$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/aa6d3a85-79d3-3ae9-b865-dfa14e9ec649.roa File: aa6d3a85-79d3-3ae9-b865-dfa14e9ec649.roa (raw, json) Hash identifier: yQJTjwKSlLWbuc1hjDiTyaeN4CwlrFTI+WZD/Im0yZQ= Subject key identifier: B7:C6:8E:AA:BD:05:30:9D:5B:CA:4A:01:F9:D0:87:AB:68:3C:6C:15 Certificate issuer: /CN=618a40c8-2175-4e55-926e-6516ce21ec74 Certificate serial: 010D0C9F432858498E64767C044FA92423C6DF20 Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/aa6d3a85-79d3-3ae9-b865-dfa14e9ec649.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 23.141.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:76:7c:04:4f:a9:24:23:c6:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=79d83242-b15d-4c6a-bdaa-9842119bba3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:f7:94:a0:3e:c1:7a:91:d2:c0:e9:84:58: 0b:29:a8:2d:53:ec:55:48:4e:d6:ba:30:db:2c:5f: f5:07:32:ee:3e:59:10:ce:28:17:81:55:8e:a8:64: b1:eb:15:a7:78:6f:93:79:3c:62:23:1b:df:76:4d: 3c:4b:a9:6f:30:41:1a:b8:9e:02:e6:d4:9e:14:64: 2b:cb:04:78:ae:e8:74:7c:eb:8b:96:fa:00:65:5b: 3a:46:33:43:6e:15:a3:cb:7c:09:27:d1:bd:9b:54: 60:5c:c3:37:c7:ab:ec:ec:00:5d:17:6b:c3:22:b6: 9f:ee:55:49:17:27:fb:d3:58:de:ca:2b:d0:40:17: fc:cb:27:9d:7f:5c:00:04:5d:db:c2:be:6e:ce:6b: 65:bb:3e:da:be:24:25:bc:12:19:b9:63:0b:97:d1: 59:45:a4:76:32:f9:3d:8d:45:e1:bc:2a:f8:93:48: 96:c8:f7:1e:2c:92:e7:b7:1f:8e:eb:76:2c:fe:d0: 80:64:f7:80:53:4e:2b:54:8d:27:7b:56:0d:a0:69: 3a:60:90:13:41:8f:6b:8c:6a:33:b8:7d:7c:eb:63: 23:5c:90:d9:e1:e5:2a:31:a2:6f:f9:59:a5:9b:62: 37:b5:cc:d4:50:9d:50:0e:04:ea:35:d4:8d:0d:ed: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C6:8E:AA:BD:05:30:9D:5B:CA:4A:01:F9:D0:87:AB:68:3C:6C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/aa6d3a85-79d3-3ae9-b865-dfa14e9ec649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl X509v3 Authority Key Identifier: keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer sbgp-ipAddrBlock: critical IPv4: 23.141.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a8:d8:a1:fe:f5:b3:bb:09:5a:ef:ff:d1:a1:76:eb:30:69: 71:ac:63:63:46:ca:74:2e:ea:ae:ce:d2:14:fe:7b:b9:37:ca: fa:77:ba:69:20:65:fa:d6:b1:cc:9e:c0:d9:35:c7:e5:e8:93: e8:3e:d3:19:19:44:17:1f:03:ee:77:ea:cb:55:8e:1c:aa:b5: 39:b6:7b:6f:b2:79:98:ae:5f:39:6d:3c:05:d3:95:66:1a:f5: 33:09:2b:c2:b1:33:88:f4:9c:5e:69:a3:d0:8c:ca:9b:c5:eb: f5:55:4c:d3:1c:08:3f:dc:49:3c:09:5f:88:62:c6:87:5f:68: 81:9a:28:c5:37:fb:43:92:17:69:aa:5b:51:b2:8d:b1:cb:06: 70:f5:78:c4:60:20:09:70:64:25:f2:aa:eb:8a:c6:67:ae:1b: 5f:d8:09:6c:50:48:9f:fa:d7:d6:7b:b4:74:17:16:b8:c7:60: ba:e2:8a:3d:f0:69:96:de:37:62:b5:79:e4:90:b3:7a:5a:09: 43:c4:1b:04:d6:40:94:82:25:18:07:92:ff:3e:ef:58:54:88: 86:dc:ed:2b:30:4f:75:f5:30:69:7f:aa:fa:b8:97:3d:44:51: a0:4b:82:5d:08:ae:5b:45:e3:ea:78:95:98:7a:24:e8:26:25: 71:03:97:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZHZ8BE+pJCPG3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YTQwYzgtMjE3NS00ZTU1LTkyNmUtNjUxNmNlMjFl Yzc0MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NzlkODMyNDItYjE1ZC00YzZhLWJkYWEtOTg0MjExOWJiYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv73lKA+wXqR0sDphFgLKagtU+xVSE7WujDb LF/1BzLuPlkQzigXgVWOqGSx6xWneG+TeTxiIxvfdk08S6lvMEEauJ4C5tSeFGQr ywR4ruh0fOuLlvoAZVs6RjNDbhWjy3wJJ9G9m1RgXMM3x6vs7ABdF2vDIraf7lVJ Fyf701jeyivQQBf8yyedf1wABF3bwr5uzmtluz7aviQlvBIZuWMLl9FZRaR2Mvk9 jUXhvCr4k0iWyPceLJLntx+O63Ys/tCAZPeAU04rVI0ne1YNoGk6YJATQY9rjGoz uH1862MjXJDZ4eUqMaJv+Vmlm2I3tczUUJ1QDgTqNdSNDe2qJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfGjqq9BTCdW8pKAfnQh6toPGwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MThh NDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2Y2UyMWVjNzQvYWE2ZDNhODUtNzlkMy0z YWU5LWI4NjUtZGZhMTRlOWVjNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjE4YTQwYzgtMjE3NS00ZTU1LTky NmUtNjUxNmNlMjFlYzc0LzYxOGE0MGM4LTIxNzUtNGU1NS05MjZlLTY1MTZjZTIx ZWM3NC5jcmwwHwYDVR0jBBgwFoAUYr8kTZ9LKuH4yy1kQwZdByzzTIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MThhNDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2 Y2UyMWVjNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuo2KH+9bO7CVrv/9GhduswaXGsY2NGynQu6q7O0hT+e7k3yvp3umkg ZfrWscyewNk1x+Xok+g+0xkZRBcfA+536stVjhyqtTm2e2+yeZiuXzltPAXTlWYa 9TMJK8KxM4j0nF5po9CMypvF6/VVTNMcCD/cSTwJX4hixodfaIGaKMU3+0OSF2mq W1GyjbHLBnD1eMRgIAlwZCXyquuKxmeuG1/YCWxQSJ/619Z7tHQXFrjHYLriij3w aZbeN2K1eeSQs3paCUPEGwTWQJSCJRgHkv8+71hUiIbc7SswT3X1MGl/qvq4lz1E UaBLgl0IrltF4+p4lZh6JOgmJXEDl/8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:57 2025 by rpki-client