$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa File: a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa (raw, json) Hash identifier: Wf3JCnvkIkYsCtHGdvdk7KE4px1xaGXyZGfGFZDIlnQ= Subject key identifier: F7:38:12:F8:D1:70:39:DF:03:38:C2:0E:65:63:87:54:70:A6:BA:F3 Certificate issuer: /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Certificate serial: 010D0C9F432858498CFF1F7B261D4C3C10BFE400 Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 401473 IP address blocks: 23.128.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1f:7b:26:1d:4c:3c:10:bf:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=f06cd85a-afd3-4765-9660-68e28b86dee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:15:83:b5:fc:32:82:bf:4b:0e:db:4f:43: f7:f9:b9:c0:7b:f6:9b:fe:13:12:c7:de:85:2a:82: 22:16:c2:93:e8:aa:6d:3a:98:af:b4:b2:c1:e7:c2: 8c:63:96:f0:dd:96:aa:48:6f:c3:f5:87:3c:8d:3b: 6f:c8:57:0a:1e:ba:19:46:21:55:d2:ba:7c:ca:66: c2:5f:19:43:f6:92:53:b6:d1:ec:d4:3b:7e:9e:49: b2:3d:21:2d:77:1c:0e:86:a2:a1:fb:0d:cf:79:70: 29:e4:7b:ab:78:0b:c2:bd:1b:7c:08:0b:26:e3:99: 1f:71:16:5c:cf:72:e0:c1:af:56:9b:62:45:84:7c: 1d:33:86:90:4c:e8:e3:3d:af:a3:ae:16:53:38:71: 27:f1:09:eb:86:e8:aa:e7:80:67:b9:b2:b0:de:15: 3a:72:7b:26:3b:48:af:8f:8b:69:ec:0c:54:ef:49: 12:b8:81:de:0b:7b:34:de:57:88:42:39:fa:c7:a2: cf:14:e0:b6:75:f6:73:d0:8e:01:4b:fc:fb:29:49: a8:62:38:ed:49:52:2c:9e:2a:b3:89:3e:9d:4e:18: a5:98:52:51:67:64:f2:0d:18:4d:b6:73:11:a3:92: de:e3:90:08:f9:22:d0:0e:32:ba:48:1d:40:ad:a1: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:12:F8:D1:70:39:DF:03:38:C2:0E:65:63:87:54:70:A6:BA:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl X509v3 Authority Key Identifier: keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer sbgp-ipAddrBlock: critical IPv4: 23.128.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a7:57:83:c2:86:09:ec:54:17:8f:ba:07:d4:7f:a8:69:14: 82:27:87:51:e6:de:ad:7c:f3:05:c6:f8:16:b3:23:31:ad:5f: db:14:b3:01:30:0f:0d:7e:72:b8:0f:da:b6:c6:13:47:c9:b2: 04:66:9e:0d:aa:7b:22:7c:de:c7:a6:14:93:62:3b:5e:82:57: ec:5a:5b:2a:9c:96:f8:75:b4:0c:df:a3:2b:77:54:79:bf:14: 64:27:49:ca:6b:44:45:4f:2e:b6:97:68:a6:2b:c9:67:f1:64: 0d:d8:73:e8:b6:d2:9a:34:94:d6:ce:aa:d4:76:10:a8:f6:c3: 33:01:18:a2:a0:61:c9:9f:d1:56:11:d6:45:4d:a4:ae:53:96: 63:00:cf:10:f4:55:43:e3:42:7f:cc:76:50:42:1f:5a:0c:82: d6:95:47:bb:ce:36:6f:32:f0:54:24:b5:d8:e3:af:7c:e4:2c: 66:18:1d:a9:69:53:0b:ba:2f:4a:8a:25:b5:33:a4:3b:12:de: 43:37:db:f5:d1:ea:dc:be:30:47:4c:9e:9e:78:bf:18:8c:6a: 38:31:f3:61:38:23:5d:1c:d4:d5:2e:43:6c:8d:b9:53:42:53: b9:31:c0:70:37:bd:e4:cc:91:b9:af:bc:c8:59:54:87:ab:9f: 3b:c3:30:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/x97Jh1MPBC/5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0 NjgzMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZjA2Y2Q4NWEtYWZkMy00NzY1LTk2NjAtNjhlMjhiODZkZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUMVg7X8MoK/Sw7bT0P3+bnAe/ab/hMSx96F KoIiFsKT6KptOpivtLLB58KMY5bw3ZaqSG/D9Yc8jTtvyFcKHroZRiFV0rp8ymbC XxlD9pJTttHs1Dt+nkmyPSEtdxwOhqKh+w3PeXAp5HureAvCvRt8CAsm45kfcRZc z3Lgwa9Wm2JFhHwdM4aQTOjjPa+jrhZTOHEn8Qnrhuiq54BnubKw3hU6cnsmO0iv j4tp7AxU70kSuIHeC3s03leIQjn6x6LPFOC2dfZz0I4BS/z7KUmoYjjtSVIsniqz iT6dThilmFJRZ2TyDRhNtnMRo5Le45AI+SLQDjK6SB1AraGsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc4EvjRcDnfAzjCDmVjh1RwprrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFj NDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvYTM1MDhhY2YtNmFjZi0z MGY3LWI4YzAtYThkODFiMGU0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QxYzQwNmMtZmNhZS00ZDgzLTlj MWEtNWM5MzBlODE0NjgzLzNkMWM0MDZjLWZjYWUtNGQ4My05YzFhLTVjOTMwZTgx NDY4My5jcmwwHwYDVR0jBBgwFoAUmuQWvmKOqdLt6p/XSIGytTENoVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01Yzkz MGU4MTQ2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGunV4PChgnsVBePugfUf6hpFIInh1Hm3q188wXG+BazIzGtX9sUswEw Dw1+crgP2rbGE0fJsgRmng2qeyJ83semFJNiO16CV+xaWyqclvh1tAzfoyt3VHm/ FGQnScprREVPLraXaKYryWfxZA3Yc+i20po0lNbOqtR2EKj2wzMBGKKgYcmf0VYR 1kVNpK5TlmMAzxD0VUPjQn/MdlBCH1oMgtaVR7vONm8y8FQktdjjr3zkLGYYHalp Uwu6L0qKJbUzpDsS3kM32/XR6ty+MEdMnp54vxiMajgx82E4I10c1NUuQ2yNuVNC U7kxwHA3veTMkbmvvMhZVIernzvDMJs= -----END CERTIFICATE-----Generated at Wed May 14 12:10:28 2025 by rpki-client