$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/e65cd8da-dfed-3bf8-831a-62b853f3c844.roa File: e65cd8da-dfed-3bf8-831a-62b853f3c844.roa (raw, json) Hash identifier: DBxmdAE+y2pweJF+ehxRvI3GXA1OCkYCmJAJsTGpocw= Subject key identifier: 56:EF:66:59:D0:DD:8C:8A:AC:6A:D2:DE:6A:C5:80:69:EA:93:D6:39 Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba Certificate serial: 010D0C9F43285849C4D4C7B31CD1B6B3BDC54AC0 Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/e65cd8da-dfed-3bf8-831a-62b853f3c844.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 19318 IP address blocks: 23.247.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c7:b3:1c:d1:b6:b3:bd:c5:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=9de22055-e44e-4017-b40c-69eecae59712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:49:6c:dc:45:82:ef:5f:e1:92:eb:ed:89: 22:f2:dc:80:e6:e6:b9:2b:f4:49:fe:f1:24:da:95: 8d:38:3f:cf:d8:74:b1:ea:75:23:2c:10:82:90:50: 8c:d1:8c:f8:98:9b:d3:2d:23:fa:46:08:e6:74:c7: d7:e7:2c:6a:84:b6:f5:9b:65:68:ef:2c:aa:43:cc: da:6b:e7:8b:dc:4d:3d:bc:52:08:38:b9:b7:3b:d8: 5a:31:30:f6:13:04:9f:60:b8:94:02:f1:c5:f4:cc: b9:a4:f7:b3:55:0c:ff:2b:9c:a9:38:03:32:7a:cc: bb:96:5c:27:c6:59:7a:46:92:22:de:95:7a:f3:f7: 78:a6:01:74:79:1c:cb:99:01:a5:0a:c4:10:c4:16: dc:f9:d5:98:de:62:49:c6:d8:38:0c:f4:57:59:26: 7f:10:c8:00:f7:0f:32:29:1d:0c:44:34:2a:34:b9: 92:e1:94:6e:63:be:ff:14:ad:44:7f:f2:26:e7:61: 01:46:3d:86:b6:e6:ed:46:81:21:cf:0e:4b:0c:17: a5:eb:6f:9f:50:82:6a:fd:51:02:92:b2:21:65:85: 93:f0:69:12:e8:81:cf:cf:8d:d5:4e:34:e5:d1:76: 6e:57:61:e6:9f:75:87:87:15:fd:d0:0d:50:5a:7d: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EF:66:59:D0:DD:8C:8A:AC:6A:D2:DE:6A:C5:80:69:EA:93:D6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/e65cd8da-dfed-3bf8-831a-62b853f3c844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl X509v3 Authority Key Identifier: keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer sbgp-ipAddrBlock: critical IPv4: 23.247.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:14:a2:db:67:86:de:c9:de:4c:ba:7d:76:a1:f2:6a:e5:fd: 45:8f:f4:04:63:68:86:71:0d:27:ce:67:8a:ff:e8:f3:93:1d: a9:eb:83:a7:52:07:ec:12:3b:7e:86:8d:b2:a8:e0:10:a3:87: a6:5f:d9:8d:9a:0d:e2:02:4d:24:a8:87:50:8d:0e:01:fc:3d: 75:d5:55:9a:d7:db:ed:5e:20:9b:ae:88:60:90:68:39:7b:c2: 8a:43:de:52:71:49:5d:5c:f8:17:e1:b8:73:b4:24:f9:18:77: ca:5b:ed:0f:99:ad:ce:a6:2e:c0:6a:76:ce:e9:2e:0c:26:73: 9a:c6:e8:f7:96:69:e5:df:3f:21:0b:b7:bd:cc:eb:7a:6c:a0: 17:70:07:3e:25:41:d4:6d:36:29:8f:9f:54:11:c9:49:9f:7a: d9:06:d3:2c:21:2f:15:c0:e0:9c:39:cc:30:59:c0:f0:64:06: b2:47:01:33:76:1b:f4:5a:9f:75:b3:e1:9c:8c:37:bf:d0:20: 1c:c9:94:f8:3d:dc:e7:d8:d5:b5:4d:d8:2e:63:32:64:63:dc: bd:7a:0a:b6:62:7b:82:36:93:51:c4:8b:15:95:f8:8c:23:91: 9c:65:00:68:83:5e:de:d0:81:ce:7b:e1:af:88:1c:a1:30:94: fa:cf:4c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MezHNG2s73FSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm ZWJhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk OWRlMjIwNTUtZTQ0ZS00MDE3LWI0MGMtNjllZWNhZTU5NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYJJbNxFgu9f4ZLr7Yki8tyA5ua5K/RJ/vEk 2pWNOD/P2HSx6nUjLBCCkFCM0Yz4mJvTLSP6RgjmdMfX5yxqhLb1m2Vo7yyqQ8za a+eL3E09vFIIOLm3O9haMTD2EwSfYLiUAvHF9My5pPezVQz/K5ypOAMyesy7llwn xll6RpIi3pV68/d4pgF0eRzLmQGlCsQQxBbc+dWY3mJJxtg4DPRXWSZ/EMgA9w8y KR0MRDQqNLmS4ZRuY77/FK1Ef/Im52EBRj2GtubtRoEhzw5LDBel62+fUIJq/VEC krIhZYWT8GkS6IHPz43VTjTl0XZuV2Hmn3WHhxX90A1QWn1hjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbvZlnQ3YyKrGrS3mrFgGnqk9Y5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4 NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvZTY1Y2Q4ZGEtZGZlZC0z YmY4LTgzMWEtNjJiODUzZjNjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5 NzMwYWZlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/e1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAUottnht7J3ky6fXah8mrl/UWP9ARjaIZxDSfOZ4r/6POTHanrg6dS B+wSO36GjbKo4BCjh6Zf2Y2aDeICTSSoh1CNDgH8PXXVVZrX2+1eIJuuiGCQaDl7 wopD3lJxSV1c+BfhuHO0JPkYd8pb7Q+Zrc6mLsBqds7pLgwmc5rG6PeWaeXfPyEL t73M63psoBdwBz4lQdRtNimPn1QRyUmfetkG0ywhLxXA4Jw5zDBZwPBkBrJHATN2 G/Ran3Wz4ZyMN7/QIBzJlPg93OfY1bVN2C5jMmRj3L16CrZie4I2k1HEixWV+Iwj kZxlAGiDXt7Qgc574a+IHKEwlPrPTK4= -----END CERTIFICATE-----Generated at Sun May 11 21:03:45 2025 by rpki-client