$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa File: f2d111b6-824d-3b08-af7b-3f301d73f479.roa (raw, json) Hash identifier: clJMxRokPI9QYw000DSk0Fw7CClzXHJ3tftGU4hY7gU= Subject key identifier: FE:4A:4D:9C:67:CD:27:EE:EE:93:9E:1F:2C:89:23:66:31:56:6D:CA Certificate issuer: /CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Certificate serial: 010D0C9F43285849C904E9C7BF91F77F99599CA0 Authority key identifier: 83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 30344 IP address blocks: 23.152.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e9:c7:bf:91:f7:7f:99:59:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=fc8dd5b4-5165-4a17-9879-789182beddcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:09:4b:10:f3:d9:67:00:c0:dc:96:5a:7d: 5d:76:e8:ae:e9:b5:46:40:58:1c:09:af:08:ab:7e: 8e:fe:dd:4c:7e:c6:ac:c0:ea:3f:6a:f8:15:4c:f2: 27:73:71:88:a0:b0:5f:e9:c8:4e:c2:7e:06:5f:c6: e7:0f:97:bd:cb:8a:66:97:55:be:d7:6d:92:b9:2c: 6d:0b:67:11:87:f3:06:c9:16:5b:a5:c7:27:ff:de: b4:c3:73:01:fa:ac:62:27:13:b5:86:76:e9:fb:8e: b5:0b:4e:ac:56:20:fd:6e:16:33:4e:bf:1d:e7:82: 28:38:d4:44:24:f7:02:51:c6:9b:c6:49:a8:18:92: ff:03:08:07:f7:2e:d1:1d:6e:9c:d3:a6:62:f3:e7: ae:d0:3b:83:61:b2:f9:0e:75:e8:40:9c:df:37:9c: 1f:f3:c9:40:1d:2a:ab:6e:49:f9:80:56:c7:28:66: 7c:0d:a1:c9:e5:c7:11:b7:ef:9f:b2:e9:f6:9f:26: 63:57:76:3d:39:6a:50:bc:cd:36:80:13:f6:9e:9f: 0e:e5:b1:74:30:47:e8:87:c2:19:8e:02:fe:98:e6: a8:ad:00:46:0a:8b:8d:4e:de:01:2e:a5:f9:a8:58: d5:41:0d:2c:f5:94:29:56:0c:eb:05:0c:e9:8a:68: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:4D:9C:67:CD:27:EE:EE:93:9E:1F:2C:89:23:66:31:56:6D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl X509v3 Authority Key Identifier: keyid:83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer sbgp-ipAddrBlock: critical IPv4: 23.152.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:93:65:17:d5:75:48:5d:58:ba:2a:7b:08:96:11:61:9e:e4: f5:39:1e:c8:96:09:fd:5b:76:8e:a8:59:e4:a3:2c:18:8f:19: b2:30:d9:3e:87:72:eb:ff:99:b7:2f:36:3e:38:5e:19:41:ab: c4:68:5a:a5:e9:6b:7e:d4:72:e1:42:40:3e:07:bc:08:c4:29: 6a:4f:f3:1f:1b:60:f2:8b:53:4f:37:b1:f1:c2:9d:24:05:f5: 69:b2:4e:81:56:e6:79:9c:cf:8c:18:01:f4:98:bc:60:01:98: 68:82:68:6f:1c:df:0e:98:76:ce:2a:ca:fb:ef:27:57:16:75: 93:cb:73:68:c1:3b:11:28:9b:99:6b:e3:8f:2b:7b:94:7a:a1: d7:c1:83:f6:86:96:7c:33:99:d5:4d:9b:5c:fb:03:b0:ff:71: 91:5d:a6:24:4c:0b:f4:f1:44:28:df:60:89:47:f9:a2:2f:be: b8:6c:4a:f7:d6:57:92:a4:57:a8:b5:1c:a6:5b:57:58:30:d4: ed:42:29:7e:77:ec:2c:ba:c0:21:45:1a:cf:7a:0f:33:c5:e3: 48:74:d1:0e:fd:73:2d:40:98:6d:7c:99:24:85:e7:6a:e8:7d: 21:81:3b:f2:59:4e:a5:31:b0:25:96:8d:b9:d3:e8:01:e8:0a: 6d:99:bf:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOnHv5H3f5lZnKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA5MWM0YzctYmY0Yy00NTAyLWJjMTktMmUzZjg0YjIw ZTZkMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk ZmM4ZGQ1YjQtNTE2NS00YTE3LTk4NzktNzg5MTgyYmVkZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA8JSxDz2WcAwNyWWn1dduiu6bVGQFgcCa8I q36O/t1MfsaswOo/avgVTPInc3GIoLBf6chOwn4GX8bnD5e9y4pml1W+122SuSxt C2cRh/MGyRZbpccn/960w3MB+qxiJxO1hnbp+461C06sViD9bhYzTr8d54IoONRE JPcCUcabxkmoGJL/AwgH9y7RHW6c06Zi8+eu0DuDYbL5DnXoQJzfN5wf88lAHSqr bkn5gFbHKGZ8DaHJ5ccRt++fsun2nyZjV3Y9OWpQvM02gBP2np8O5bF0MEfoh8IZ jgL+mOaorQBGCouNTt4BLqX5qFjVQQ0s9ZQpVgzrBQzpimj+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5KTZxnzSfu7pOeHyyJI2YxVm3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDkx YzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNmODRiMjBlNmQvZjJkMTExYjYtODI0ZC0z YjA4LWFmN2ItM2YzMDFkNzNmNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzA5MWM0YzctYmY0Yy00NTAyLWJj MTktMmUzZjg0YjIwZTZkLzcwOTFjNGM3LWJmNGMtNDUwMi1iYzE5LTJlM2Y4NGIy MGU2ZC5jcmwwHwYDVR0jBBgwFoAUg7ionw+GRPGuMzkBA5Iz+UizmecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDkxYzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNm ODRiMjBlNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiTZRfVdUhdWLoqewiWEWGe5PU5HsiWCf1bdo6oWeSjLBiPGbIw2T6H cuv/mbcvNj44XhlBq8RoWqXpa37UcuFCQD4HvAjEKWpP8x8bYPKLU083sfHCnSQF 9WmyToFW5nmcz4wYAfSYvGABmGiCaG8c3w6Yds4qyvvvJ1cWdZPLc2jBOxEom5lr 448re5R6odfBg/aGlnwzmdVNm1z7A7D/cZFdpiRMC/TxRCjfYIlH+aIvvrhsSvfW V5KkV6i1HKZbV1gw1O1CKX537Cy6wCFFGs96DzPF40h00Q79cy1AmG18mSSF52ro fSGBO/JZTqUxsCWWjbnT6AHoCm2Zv00= -----END CERTIFICATE-----Generated at Fri May 9 08:28:16 2025 by rpki-client