$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa File: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (raw, json) Hash identifier: +SOLk0RtR4b1jdX1nxR/dJqT780U4pQmldlvhmhHFSM= Subject key identifier: 56:11:84:AB:CF:9A:88:D0:93:44:71:27:1F:C1:30:F4:1D:51:6D:E3 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F432858496F117A4D46F35727A9F76788 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa Signing time: Sun 06 Apr 2025 07:43:46 +0000 ROA not before: Sun 06 Apr 2025 07:43:46 +0000 ROA not after: Sat 05 Jul 2025 07:43:46 +0000 asID: 8095 IP address blocks: 23.181.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:11:7a:4d:46:f3:57:27:a9:f7:67:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Apr 6 07:43:46 2025 GMT Not After : Jul 5 07:43:46 2025 GMT Subject: CN=33e4f0cc-2ccd-4dad-8497-91ea68f95b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:fd:aa:40:e6:b0:4a:df:8f:d3:7f:ea:78: 2c:e7:a7:df:a8:d5:4e:b1:d6:7f:77:e5:80:bf:56: 0c:a8:81:2f:e7:e1:58:c9:12:2c:a9:fa:c8:bd:01: 1b:aa:c8:52:ec:04:a9:3b:83:e5:29:74:e7:61:85: d5:99:b8:76:a6:3d:c4:97:70:ff:cf:e9:14:40:00: e6:b4:47:c1:03:67:62:ba:93:e0:00:d9:43:1f:d1: 94:fc:2a:30:c1:b7:66:75:5d:9e:96:fc:bc:b5:48: 0d:b0:87:92:1c:13:3f:16:44:27:a7:7a:76:92:14: 32:f2:ba:09:1c:8c:bf:94:3c:b7:00:9c:03:a8:1f: 62:06:36:a0:ce:2d:28:65:11:0b:ca:c1:de:33:6f: 40:d7:ad:0e:5f:2d:c9:a0:65:7d:3d:13:94:17:e2: ba:ac:e3:6b:03:98:0b:62:76:b7:78:6a:6b:66:c5: a0:40:da:a0:95:1e:27:8e:a3:93:5a:b6:25:33:40: 5b:e9:3a:d1:48:5e:c5:6a:75:b1:b6:73:6c:fa:2f: 15:4e:40:36:81:dc:78:41:d0:42:ac:d3:80:0e:08: 5f:cb:ce:b0:44:9b:dc:bf:17:bc:b9:0f:76:bd:13: 06:8b:51:73:52:4e:5e:dc:07:c5:fa:b1:d1:3e:fb: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:11:84:AB:CF:9A:88:D0:93:44:71:27:1F:C1:30:F4:1D:51:6D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: 23.181.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:38:81:66:c2:f5:83:75:a0:ad:f9:20:57:44:8e:24:72:c4: 13:9d:e9:50:a8:90:bf:17:ec:ab:a6:0c:16:78:a5:38:83:97: 61:7a:15:ff:14:bd:60:8b:3a:d7:7f:b7:2f:3c:1e:22:ec:e8: 83:0e:3c:6e:56:2a:9e:31:9a:0f:61:08:7a:c0:e7:c9:ac:ec: 81:83:2a:8d:38:53:64:45:0e:fa:8e:1b:17:22:7e:7f:87:cb: 75:2a:8c:90:7a:4e:0d:e5:db:d8:c7:07:ef:00:33:70:13:dc: cb:61:38:55:a0:be:cf:3e:b4:14:5d:5f:f2:3d:67:ac:1f:73: de:db:9c:93:ea:d7:78:d7:ab:14:d4:85:61:f8:98:db:87:e9: 27:30:b2:fc:a3:0d:42:9b:31:3e:c8:bc:c6:94:00:73:ea:66: e9:37:85:cc:27:a0:67:25:cf:bb:a5:ac:46:3e:99:60:99:95: 24:3c:07:01:5c:bb:5a:3c:c3:c0:ce:5e:af:70:8f:08:47:be: c6:bd:76:a6:b1:06:28:23:36:32:7a:7e:5f:6b:22:b4:b8:b0: 25:95:a1:b7:91:2b:d9:80:06:18:b8:fc:6e:3a:1e:fb:28:4a: 39:0a:9d:f5:2f:0b:17:d8:00:da:1d:61:e3:6f:c1:c0:32:fb: 73:d6:6e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvEXpNRvNXJ6n3Z4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MDQwNjA3NDM0NloXDTI1MDcwNTA3NDM0NlowLzEtMCsGA1UEAxMk MzNlNGYwY2MtMmNjZC00ZGFkLTg0OTctOTFlYTY4Zjk1Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNX9qkDmsErfj9N/6ngs56ffqNVOsdZ/d+WA v1YMqIEv5+FYyRIsqfrIvQEbqshS7ASpO4PlKXTnYYXVmbh2pj3El3D/z+kUQADm tEfBA2diupPgANlDH9GU/CowwbdmdV2elvy8tUgNsIeSHBM/FkQnp3p2khQy8roJ HIy/lDy3AJwDqB9iBjagzi0oZRELysHeM29A160OXy3JoGV9PROUF+K6rONrA5gL Yna3eGprZsWgQNqglR4njqOTWrYlM0Bb6TrRSF7FanWxtnNs+i8VTkA2gdx4QdBC rNOADghfy86wRJvcvxe8uQ92vRMGi1FzUk5e3AfF+rHRPvsRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYRhKvPmojQk0RxJx/BMPQdUW3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMWUxYmU1MzUtNTA4Yy0z MzBlLWE2ZTItODVhYTJhOTEzNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo4gWbC9YN1oK35IFdEjiRyxBOd6VCokL8X7KumDBZ4pTiDl2F6Ff8U vWCLOtd/ty88HiLs6IMOPG5WKp4xmg9hCHrA58ms7IGDKo04U2RFDvqOGxcifn+H y3UqjJB6Tg3l29jHB+8AM3AT3MthOFWgvs8+tBRdX/I9Z6wfc97bnJPq13jXqxTU hWH4mNuH6ScwsvyjDUKbMT7IvMaUAHPqZuk3hcwnoGclz7ulrEY+mWCZlSQ8BwFc u1o8w8DOXq9wjwhHvsa9dqaxBigjNjJ6fl9rIrS4sCWVobeRK9mABhi4/G46Hvso SjkKnfUvCxfYANodYeNvwcAy+3PWblE= -----END CERTIFICATE-----Generated at Tue Apr 29 09:35:18 2025 by rpki-client