$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa File: 4c7be311-6f85-3b93-8242-963a4e63a1ab.roa (raw, json) Hash identifier: D/7dTnWeWaXQeQyCGw/wbPkoHVHDxSnQGlSdbPV3kvk= Subject key identifier: C0:99:1C:10:6B:9E:A9:7F:D1:CF:13:40:25:27:8E:64:88:97:B8:85 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F432858499DBF3BFC1DA4079B8D7D7B80 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 32595 IP address blocks: 23.172.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3b:fc:1d:a4:07:9b:8d:7d:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=7476e6c4-27ed-4cad-813c-5334ef7ffe9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:c6:e7:88:f5:b6:00:40:59:c0:fc:03:3c: 80:ed:53:52:f0:58:31:09:c1:46:d6:f4:d8:03:46: 1e:a0:6d:54:35:22:f6:5f:69:2b:b1:8e:e7:72:31: b5:76:70:29:ab:a9:70:93:24:e9:4d:b2:de:47:63: e4:45:53:75:65:49:b9:f0:b9:25:fb:db:fc:09:59: cc:5d:e7:70:9c:f2:75:5d:e6:d1:6f:e8:78:93:92: 99:2f:a7:93:67:9f:51:29:6c:4a:60:23:3f:20:6b: b2:4d:75:8a:a3:9b:b6:64:ad:21:e5:9f:07:22:dc: d1:ca:a2:43:40:db:5d:a4:82:a0:c6:12:97:ba:84: f0:bc:cd:cf:2c:61:ac:2e:d9:23:c1:e2:e4:fa:23: b9:80:a0:f1:ac:ab:9a:7d:71:80:39:a9:d6:f8:23: 2b:07:af:d6:08:8f:01:67:5f:52:f3:ff:ff:2b:b0: 7f:b0:b4:65:00:54:d4:ce:4e:b1:57:94:6f:56:1f: 27:ab:00:b0:a0:07:7b:7e:b8:15:38:78:41:1c:94: ca:76:8c:fe:7d:c4:36:bb:00:c0:aa:72:75:dd:45: 5d:45:09:09:78:50:a5:41:d3:53:ee:bc:45:d4:f4: b5:b3:ee:9d:f8:fa:c4:36:d5:3c:fc:c4:ff:fe:ed: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:99:1C:10:6B:9E:A9:7F:D1:CF:13:40:25:27:8E:64:88:97:B8:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:59:4d:c8:0d:03:36:29:4e:09:43:d3:51:5c:7d:ba:fb:61: f2:04:59:39:6f:29:36:bc:15:5b:73:55:c9:0e:21:88:5d:f0: 0e:d1:77:1f:1b:53:47:dd:88:68:ef:71:b0:d5:56:ea:0c:6c: 2e:81:51:7c:20:c7:9a:7b:4a:71:a4:5f:36:2c:42:ab:71:18: 97:7f:0c:f6:4c:8a:bf:fc:8c:a7:a3:46:8f:74:e6:57:2d:52: 97:96:65:66:89:62:cd:3b:aa:8e:8c:72:24:77:c0:cd:81:7f: e2:fb:35:97:71:58:9a:97:89:3e:37:e2:dc:8b:28:26:2b:e8: 9f:ff:04:67:aa:e7:42:e4:5e:be:68:b3:d5:31:9e:5d:c1:5f: 8b:15:10:8a:f3:85:bd:3e:13:84:c1:bf:b8:e4:11:e7:b2:66: ed:0f:08:78:15:8d:72:44:61:d7:01:ab:99:09:6d:40:d1:15: dd:54:c5:1f:96:8d:91:aa:24:26:99:e9:8a:d5:91:59:43:48: 83:b4:6a:3a:15:90:24:6b:1c:4f:9e:a2:be:d1:57:7c:e7:40: 05:26:f0:b9:75:49:06:43:be:45:d7:8c:b5:a7:f0:a5:8a:f2: 2a:12:47:ed:ad:86:f6:80:9f:5a:f2:74:bb:37:05:e2:8b:46: 1a:c6:90:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzv8HaQHm419e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NzQ3NmU2YzQtMjdlZC00Y2FkLTgxM2MtNTMzNGVmN2ZmZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndrG54j1tgBAWcD8AzyA7VNS8FgxCcFG1vTY A0YeoG1UNSL2X2krsY7ncjG1dnApq6lwkyTpTbLeR2PkRVN1ZUm58Lkl+9v8CVnM XedwnPJ1XebRb+h4k5KZL6eTZ59RKWxKYCM/IGuyTXWKo5u2ZK0h5Z8HItzRyqJD QNtdpIKgxhKXuoTwvM3PLGGsLtkjweLk+iO5gKDxrKuafXGAOanW+CMrB6/WCI8B Z19S8///K7B/sLRlAFTUzk6xV5RvVh8nqwCwoAd7frgVOHhBHJTKdoz+fcQ2uwDA qnJ13UVdRQkJeFClQdNT7rxF1PS1s+6d+PrENtU8/MT//u2G1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCZHBBrnql/0c8TQCUnjmSIl7iFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvNGM3YmUzMTEtNmY4NS0z YjkzLTgyNDItOTYzYTRlNjNhMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENZTcgNAzYpTglD01Fcfbr7YfIEWTlvKTa8FVtzVckOIYhd8A7Rdx8b U0fdiGjvcbDVVuoMbC6BUXwgx5p7SnGkXzYsQqtxGJd/DPZMir/8jKejRo905lct UpeWZWaJYs07qo6MciR3wM2Bf+L7NZdxWJqXiT434tyLKCYr6J//BGeq50LkXr5o s9Uxnl3BX4sVEIrzhb0+E4TBv7jkEeeyZu0PCHgVjXJEYdcBq5kJbUDRFd1UxR+W jZGqJCaZ6YrVkVlDSIO0ajoVkCRrHE+eor7RV3znQAUm8Ll1SQZDvkXXjLWn8KWK 8ioSR+2thvaAn1rydLs3BeKLRhrGkDk= -----END CERTIFICATE-----Generated at Sun May 11 08:31:05 2025 by rpki-client