$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa File: 38415cef-c01c-329c-8c56-19ea085fd8f1.roa (raw, json) Hash identifier: D7ngTseXwId2V1zddTdUVuP8eN42gIVtvw2oqzkNcMg= Subject key identifier: 76:EF:A7:2A:FC:5D:A6:33:FE:7E:76:C5:FB:BD:8F:24:69:D4:6C:02 Certificate issuer: /CN=858c4eda-1c14-4575-affe-9e4368bf208d Certificate serial: 010D0C9F43285849446942AE832DB02A6B581400 Authority key identifier: 3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 203618 IP address blocks: 23.226.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:42:ae:83:2d:b0:2a:6b:58:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858c4eda-1c14-4575-affe-9e4368bf208d Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=c64790bf-9d4a-4130-9624-af73c6721141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:19:69:09:a1:cd:f3:25:b8:75:b4:1f:30: b8:c1:e7:4d:fa:d8:b3:69:c7:36:9c:d0:23:43:d9: d8:c7:32:5f:b1:ca:7c:c6:a7:13:05:86:03:c8:e5: 2f:6e:94:af:c7:11:b3:a6:6a:a1:8f:7b:cb:a3:3c: 81:87:b0:c0:a2:cf:f0:67:68:17:05:7b:22:4d:63: c2:c0:47:a7:83:aa:57:65:3c:91:ee:b0:27:ed:cd: a5:9a:12:12:08:d4:cc:96:f2:eb:28:8e:0b:41:40: fc:a0:42:8d:5a:7d:42:d1:2c:be:ae:4a:3f:4d:22: 5f:9f:b3:c8:6f:fd:cf:45:f7:f5:ac:9b:69:0d:48: 69:d1:a8:5f:74:df:24:cf:ab:e7:ae:59:37:6a:4f: c1:e3:cd:1f:d3:d3:17:f2:f6:f3:b4:cf:0e:d0:4a: 93:04:ac:94:a2:7a:cb:d4:e4:77:f5:3e:2e:2d:0e: d5:54:d0:4c:fc:44:ed:ba:c8:fc:ca:86:9f:2d:7e: 10:25:d5:1c:42:6f:b6:51:4b:98:2c:82:b6:4b:1f: 18:2d:3a:f1:b7:d3:0a:f5:fb:35:44:3d:33:8a:d5: 8c:42:57:11:36:5b:66:6d:23:b1:44:da:b9:2d:1c: b3:3e:00:10:ec:22:2d:8f:54:cd:3a:25:8b:c0:91: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EF:A7:2A:FC:5D:A6:33:FE:7E:76:C5:FB:BD:8F:24:69:D4:6C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl X509v3 Authority Key Identifier: keyid:3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:38:5f:da:93:93:07:45:cd:5b:92:2a:16:f3:a2:f4:19:67: f2:f9:8c:1b:3e:03:8d:ad:28:bd:ce:ad:56:17:8b:49:6d:03: 5d:a6:22:d9:b9:02:41:e0:50:25:e6:56:02:23:32:4b:b0:89: 38:c4:a2:55:1f:1a:1b:2a:9c:bd:3b:63:a4:17:99:e9:f6:25: 73:ae:3d:b6:b8:19:a8:95:e5:74:0f:f5:90:2f:91:c2:a1:a1: 42:5c:63:5b:cd:43:0a:0e:fe:5e:5b:65:20:ff:ab:e8:ec:27: e5:09:c3:d2:0d:76:48:32:f1:92:ab:b5:87:09:e5:04:e3:77: cb:73:84:ae:d8:47:5d:0a:ea:f1:e2:ab:64:a4:f7:2d:dd:50: b8:eb:96:fc:f0:9e:63:5d:1c:ea:c0:d9:11:42:a5:6a:0d:8a: 83:fd:d7:ab:67:f4:a1:44:b5:b8:93:34:fe:23:b8:15:4e:5d: 0c:cb:94:d3:be:54:9b:45:78:40:9c:06:7a:4d:05:3b:e6:ea: ef:3c:5a:10:0d:be:54:43:df:cf:96:d5:6e:fa:8e:34:ef:92: 8c:7d:1d:c4:37:03:a3:22:20:9b:ad:40:24:ed:d6:02:3f:bd: 20:58:da:83:89:62:68:d1:81:67:84:e9:fd:f8:81:51:eb:a2: a5:24:80:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUKugy2wKmtYFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4YzRlZGEtMWMxNC00NTc1LWFmZmUtOWU0MzY4YmYy MDhkMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YzY0NzkwYmYtOWQ0YS00MTMwLTk2MjQtYWY3M2M2NzIxMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhsZaQmhzfMluHW0HzC4wedN+tizacc2nNAj Q9nYxzJfscp8xqcTBYYDyOUvbpSvxxGzpmqhj3vLozyBh7DAos/wZ2gXBXsiTWPC wEeng6pXZTyR7rAn7c2lmhISCNTMlvLrKI4LQUD8oEKNWn1C0Sy+rko/TSJfn7PI b/3PRff1rJtpDUhp0ahfdN8kz6vnrlk3ak/B480f09MX8vbztM8O0EqTBKyUonrL 1OR39T4uLQ7VVNBM/ETtusj8yoafLX4QJdUcQm+2UUuYLIK2Sx8YLTrxt9MK9fs1 RD0zitWMQlcRNltmbSOxRNq5LRyzPgAQ7CItj1TNOiWLwJG+ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbvpyr8XaYz/n52xfu9jyRp1GwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThj NGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQzNjhiZjIwOGQvMzg0MTVjZWYtYzAxYy0z MjljLThjNTYtMTllYTA4NWZkOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4YzRlZGEtMWMxNC00NTc1LWFm ZmUtOWU0MzY4YmYyMDhkLzg1OGM0ZWRhLTFjMTQtNDU3NS1hZmZlLTllNDM2OGJm MjA4ZC5jcmwwHwYDVR0jBBgwFoAUP3hrqMRxoltZYaBCa8SI7i27E4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThjNGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQz NjhiZjIwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+JyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI4X9qTkwdFzVuSKhbzovQZZ/L5jBs+A42tKL3OrVYXi0ltA12mItm5 AkHgUCXmVgIjMkuwiTjEolUfGhsqnL07Y6QXmen2JXOuPba4GaiV5XQP9ZAvkcKh oUJcY1vNQwoO/l5bZSD/q+jsJ+UJw9INdkgy8ZKrtYcJ5QTjd8tzhK7YR10K6vHi q2Sk9y3dULjrlvzwnmNdHOrA2RFCpWoNioP916tn9KFEtbiTNP4juBVOXQzLlNO+ VJtFeECcBnpNBTvm6u88WhANvlRD38+W1W76jjTvkox9HcQ3A6MiIJutQCTt1gI/ vSBY2oOJYmjRgWeE6f34gVHroqUkgEw= -----END CERTIFICATE-----Generated at Sun May 11 21:14:57 2025 by rpki-client