$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa File: 340b93af-d882-36e8-acb4-1af84b9fcca3.roa (raw, json) Hash identifier: wLWtJ8Trd934j37aMXoXZwC96tAlca6wqT3cKxn9pv4= Subject key identifier: 92:33:04:CB:E6:9C:8C:B5:A5:47:16:B8:6B:CF:11:82:BB:02:9A:89 Certificate issuer: /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Certificate serial: 010D0C9F432858496FAF13ABDA5F37915F6F91C0 Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 395886 IP address blocks: 23.185.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:13:ab:da:5f:37:91:5f:6f:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=a4c4cc25-96f6-4dd3-8943-bdd4fc090fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:64:8e:85:a0:f6:40:71:4e:5f:57:55:dd:ee: 7b:82:03:f8:b6:3e:21:3d:66:06:a1:3c:e9:7b:45: e4:0c:1d:bf:0b:62:ab:e6:d3:64:fb:6c:29:1b:c7: c7:c8:fd:fc:22:1a:52:95:b5:49:0a:ac:42:55:d4: 46:61:57:bf:d4:3a:84:8d:15:f4:88:b6:70:69:06: 5e:94:08:d1:6d:8c:00:94:5f:ba:ca:47:de:30:61: 68:48:bf:cd:af:69:ba:6d:79:45:e8:be:9d:c7:8d: f6:84:73:61:ac:47:04:f0:0e:4c:f2:f7:83:e7:b2: a7:50:a4:8d:e2:5b:ea:e3:a1:31:5e:e8:da:f0:8c: 70:aa:95:28:9f:1a:de:fa:98:4e:80:08:ce:b2:bb: 59:21:e2:c4:19:a0:d5:58:54:2e:ce:3b:f3:2f:5d: b4:bc:d9:ec:91:b2:d0:9c:d5:b7:19:70:18:e8:47: 29:dc:2e:05:0f:d8:a5:f5:4a:5a:51:a7:ba:b3:c2: d2:5a:27:37:bf:8e:0b:a5:79:5b:54:83:ce:ab:8d: 2e:99:f0:68:2d:94:e5:ff:6c:75:25:48:17:4c:65: df:a4:e0:06:bf:a3:e0:93:9f:a9:f8:64:73:4e:d8: 20:33:47:6c:ae:93:b4:21:19:cc:69:e0:70:f2:4b: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:33:04:CB:E6:9C:8C:B5:A5:47:16:B8:6B:CF:11:82:BB:02:9A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl X509v3 Authority Key Identifier: keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer sbgp-ipAddrBlock: critical IPv4: 23.185.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:b5:46:41:18:67:e2:88:f8:b0:19:19:54:4a:7a:31:6d:1a: 0a:fc:7b:e0:27:bb:12:8f:24:d0:0a:8b:4a:7e:e9:0a:17:ce: 14:9c:df:10:e2:ea:c8:a4:69:46:a0:91:98:3d:db:4c:86:37: d3:d2:2e:b7:ca:84:a9:fb:2d:90:87:e0:ef:d5:73:20:a2:59: e3:10:a7:7f:0b:da:4a:ae:11:4d:96:35:ad:07:1b:d1:1a:be: c3:e5:55:2b:94:9c:8d:5a:3d:8d:4b:1d:30:30:62:34:8a:eb: e4:1a:6a:87:51:97:84:65:21:6a:1e:0a:7e:00:db:5e:91:a2: f3:7e:76:88:98:d0:3a:7a:4f:56:49:5a:69:d1:d4:79:c0:99: 0f:81:63:09:e4:5e:f9:c2:6f:1c:27:22:62:8f:a7:63:f2:a6: 4e:ef:d5:82:d4:50:a8:1a:ac:81:9f:70:2e:79:87:53:0d:d9: 5f:d7:51:82:12:0a:0d:ea:fa:63:40:ad:b7:16:31:7e:3d:57: 74:f7:e6:76:fd:65:e5:94:bf:f9:0f:12:aa:fc:ca:80:e2:62: 47:57:f5:0f:55:28:d3:c9:e2:2d:f2:86:26:5a:f7:a9:7a:fe: 32:35:c2:4c:23:03:ac:10:d8:c3:59:e3:f2:54:3f:12:de:27: 89:eb:7a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxOr2l83kV9vkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkxZDlhZTctNGZhZC00YTQ5LWE5YjItOWNmMWU0YzE5 MTY5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk YTRjNGNjMjUtOTZmNi00ZGQzLTg5NDMtYmRkNGZjMDkwZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGSOhaD2QHFOX1dV3e57ggP4tj4hPWYGoTzp e0XkDB2/C2Kr5tNk+2wpG8fHyP38IhpSlbVJCqxCVdRGYVe/1DqEjRX0iLZwaQZe lAjRbYwAlF+6ykfeMGFoSL/Nr2m6bXlF6L6dx432hHNhrEcE8A5M8veD57KnUKSN 4lvq46ExXuja8IxwqpUonxre+phOgAjOsrtZIeLEGaDVWFQuzjvzL120vNnskbLQ nNW3GXAY6Ecp3C4FD9il9UpaUae6s8LSWic3v44LpXlbVIPOq40umfBoLZTl/2x1 JUgXTGXfpOAGv6Pgk5+p+GRzTtggM0dsrpO0IRnMaeBw8ktRLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIzBMvmnIy1pUcWuGvPEYK7ApqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OTFk OWFlNy00ZmFkLTRhNDktYTliMi05Y2YxZTRjMTkxNjkvMzQwYjkzYWYtZDg4Mi0z NmU4LWFjYjQtMWFmODRiOWZjY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDkxZDlhZTctNGZhZC00YTQ5LWE5 YjItOWNmMWU0YzE5MTY5LzQ5MWQ5YWU3LTRmYWQtNGE0OS1hOWIyLTljZjFlNGMx OTE2OS5jcmwwHwYDVR0jBBgwFoAU2Qx290Iwvei74XRBifL+f+cYKMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OTFkOWFlNy00ZmFkLTRhNDktYTliMi05Y2Yx ZTRjMTkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMS1RkEYZ+KI+LAZGVRKejFtGgr8e+AnuxKPJNAKi0p+6QoXzhSc3xDi 6sikaUagkZg920yGN9PSLrfKhKn7LZCH4O/VcyCiWeMQp38L2kquEU2WNa0HG9Ea vsPlVSuUnI1aPY1LHTAwYjSK6+QaaodRl4RlIWoeCn4A216RovN+doiY0Dp6T1ZJ WmnR1HnAmQ+BYwnkXvnCbxwnImKPp2Pypk7v1YLUUKgarIGfcC55h1MN2V/XUYIS Cg3q+mNArbcWMX49V3T35nb9ZeWUv/kPEqr8yoDiYkdX9Q9VKNPJ4i3yhiZa96l6 /jI1wkwjA6wQ2MNZ4/JUPxLeJ4nreuU= -----END CERTIFICATE-----Generated at Sun May 11 01:42:12 2025 by rpki-client