$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa File: 9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa (raw, json) Hash identifier: ElvyY7WX9wyVyH4p8SrWRq6335Zu04tTna+R7DwjJJU= Subject key identifier: 35:2F:8C:AB:26:F7:2A:78:A3:72:60:95:B7:FC:04:F0:F8:20:53:32 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B14A0013C600A5431E2A3B80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 44477 IP address blocks: 23.230.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:00:13:c6:00:a5:43:1e:2a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=48e7a95f-c912-46a6-9c9c-df35eeb4ab1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:95:54:bc:35:48:0f:5e:dc:31:80:aa:59: 6a:65:c8:b8:9e:b6:1b:b8:f2:ae:77:d3:f6:1e:0e: b5:69:0d:5c:50:fe:f6:40:3e:4d:49:78:98:90:d0: cd:9c:18:d3:9c:39:f0:b4:41:8b:64:b3:75:bc:e8: 58:4f:c5:ab:af:a5:6b:ac:71:d4:50:21:03:fe:cc: ad:33:f2:ef:54:85:33:04:1c:8e:cf:b9:4f:7b:37: 9c:d7:31:9d:d5:3f:f5:2a:80:da:d7:95:dd:3f:8e: fd:fa:ee:d8:93:19:df:9d:31:7a:3c:e5:af:ad:18: 70:1e:dc:08:1c:b2:15:a2:f8:a1:ce:6f:f4:d6:e1: b2:18:f4:98:44:55:22:98:ac:9a:b2:8c:74:d0:20: 99:4d:6a:09:7d:e6:5a:2a:8b:59:95:30:89:f2:7d: 7a:c1:cb:e2:c9:f9:f7:e3:b2:cd:de:78:48:26:35: f9:24:40:d0:c4:d8:37:9b:9b:3c:4a:98:6e:7b:c5: 43:21:77:51:60:f5:4c:53:3f:0e:65:88:09:9b:08: 67:05:1c:bf:d2:24:f4:4f:5f:b2:bd:5e:f2:66:e7: 9a:e2:07:a7:3e:a3:ae:49:ce:55:e3:0a:91:4a:43: d4:b7:ab:c3:7d:9e:44:bc:90:6e:bf:52:44:c0:11: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2F:8C:AB:26:F7:2A:78:A3:72:60:95:B7:FC:04:F0:F8:20:53:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bb:fe:5b:05:c9:24:7d:d6:22:13:c3:d7:70:2b:21:4b:e9: bd:73:69:fd:70:68:d2:01:3c:3f:a7:77:ed:64:44:5e:eb:a6: 48:9a:c0:1f:66:4b:50:a2:12:91:5f:43:19:9a:af:44:d1:8b: 45:09:09:31:84:09:d2:2e:4c:c3:46:d2:8f:29:a7:e3:93:02: b8:9a:3a:e2:5a:78:6a:0e:9c:47:c9:16:4c:41:95:b3:96:68: f3:d1:ff:69:e5:91:34:dc:b7:14:e4:34:32:73:98:5e:36:4b: 4a:ba:3f:a0:2c:7a:2d:dd:4e:c1:d1:ee:c3:89:a1:f6:10:ea: b1:89:86:3a:19:c0:0d:fe:6f:20:5c:1b:bf:7d:ee:84:3c:84: 71:05:60:fa:27:1e:77:bb:24:fb:4a:7a:41:cd:c3:4c:f0:21: a4:b1:86:5b:9f:5f:3b:28:43:07:3f:4b:85:06:11:62:d7:0d: 72:25:73:b0:df:51:89:48:f4:c6:65:be:d1:d2:fd:09:92:ab: ff:66:25:c7:7a:ec:e0:5e:ac:6c:3b:67:82:99:a8:4e:7f:6e: eb:d1:72:c6:8a:5f:f6:a7:1c:bb:a0:5c:12:4c:b1:0a:66:7f: 2e:c6:02:ad:5f:64:13:86:6c:af:6c:c3:af:72:21:97:11:30: 01:18:98:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgATxgClQx4qO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDhlN2E5NWYtYzkxMi00NmE2LTljOWMtZGYzNWVlYjRhYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkOVVLw1SA9e3DGAqllqZci4nrYbuPKud9P2 Hg61aQ1cUP72QD5NSXiYkNDNnBjTnDnwtEGLZLN1vOhYT8Wrr6VrrHHUUCED/syt M/LvVIUzBByOz7lPezec1zGd1T/1KoDa15XdP479+u7YkxnfnTF6POWvrRhwHtwI HLIVovihzm/01uGyGPSYRFUimKyasox00CCZTWoJfeZaKotZlTCJ8n16wcviyfn3 47LN3nhIJjX5JEDQxNg3m5s8Sphue8VDIXdRYPVMUz8OZYgJmwhnBRy/0iT0T1+y vV7yZuea4genPqOuSc5V4wqRSkPUt6vDfZ5EvJBuv1JEwBHtrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUvjKsm9yp4o3Jglbf8BPD4IFMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTY3MGFjMGQtNjE5MS0z ZjVhLWJlZGEtM2EzYzllNmQ2NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+aZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW7/lsFySR91iITw9dwKyFL6b1zaf1waNIBPD+nd+1kRF7rpkiawB9m S1CiEpFfQxmar0TRi0UJCTGECdIuTMNG0o8pp+OTAriaOuJaeGoOnEfJFkxBlbOW aPPR/2nlkTTctxTkNDJzmF42S0q6P6Asei3dTsHR7sOJofYQ6rGJhjoZwA3+byBc G7997oQ8hHEFYPonHne7JPtKekHNw0zwIaSxhlufXzsoQwc/S4UGEWLXDXIlc7Df UYlI9MZlvtHS/QmSq/9mJcd67OBerGw7Z4KZqE5/buvRcsaKX/anHLugXBJMsQpm fy7GAq1fZBOGbK9sw69yIZcRMAEYmPg= -----END CERTIFICATE-----Generated at Sun May 11 12:47:43 2025 by rpki-client