$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa File: f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa (raw, json) Hash identifier: WjFngUkkWm9D+3VyEHHAJYSz7PxVAhgKbITzvsRjkpQ= Subject key identifier: B3:EA:E8:32:3C:7B:85:F6:95:EE:89:BF:FB:8C:A6:A4:85:CF:BA:B8 Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F43285848FD56C7C4E0CD0492D20A5F40 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 400773 IP address blocks: 23.157.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c7:c4:e0:cd:04:92:d2:0a:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=2f20a9c1-700e-49c0-9f84-2a09e06f0251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:ec:8a:7e:f3:bd:ec:68:89:37:20:f4:7b: da:92:82:7a:ef:54:92:18:8d:f9:57:40:0a:dd:9e: d5:e4:b0:e4:02:e1:f0:1b:96:69:a7:4b:bb:79:fb: c8:a4:ee:73:0d:54:ef:a4:22:74:04:34:f7:88:41: 59:6b:94:40:ac:94:4d:fd:d1:89:96:32:48:a0:a5: 12:8d:c6:a2:4d:ae:6b:4a:ef:fc:9f:59:7f:6c:00: 21:e7:3f:80:3e:95:f5:2c:2b:b5:f7:00:81:2f:88: ba:99:18:fe:5d:a2:9f:d5:57:f0:b8:15:23:ae:5c: 30:4d:a3:a8:94:c8:e3:f3:70:75:7c:e2:9e:5b:e5: fd:a6:60:3f:37:d7:38:d6:93:4e:b9:64:25:7e:38: 2f:44:10:8e:3b:ff:50:eb:97:85:2c:94:17:24:ec: 95:15:39:92:5a:c0:9a:e9:4c:34:38:4b:ef:4d:db: bb:02:9a:b3:7b:93:5e:61:9a:6f:cb:b7:9f:ab:e0: 15:6f:62:49:16:4d:88:e9:cf:21:31:0a:f2:a4:36: 8b:15:c9:2d:01:67:ca:bf:ec:18:23:82:d3:26:93: ae:59:f4:d0:db:b4:5d:69:a8:92:79:bd:7e:75:f6: 8d:b3:6a:1a:5d:11:1d:29:aa:2d:56:f3:49:78:e5: 0f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:E8:32:3C:7B:85:F6:95:EE:89:BF:FB:8C:A6:A4:85:CF:BA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 23.157.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:55:de:08:02:7d:82:55:e1:c0:5c:7a:77:9a:c5:7f:d0:3c: f5:b8:3f:d1:6d:5c:d6:06:58:1e:4c:00:d3:09:f0:2e:97:9f: 6f:18:66:f8:5f:ee:7e:21:6b:37:2e:1f:56:58:03:3f:b4:78: 90:e9:12:ab:9f:cd:bf:40:71:c3:0e:19:27:ca:ef:56:56:dc: c0:9c:b1:5b:22:72:f9:d4:fd:ef:5f:06:8a:7c:b6:db:a5:8d: e9:45:03:cf:b8:03:ef:a6:8c:30:52:cb:0c:d7:c5:af:da:89: 7b:42:ad:93:a9:7f:d3:5d:3c:61:63:8e:87:ce:05:71:d6:bc: 03:cc:7a:31:de:3a:41:36:6e:82:6a:35:24:c1:1c:ff:18:0f: b5:dd:ac:07:f1:bc:ad:30:43:fb:9e:99:5b:7d:9d:e8:e7:7f: 99:81:a8:ea:23:11:06:d0:94:0b:37:ab:f5:0b:3d:a0:c3:6c: f8:1d:9c:15:ad:92:b5:c0:52:bd:19:36:02:5c:c3:c8:d9:0f: ca:63:e3:b3:62:d1:49:cd:b7:02:e4:b4:d3:34:1f:13:2f:ac: 9d:9e:b0:b2:30:4b:80:89:36:3d:d1:c2:35:7b:9f:96:57:ec: f0:1d:7b:2c:37:bd:67:3f:e2:c3:7f:e5:6b:35:b5:c3:9d:ad: 34:47:5d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsfE4M0EktIKX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmYyMGE5YzEtNzAwZS00OWMwLTlmODQtMmEwOWUwNmYwMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Xsin7zvexoiTcg9HvakoJ671SSGI35V0AK 3Z7V5LDkAuHwG5Zpp0u7efvIpO5zDVTvpCJ0BDT3iEFZa5RArJRN/dGJljJIoKUS jcaiTa5rSu/8n1l/bAAh5z+APpX1LCu19wCBL4i6mRj+XaKf1VfwuBUjrlwwTaOo lMjj83B1fOKeW+X9pmA/N9c41pNOuWQlfjgvRBCOO/9Q65eFLJQXJOyVFTmSWsCa 6Uw0OEvvTdu7Apqze5NeYZpvy7efq+AVb2JJFk2I6c8hMQrypDaLFcktAWfKv+wY I4LTJpOuWfTQ27RdaaiSeb1+dfaNs2oaXREdKaotVvNJeOUPtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPq6DI8e4X2le6Jv/uMpqSFz7q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZjg5YzNiMjUtZjg0ZS0z YTk5LWIyZjItM2JmYWVhMGIzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNV3ggCfYJV4cBceneaxX/QPPW4P9FtXNYGWB5MANMJ8C6Xn28YZvhf 7n4hazcuH1ZYAz+0eJDpEqufzb9AccMOGSfK71ZW3MCcsVsicvnU/e9fBop8ttul jelFA8+4A++mjDBSywzXxa/aiXtCrZOpf9NdPGFjjofOBXHWvAPMejHeOkE2boJq NSTBHP8YD7XdrAfxvK0wQ/uemVt9nejnf5mBqOojEQbQlAs3q/ULPaDDbPgdnBWt krXAUr0ZNgJcw8jZD8pj47Ni0UnNtwLktNM0HxMvrJ2esLIwS4CJNj3RwjV7n5ZX 7PAdeyw3vWc/4sN/5Ws1tcOdrTRHXZI= -----END CERTIFICATE-----Generated at Sat Apr 12 16:05:35 2025 by rpki-client