$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa File: 12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa (raw, json) Hash identifier: BlHG65mMIV7cZ4KTwlFi7ZnEFBuSzjhnLoXWmVay7H4= Subject key identifier: 0A:17:68:16:D4:0E:CE:E7:24:0E:05:83:C4:AB:8D:14:D9:6E:3E:A4 Certificate issuer: /CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07 Certificate serial: 010D0C9F432858493F196F135C3DFDF68256CC80 Authority key identifier: 77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa Signing time: Thu 20 Mar 2025 03:21:00 +0000 ROA not before: Thu 20 Mar 2025 03:21:00 +0000 ROA not after: Wed 18 Jun 2025 03:21:00 +0000 asID: 149513 IP address blocks: 23.186.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3f:19:6f:13:5c:3d:fd:f6:82:56:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07 Validity Not Before: Mar 20 03:21:00 2025 GMT Not After : Jun 18 03:21:00 2025 GMT Subject: CN=7bb46aeb-687c-4500-a51b-f6d5334898b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:e7:61:37:94:00:c7:44:cc:62:97:8d:c2: 56:83:cd:42:df:00:82:dc:67:2d:bb:46:fe:c8:4d: 8b:ab:9b:38:9b:7c:80:74:61:50:d1:80:c1:00:4e: c1:f7:49:c8:21:f5:0d:7f:26:0e:ef:27:b0:09:0c: 78:4b:e4:e3:68:51:61:cf:60:79:22:23:08:19:c8: ec:3d:43:fb:03:85:cc:db:82:41:5f:d6:b5:cf:7f: 9c:59:08:d6:e4:2c:64:3e:14:68:7f:9c:62:78:ad: ea:e8:7f:11:99:7c:eb:e0:ef:06:19:0d:a6:04:f4: 4a:e6:a3:5f:1c:97:10:32:5d:7b:1e:7b:94:df:18: f5:5d:f9:bc:01:cf:cc:e8:01:e6:df:98:3f:c5:eb: 6e:c2:f7:ad:e6:b7:5b:d1:c1:f2:27:9b:cd:3d:15: fb:df:99:55:79:89:37:9d:68:b4:ab:e9:d0:70:9a: 15:40:eb:80:7a:1c:db:4a:9f:e8:d3:79:8a:99:ce: ea:53:a7:0f:92:00:93:9e:a9:f0:54:b4:68:99:0e: be:a7:6e:63:ac:55:10:74:84:44:94:32:ab:59:25: 34:ad:7b:bd:2d:0b:e3:46:f4:0f:d9:07:26:34:6a: e5:e8:72:ee:09:58:b9:6a:e3:7a:22:da:04:e4:4c: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:68:16:D4:0E:CE:E7:24:0E:05:83:C4:AB:8D:14:D9:6E:3E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl X509v3 Authority Key Identifier: keyid:77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer sbgp-ipAddrBlock: critical IPv4: 23.186.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1c:1b:eb:d8:af:fa:ea:c9:07:b6:ca:dc:12:fe:d1:8c:65: da:3a:7a:be:35:73:1c:d4:2d:49:99:54:bc:fb:84:05:93:2f: 29:67:d3:9f:ca:9c:c4:b6:7c:26:a0:3d:3c:4a:40:9b:26:64: f2:c1:5f:a5:ea:a3:e9:b8:85:b8:0b:f3:71:bc:c8:c5:09:7e: 93:53:3d:f8:42:5d:f0:12:81:90:cd:2f:7c:aa:e1:fa:c8:4d: 4b:c7:0a:5a:24:58:7b:e1:1d:d6:c6:09:52:65:9e:9d:59:54: e4:0d:36:d9:2f:ee:69:c1:a5:a6:43:b9:70:fd:90:2a:f5:2d: 89:8e:da:c4:d3:cd:b1:14:c7:63:f8:b4:da:18:2e:06:82:5f: 5e:51:cd:73:4d:78:19:e9:9b:25:f5:86:39:05:ba:83:d4:99: f7:2b:e6:14:bd:42:dd:00:48:42:ab:ad:96:54:3e:ab:fd:62: d2:b6:f6:06:73:3a:7b:d3:43:41:c4:6a:1b:1d:eb:d2:87:b1: 88:bc:16:ef:a2:61:66:fd:8b:de:b8:3c:6c:b1:af:f4:73:f3: f7:f5:14:a8:c9:e5:49:95:3e:28:50:8f:0c:90:43:61:3a:ff: 1e:23:12:3a:94:29:76:87:a9:92:c2:fc:ad:a5:9d:49:de:91: e7:15:33:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk/GW8TXD399oJWzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkzZWJjMTEtOWY3Zi00NjJlLTg1YTMtNjY0ZmU4ZGI0 ZDA3MB4XDTI1MDMyMDAzMjEwMFoXDTI1MDYxODAzMjEwMFowLzEtMCsGA1UEAxMk N2JiNDZhZWItNjg3Yy00NTAwLWE1MWItZjZkNTMzNDg5OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AbnYTeUAMdEzGKXjcJWg81C3wCC3Gctu0b+ yE2Lq5s4m3yAdGFQ0YDBAE7B90nIIfUNfyYO7yewCQx4S+TjaFFhz2B5IiMIGcjs PUP7A4XM24JBX9a1z3+cWQjW5CxkPhRof5xieK3q6H8RmXzr4O8GGQ2mBPRK5qNf HJcQMl17HnuU3xj1Xfm8Ac/M6AHm35g/xetuwvet5rdb0cHyJ5vNPRX735lVeYk3 nWi0q+nQcJoVQOuAehzbSp/o03mKmc7qU6cPkgCTnqnwVLRomQ6+p25jrFUQdIRE lDKrWSU0rXu9LQvjRvQP2QcmNGrl6HLuCVi5auN6ItoE5EyqcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoXaBbUDs7nJA4Fg8SrjRTZbj6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOTNl YmMxMS05ZjdmLTQ2MmUtODVhMy02NjRmZThkYjRkMDcvMTJlYmZhNTUtOTQxYS0z ZGE5LWJkZjctYTNiMzViZmYxMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDkzZWJjMTEtOWY3Zi00NjJlLTg1 YTMtNjY0ZmU4ZGI0ZDA3L2Q5M2ViYzExLTlmN2YtNDYyZS04NWEzLTY2NGZlOGRi NGQwNy5jcmwwHwYDVR0jBBgwFoAUd34bGaTdPYagsRtAdblBI7aFWu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOTNlYmMxMS05ZjdmLTQ2MmUtODVhMy02NjRm ZThkYjRkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUcG+vYr/rqyQe2ytwS/tGMZdo6er41cxzULUmZVLz7hAWTLyln05/K nMS2fCagPTxKQJsmZPLBX6Xqo+m4hbgL83G8yMUJfpNTPfhCXfASgZDNL3yq4frI TUvHClokWHvhHdbGCVJlnp1ZVOQNNtkv7mnBpaZDuXD9kCr1LYmO2sTTzbEUx2P4 tNoYLgaCX15RzXNNeBnpmyX1hjkFuoPUmfcr5hS9Qt0ASEKrrZZUPqv9YtK29gZz OnvTQ0HEahsd69KHsYi8Fu+iYWb9i964PGyxr/Rz8/f1FKjJ5UmVPihQjwyQQ2E6 /x4jEjqUKXaHqZLC/K2lnUnekecVMyk= -----END CERTIFICATE-----Generated at Mon Apr 7 22:16:53 2025 by rpki-client