$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa File: e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json) Hash identifier: 6DUKXGmiduXDZ5ZyNswvRwpxECK2AKUfboSQoYbS9nI= Subject key identifier: 8D:68:AC:CD:C0:78:85:A1:83:3F:71:1B:9E:D0:B9:B1:A1:27:6E:4A Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479 Certificate serial: 010D0C9F43285849C36F7E80B5619902CB4B9C20 Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 7018 IP address blocks: 23.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:7e:80:b5:61:99:02:cb:4b:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479 Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=259164ea-7923-4d4a-8f1c-6f80caa44dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:ac:3f:4f:a1:50:36:02:62:3c:ad:2d:84: 1c:ef:47:66:c5:f3:28:cb:bd:15:d1:21:b2:e1:cd: cd:23:d0:f0:a9:f5:14:59:dd:a7:08:16:4a:62:94: 52:28:b0:8e:ed:f1:69:bc:8e:b3:08:5a:0e:a0:4e: f3:eb:54:39:36:ec:d4:11:f0:6a:da:0e:04:e4:a1: b0:83:ee:b3:6b:e5:35:be:97:c8:0b:eb:54:15:f8: 90:b8:73:60:25:b6:0b:01:a7:64:b2:10:01:45:22: ae:a3:1f:e7:1a:2a:0a:17:47:d6:f6:e5:3e:89:22: ac:92:75:36:5f:78:84:6e:55:8c:7c:41:57:38:2a: 10:09:38:6a:05:ad:d6:b2:23:d8:83:b2:be:88:72: ad:ec:7c:aa:b4:fd:6f:58:8a:6c:e7:de:86:a9:2b: 3d:fc:7e:87:01:3d:1c:5e:b7:b6:7f:0f:91:5b:0d: 75:c3:cf:a7:78:8d:1f:b0:b8:d6:e2:16:c2:62:97: 49:62:91:3e:a9:55:cc:52:10:17:74:03:98:b1:97: bb:0b:5c:a9:56:f5:0a:7a:ea:78:f0:f9:b5:85:fd: 44:3a:a3:4f:c7:a1:c0:c8:dc:72:38:96:38:a4:24: 49:b7:1f:a3:00:64:b9:34:3f:61:9d:a0:d1:63:3b: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:68:AC:CD:C0:78:85:A1:83:3F:71:1B:9E:D0:B9:B1:A1:27:6E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl X509v3 Authority Key Identifier: keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer sbgp-ipAddrBlock: critical IPv4: 23.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f8:a4:af:f1:9a:da:50:44:3c:2b:fb:ee:a2:89:b2:8f:12: ee:72:9f:88:63:f3:b8:b8:0c:1b:37:58:c0:da:52:dc:9a:c0: 5c:ca:4f:e5:ba:47:78:6b:7c:48:7d:dd:72:e4:55:b2:e9:33: 14:1e:85:5b:a3:7d:3f:cd:33:1d:b7:62:a6:da:e0:83:e2:30: d3:99:c9:30:30:b4:9a:6f:c3:b7:aa:27:fa:78:ed:63:50:ce: 23:d7:5d:1d:db:8e:8c:8a:01:7b:ba:05:0f:14:16:42:44:da: 0f:7b:7e:5f:f6:34:9f:d0:c5:2d:1b:7b:a8:d4:e6:07:84:e5: 89:87:5b:bd:b8:78:6d:f7:fe:23:6e:25:6d:84:29:98:63:fd: 96:21:91:8f:2e:24:c4:5b:28:e2:1f:05:d1:bd:4e:2d:16:c8: 53:b5:47:87:59:29:0e:b1:e3:1b:38:03:b0:a4:70:00:72:85: 40:ef:18:8d:1c:9e:81:e9:2d:65:25:40:23:fa:d3:42:ac:1d: 07:ee:21:c6:1a:81:f1:f9:13:0a:25:4b:17:99:6a:cc:f0:e5: 30:c7:56:c8:a5:78:fa:1e:f7:b0:7f:32:64:10:11:6a:de:f3: 36:f2:4a:98:d4:4f:82:ee:b2:6e:b4:a1:2e:66:c2:ed:bf:f9: f6:71:83:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb36AtWGZAstLnCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm NDc5MB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk MjU5MTY0ZWEtNzkyMy00ZDRhLThmMWMtNmY4MGNhYTQ0ZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgSsP0+hUDYCYjytLYQc70dmxfMoy70V0SGy 4c3NI9DwqfUUWd2nCBZKYpRSKLCO7fFpvI6zCFoOoE7z61Q5NuzUEfBq2g4E5KGw g+6za+U1vpfIC+tUFfiQuHNgJbYLAadkshABRSKuox/nGioKF0fW9uU+iSKsknU2 X3iEblWMfEFXOCoQCThqBa3WsiPYg7K+iHKt7HyqtP1vWIps596GqSs9/H6HAT0c Xre2fw+RWw11w8+neI0fsLjW4hbCYpdJYpE+qVXMUhAXdAOYsZe7C1ypVvUKeup4 8Pm1hf1EOqNPx6HAyNxyOJY4pCRJtx+jAGS5ND9hnaDRYzt+iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1orM3AeIWhgz9xG57QubGhJ25KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvZTNmOGJkYTctMmVlYi0z ZGNkLTgyNDItM2E0OTdmNDc4YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0 ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1 ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH4pK/xmtpQRDwr++6iibKPEu5yn4hj87i4DBs3WMDaUtyawFzKT+W6 R3hrfEh93XLkVbLpMxQehVujfT/NMx23Yqba4IPiMNOZyTAwtJpvw7eqJ/p47WNQ ziPXXR3bjoyKAXu6BQ8UFkJE2g97fl/2NJ/QxS0be6jU5geE5YmHW724eG33/iNu JW2EKZhj/ZYhkY8uJMRbKOIfBdG9Ti0WyFO1R4dZKQ6x4xs4A7CkcAByhUDvGI0c noHpLWUlQCP600KsHQfuIcYagfH5EwolSxeZaszw5TDHVsilePoe97B/MmQQEWre 8zbySpjUT4Lusm60oS5mwu2/+fZxg/s= -----END CERTIFICATE-----Generated at Thu May 8 18:25:48 2025 by rpki-client