$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa File: 2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json) Hash identifier: bxn1/sgeLbo6i2dHm9u8/IWz4mOj3mp1Qwxp1A2MbMg= Subject key identifier: 97:8A:D2:34:46:E3:84:36:93:95:20:0E:4C:32:34:05:76:D1:1D:F1 Certificate issuer: /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Certificate serial: 010D0C9F432858498339F34EA6CB02C7CA98BA00 Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 25944 IP address blocks: 23.157.168.0/24 maxlen: 24 2602:814:d000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f3:4e:a6:cb:02:c7:ca:98:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=e41a59af-48e5-4bd5-92b9-e6c475412db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:bd:9e:f2:c8:f3:38:c3:a7:ab:40:e9:8e: 66:40:e9:2f:cd:4e:b9:c5:6a:64:1d:c7:36:9b:44: d5:fe:b1:83:b5:bb:1a:6f:ac:a2:3e:c4:cc:4a:10: 83:96:f6:df:1c:ee:60:5c:77:70:bf:9f:f8:2e:95: 4f:c2:d0:7d:d7:b0:af:37:8b:58:10:a4:a9:02:84: 08:1a:c9:4d:49:d9:d0:72:3b:51:a2:2f:01:87:a1: 03:60:6a:a8:c3:af:73:84:3b:d2:85:7f:87:f6:39: a5:0a:aa:d9:00:c7:5c:f7:98:a5:7a:b2:6a:8a:f2: 5d:38:ed:a6:0d:49:83:c5:9c:b9:49:67:5a:f6:57: 95:5d:aa:bd:df:9e:cf:35:5c:53:45:1c:03:4d:88: 29:11:d5:64:f1:33:54:07:27:cc:41:ba:7d:31:d9: 41:ff:05:43:15:c7:26:a8:31:30:dd:fe:ec:7a:51: 3d:e6:35:ae:23:75:01:71:7c:9a:03:5e:62:be:bf: 9d:26:8c:74:42:1b:64:3a:f6:3e:4c:12:bc:34:e1: 6a:eb:10:5b:55:64:8d:1c:43:77:d5:58:c9:0b:00: 01:2e:ca:68:9a:67:0d:9a:a3:b4:d6:4b:36:7b:9c: 67:9c:9c:de:7b:40:70:c1:bf:d3:be:b3:d9:62:43: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8A:D2:34:46:E3:84:36:93:95:20:0E:4C:32:34:05:76:D1:1D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl X509v3 Authority Key Identifier: keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer sbgp-ipAddrBlock: critical IPv4: 23.157.168.0/24 IPv6: 2602:814:d000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:a7:ef:ea:fd:3f:8b:04:83:b3:13:5e:a5:b9:2a:88:19:2b: 16:20:f9:c2:d6:50:14:44:94:50:27:8e:29:7d:04:a4:b8:4e: c7:bd:68:c9:38:fa:c5:02:ea:b3:20:72:31:71:58:b0:66:af: dc:b3:7b:02:0d:72:d2:3f:bd:2c:35:15:d2:b3:3d:7c:7c:e2: c0:ae:cd:0c:e3:1f:a6:00:56:d7:05:41:3f:44:71:37:59:7e: d0:20:6d:e7:35:63:ae:14:8e:2c:c3:15:e4:b3:5e:fb:cc:0a: 73:b3:e2:29:af:af:90:6b:0d:43:e1:3b:5d:89:64:a6:37:e8: 76:ec:63:58:84:cf:e3:84:4e:c0:c0:3e:ab:80:0c:3b:bf:f0: 45:f2:c4:08:36:9b:1e:9c:b3:66:be:99:7d:05:23:68:67:62: ec:18:c9:74:97:1d:58:31:f6:26:83:4a:07:1c:c5:89:6e:af: 37:b1:89:ce:7a:1b:df:8e:bc:27:85:77:37:c3:5a:8c:30:88: a9:2b:94:28:8a:1c:c1:6b:d2:42:b1:fe:7b:c9:e6:ce:9e:f7: 7b:e2:bf:9e:20:b0:e4:a2:a1:46:8c:2c:de:c0:e3:d5:a2:0d: e7:98:5b:7a:cf:33:04:da:d7:a7:42:59:fc:b8:71:f5:25:b1: f8:50:84:9e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEmDOfNOpssCx8qYugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ4YmYyYzgtN2YyYi00ZTJiLWE2NTMtMWU4OWVkMmNh OGI2MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTQxYTU5YWYtNDhlNS00YmQ1LTkyYjktZTZjNDc1NDEyZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvK9nvLI8zjDp6tA6Y5mQOkvzU65xWpkHcc2 m0TV/rGDtbsab6yiPsTMShCDlvbfHO5gXHdwv5/4LpVPwtB917CvN4tYEKSpAoQI GslNSdnQcjtRoi8Bh6EDYGqow69zhDvShX+H9jmlCqrZAMdc95ilerJqivJdOO2m DUmDxZy5SWda9leVXaq9357PNVxTRRwDTYgpEdVk8TNUByfMQbp9MdlB/wVDFccm qDEw3f7selE95jWuI3UBcXyaA15ivr+dJox0QhtkOvY+TBK8NOFq6xBbVWSNHEN3 1VjJCwABLspommcNmqO01ks2e5xnnJzee0Bwwb/TvrPZYkMY3wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJeK0jRG44Q2k5UgDkwyNAV20R3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDhi ZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5ZWQyY2E4YjYvMmYxNjBhMGUtYTEyMy0z YTcyLTk5ZTEtZDY2OTQ5NmJkMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ4YmYyYzgtN2YyYi00ZTJiLWE2 NTMtMWU4OWVkMmNhOGI2LzQ0OGJmMmM4LTdmMmItNGUyYi1hNjUzLTFlODllZDJj YThiNi5jcmwwHwYDVR0jBBgwFoAUMpzTTWQriq2VApMNbBmQeCPWaY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDhiZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5 ZWQyY2E4YjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF52oMA8E AgACMAkDBwQmAggU0AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsafv6v0/iwSDsxNepbkqiBkrFiD5wtZQ FESUUCeOKX0EpLhOx71oyTj6xQLqsyByMXFYsGav3LN7Ag1y0j+9LDUV0rM9fHzi wK7NDOMfpgBW1wVBP0RxN1l+0CBt5zVjrhSOLMMV5LNe+8wKc7PiKa+vkGsNQ+E7 XYlkpjfoduxjWITP44ROwMA+q4AMO7/wRfLECDabHpyzZr6ZfQUjaGdi7BjJdJcd WDH2JoNKBxzFiW6vN7GJznob3468J4V3N8NajDCIqSuUKIocwWvSQrH+e8nmzp73 e+K/niCw5KKhRows3sDj1aIN55hbes8zBNrXp0JZ/Lhx9SWx+FCEng== -----END CERTIFICATE-----Generated at Tue May 6 07:38:29 2025 by rpki-client