$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa File: b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa (raw, json) Hash identifier: kqxSq2pvlBUx2/uzeBXVNvbZ/D00BMcb9rPLVazIYDM= Subject key identifier: 2F:81:36:F4:C2:3D:60:A5:34:D9:4C:AD:BA:CA:2F:A0:E1:70:24:C0 Certificate issuer: /CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f Certificate serial: 010D0C9F4328584962EAEE5AE0C911829B93D700 Authority key identifier: 7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa Signing time: Tue 01 Apr 2025 23:16:24 +0000 ROA not before: Tue 01 Apr 2025 23:16:24 +0000 ROA not after: Mon 30 Jun 2025 23:16:24 +0000 asID: 46384 IP address blocks: 23.171.64.0/24 maxlen: 24 23.171.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:ea:ee:5a:e0:c9:11:82:9b:93:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f Validity Not Before: Apr 1 23:16:24 2025 GMT Not After : Jun 30 23:16:24 2025 GMT Subject: CN=6a372d7a-b339-44db-bcab-8bb6b615efc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:a1:0d:9d:4f:e5:34:31:57:09:cf:ff:ee: 02:dc:34:0a:56:aa:4a:8b:51:75:47:10:70:02:22: 12:70:a0:17:65:d9:bc:99:c7:6d:9c:d9:92:17:0c: 27:04:cf:5c:b0:76:fb:08:8d:18:7b:a3:a4:fe:b9: a2:b2:27:aa:0d:07:54:04:6c:cb:64:d5:ea:d9:6a: 45:84:f3:ac:26:b6:9c:22:a4:2e:ac:65:c8:8f:a7: 1f:b9:93:aa:6a:f9:1e:b2:0d:f7:d9:4b:00:3f:45: a5:a0:16:2e:85:53:1e:2f:a5:a1:1c:b5:6d:33:68: 17:a4:61:9e:28:9f:ec:51:24:14:24:71:16:c3:bc: ba:65:8a:c7:aa:ef:a1:a2:b3:94:15:e8:d8:6a:74: e0:77:70:dc:eb:e0:af:a9:06:9e:81:1b:f4:ca:0e: d2:d9:7f:73:47:51:9d:c2:46:d5:22:0a:53:e9:c2: f4:01:68:ac:57:c2:c5:ef:c2:cd:1b:ed:79:ca:f7: 61:d2:83:97:ff:aa:ca:c7:e0:d3:78:6c:ce:54:59: db:db:f8:30:ff:8d:4c:25:5a:40:a4:16:fd:15:9d: a2:ff:88:d3:1e:67:c1:80:1a:e7:08:66:40:57:b7: b6:41:fe:e5:bb:44:26:3e:48:e9:04:a2:07:9f:92: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:81:36:F4:C2:3D:60:A5:34:D9:4C:AD:BA:CA:2F:A0:E1:70:24:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl X509v3 Authority Key Identifier: keyid:7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer sbgp-ipAddrBlock: critical IPv4: 23.171.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ab:69:ae:9f:fc:ab:fd:6a:cc:c5:9c:30:71:01:27:af:da: af:ad:ed:c5:12:31:9b:74:1b:92:a8:7b:c4:50:82:18:c8:24: b3:0c:9a:50:f9:f6:4b:17:d7:9e:5a:27:7c:b3:72:6e:05:13: 0a:57:c1:41:91:5b:3e:45:8e:40:9c:4d:0d:ce:9e:f0:77:3f: a3:90:a0:70:1a:73:68:98:98:a8:89:7f:b3:44:49:29:de:ee: cd:e8:eb:99:bd:ec:09:c8:63:77:53:b1:a1:72:70:39:03:ce: 83:37:29:ba:6d:ab:e0:11:8e:18:c2:2c:bf:ee:6e:50:9b:37: 45:7b:b2:0f:24:37:28:4c:71:ba:03:6d:65:61:a8:b1:42:ba: a0:65:ea:1f:35:f6:0e:20:ab:55:89:28:7b:ec:ec:1c:95:c7: 88:dd:25:aa:a4:2f:63:9f:a1:dd:d1:c6:c9:08:8a:fa:5d:a6: 11:df:d5:0f:36:ef:e3:b7:63:e1:ab:f9:be:95:53:3d:3e:df: 3d:64:ed:51:5b:84:18:be:da:70:0d:a5:75:7b:f3:be:61:cd: 05:5a:85:9e:b2:04:bb:d9:6d:70:d2:34:51:9a:6e:7f:43:4d: 3c:58:e9:ca:9c:da:6c:9d:a9:5c:78:0d:e5:cc:71:60:74:95: 36:3d:5b:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEli6u5a4MkRgpuT1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRlY2JlOGYtOGIzOC00ZTY4LWJjYWMtMGViYWU0NzRi YjNmMB4XDTI1MDQwMTIzMTYyNFoXDTI1MDYzMDIzMTYyNFowLzEtMCsGA1UEAxMk NmEzNzJkN2EtYjMzOS00NGRiLWJjYWItOGJiNmI2MTVlZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmmhDZ1P5TQxVwnP/+4C3DQKVqpKi1F1RxBw AiIScKAXZdm8mcdtnNmSFwwnBM9csHb7CI0Ye6Ok/rmisieqDQdUBGzLZNXq2WpF hPOsJracIqQurGXIj6cfuZOqavkesg332UsAP0WloBYuhVMeL6WhHLVtM2gXpGGe KJ/sUSQUJHEWw7y6ZYrHqu+horOUFejYanTgd3Dc6+CvqQaegRv0yg7S2X9zR1Gd wkbVIgpT6cL0AWisV8LF78LNG+15yvdh0oOX/6rKx+DTeGzOVFnb2/gw/41MJVpA pBb9FZ2i/4jTHmfBgBrnCGZAV7e2Qf7lu0QmPkjpBKIHn5JOIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+BNvTCPWClNNlMrbrKL6DhcCTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNGVj YmU4Zi04YjM4LTRlNjgtYmNhYy0wZWJhZTQ3NGJiM2YvYjUzOTBhNmUtOGY1ZS0z Mjc4LWE5ODctZDk1ZmQ4Yjg0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjRlY2JlOGYtOGIzOC00ZTY4LWJj YWMtMGViYWU0NzRiYjNmL2Y0ZWNiZThmLThiMzgtNGU2OC1iY2FjLTBlYmFlNDc0 YmIzZi5jcmwwHwYDVR0jBBgwFoAUfqGjSDBmi35h6cwGSbRdguGIXBMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNGVjYmU4Zi04YjM4LTRlNjgtYmNhYy0wZWJh ZTQ3NGJiM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF6tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyraa6f/Kv9aszFnDBxASev2q+t7cUSMZt0G5Koe8RQghjIJLMMmlD5 9ksX155aJ3yzcm4FEwpXwUGRWz5FjkCcTQ3OnvB3P6OQoHAac2iYmKiJf7NESSne 7s3o65m97AnIY3dTsaFycDkDzoM3Kbptq+ARjhjCLL/ublCbN0V7sg8kNyhMcboD bWVhqLFCuqBl6h819g4gq1WJKHvs7ByVx4jdJaqkL2Ofod3RxskIivpdphHf1Q82 7+O3Y+Gr+b6VUz0+3z1k7VFbhBi+2nANpXV7875hzQVahZ6yBLvZbXDSNFGabn9D TTxY6cqc2mydqVx4DeXMcWB0lTY9W14= -----END CERTIFICATE-----Generated at Mon Apr 28 19:22:30 2025 by rpki-client