$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa File: bef29b0a-887f-3563-acf6-0a6587af29f2.roa (raw, json) Hash identifier: hWCrnsFEbu+YLGwYo1cqvR5V4ZVwha0sNHXYai4J2C4= Subject key identifier: 95:01:6E:0A:BC:29:D3:D7:59:0A:84:64:38:B0:14:7F:67:81:8C:24 Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F43285849EEB5039FAD1FC993DEBC73E0 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 18914 IP address blocks: 23.147.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:03:9f:ad:1f:c9:93:de:bc:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=52747218-53c5-44cd-901b-65bbb65da871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:d8:d9:ad:f1:cf:b0:73:14:ff:87:05:71: 76:48:16:a4:fc:af:58:df:54:de:02:07:23:f1:30: 61:f1:a9:a0:1d:74:96:e0:3b:07:24:a7:d3:f2:32: 20:eb:06:4c:0f:a5:9a:2d:92:17:64:09:da:fc:55: c4:05:f9:8b:94:ac:30:15:ef:da:e3:b9:53:42:12: a4:9c:f8:5d:6b:b7:11:da:f7:a6:2a:7f:5a:b7:9a: 3f:a7:c7:aa:dc:3a:ce:4e:e5:56:0a:e1:d6:a8:af: 32:4f:ed:2b:7a:e3:ad:5a:13:b7:d9:28:79:5c:10: 63:97:f8:c1:9d:58:1d:b6:dc:2b:c4:28:c2:ce:00: cf:ce:a9:84:db:a4:1a:d4:7e:f6:90:f7:b0:df:d4: 06:76:15:bf:bd:07:9c:e3:4b:8a:1d:98:24:c4:01: 5c:20:d6:c0:5a:af:cb:04:da:1a:a6:a4:87:07:2a: 60:f5:76:f1:ba:3e:cd:1c:64:03:f9:62:fd:08:5f: e8:74:2c:88:26:ce:b6:7a:b5:ba:9f:75:fe:1d:c3: 07:47:3d:4e:ee:db:37:36:16:dc:07:16:b5:04:0e: 27:98:01:f5:2c:58:83:41:f7:f3:b1:9f:86:3b:5a: 8a:37:02:7b:95:e7:dc:df:f4:55:ac:60:29:90:82: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:01:6E:0A:BC:29:D3:D7:59:0A:84:64:38:B0:14:7F:67:81:8C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 23.147.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7b:58:39:95:ae:ae:9a:4f:82:bc:af:0c:9c:ce:91:b4:82: ab:6a:3a:35:51:67:42:59:84:dc:38:0a:8d:3a:37:74:45:49: 3e:20:8b:44:da:8f:fc:bc:3b:3e:88:9e:2c:5e:2f:73:73:71: 4f:4a:a6:ce:41:e0:0c:92:87:91:91:ec:6d:3e:28:0b:7f:38: a9:7c:29:fc:96:ad:1b:27:9d:ee:b5:c6:ff:d9:98:54:08:9b: af:da:74:ee:32:bc:90:44:be:c4:1b:24:5f:55:f3:2b:a1:02: f4:73:89:ee:60:42:c7:33:cc:36:7e:f4:b3:3f:ca:43:e8:da: 48:d1:bf:3a:e7:87:95:4a:57:c0:15:9e:37:f7:24:f2:73:75: b8:b5:e8:49:84:fa:e8:8f:19:cf:d5:bd:a8:ac:46:79:ab:ff: 37:b9:11:8d:2f:6c:c0:bd:ac:92:b4:20:96:e9:64:42:e1:55: 92:7b:32:d8:35:c5:79:da:0c:cb:28:bc:c6:a3:3a:d0:de:dc: 36:9d:1a:68:34:55:8f:78:f5:bd:55:3e:8b:2a:5e:71:78:12: 65:c9:be:01:1c:cb:e2:63:02:20:f1:49:57:93:c8:83:53:e8: 37:51:a6:51:70:99:ae:dd:25:af:c6:70:6b:75:af:f3:8c:68: 43:45:35:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQOfrR/Jk968c+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NTI3NDcyMTgtNTNjNS00NGNkLTkwMWItNjViYmI2NWRhODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5zY2a3xz7BzFP+HBXF2SBak/K9Y31TeAgcj 8TBh8amgHXSW4DsHJKfT8jIg6wZMD6WaLZIXZAna/FXEBfmLlKwwFe/a47lTQhKk nPhda7cR2vemKn9at5o/p8eq3DrOTuVWCuHWqK8yT+0reuOtWhO32Sh5XBBjl/jB nVgdttwrxCjCzgDPzqmE26Qa1H72kPew39QGdhW/vQec40uKHZgkxAFcINbAWq/L BNoapqSHBypg9Xbxuj7NHGQD+WL9CF/odCyIJs62erW6n3X+HcMHRz1O7ts3Nhbc Bxa1BA4nmAH1LFiDQffzsZ+GO1qKNwJ7lefc3/RVrGApkILmbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUBbgq8KdPXWQqEZDiwFH9ngYwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvYmVmMjliMGEtODg3Zi0z NTYzLWFjZjYtMGE2NTg3YWYyOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ7WDmVrq6aT4K8rwyczpG0gqtqOjVRZ0JZhNw4Co06N3RFST4gi0Ta j/y8Oz6InixeL3NzcU9Kps5B4AySh5GR7G0+KAt/OKl8KfyWrRsnne61xv/ZmFQI m6/adO4yvJBEvsQbJF9V8yuhAvRzie5gQsczzDZ+9LM/ykPo2kjRvzrnh5VKV8AV njf3JPJzdbi16EmE+uiPGc/VvaisRnmr/ze5EY0vbMC9rJK0IJbpZELhVZJ7Mtg1 xXnaDMsovMajOtDe3DadGmg0VY949b1VPosqXnF4EmXJvgEcy+JjAiDxSVeTyINT 6DdRplFwma7dJa/GcGt1r/OMaENFNbc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:17:34 2025 by rpki-client