$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa File: 371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa (raw, json) Hash identifier: pC1j+P3Xmffg26ulF5wXZv3i1sUqAB5sT+jIIwMU5r8= Subject key identifier: 8A:25:DF:8F:5B:89:9A:F2:85:20:A1:EA:32:22:6A:D8:E1:CC:51:A9 Certificate issuer: /CN=e39e30b0-0750-4b85-a454-b97ac36b3e14 Certificate serial: 010D0C9F432858498A3464CD6F5D02A354812700 Authority key identifier: 31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 401443 IP address blocks: 23.128.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:64:cd:6f:5d:02:a3:54:81:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39e30b0-0750-4b85-a454-b97ac36b3e14 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=934bc35d-c63c-437a-8c63-bb7a9a4dbd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:eb:af:1d:31:67:b9:6d:e7:8a:16:b8:79: bc:7a:02:99:ae:61:f8:fc:29:b9:18:db:5a:84:4b: f1:b6:d6:6e:97:19:80:09:5a:d8:30:3d:89:ce:82: 2e:2b:06:63:37:01:58:75:c2:4c:37:5e:69:c8:7a: ba:cc:a7:f3:e3:21:61:55:64:10:22:6d:47:df:3b: 3e:c8:4c:82:c7:14:f1:b2:8e:90:61:87:2d:e3:c2: 33:db:0b:12:eb:66:0a:7d:3c:d3:a8:37:1f:aa:03: 81:d8:f2:f7:a8:ca:90:fb:80:72:2b:60:9c:e4:76: d2:b6:87:7f:14:54:b5:93:c2:f0:89:91:6b:03:02: d5:78:f0:eb:39:19:23:27:fd:d8:02:af:60:29:b2: ce:d0:ee:a0:dd:8e:64:26:73:ac:9c:dc:7d:0e:a5: 99:14:f2:b0:87:09:de:dd:bf:ea:a4:34:5a:9f:03: 37:07:80:dc:7d:99:4f:76:af:66:63:43:21:c0:ee: c9:cf:3d:5a:5f:a8:78:4f:a7:18:8f:80:55:70:6b: 84:8e:b5:c2:b9:55:83:7b:0a:d9:ab:12:0c:9d:95: cb:53:8f:67:95:46:b8:e4:84:b7:5f:87:25:12:51: d9:87:f6:17:f1:62:d2:ff:2e:b8:81:06:2c:70:af: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:DF:8F:5B:89:9A:F2:85:20:A1:EA:32:22:6A:D8:E1:CC:51:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl X509v3 Authority Key Identifier: keyid:31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer sbgp-ipAddrBlock: critical IPv4: 23.128.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:87:88:30:d2:95:7c:5e:4c:3c:8a:7d:b8:72:60:21:cd:0b: 1d:9c:d1:1b:26:3e:84:7c:64:40:8f:8e:50:ba:74:d5:c7:d8: bf:3a:c5:d1:12:c4:bc:12:a0:88:ae:09:0a:d2:50:69:c7:5b: ec:7b:3a:78:5b:e2:6e:b3:17:80:e6:26:b1:e9:0f:f4:69:04: 1c:51:61:75:61:31:09:35:1e:7c:23:24:76:b1:f8:76:ae:ec: 73:98:36:7b:d3:0a:56:97:03:43:4d:15:a8:8a:15:63:ca:82: 8d:7a:50:80:99:f7:5b:fe:bc:13:b1:ed:c4:fe:05:68:dd:32: a6:bc:43:b9:82:7d:8a:fd:b0:f7:ec:a0:9d:df:97:ce:20:86: 5f:9d:78:92:06:a3:18:67:8e:0e:72:ac:1e:bc:56:89:fc:75: 87:47:3a:ae:c9:88:33:0c:b9:30:47:87:97:53:c1:d6:c4:ff: fb:7d:ae:d9:d3:7b:87:7a:c7:3e:7e:5a:0b:15:50:6f:22:8a: ab:ce:90:bb:20:cc:26:d0:98:d1:2c:04:74:55:f4:45:7d:36: 8e:34:08:16:67:2e:16:70:e0:ca:ff:9f:47:15:a7:d6:9c:8d: 56:a7:05:6d:1e:5e:85:af:4c:26:da:4c:e9:00:d7:a8:fc:31: fd:6f:34:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGTNb10Co1SBJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5ZTMwYjAtMDc1MC00Yjg1LWE0NTQtYjk3YWMzNmIz ZTE0MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk OTM0YmMzNWQtYzYzYy00MzdhLThjNjMtYmI3YTlhNGRiZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/zrrx0xZ7lt54oWuHm8egKZrmH4/Cm5GNta hEvxttZulxmACVrYMD2JzoIuKwZjNwFYdcJMN15pyHq6zKfz4yFhVWQQIm1H3zs+ yEyCxxTxso6QYYct48Iz2wsS62YKfTzTqDcfqgOB2PL3qMqQ+4ByK2Cc5HbStod/ FFS1k8LwiZFrAwLVePDrORkjJ/3YAq9gKbLO0O6g3Y5kJnOsnNx9DqWZFPKwhwne 3b/qpDRanwM3B4DcfZlPdq9mY0MhwO7Jzz1aX6h4T6cYj4BVcGuEjrXCuVWDewrZ qxIMnZXLU49nlUa45IS3X4clElHZh/YX8WLS/y64gQYscK/2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIol349biZryhSCh6jIiatjhzFGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMzll MzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdhYzM2YjNlMTQvMzcxZGZjMWUtYzE3Zi0z YjA4LTk2NDAtMmM0Y2NlNTlkNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTM5ZTMwYjAtMDc1MC00Yjg1LWE0 NTQtYjk3YWMzNmIzZTE0L2UzOWUzMGIwLTA3NTAtNGI4NS1hNDU0LWI5N2FjMzZi M2UxNC5jcmwwHwYDVR0jBBgwFoAUMVx0VP28K7ST+U0O/siwXvZiUVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMzllMzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdh YzM2YjNlMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOHiDDSlXxeTDyKfbhyYCHNCx2c0RsmPoR8ZECPjlC6dNXH2L86xdES xLwSoIiuCQrSUGnHW+x7Onhb4m6zF4DmJrHpD/RpBBxRYXVhMQk1HnwjJHax+Hau 7HOYNnvTClaXA0NNFaiKFWPKgo16UICZ91v+vBOx7cT+BWjdMqa8Q7mCfYr9sPfs oJ3fl84ghl+deJIGoxhnjg5yrB68Von8dYdHOq7JiDMMuTBHh5dTwdbE//t9rtnT e4d6xz5+WgsVUG8iiqvOkLsgzCbQmNEsBHRV9EV9No40CBZnLhZw4Mr/n0cVp9ac jVanBW0eXoWvTCbaTOkA16j8Mf1vNNk= -----END CERTIFICATE-----Generated at Wed May 14 02:27:58 2025 by rpki-client