$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f4626523-ea8e-3623-8d9c-78125f21c5fa.roa File: f4626523-ea8e-3623-8d9c-78125f21c5fa.roa (raw, json) Hash identifier: TScfD4k/X8Y2IcZ84Z9YNr+009T14CNZGx8Yn9jjYuc= Subject key identifier: B5:F8:A7:E3:22:5E:89:74:E4:FE:C9:C2:23:8F:50:FB:AA:A4:34:EC Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Certificate serial: 010D0C9F43285849A089CCC70F5B5FC48D1068E0 Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f4626523-ea8e-3623-8d9c-78125f21c5fa.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 198376 IP address blocks: 23.169.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:cc:c7:0f:5b:5f:c4:8d:10:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=dc919d3c-4401-459b-86c2-1aa75606bda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:40:ee:83:6b:65:69:25:33:91:6e:c5:c9: 26:15:db:85:6c:6c:25:84:c5:a6:b3:b2:98:1d:6a: 1d:83:59:54:26:55:90:e5:58:20:b3:11:5c:24:88: b0:8d:5a:13:6b:61:8e:33:f2:1b:f6:62:d5:dd:d8: f5:6a:ce:f8:23:ed:22:d9:5d:e1:24:f3:37:c8:ff: 66:e5:b7:7b:e4:e5:26:6f:19:90:f3:e0:78:1f:dc: d7:b8:d2:2e:82:77:e5:e3:bf:90:87:f5:aa:e2:6f: 63:5e:3d:65:9d:ad:10:5b:57:20:a1:c3:95:57:4b: b6:fd:75:5e:40:19:31:dc:d2:f3:1c:5b:22:48:32: 88:bd:41:18:61:90:00:6d:3e:ec:f9:64:41:7d:2c: 68:cd:0e:28:85:3f:7c:25:f4:e1:6e:54:45:27:a9: 41:e2:e6:97:55:cf:16:e7:91:a3:d8:84:fc:e7:84: ad:ff:55:c9:b3:5d:99:7a:5b:3b:ec:55:03:ba:65: e3:ba:1c:44:ec:02:ee:1b:a5:aa:46:ea:f2:db:60: 3f:d0:89:a6:04:67:9e:53:06:d4:8e:14:af:77:13: 3f:cd:4c:a6:db:ea:a8:65:70:ee:35:18:a7:b8:bd: 84:d1:57:13:89:4a:e0:69:05:b2:c1:e9:48:3a:7b: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F8:A7:E3:22:5E:89:74:E4:FE:C9:C2:23:8F:50:FB:AA:A4:34:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f4626523-ea8e-3623-8d9c-78125f21c5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl X509v3 Authority Key Identifier: keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ba:b7:22:0c:a6:fa:cd:0f:72:98:45:c0:3d:44:60:b3:8d: 12:cc:18:90:36:65:25:bd:63:aa:bf:f8:37:15:76:7d:ae:8c: 81:d5:e9:1b:11:94:0a:55:ff:ff:17:ea:07:01:b8:88:98:49: b9:c7:d4:e2:11:2a:80:b4:6b:0c:43:53:96:e0:39:6d:c5:a6: fa:fe:bb:80:e4:e6:97:5e:93:75:6f:d8:bd:99:5c:bc:b6:c1: f7:83:cf:9f:62:b4:29:83:79:e9:64:83:67:b2:64:8c:e1:6b: f1:30:11:90:e8:96:77:c8:f2:fb:75:ff:95:7b:18:f8:b6:20: 73:4f:16:b2:6b:15:94:91:90:80:ea:a8:24:a5:16:5d:b5:76: 28:2a:73:4e:7b:c9:01:d8:a6:a9:0e:db:3c:ed:f7:2b:d3:18: c0:e8:4a:b5:21:46:4a:03:dd:18:4b:0f:46:18:21:a3:7f:d3: 5c:9b:df:40:ed:11:b4:0d:3f:82:df:b4:37:01:ed:18:3b:99: 84:b0:72:a2:aa:4b:fa:e3:d3:36:59:e9:46:59:66:bd:75:00: c8:e1:85:fd:f0:d6:f9:f2:0d:08:1c:0c:e3:d9:be:e8:74:62: 51:72:5e:b5:2c:72:7b:5c:f7:eb:5b:0b:a8:e0:78:a9:ef:c3: 95:57:b7:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgiczHD1tfxI0QaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi MWEyMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZGM5MTlkM2MtNDQwMS00NTliLTg2YzItMWFhNzU2MDZiZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlRA7oNrZWklM5FuxckmFduFbGwlhMWms7KY HWodg1lUJlWQ5VggsxFcJIiwjVoTa2GOM/Ib9mLV3dj1as74I+0i2V3hJPM3yP9m 5bd75OUmbxmQ8+B4H9zXuNIugnfl47+Qh/Wq4m9jXj1lna0QW1cgocOVV0u2/XVe QBkx3NLzHFsiSDKIvUEYYZAAbT7s+WRBfSxozQ4ohT98JfThblRFJ6lB4uaXVc8W 55Gj2IT854St/1XJs12Zels77FUDumXjuhxE7ALuG6WqRury22A/0ImmBGeeUwbU jhSvdxM/zUym2+qoZXDuNRinuL2E0VcTiUrgaQWywelIOnsRawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX4p+MiXol05P7JwiOPUPuqpDTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvZjQ2MjY1MjMtZWE4ZS0z NjIzLThkOWMtNzgxMjVmMjFjNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk MTBiYmIxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa6tyIMpvrND3KYRcA9RGCzjRLMGJA2ZSW9Y6q/+DcVdn2ujIHV6RsR lApV//8X6gcBuIiYSbnH1OIRKoC0awxDU5bgOW3Fpvr+u4Dk5pdek3Vv2L2ZXLy2 wfeDz59itCmDeelkg2eyZIzha/EwEZDolnfI8vt1/5V7GPi2IHNPFrJrFZSRkIDq qCSlFl21digqc057yQHYpqkO2zzt9yvTGMDoSrUhRkoD3RhLD0YYIaN/01yb30Dt EbQNP4LftDcB7Rg7mYSwcqKqS/rj0zZZ6UZZZr11AMjhhf3w1vnyDQgcDOPZvuh0 YlFyXrUscntc9+tbC6jgeKnvw5VXt3E= -----END CERTIFICATE-----Generated at Sat May 10 13:51:29 2025 by rpki-client