$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa File: 957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa (raw, json) Hash identifier: kiRidC/07WN3PVQg2RmGF+ggSpffyx8uOv+/eopRdDU= Subject key identifier: 88:19:55:E0:45:26:FF:64:2B:64:5F:57:C6:B3:EE:F9:2F:05:C6:4B Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584919417A7EE777B6F09106F7C0 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 23.179.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7a:7e:e7:77:b6:f0:91:06:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=d01a0b80-f80d-47e5-b5fc-74a5b7028087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:d4:d0:14:42:a7:9f:fc:6b:89:8c:17:c5: ae:d2:51:32:a1:c7:3c:a7:f1:ac:bb:a6:ba:e0:8a: b7:a7:e4:13:9e:08:d8:47:8e:fe:48:7a:6b:ac:60: 5e:0a:4b:4c:b4:ab:10:57:c5:3d:8c:bb:fe:c2:fe: 26:3a:2d:40:95:8e:ff:fc:50:96:8b:fe:f4:cf:f6: d2:f9:87:6d:90:70:31:41:3b:a2:24:ee:4d:0c:a8: 73:39:71:fe:a2:e9:dc:60:e3:bc:e9:2d:db:9b:0e: bb:9a:1f:60:f1:50:e4:89:c5:a4:0f:36:c2:3d:78: 8b:60:34:25:3e:0c:f7:f7:49:82:e7:19:2f:94:d2: 7e:d4:a6:97:6f:11:56:30:17:7f:fe:3f:cb:d2:5b: 19:9f:b4:61:fe:fa:15:ae:3a:84:4b:5f:1d:18:dd: d2:00:5b:e8:c1:d3:b1:6a:11:ce:64:a9:ec:59:e6: c0:9f:a5:f1:3c:b3:f0:5a:0d:72:a6:5e:d1:ab:0e: bb:a3:8c:fb:7c:7a:f1:11:79:20:f8:a3:7c:2d:e9: 1d:07:f0:2e:e2:db:d1:b0:40:ad:ee:4c:41:2d:e7: 46:c7:e0:dd:2a:d5:6c:9f:05:e7:c0:57:8a:58:5d: c5:d2:dc:a0:b5:2c:89:d0:2a:0d:f6:c9:33:87:06: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:19:55:E0:45:26:FF:64:2B:64:5F:57:C6:B3:EE:F9:2F:05:C6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:af:75:30:25:fa:c7:8d:23:9a:a0:a4:10:f0:40:a0:8d:cd: 8b:77:95:7a:23:64:67:a4:27:1d:d7:66:5a:92:a6:87:f2:4f: ec:5b:4f:8e:f4:20:4f:0c:b8:05:62:d7:ec:8b:67:b1:a9:b6: e5:dd:03:fc:90:53:41:37:cd:4a:f6:28:b6:80:b0:58:48:f6: b9:8f:56:52:15:00:55:18:4d:4b:11:11:88:08:ff:94:68:f9: a4:f4:66:2b:61:07:53:4b:de:4e:b5:2e:5b:03:aa:15:65:c0: 54:91:b7:56:fb:f0:db:61:75:e8:a9:95:8f:44:66:61:2b:ce: 21:41:00:1a:6a:e2:c2:90:35:15:cb:7e:e7:eb:32:26:b0:6a: 0a:56:ad:ba:55:ce:51:54:ba:85:fa:e3:3d:af:1e:51:90:ad: 39:42:c0:71:e0:e2:a4:2c:63:17:04:4f:17:ed:e8:fe:7b:d8: ee:5d:8e:21:a1:5e:09:01:9c:d2:60:51:3c:26:75:ce:23:1d: c7:4c:f0:80:ea:85:84:51:43:d0:30:b3:eb:e2:56:81:3e:f5: 36:14:97:57:28:9e:cd:78:1f:16:82:54:eb:59:4f:11:31:53: 74:f9:c9:fa:cf:91:6d:89:2a:41:73:46:09:cc:d7:58:5d:38: 23:f0:6e:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXp+53e28JEG98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDAxYTBiODAtZjgwZC00N2U1LWI1ZmMtNzRhNWI3MDI4MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqjU0BRCp5/8a4mMF8Wu0lEyocc8p/Gsu6a6 4Iq3p+QTngjYR47+SHprrGBeCktMtKsQV8U9jLv+wv4mOi1AlY7//FCWi/70z/bS +YdtkHAxQTuiJO5NDKhzOXH+ouncYOO86S3bmw67mh9g8VDkicWkDzbCPXiLYDQl Pgz390mC5xkvlNJ+1KaXbxFWMBd//j/L0lsZn7Rh/voVrjqES18dGN3SAFvowdOx ahHOZKnsWebAn6XxPLPwWg1ypl7Rqw67o4z7fHrxEXkg+KN8LekdB/Au4tvRsECt 7kxBLedGx+DdKtVsnwXnwFeKWF3F0tygtSyJ0CoN9skzhwYlSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgZVeBFJv9kK2RfV8az7vkvBcZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvOTU3ZTU0MWYtM2IyNS0z MWNmLWEwZTktZTdkZWNmZThhMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHivdTAl+seNI5qgpBDwQKCNzYt3lXojZGekJx3XZlqSpofyT+xbT470 IE8MuAVi1+yLZ7GptuXdA/yQU0E3zUr2KLaAsFhI9rmPVlIVAFUYTUsREYgI/5Ro +aT0ZithB1NL3k61LlsDqhVlwFSRt1b78NthdeiplY9EZmErziFBABpq4sKQNRXL fufrMiawagpWrbpVzlFUuoX64z2vHlGQrTlCwHHg4qQsYxcETxft6P572O5djiGh XgkBnNJgUTwmdc4jHcdM8IDqhYRRQ9Aws+viVoE+9TYUl1cons14HxaCVOtZTxEx U3T5yfrPkW2JKkFzRgnM11hdOCPwbtw= -----END CERTIFICATE-----Generated at Tue May 6 13:01:36 2025 by rpki-client