$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa File: 6af0c050-7612-319a-ad24-aec5eb373930.roa (raw, json) Hash identifier: +u3JB4KZ8RhEht6/nXm1X9X64ho7D/AolljyrKMSPzQ= Subject key identifier: 36:98:7E:38:61:95:4B:1E:22:70:93:21:BC:89:8A:36:5E:0C:DD:DD Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584937BCF8FA0E1BAAF3514DDCC0 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa Signing time: Mon 17 Mar 2025 12:04:02 +0000 ROA not before: Mon 17 Mar 2025 12:04:02 +0000 ROA not after: Sun 15 Jun 2025 12:04:02 +0000 asID: 54696 IP address blocks: 23.148.154.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:bc:f8:fa:0e:1b:aa:f3:51:4d:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Mar 17 12:04:02 2025 GMT Not After : Jun 15 12:04:02 2025 GMT Subject: CN=6a1cb38d-5f41-41ac-b803-19f5523a0771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:70:62:f4:3f:b3:9b:5e:26:f9:59:69:76: 30:90:e0:9c:72:e6:5e:75:cf:5a:54:db:9e:75:24: cb:5b:47:fe:21:79:e9:98:ef:11:7b:b8:56:b1:b4: d5:d9:d4:c2:04:d9:28:de:89:23:42:1d:5b:f5:24: 58:df:0f:33:c5:4a:33:54:83:bf:e0:cd:61:66:bd: e8:16:d4:36:a7:ce:7d:bc:a2:77:5c:b7:4d:5a:89: d3:9f:76:f5:52:68:d1:e2:46:c0:fb:c1:f4:eb:a9: e5:48:1a:20:3d:40:dd:2c:c7:b6:d4:20:15:bc:f0: 8c:77:a2:1f:cf:15:67:a0:77:2f:ad:69:4f:62:a7: 3e:a0:4a:8b:9d:2f:a2:bb:10:51:23:39:b9:58:91: 11:ac:f6:28:d0:eb:1f:8f:9e:b0:bb:28:50:b8:e6: 06:57:6c:ec:a1:61:85:df:6b:9b:5d:5c:d3:1c:00: 8a:bf:bf:95:67:f0:4b:88:74:bb:0d:ac:e9:38:60: 23:e3:dc:7f:a6:56:bb:0d:1c:31:d2:d2:06:e3:cf: c6:35:1b:14:69:b1:c9:9a:be:9d:6b:47:87:cf:e3: 5d:6e:ee:66:3b:56:5d:6b:38:7e:cf:20:f5:a0:ac: 47:6c:4c:30:e2:39:b3:4c:3a:3a:f7:4a:88:e9:2f: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:98:7E:38:61:95:4B:1E:22:70:93:21:BC:89:8A:36:5E:0C:DD:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:64:c9:5d:c2:8f:4b:29:02:33:62:81:2b:4b:69:67:75:08: 5b:c1:1c:71:ba:98:a4:81:68:72:86:1c:c2:f6:58:a5:28:98: fc:c3:07:7f:79:38:61:d7:cf:d6:34:e9:61:8e:02:ff:4f:3c: 6b:c1:e1:b3:c8:39:eb:80:1a:ad:a7:37:6f:35:a6:01:95:0e: 5a:62:61:cf:0d:3f:ff:3a:3c:4a:81:2b:93:1c:ca:b0:cb:01: 87:7d:3b:4b:e7:53:49:6e:90:04:96:1c:df:c7:87:5c:bf:cd: c6:2c:36:95:c9:0a:7d:6d:5a:5c:8d:aa:2d:5c:d8:a2:2a:4b: ed:03:01:6d:66:ac:21:66:2e:05:c4:8c:f7:0c:0d:33:6e:f1: 2a:61:f1:56:3f:59:3d:2c:47:d9:f5:4a:2c:e1:47:a5:a4:cc: 45:5b:7d:3c:af:07:d5:7d:72:41:f0:e2:66:00:21:1b:da:85: f7:6a:52:8b:1b:3e:7d:f5:46:dc:f0:4f:0f:9f:46:84:84:8b: 29:a1:cd:d6:ae:05:b9:f8:39:c2:8b:e0:d3:67:b4:82:f9:3f: bd:bc:91:83:5e:41:5b:75:c1:92:1b:68:47:ef:e6:57:66:20: f1:6f:c6:ad:9d:0d:3c:04:1b:10:78:85:ed:de:7e:a7:8e:03: 38:06:99:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk3vPj6Dhuq81FN3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDMxNzEyMDQwMloXDTI1MDYxNTEyMDQwMlowLzEtMCsGA1UEAxMk NmExY2IzOGQtNWY0MS00MWFjLWI4MDMtMTlmNTUyM2EwNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbxwYvQ/s5teJvlZaXYwkOCccuZedc9aVNue dSTLW0f+IXnpmO8Re7hWsbTV2dTCBNko3okjQh1b9SRY3w8zxUozVIO/4M1hZr3o FtQ2p859vKJ3XLdNWonTn3b1UmjR4kbA+8H066nlSBogPUDdLMe21CAVvPCMd6If zxVnoHcvrWlPYqc+oEqLnS+iuxBRIzm5WJERrPYo0Osfj56wuyhQuOYGV2zsoWGF 32ubXVzTHACKv7+VZ/BLiHS7DazpOGAj49x/pla7DRwx0tIG48/GNRsUabHJmr6d a0eHz+Ndbu5mO1Zdazh+zyD1oKxHbEww4jmzTDo690qI6S9vIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaYfjhhlUseInCTIbyJijZeDN3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvNmFmMGMwNTAtNzYxMi0z MTlhLWFkMjQtYWVjNWViMzczOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1kyV3Cj0spAjNigStLaWd1CFvBHHG6mKSBaHKGHML2WKUomPzDB395 OGHXz9Y06WGOAv9PPGvB4bPIOeuAGq2nN281pgGVDlpiYc8NP/86PEqBK5McyrDL AYd9O0vnU0lukASWHN/Hh1y/zcYsNpXJCn1tWlyNqi1c2KIqS+0DAW1mrCFmLgXE jPcMDTNu8Sph8VY/WT0sR9n1SizhR6WkzEVbfTyvB9V9ckHw4mYAIRvahfdqUosb Pn31RtzwTw+fRoSEiymhzdauBbn4OcKL4NNntIL5P728kYNeQVt1wZIbaEfv5ldm IPFvxq2dDTwEGxB4he3efqeOAzgGmUY= -----END CERTIFICATE-----Generated at Wed May 14 12:44:02 2025 by rpki-client