$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa File: 4b394ad3-feab-3d68-855a-82c3eb623e83.roa (raw, json) Hash identifier: 7WLKZkBdD1gbKhKzco8Xe/UoI/IGNX8mKdHJcgFs0oc= Subject key identifier: 03:FE:B0:1C:36:63:97:3E:52:2E:FD:02:4F:65:19:64:25:75:42:91 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F432858499829D0E8920F91697B7E40C0 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 46824 IP address blocks: 23.172.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d0:e8:92:0f:91:69:7b:7e:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=a49f0122-51fc-4d16-b367-17771d7cb099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:b0:d2:ea:6d:db:06:da:a3:fd:08:c0:8c: 85:d5:bc:35:35:9c:f0:44:f4:bd:84:9c:ce:b2:00: c9:d2:24:c3:26:89:8a:09:7a:02:8d:1e:eb:5a:e2: 81:c2:c2:f0:4f:17:86:47:2c:bf:b7:1a:6e:44:fe: 03:cc:02:61:12:fd:9f:1f:c3:79:ca:aa:85:9b:cf: 20:34:07:a3:c6:2a:71:4f:b2:6c:dd:c5:e6:3a:a1: 19:4a:73:06:30:4c:0b:73:de:f5:bc:2e:c4:89:02: 32:5b:dd:0e:67:1d:c1:cd:36:ff:29:2d:e4:15:e9: 4b:fb:f3:06:bc:ab:77:62:9c:d8:dd:83:2f:56:fe: 1a:65:47:46:f0:34:e5:11:41:39:3d:06:9c:6f:2b: 02:85:f9:95:0a:88:45:2e:68:72:0e:13:12:bf:46: 3a:bb:83:1e:e8:44:e2:5b:c6:2a:9c:bf:55:ed:ac: 63:f2:49:c8:f6:cd:2e:b5:f1:69:c4:c3:2e:c9:1d: 06:d3:7e:ed:02:d0:d6:8f:f9:0a:e2:f1:d8:db:ab: e1:04:8b:38:16:9c:d1:f4:24:6d:80:38:e4:5c:e3: 14:05:c3:dc:65:39:06:fc:48:0d:de:58:55:07:ac: aa:ca:b8:e4:83:4c:19:8b:db:93:02:34:1c:5c:4f: e7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:B0:1C:36:63:97:3E:52:2E:FD:02:4F:65:19:64:25:75:42:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 23.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:88:23:10:57:5b:e8:08:39:16:d3:f7:91:2e:28:23:75:96: 35:d5:2f:1e:6e:b9:24:1e:d0:19:e0:a3:2a:75:46:eb:95:f7: 60:96:8b:29:ad:91:81:31:78:9e:98:1f:b3:dc:b1:fc:60:d3: 06:03:77:fa:62:c4:5a:4c:cc:e8:49:a6:89:d7:d8:4d:5f:c5: c9:4c:30:0c:32:56:02:18:6f:68:9e:f8:03:0a:00:a7:79:23: 31:5f:ee:d9:0d:af:9b:3a:e3:73:ef:db:27:74:b2:ef:84:23: 42:a1:26:4c:72:e1:d7:30:c6:37:f8:22:52:11:f1:64:11:f3: 83:ea:1e:ae:f0:ab:36:b6:8c:70:34:a4:37:aa:fb:9c:b1:2d: f4:c0:10:5c:22:9d:bc:e8:5e:07:e3:39:d2:71:76:2d:0a:80: ae:04:be:38:00:69:96:86:73:d9:f1:49:d7:e6:3a:54:b8:1b: 57:a2:e5:3e:7f:00:c4:6e:7b:0f:ea:db:79:45:87:00:f4:69: 98:16:73:e6:70:fb:fe:b5:af:84:f8:a7:b3:eb:6c:03:97:7f: c6:5c:99:7e:ca:f8:f2:4e:4d:3b:33:dd:7a:b3:ff:8d:f5:3a: d5:59:87:93:06:82:8c:8c:0a:a8:47:8b:b5:39:75:5b:80:bd: be:b7:49:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdDokg+RaXt+QMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YTQ5ZjAxMjItNTFmYy00ZDE2LWIzNjctMTc3NzFkN2NiMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaKw0upt2wbao/0IwIyF1bw1NZzwRPS9hJzO sgDJ0iTDJomKCXoCjR7rWuKBwsLwTxeGRyy/txpuRP4DzAJhEv2fH8N5yqqFm88g NAejxipxT7Js3cXmOqEZSnMGMEwLc971vC7EiQIyW90OZx3BzTb/KS3kFelL+/MG vKt3YpzY3YMvVv4aZUdG8DTlEUE5PQacbysChfmVCohFLmhyDhMSv0Y6u4Me6ETi W8YqnL9V7axj8knI9s0utfFpxMMuyR0G037tAtDWj/kK4vHY26vhBIs4FpzR9CRt gDjkXOMUBcPcZTkG/EgN3lhVB6yqyrjkg0wZi9uTAjQcXE/nWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP+sBw2Y5c+Ui79Ak9lGWQldUKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNGIzOTRhZDMtZmVhYi0z ZDY4LTg1NWEtODJjM2ViNjIzZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF6yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOIIxBXW+gIORbT95EuKCN1ljXVLx5uuSQe0Bngoyp1RuuV92CWiymt kYExeJ6YH7Pcsfxg0wYDd/pixFpMzOhJponX2E1fxclMMAwyVgIYb2ie+AMKAKd5 IzFf7tkNr5s643Pv2yd0su+EI0KhJkxy4dcwxjf4IlIR8WQR84PqHq7wqza2jHA0 pDeq+5yxLfTAEFwinbzoXgfjOdJxdi0KgK4EvjgAaZaGc9nxSdfmOlS4G1ei5T5/ AMRuew/q23lFhwD0aZgWc+Zw+/61r4T4p7PrbAOXf8ZcmX7K+PJOTTsz3Xqz/431 OtVZh5MGgoyMCqhHi7U5dVuAvb63SZk= -----END CERTIFICATE-----Generated at Tue Apr 29 01:53:56 2025 by rpki-client