$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa File: f23e2a3a-a075-31c5-a07e-1d43dac01650.roa (raw, json) Hash identifier: QCEn3fwJ0cy2kVcePJRN7D3lfFzUZ34y1Hku+4FwAmY= Subject key identifier: C1:40:DD:B8:C6:28:B1:EB:95:E3:9C:42:CC:52:E7:44:D8:3A:25:84 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F432858499AF489F002CF9D672AA50D00 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 23528 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:89:f0:02:cf:9d:67:2a:a5:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=38d248b7-c5f1-4878-af4e-2137f0d6e9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:dd:b3:f0:32:06:ab:7b:45:17:67:78:34: 04:3d:42:c1:c4:2f:65:56:09:c0:6e:a5:f5:ce:f2: d2:89:d2:65:6f:74:f8:34:3b:61:8b:24:fa:03:75: 50:29:1e:22:1a:a4:0d:8f:d2:63:dc:20:5d:dd:99: 38:44:4c:4b:30:aa:e2:19:34:8b:99:c2:f1:42:fc: 95:54:09:67:69:a0:ce:71:30:cf:84:89:00:e1:da: 83:9b:d9:5d:c8:dd:a2:5f:76:2f:3c:3b:58:a3:e8: fb:4b:de:52:fb:69:fc:2d:6e:8b:74:fb:d7:50:75: 58:9b:1f:1f:58:d3:be:8a:66:c9:6c:80:29:df:eb: bd:17:c6:36:4c:27:20:b6:79:90:a0:4e:a8:61:38: 93:9b:b8:fd:30:ff:af:c9:97:34:0f:3c:f8:d9:4f: 03:4c:15:47:60:20:b3:e3:d1:a3:1f:6a:d1:e7:74: 82:cd:c1:52:21:b9:b2:24:5a:a1:51:99:d0:9d:28: ec:eb:d4:ea:a1:d4:11:f2:1b:2d:a2:17:ef:d6:56: 7d:d2:e1:3a:ec:16:61:e5:3f:6f:5d:b7:80:a8:69: 7a:1f:ca:48:94:10:e1:b2:dc:a5:81:8a:d3:a9:17: 75:d6:f2:98:bc:9c:ef:99:89:ea:35:81:b3:c9:e4: fd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:DD:B8:C6:28:B1:EB:95:E3:9C:42:CC:52:E7:44:D8:3A:25:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d0:1b:1e:94:2c:37:9e:f3:5d:3b:84:4e:33:4b:eb:a5:6d: b8:22:2c:b4:40:48:77:f8:75:a6:79:27:dd:16:ed:07:8f:d7: 6d:1d:b3:39:79:a4:c5:2c:dd:3c:9a:d7:ef:61:01:a1:00:4d: 7c:56:31:b9:5c:ca:51:66:7e:62:a5:c3:7a:3f:c0:4f:17:2a: f7:c1:43:f9:78:03:8a:b8:56:e2:ee:0c:b5:89:3b:33:03:e3: de:b9:4c:d4:9a:12:8d:5a:48:89:30:c1:95:37:bb:8b:70:5d: ee:3f:e4:99:63:78:e8:db:26:c3:e2:0b:a8:78:21:2f:46:18: 97:70:a8:d9:00:ee:9a:b7:c6:58:ca:39:d4:a3:7c:e6:ee:90: a6:7c:49:20:76:85:36:e9:83:4b:2a:52:76:cc:9d:18:64:b1: 5f:50:91:cb:10:95:5b:34:30:e5:fb:bf:34:72:32:d7:16:4e: 4e:4e:aa:69:64:6e:e2:b0:a8:0b:c6:44:f0:61:06:1f:cf:7d: b2:f1:ee:0d:9d:49:08:e7:a9:8c:70:b6:13:c0:1e:50:08:19: ca:0b:26:c4:c7:f3:b0:bb:6e:61:c8:1a:48:a0:26:02:11:05: 47:d5:8a:3c:97:7d:c9:88:1d:f0:6c:69:d0:02:89:9e:ec:63: 2c:56:9a:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9InwAs+dZyqlDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MzhkMjQ4YjctYzVmMS00ODc4LWFmNGUtMjEzN2YwZDZlOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Svds/AyBqt7RRdneDQEPULBxC9lVgnAbqX1 zvLSidJlb3T4NDthiyT6A3VQKR4iGqQNj9Jj3CBd3Zk4RExLMKriGTSLmcLxQvyV VAlnaaDOcTDPhIkA4dqDm9ldyN2iX3YvPDtYo+j7S95S+2n8LW6LdPvXUHVYmx8f WNO+imbJbIAp3+u9F8Y2TCcgtnmQoE6oYTiTm7j9MP+vyZc0Dzz42U8DTBVHYCCz 49GjH2rR53SCzcFSIbmyJFqhUZnQnSjs69TqodQR8hstohfv1lZ90uE67BZh5T9v XbeAqGl6H8pIlBDhstylgYrTqRd11vKYvJzvmYnqNYGzyeT9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFA3bjGKLHrleOcQsxS50TYOiWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvZjIzZTJhM2EtYTA3NS0z MWM1LWEwN2UtMWQ0M2RhYzAxNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/QGx6ULDee8107hE4zS+ulbbgiLLRASHf4daZ5J90W7QeP120dszl5 pMUs3Tya1+9hAaEATXxWMblcylFmfmKlw3o/wE8XKvfBQ/l4A4q4VuLuDLWJOzMD 4965TNSaEo1aSIkwwZU3u4twXe4/5JljeOjbJsPiC6h4IS9GGJdwqNkA7pq3xljK OdSjfObukKZ8SSB2hTbpg0sqUnbMnRhksV9QkcsQlVs0MOX7vzRyMtcWTk5Oqmlk buKwqAvGRPBhBh/PfbLx7g2dSQjnqYxwthPAHlAIGcoLJsTH87C7bmHIGkigJgIR BUfVijyXfcmIHfBsadACiZ7sYyxWmgY= -----END CERTIFICATE-----Generated at Fri May 9 12:01:34 2025 by rpki-client