$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa File: 4332eacc-e724-3376-9a5d-fe44540381b1.roa (raw, json) Hash identifier: TAM81e3lmoYAdQVP6kxUbf73M9n5C5NWrmHhH/wkiYw= Subject key identifier: 1C:C8:F0:71:64:CB:74:86:90:07:82:9F:9E:B1:CE:7B:9F:35:FA:76 Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F43285849AA4F693938AB1641A02CFB60 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 61112 IP address blocks: 23.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:69:39:38:ab:16:41:a0:2c:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=007c0291-9bf5-4f90-87b3-0568e45337e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d4:f5:ec:04:55:f1:96:ab:4f:f9:9f:62:a8: b1:3d:1a:7d:ba:ae:81:aa:90:11:d6:e9:0a:30:74: 8d:9a:05:8d:8e:34:ff:f9:b0:41:c2:27:10:ef:24: 14:6b:fe:3a:92:cc:89:ce:98:1f:7a:5a:16:d1:76: 03:71:ff:4d:ae:1d:c8:80:eb:11:34:cf:8b:b6:59: a6:a7:07:a8:35:7b:50:39:cd:de:24:b3:9c:46:2c: ab:78:f1:01:9d:62:c2:9d:0f:1e:c1:c3:e1:3c:f3: d5:17:d4:18:97:b1:28:6e:64:ff:83:d9:61:f4:2d: c7:c3:ea:40:a8:0d:c0:72:56:dc:47:02:e1:0e:31: 64:c8:c1:9e:a6:05:9e:1d:ff:ec:94:11:ab:1f:67: 91:8d:60:a1:70:fd:3a:df:30:6f:e4:16:2b:e2:8b: 5c:b9:a9:59:0a:80:5d:bc:23:87:b9:25:fc:a0:1f: e1:90:a5:9c:c3:83:46:ba:f2:89:8f:3a:ac:f0:de: b5:1d:22:56:2d:5d:52:ea:78:ef:2a:e6:e5:5f:7b: 3e:b7:d9:88:40:e7:b9:85:82:f9:24:b2:f7:51:02: a7:9a:8e:11:0e:1b:32:68:4d:24:2d:e4:6b:73:58: 1e:6e:40:20:35:50:fa:4c:ab:d5:32:d4:17:52:d1: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:F0:71:64:CB:74:86:90:07:82:9F:9E:B1:CE:7B:9F:35:FA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:12:1a:2b:4e:57:5a:ae:67:8c:c9:26:14:4f:81:25:29:04: 5b:20:2d:8f:30:c4:3f:06:77:0e:1d:2f:76:c3:7b:2d:eb:e9: 2a:59:f5:51:a4:56:24:b6:67:5d:fd:b4:66:dc:c6:93:59:3d: 08:29:36:2e:3f:07:11:f0:7d:84:fc:3f:7b:aa:60:22:52:cc: 36:6a:34:11:86:39:3f:2d:33:0c:de:d3:2b:f2:d8:fc:a2:14: af:ba:42:9d:83:9f:46:30:65:6b:73:f0:ca:7c:c3:00:5f:7a: b0:96:56:9f:f4:e0:ff:82:78:17:50:a4:25:c2:5f:96:e3:d9: 90:db:2b:ad:32:48:be:43:7b:89:01:e8:cf:8f:8e:ad:10:20: da:4f:8d:e0:48:16:fe:43:92:36:06:d8:75:0e:f5:b7:af:a3: fa:10:a6:99:fc:03:ad:56:d9:e1:e5:17:91:71:ef:f0:65:03: b2:fe:c9:c3:a7:93:1f:68:23:73:c5:6b:a5:75:5a:d5:51:53: 60:00:12:69:0c:3e:c3:40:ef:ae:06:35:98:d5:22:e2:0c:de: b0:78:47:02:a5:59:22:e3:d4:7a:d8:45:d1:5c:a2:88:70:1d: 0c:52:ff:af:16:cf:28:e9:59:c1:0c:0a:c0:22:17:d8:04:11: b9:79:78:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2k5OKsWQaAs+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MDA3YzAyOTEtOWJmNS00ZjkwLTg3YjMtMDU2OGU0NTMzN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNT17ARV8ZarT/mfYqixPRp9uq6BqpAR1ukK MHSNmgWNjjT/+bBBwicQ7yQUa/46ksyJzpgfeloW0XYDcf9Nrh3IgOsRNM+Ltlmm pweoNXtQOc3eJLOcRiyrePEBnWLCnQ8ewcPhPPPVF9QYl7EobmT/g9lh9C3Hw+pA qA3AclbcRwLhDjFkyMGepgWeHf/slBGrH2eRjWChcP063zBv5BYr4otcualZCoBd vCOHuSX8oB/hkKWcw4NGuvKJjzqs8N61HSJWLV1S6njvKublX3s+t9mIQOe5hYL5 JLL3UQKnmo4RDhsyaE0kLeRrc1gebkAgNVD6TKvVMtQXUtGecQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzI8HFky3SGkAeCn56xznufNfp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvNDMzMmVhY2MtZTcyNC0z Mzc2LTlhNWQtZmU0NDU0MDM4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF56IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkSGitOV1quZ4zJJhRPgSUpBFsgLY8wxD8Gdw4dL3bDey3r6SpZ9VGk ViS2Z139tGbcxpNZPQgpNi4/BxHwfYT8P3uqYCJSzDZqNBGGOT8tMwze0yvy2Pyi FK+6Qp2Dn0YwZWtz8Mp8wwBferCWVp/04P+CeBdQpCXCX5bj2ZDbK60ySL5De4kB 6M+Pjq0QINpPjeBIFv5DkjYG2HUO9bevo/oQppn8A61W2eHlF5Fx7/BlA7L+ycOn kx9oI3PFa6V1WtVRU2AAEmkMPsNA764GNZjVIuIM3rB4RwKlWSLj1HrYRdFcoohw HQxS/68WzyjpWcEMCsAiF9gEEbl5eJ8= -----END CERTIFICATE-----Generated at Sat May 10 19:39:41 2025 by rpki-client