$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa File: 7017deb8-bb92-3642-93d0-67e0704f3ba3.roa (raw, json) Hash identifier: /T+1pq3YcGB/rL4i6igIko7t9/c3ojaeH2VhU2ZbMRw= Subject key identifier: 34:D1:18:08:66:9D:C2:0B:7E:B5:0A:BD:7C:E2:33:F4:AC:86:57:DD Certificate issuer: /CN=ef944392-b528-43c2-9abf-e4543229ae2d Certificate serial: 010D0C9F43285849C79F674B5FEFD68FC38FEB80 Authority key identifier: D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 23.188.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:67:4b:5f:ef:d6:8f:c3:8f:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef944392-b528-43c2-9abf-e4543229ae2d Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=338ca7f9-ad18-4e18-8733-2e8ab982d375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:f6:d0:fa:05:17:27:31:75:08:e5:88:44: 52:39:21:e8:56:bf:91:6a:ee:d0:35:31:85:cb:05: a0:54:5a:b7:c6:50:46:82:25:55:8e:33:8d:b9:e1: e3:8b:7a:74:1d:4d:73:e4:ab:57:ca:17:c7:ce:17: 44:58:43:ce:61:44:18:fc:83:0a:93:5c:58:d3:a5: e2:0b:b1:01:0a:b4:60:83:01:1d:5f:89:f5:b2:ed: ab:b9:b0:4f:74:84:42:b2:ba:f6:aa:3e:98:51:c5: 10:d8:7c:43:41:16:c5:09:5b:07:ab:45:61:26:7b: a6:34:47:75:13:70:03:83:2f:bb:2f:79:46:88:0c: 91:be:03:db:7b:66:ef:5b:bc:c1:56:21:01:be:46: ab:45:4e:ae:82:6e:a4:af:7d:3c:7c:c2:41:0b:46: 50:66:33:87:d3:36:ce:34:92:6b:52:e4:b5:eb:d9: 75:e7:4a:a6:f9:de:af:e3:1a:3c:87:08:f8:d1:83: 3b:19:5c:69:34:d3:16:42:e6:63:25:66:3e:e9:51: 9f:04:e7:43:b6:66:6c:e5:ce:cd:ac:9a:bb:de:cb: a6:9b:ad:ef:2d:51:a6:93:53:10:bc:91:28:83:44: 19:25:69:6c:cc:75:16:f6:86:5e:42:05:d1:4e:ac: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:18:08:66:9D:C2:0B:7E:B5:0A:BD:7C:E2:33:F4:AC:86:57:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl X509v3 Authority Key Identifier: keyid:D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer sbgp-ipAddrBlock: critical IPv4: 23.188.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ea:0e:d3:5b:c1:62:80:bc:9b:78:bf:dc:17:bf:64:d7:91: 45:0a:af:ab:de:02:15:05:61:64:7a:c6:bd:19:29:48:8e:2d: 4a:81:32:f4:d8:e9:89:07:1a:d3:a6:d8:04:80:c1:f3:c3:dd: d5:52:1d:d8:7f:7e:91:5b:74:7f:61:fd:71:98:b1:63:b8:43: 20:0a:ab:54:71:86:bf:87:25:c2:3a:6f:59:20:48:26:30:e3: 83:52:6a:36:7d:c6:22:94:77:69:90:17:62:e0:10:6e:82:fe: 69:7e:48:9a:0e:d8:9b:4c:b4:e5:23:35:16:d4:17:76:bb:58: 4b:33:cd:a3:cc:70:75:65:4b:e6:ae:56:67:40:f0:da:b4:d7: 13:3e:56:43:b4:0f:f6:d6:b2:3e:c8:7e:9d:58:f3:48:1b:cc: 88:47:95:84:f2:ca:51:e6:86:de:bf:a8:93:39:03:37:75:51: b2:bb:a6:f8:67:0a:95:61:31:87:f5:e5:50:4b:03:e0:c3:2c: 59:a2:00:aa:50:c0:6a:d5:e0:33:b0:dd:38:c9:d1:09:40:3e: 9a:9a:f0:df:5b:4d:a6:a6:db:0b:95:05:43:0b:eb:36:a0:f9: d7:4e:0c:53:d7:79:8d:bb:0d:9b:60:f7:e4:97:57:f2:81:fe: 2c:7d:fb:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2dLX+/Wj8OP64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY5NDQzOTItYjUyOC00M2MyLTlhYmYtZTQ1NDMyMjlh ZTJkMB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk MzM4Y2E3ZjktYWQxOC00ZTE4LTg3MzMtMmU4YWI5ODJkMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW320PoFFycxdQjliERSOSHoVr+Rau7QNTGF ywWgVFq3xlBGgiVVjjONueHji3p0HU1z5KtXyhfHzhdEWEPOYUQY/IMKk1xY06Xi C7EBCrRggwEdX4n1su2rubBPdIRCsrr2qj6YUcUQ2HxDQRbFCVsHq0VhJnumNEd1 E3ADgy+7L3lGiAyRvgPbe2bvW7zBViEBvkarRU6ugm6kr308fMJBC0ZQZjOH0zbO NJJrUuS169l150qm+d6v4xo8hwj40YM7GVxpNNMWQuZjJWY+6VGfBOdDtmZs5c7N rJq73summ63vLVGmk1MQvJEog0QZJWlszHUW9oZeQgXRTqwaewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTRGAhmncILfrUKvXziM/SshlfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0 NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0MzIyOWFlMmQvNzAxN2RlYjgtYmI5Mi0z NjQyLTkzZDAtNjdlMDcwNGYzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWY5NDQzOTItYjUyOC00M2MyLTlh YmYtZTQ1NDMyMjlhZTJkL2VmOTQ0MzkyLWI1MjgtNDNjMi05YWJmLWU0NTQzMjI5 YWUyZC5jcmwwHwYDVR0jBBgwFoAU1ELYop+RoTkRo9YC5PTkP0bN6fQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0 MzIyOWFlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrqDtNbwWKAvJt4v9wXv2TXkUUKr6veAhUFYWR6xr0ZKUiOLUqBMvTY 6YkHGtOm2ASAwfPD3dVSHdh/fpFbdH9h/XGYsWO4QyAKq1Rxhr+HJcI6b1kgSCYw 44NSajZ9xiKUd2mQF2LgEG6C/ml+SJoO2JtMtOUjNRbUF3a7WEszzaPMcHVlS+au VmdA8Nq01xM+VkO0D/bWsj7Ifp1Y80gbzIhHlYTyylHmht6/qJM5Azd1UbK7pvhn CpVhMYf15VBLA+DDLFmiAKpQwGrV4DOw3TjJ0QlAPpqa8N9bTaam2wuVBUML6zag +ddODFPXeY27DZtg9+SXV/KB/ix9+3c= -----END CERTIFICATE-----Generated at Sun May 11 15:17:25 2025 by rpki-client