$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa File: db729622-f239-3542-a3b9-b05be8216524.roa (raw, json) Hash identifier: cJIwtF4GUN6jpVL4TzqeQI7Kt0SC/gxJm95W1XSP/xA= Subject key identifier: 29:EC:E3:0D:F6:EB:11:79:BE:39:DC:37:E9:6B:D1:9E:83:CF:6C:50 Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F432858493243E2231B255EDC5A0812B0 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 54696 IP address blocks: 23.148.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e2:23:1b:25:5e:dc:5a:08:12:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=dfad738d-513d-494b-b601-8e7321dada42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:b2:cd:ce:fc:04:23:6a:b1:dd:66:ec:27: 22:5d:51:f9:6c:bf:e4:73:16:c0:84:4b:3a:b2:bf: 14:88:c3:da:3c:a3:6f:ac:fd:d9:09:79:4b:eb:ca: b1:18:32:17:50:b7:5b:34:08:87:b4:37:2a:18:54: a4:44:98:10:8a:dd:28:82:35:fd:a4:f8:07:a6:79: a5:7e:10:d2:9c:07:ce:0f:62:23:6c:f4:8e:41:fc: cb:8e:5c:f6:8a:c7:19:8c:5f:d4:8a:a4:e7:97:26: ae:1d:e4:e5:12:d3:01:fc:07:3f:fe:9a:e3:b7:e6: ac:87:d9:52:5b:74:02:82:6a:2a:bb:91:a1:23:aa: eb:15:22:0f:74:c0:c3:40:15:b4:54:0c:44:89:c5: 32:31:6e:cd:ed:bc:c1:8f:90:d8:e6:fb:d5:ad:aa: 11:23:49:2e:7f:3b:fd:13:9b:14:42:8b:e7:2d:75: a4:c8:7c:38:74:4c:40:39:79:64:6e:95:a0:fc:3f: d2:76:bf:52:fd:e0:b3:a4:0d:3a:67:9f:58:7a:fd: 23:0e:21:45:60:c4:e7:6f:83:a5:b8:d7:15:4b:9d: c4:bb:37:ab:53:8a:56:98:c1:fc:ee:5f:d3:b6:32: f9:86:55:73:3c:d6:92:e3:22:2c:49:93:fa:d0:bb: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EC:E3:0D:F6:EB:11:79:BE:39:DC:37:E9:6B:D1:9E:83:CF:6C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9d:52:ec:4f:fd:bc:99:ee:d9:20:80:f9:d8:13:c5:fd:0e: 51:ca:b8:76:44:99:19:12:88:c8:d1:16:8d:2b:49:5e:6c:22: b4:ed:f7:60:b8:fe:66:f1:24:ab:25:5d:98:aa:6e:4e:2a:a7: f5:27:a5:58:cd:cc:6f:30:fb:99:59:d3:2f:27:02:41:f0:8d: 5e:a8:2d:b5:2a:8e:75:97:b9:99:19:ca:1e:0e:59:61:47:b1: 2a:5c:ed:9d:62:05:1d:3e:f8:26:b7:9b:6c:25:da:3e:be:87: f2:13:32:9e:09:76:bb:34:76:8d:db:af:e1:78:53:a9:10:5a: 91:1b:58:99:2d:5f:e2:cd:2e:5e:bf:b3:6a:ac:f7:86:99:69: db:ba:2b:78:db:6f:e4:ce:fa:c6:98:2b:1c:7e:b1:84:00:57: 8c:80:31:7d:ac:4c:2f:30:78:58:b9:23:9d:f3:17:fc:b8:e4: d3:8f:14:41:da:77:c5:26:f2:1b:ca:9a:ed:86:9d:95:74:db: 72:61:b8:7a:a2:a7:32:0f:ae:c4:71:b7:2c:93:4f:08:84:0e: 29:db:01:4f:50:ce:ab:92:d7:79:86:7a:c8:6b:2d:80:7b:f7: 74:e3:82:76:b5:7e:8d:bb:7f:75:8f:c6:00:92:98:95:61:77: 9b:1f:0e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+IjGyVe3FoIErAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ZGZhZDczOGQtNTEzZC00OTRiLWI2MDEtOGU3MzIxZGFkYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhuyzc78BCNqsd1m7CciXVH5bL/kcxbAhEs6 sr8UiMPaPKNvrP3ZCXlL68qxGDIXULdbNAiHtDcqGFSkRJgQit0ogjX9pPgHpnml fhDSnAfOD2IjbPSOQfzLjlz2iscZjF/UiqTnlyauHeTlEtMB/Ac//prjt+ash9lS W3QCgmoqu5GhI6rrFSIPdMDDQBW0VAxEicUyMW7N7bzBj5DY5vvVraoRI0kufzv9 E5sUQovnLXWkyHw4dExAOXlkbpWg/D/Sdr9S/eCzpA06Z59Yev0jDiFFYMTnb4Ol uNcVS53EuzerU4pWmMH87l/TtjL5hlVzPNaS4yIsSZP60Ls1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCns4w326xF5vjncN+lr0Z6Dz2xQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZGI3Mjk2MjItZjIzOS0z NTQyLWEzYjktYjA1YmU4MjE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmdUuxP/byZ7tkggPnYE8X9DlHKuHZEmRkSiMjRFo0rSV5sIrTt92C4 /mbxJKslXZiqbk4qp/UnpVjNzG8w+5lZ0y8nAkHwjV6oLbUqjnWXuZkZyh4OWWFH sSpc7Z1iBR0++Ca3m2wl2j6+h/ITMp4Jdrs0do3br+F4U6kQWpEbWJktX+LNLl6/ s2qs94aZadu6K3jbb+TO+saYKxx+sYQAV4yAMX2sTC8weFi5I53zF/y45NOPFEHa d8Um8hvKmu2GnZV023JhuHqipzIPrsRxtyyTTwiEDinbAU9QzquS13mGeshrLYB7 93Tjgna1fo27f3WPxgCSmJVhd5sfDuk= -----END CERTIFICATE-----Generated at Wed May 14 12:40:33 2025 by rpki-client