$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa File: a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa (raw, json) Hash identifier: W0AE95HliZ/APzPqMohmGA4+fxq/+Hvkh/eVpYUX4UA= Subject key identifier: 3F:CA:77:7B:3C:66:DC:F4:82:11:98:9B:DC:66:10:09:CE:38:5D:05 Certificate issuer: /CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Certificate serial: 010D0C9F432858499928E319006357202C225440 Authority key identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa Signing time: Mon 21 Apr 2025 09:34:53 +0000 ROA not before: Mon 21 Apr 2025 09:34:53 +0000 ROA not after: Sun 20 Jul 2025 09:34:53 +0000 asID: 214483 IP address blocks: 23.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:28:e3:19:00:63:57:20:2c:22:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Validity Not Before: Apr 21 09:34:53 2025 GMT Not After : Jul 20 09:34:53 2025 GMT Subject: CN=58dcb88f-5ef6-41af-be98-0abd2db8e621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:63:50:d4:a9:7a:0a:c6:b8:8c:05:a1:92: a7:65:28:05:f9:45:8e:27:af:e5:c4:f8:e2:c7:4f: 6f:55:a9:20:ac:42:a5:35:58:ad:62:69:1e:f5:8e: 12:6e:e7:53:a2:6d:00:74:40:08:60:56:ed:d0:4a: 85:6b:00:73:f5:2a:2e:80:7b:d8:62:74:f7:e2:e7: 00:8c:b0:ed:1f:56:1a:d0:64:60:d6:2b:61:e1:a3: c5:dc:c3:7e:89:87:72:54:8a:ae:c7:77:29:a1:d8: d3:cb:3f:b6:55:83:ec:6c:23:db:fd:f7:a6:f7:6c: 6d:d8:44:df:94:1f:64:50:c0:f2:ba:c2:fd:90:c6: 15:98:09:b8:1c:8b:a4:09:d6:4c:fb:9e:0e:ae:ac: 6d:5c:79:a0:cc:b8:67:42:92:d4:8a:1d:aa:52:e5: 66:c1:15:c5:97:6e:cf:ae:d4:b9:59:54:1a:d3:d9: 50:ab:50:e9:87:ed:8a:cf:87:cb:1a:97:68:fa:ec: d8:08:cf:17:89:fa:51:31:9f:04:32:a7:41:f5:c8: d1:53:72:ba:ad:d3:ef:1d:f6:dd:f9:b6:c1:0b:2d: 62:58:f3:2c:18:b8:93:ac:55:e3:89:13:9a:31:4d: 7d:f0:9e:65:65:d5:52:93:36:36:bc:62:3e:6c:48: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CA:77:7B:3C:66:DC:F4:82:11:98:9B:DC:66:10:09:CE:38:5D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl X509v3 Authority Key Identifier: keyid:8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer sbgp-ipAddrBlock: critical IPv4: 23.137.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:83:4f:81:09:aa:b6:95:e1:0b:eb:62:3c:1c:a0:57:8e:4b: f2:4f:cd:00:28:58:b1:1a:2c:cb:51:8b:0c:06:46:3d:61:0e: 9b:0f:91:d4:f5:69:5e:17:bd:fd:25:87:95:3e:2d:43:f8:17: 02:80:e5:00:da:16:aa:ee:6d:02:05:84:f1:88:86:9c:37:26: 62:8a:ad:6b:ad:de:13:5e:83:63:1c:eb:50:7d:13:e7:0d:f5: 66:e9:9c:86:4d:25:47:f0:6c:ec:ee:47:ce:e2:04:78:ec:30: bc:f3:df:27:05:b1:29:fe:60:b2:17:8f:70:f3:6e:b0:a7:50: f5:99:51:56:41:3c:71:8a:92:55:e8:bc:e1:b1:36:7d:ab:45: 83:d6:c7:8f:22:6b:f9:d7:07:3a:f9:93:09:c8:c4:e7:4d:8a: 46:65:cd:23:ee:e9:2c:2d:cf:84:d7:21:1b:74:2a:38:b4:30: 2f:42:2a:9e:4a:35:63:54:82:d1:fd:60:25:a1:00:76:a4:4b: 0a:3c:d9:f8:ac:31:cc:e5:31:80:73:f1:10:42:e8:03:ff:20: b9:c4:48:6f:09:69:e1:c9:b1:63:1e:1d:14:71:2c:9e:00:ad: 7c:3f:3a:18:be:6f:50:79:e8:e8:93:75:b6:b5:80:2c:cc:30: e9:0d:00:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZKOMZAGNXICwiVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNzMxYzQtM2QwNS00NDQwLThjNzQtNzdkNWE1Nzli MzU2MB4XDTI1MDQyMTA5MzQ1M1oXDTI1MDcyMDA5MzQ1M1owLzEtMCsGA1UEAxMk NThkY2I4OGYtNWVmNi00MWFmLWJlOTgtMGFiZDJkYjhlNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkhjUNSpegrGuIwFoZKnZSgF+UWOJ6/lxPji x09vVakgrEKlNVitYmke9Y4SbudTom0AdEAIYFbt0EqFawBz9SougHvYYnT34ucA jLDtH1Ya0GRg1ith4aPF3MN+iYdyVIqux3cpodjTyz+2VYPsbCPb/fem92xt2ETf lB9kUMDyusL9kMYVmAm4HIukCdZM+54OrqxtXHmgzLhnQpLUih2qUuVmwRXFl27P rtS5WVQa09lQq1Dph+2Kz4fLGpdo+uzYCM8XifpRMZ8EMqdB9cjRU3K6rdPvHfbd +bbBCy1iWPMsGLiTrFXjiROaMU198J5lZdVSkzY2vGI+bEjhJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/Kd3s8Ztz0ghGYm9xmEAnOOF0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZTA3 MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1YTU3OWIzNTYvYTM4M2VhMTQtYmY4Ni0z YjQ2LWJkYWUtNzNkYmUzOTdhZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGUwNzMxYzQtM2QwNS00NDQwLThj NzQtNzdkNWE1NzliMzU2LzRlMDczMWM0LTNkMDUtNDQ0MC04Yzc0LTc3ZDVhNTc5 YjM1Ni5jcmwwHwYDVR0jBBgwFoAUjmmcygPNXrOnO9k3pHcJMuhTWSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZTA3MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1 YTU3OWIzNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICDT4EJqraV4QvrYjwcoFeOS/JPzQAoWLEaLMtRiwwGRj1hDpsPkdT1 aV4Xvf0lh5U+LUP4FwKA5QDaFqrubQIFhPGIhpw3JmKKrWut3hNeg2Mc61B9E+cN 9WbpnIZNJUfwbOzuR87iBHjsMLzz3ycFsSn+YLIXj3DzbrCnUPWZUVZBPHGKklXo vOGxNn2rRYPWx48ia/nXBzr5kwnIxOdNikZlzSPu6Swtz4TXIRt0Kji0MC9CKp5K NWNUgtH9YCWhAHakSwo82fisMczlMYBz8RBC6AP/ILnESG8JaeHJsWMeHRRxLJ4A rXw/Ohi+b1B56OiTdba1gCzMMOkNADE= -----END CERTIFICATE-----Generated at Mon Apr 28 16:31:39 2025 by rpki-client