Hash identifier: WPEpAWCtiIsQg99TCf31Ls6NviMkClbE35qUbXGE7SY= Subject key identifier: 15:0A:B1:C7:E1:BC:EB:9A:56:52:A0:C2:D3:BA:F8:88:D6:CD:E4:3F Certificate issuer: /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Certificate serial: 010D0C9F43285849ABB4A64D2BA225D4125AB978 Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 46505 IP address blocks: 23.187.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a6:4d:2b:a2:25:d4:12:5a:b9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ba889de9-b921-40ff-a6b5-e27c3ed146a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:ba:2a:16:3f:ec:65:40:06:6f:e7:a0:b0: 7d:70:b2:00:7a:67:55:bf:a6:b4:9d:8f:e4:d3:e1: 0c:0f:b6:7c:83:fd:46:bb:8b:da:90:e2:e3:4a:2c: b8:e7:fd:a8:46:34:25:69:9a:e4:44:06:f6:10:5c: bb:ad:8c:41:95:a4:c8:4b:3f:4f:51:97:d9:84:eb: 74:ce:f7:f3:2b:c2:0f:e8:41:10:a2:8b:15:5d:5a: 85:fc:bd:05:77:cf:4f:71:e1:7f:f0:c5:85:87:91: b4:7c:f5:a9:0a:21:01:73:cf:ff:46:f3:a4:1d:8c: 39:df:8a:ad:70:6e:4a:3e:ab:ef:a5:ce:78:93:36: d7:99:53:5d:a6:82:e1:b1:6e:8b:97:10:72:f4:c0: ff:50:54:af:16:b4:25:c8:05:bd:b0:c5:96:93:9f: 84:82:72:ae:28:90:30:4c:9d:8c:d9:ab:57:fb:9e: ef:21:8a:68:a6:da:bf:f4:7d:03:90:e6:5e:f8:57: f3:da:e2:49:1f:28:4b:aa:ad:f0:53:ba:15:c6:a4: 0f:01:df:d8:a4:bc:0a:ac:10:b9:d5:39:72:da:41: 5c:e7:8f:98:2c:01:1c:d9:b9:56:e2:ae:bb:a2:ee: 1a:6f:88:c1:41:09:c1:6d:c0:8d:37:7b:5c:6c:4f: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:B1:C7:E1:BC:EB:9A:56:52:A0:C2:D3:BA:F8:88:D6:CD:E4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl X509v3 Authority Key Identifier: keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer sbgp-ipAddrBlock: critical IPv4: 23.187.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:60:82:75:fb:dd:56:d1:27:a8:31:b4:b7:e5:7d:f3:c5:ac: bc:45:3e:fc:30:b0:57:27:50:b2:61:76:69:40:4c:5d:e4:38: 61:97:91:8c:42:84:97:89:7a:ac:d0:e9:62:d5:20:d2:c7:56: 45:d9:64:e3:e0:16:30:9a:45:5b:de:50:25:a6:e7:28:d4:72: ac:b4:d0:c4:cb:1d:c6:96:33:fd:f1:7d:a3:65:1e:d7:d6:f3: ed:9a:c6:aa:24:b4:29:05:cf:7c:4d:33:76:1a:52:af:60:8a: dc:40:5b:e8:6e:5f:84:b1:6d:63:1e:66:e1:02:ba:74:27:cd: 4f:fe:6e:6e:f6:60:94:30:ca:f9:7b:5d:05:ab:5b:29:32:22: 75:e8:4a:2c:eb:ae:c3:bc:ba:2a:13:13:72:b9:87:6a:92:19: 47:a3:01:cc:0b:ea:c3:e1:2d:ff:a6:23:60:42:57:15:8c:c9: a4:a4:5d:0b:64:35:48:22:cf:c7:b1:29:f2:c5:b2:b0:39:86: 1d:03:d7:2e:37:a2:89:b4:c5:88:86:47:96:47:ba:44:5d:48: b5:06:44:5c:21:29:89:ca:86:e0:36:56:f9:b7:f6:40:71:11: f3:64:ce:99:89:ad:b3:5b:d6:42:28:85:3b:19:3d:dd:42:c0: fa:45:0b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKZNK6Il1BJauXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJh ZWYxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YmE4ODlkZTktYjkyMS00MGZmLWE2YjUtZTI3YzNlZDE0NmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGa6KhY/7GVABm/noLB9cLIAemdVv6a0nY/k 0+EMD7Z8g/1Gu4vakOLjSiy45/2oRjQlaZrkRAb2EFy7rYxBlaTISz9PUZfZhOt0 zvfzK8IP6EEQoosVXVqF/L0Fd89PceF/8MWFh5G0fPWpCiEBc8//RvOkHYw534qt cG5KPqvvpc54kzbXmVNdpoLhsW6LlxBy9MD/UFSvFrQlyAW9sMWWk5+EgnKuKJAw TJ2M2atX+57vIYpoptq/9H0DkOZe+Ffz2uJJHyhLqq3wU7oVxqQPAd/YpLwKrBC5 1Tly2kFc54+YLAEc2blW4q67ou4ab4jBQQnBbcCNN3tcbE964QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUKscfhvOuaVlKgwtO6+IjWzeQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1 OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvOGI4YmU2NTgtNDkxMS0z ZTc5LWFkY2ItNWY3NTY4NjJiNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ1NThlZmYtNmMyNi00YTE3LWJi OWUtNTQzNzdlYTJhZWYxL2Q0NTU4ZWZmLTZjMjYtNGExNy1iYjllLTU0Mzc3ZWEy YWVmMS5jcmwwHwYDVR0jBBgwFoAU3AbrjdSGBGGYJOCBOd+YGqxUOXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3 N2VhMmFlZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhggnX73VbRJ6gxtLflffPFrLxFPvwwsFcnULJhdmlATF3kOGGXkYxC hJeJeqzQ6WLVINLHVkXZZOPgFjCaRVveUCWm5yjUcqy00MTLHcaWM/3xfaNlHtfW 8+2axqoktCkFz3xNM3YaUq9gitxAW+huX4SxbWMeZuECunQnzU/+bm72YJQwyvl7 XQWrWykyInXoSizrrsO8uioTE3K5h2qSGUejAcwL6sPhLf+mI2BCVxWMyaSkXQtk NUgiz8exKfLFsrA5hh0D1y43oom0xYiGR5ZHukRdSLUGRFwhKYnKhuA2Vvm39kBx EfNkzpmJrbNb1kIohTsZPd1CwPpFC4U= -----END CERTIFICATE-----Generated at Mon Apr 28 10:39:53 2025 by rpki-client