$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa File: ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa (raw, json) Hash identifier: EqHUYzHM6RW1dM5oEJonPFk+AA41CE24qche5VAvxiY= Subject key identifier: A5:76:4F:4A:A9:5D:A9:B9:58:CE:61:AA:8C:FB:D4:85:3C:1F:11:D1 Certificate issuer: /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Certificate serial: 010D0C9F4328584996C4B11BB1017A90B057E140 Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 397700 IP address blocks: 23.188.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b1:1b:b1:01:7a:90:b0:57:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=d146314f-28ea-4bd2-b455-77a4cca660c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:2b:68:4a:1e:8e:45:ae:f0:64:47:68:ea: 01:11:fb:2d:60:a5:27:36:e4:ea:25:05:41:8d:99: f4:68:75:25:a0:5f:28:d6:a1:ad:77:5f:e9:b0:20: 89:85:da:18:ed:8b:35:14:0f:2e:11:e7:77:4b:4c: c8:a3:51:39:96:34:64:50:59:0b:51:e1:d8:d4:23: 59:62:88:e6:ce:da:2d:62:71:05:d6:91:cd:2e:b2: d0:23:78:cc:cd:28:74:43:f0:cc:d2:82:1e:4b:b6: a4:e3:6a:ed:25:27:78:0a:e7:be:63:81:ff:48:e5: cb:48:05:e8:30:39:7b:b5:ef:db:4c:a5:1b:0c:7f: 9d:40:3f:da:78:3d:c0:8d:dc:d1:c3:cb:21:a4:65: 24:5a:0e:82:9c:b9:41:68:8a:40:8d:f2:0a:7a:74: 4e:14:aa:7d:6f:eb:5a:35:dc:4a:4d:95:ed:5d:01: 5a:ea:5d:a4:67:ea:87:f3:49:48:f9:51:e6:ba:5d: 61:95:da:03:16:23:1d:06:ec:86:a9:40:70:3f:a1: a6:76:e4:cf:8a:0f:59:55:27:c1:45:25:35:75:15: 0e:ad:98:12:72:26:92:d2:97:70:2d:c9:81:af:c6: f2:90:69:49:52:04:a2:38:59:86:9d:9a:7e:91:4f: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:76:4F:4A:A9:5D:A9:B9:58:CE:61:AA:8C:FB:D4:85:3C:1F:11:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl X509v3 Authority Key Identifier: keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer sbgp-ipAddrBlock: critical IPv4: 23.188.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:71:e8:45:50:a7:61:a9:44:dd:74:67:de:27:ce:4d:1e:b6: 29:3a:44:1a:76:b1:6e:7b:e7:01:aa:cf:28:f9:44:d7:c7:e1: 23:8e:7b:55:80:8d:a6:5f:30:ac:79:24:ee:0f:80:b5:3e:c7: c2:52:af:1e:76:f9:a5:89:e9:fb:54:e8:d9:00:3c:ce:c7:4b: fc:70:a2:5e:c0:cb:25:9b:11:c1:d9:a7:53:19:1a:46:f3:72: 1c:89:64:e5:f7:e4:f1:f5:d0:33:ee:61:26:3c:36:c5:a0:77: a7:9c:33:77:f2:df:f3:45:23:84:e3:dd:51:76:a9:c4:77:1d: aa:cf:ad:c5:77:4e:be:b0:1b:fd:c3:dc:d8:97:b0:87:94:b4: de:3c:eb:ac:43:cb:70:c8:9e:21:58:54:9e:6f:40:03:2c:30: 4e:b6:45:3c:bc:0f:94:35:d8:0a:49:be:ac:18:dc:4e:4c:b5: 88:60:1a:c2:9d:25:3e:5b:3b:84:35:2b:52:63:34:1f:05:fc: b0:0e:13:28:2e:4c:64:63:1b:35:ec:57:a5:c4:d1:8e:3f:06: 7b:46:6d:c3:02:95:1e:34:9b:c4:ea:74:4b:e6:93:6a:c5:54: ee:94:77:a4:bf:f5:7a:bd:66:13:88:48:79:44:15:58:b9:b8: 83:8c:6f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLEbsQF6kLBX4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJi ZjJlMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZDE0NjMxNGYtMjhlYS00YmQyLWI0NTUtNzdhNGNjYTY2MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyIraEoejkWu8GRHaOoBEfstYKUnNuTqJQVB jZn0aHUloF8o1qGtd1/psCCJhdoY7Ys1FA8uEed3S0zIo1E5ljRkUFkLUeHY1CNZ YojmztotYnEF1pHNLrLQI3jMzSh0Q/DM0oIeS7ak42rtJSd4Cue+Y4H/SOXLSAXo MDl7te/bTKUbDH+dQD/aeD3AjdzRw8shpGUkWg6CnLlBaIpAjfIKenROFKp9b+ta NdxKTZXtXQFa6l2kZ+qH80lI+VHmul1hldoDFiMdBuyGqUBwP6GmduTPig9ZVSfB RSU1dRUOrZgSciaS0pdwLcmBr8bykGlJUgSiOFmGnZp+kU/YkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV2T0qpXam5WM5hqoz71IU8HxHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjVm NzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvZmZlMDRiNzYtNjY2My0z YzQwLWJmMWMtNjFmYzc0OTQ5ZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDI1ZjczYmItNjNmYy00YWVjLThm NzgtMTRhNThmOTJiZjJlLzQyNWY3M2JiLTYzZmMtNGFlYy04Zjc4LTE0YTU4Zjky YmYyZS5jcmwwHwYDVR0jBBgwFoAUzyYIjF78+kjGRYjG5g3WKfeTW6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1 OGY5MmJmMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJx6EVQp2GpRN10Z94nzk0etik6RBp2sW575wGqzyj5RNfH4SOOe1WA jaZfMKx5JO4PgLU+x8JSrx52+aWJ6ftU6NkAPM7HS/xwol7AyyWbEcHZp1MZGkbz chyJZOX35PH10DPuYSY8NsWgd6ecM3fy3/NFI4Tj3VF2qcR3HarPrcV3Tr6wG/3D 3NiXsIeUtN4866xDy3DIniFYVJ5vQAMsME62RTy8D5Q12ApJvqwY3E5MtYhgGsKd JT5bO4Q1K1JjNB8F/LAOEyguTGRjGzXsV6XE0Y4/BntGbcMClR40m8TqdEvmk2rF VO6Ud6S/9Xq9ZhOISHlEFVi5uIOMb6g= -----END CERTIFICATE-----Generated at Tue May 13 13:41:41 2025 by rpki-client