$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: jETcMpUZ3Au66Liq/I8uX7Uz4dK0Dhf3BFcB5WXiy8M= Subject key identifier: 57:57:56:F2:94:29:08:FE:CF:17:84:A4:90:BD:56:D6:F8:7B:85:C3 Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F4328584930DE7181B5F29E1DBAEB1280 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 7311 IP address blocks: 23.155.64.0/24 maxlen: 24 161.129.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:71:81:b5:f2:9e:1d:ba:eb:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=a2870d6c-7b8e-4b06-8c39-ef2f2b75973a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:4d:2a:b0:ac:58:14:a8:89:52:33:86:b6: 0e:39:4d:71:ba:09:a2:c5:0c:88:d0:ba:1b:8c:65: 40:1a:d3:b1:88:a3:0f:ed:9c:13:ec:f5:aa:58:2e: 80:db:ad:e1:ea:e9:b3:1f:52:15:3e:60:32:47:5c: e8:62:d7:38:15:22:71:df:f4:42:32:bd:9f:cf:00: ae:b0:9a:9c:31:a6:e8:0b:fe:71:1b:36:80:38:45: 29:64:17:47:5b:44:86:96:95:82:4c:2a:52:e7:5d: 93:40:79:0e:ff:a7:3a:28:39:12:7e:ff:c0:0f:5b: 67:b9:67:ca:96:14:32:e0:f0:52:fc:99:5b:c6:89: 15:fd:ea:ee:30:cc:17:d2:d9:3e:89:5f:e8:b4:eb: a1:66:14:67:96:c3:cf:cd:63:dc:96:40:98:80:99: 69:0e:f2:c2:32:41:5d:49:62:e3:b6:85:05:c0:52: 39:ce:34:40:b5:e3:d8:48:9f:40:33:f0:13:4b:0d: 81:79:33:82:ad:5c:67:6e:f7:da:47:80:08:33:24: e6:1f:08:44:37:fa:68:b1:c4:73:14:c0:95:23:7d: 1b:73:cd:ca:78:bc:86:56:aa:b5:d8:a9:05:c2:6d: 22:3f:6a:54:e7:36:06:be:bc:f7:33:a1:ba:c1:37: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:56:F2:94:29:08:FE:CF:17:84:A4:90:BD:56:D6:F8:7B:85:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 23.155.64.0/24 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:74:c6:9a:ef:9a:db:08:5c:ba:e7:32:fa:72:56:89:7b:30: 21:b9:77:0b:a3:9c:33:16:f5:09:9f:51:bd:6e:c3:b3:1f:09: ca:fe:c0:8f:50:2f:fc:04:df:62:aa:3d:9d:4b:46:ca:d5:b0: 6e:fc:5f:cd:7e:a6:c0:f0:d8:9c:60:4e:85:0c:6a:95:84:3e: d1:a4:b8:26:5d:6b:4a:94:1e:ef:e7:5f:de:da:67:06:4e:97: 4c:82:b3:05:b0:97:e3:1e:50:d9:32:0f:13:b9:69:e5:e4:62: 66:3e:6b:ee:63:a1:8e:da:cf:e1:4a:a5:56:f4:54:b8:2f:70: 8b:f0:52:ff:c2:d4:20:68:b2:0f:2b:bf:d2:1a:52:7e:37:d6: ea:c2:9d:83:a3:8e:b6:fd:cf:5f:3b:23:5a:02:4c:ff:ee:b6: 45:50:26:7d:d0:fe:fc:98:15:6b:59:c2:52:05:76:62:87:c0: fd:a1:18:c0:a5:fc:ec:98:ed:b7:02:2e:9b:50:86:84:6a:7c: 11:e6:72:e0:35:ff:b7:65:6b:47:ca:cd:e7:f8:e7:fc:3c:6e: 29:ce:ca:5e:84:a6:ae:60:ff:d8:a9:98:92:c8:bd:5a:97:55: 79:25:ad:c6:39:ca:d3:f0:46:91:04:7f:c6:ff:dd:35:44:a3: 7e:a8:18:41 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkw3nGBtfKeHbrrEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YTI4NzBkNmMtN2I4ZS00YjA2LThjMzktZWYyZjJiNzU5NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3alNKrCsWBSoiVIzhrYOOU1xugmixQyI0Lob jGVAGtOxiKMP7ZwT7PWqWC6A263h6umzH1IVPmAyR1zoYtc4FSJx3/RCMr2fzwCu sJqcMaboC/5xGzaAOEUpZBdHW0SGlpWCTCpS512TQHkO/6c6KDkSfv/AD1tnuWfK lhQy4PBS/JlbxokV/eruMMwX0tk+iV/otOuhZhRnlsPPzWPclkCYgJlpDvLCMkFd SWLjtoUFwFI5zjRAtePYSJ9AM/ATSw2BeTOCrVxnbvfaR4AIMyTmHwhEN/poscRz FMCVI30bc83KeLyGVqq12KkFwm0iP2pU5zYGvrz3M6G6wTdyzQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFdXVvKUKQj+zxeEpJC9Vtb4e4XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5tAAwQA oYG6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH50xprvmtsIXLrnMvpyVol7MCG5dwujnDMW9QmfUb1uw7Mf Ccr+wI9QL/wE32KqPZ1LRsrVsG78X81+psDw2JxgToUMapWEPtGkuCZda0qUHu/n X97aZwZOl0yCswWwl+MeUNkyDxO5aeXkYmY+a+5joY7az+FKpVb0VLgvcIvwUv/C 1CBosg8rv9IaUn431urCnYOjjrb9z187I1oCTP/utkVQJn3Q/vyYFWtZwlIFdmKH wP2hGMCl/OyY7bcCLptQhoRqfBHmcuA1/7dla0fKzef45/w8binOyl6Epq5g/9ip mJLIvVqXVXklrcY5ytPwRpEEf8b/3TVEo36oGEE= -----END CERTIFICATE-----Generated at Sun May 11 15:16:10 2025 by rpki-client