$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/d2cf7dfe-2efa-3596-8691-89d338b48f4f.roa File: d2cf7dfe-2efa-3596-8691-89d338b48f4f.roa (raw, json) Hash identifier: RzJ5KNZYUkg5CKKyzAmLVeI6zSippu0K8yCFIQ7lOhc= Subject key identifier: 09:5A:9A:89:B4:79:22:91:D7:2F:12:68:82:2C:C7:A4:F1:2F:34:CB Certificate issuer: /CN=5157764b-7b30-4f19-a9ca-30a5dfefa332 Certificate serial: 010D0C9F432858495F9080BCA4856DB2A5453A40 Authority key identifier: BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/d2cf7dfe-2efa-3596-8691-89d338b48f4f.roa Signing time: Mon 31 Mar 2025 18:26:46 +0000 ROA not before: Mon 31 Mar 2025 18:26:46 +0000 ROA not after: Sun 29 Jun 2025 18:26:46 +0000 asID: 13737 IP address blocks: 23.136.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5f:90:80:bc:a4:85:6d:b2:a5:45:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5157764b-7b30-4f19-a9ca-30a5dfefa332 Validity Not Before: Mar 31 18:26:46 2025 GMT Not After : Jun 29 18:26:46 2025 GMT Subject: CN=3a0eae40-9c97-4814-a979-d9faff5c4474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:2c:b3:7c:1f:22:16:7e:86:28:cb:63:b2: 4d:11:7b:ed:34:fa:af:a1:40:d7:77:a5:93:6e:3f: be:95:e2:68:c2:51:ac:79:d4:28:fb:9c:67:0f:5d: 22:44:6d:e7:52:e6:5c:65:8c:8a:44:cd:03:8c:99: f8:08:7a:36:61:79:8f:1c:75:d6:83:e7:6d:c4:bc: d6:d8:1c:2c:3d:aa:32:f7:7b:69:a7:a1:90:22:82: 35:e5:69:2a:64:87:21:31:70:f7:33:02:68:9d:2b: 36:9b:b9:ba:f4:b4:6a:17:eb:58:46:ed:e6:c5:bb: 12:e9:1c:8a:8b:65:61:7e:55:0d:3c:32:7c:10:09: 5c:3b:0b:b5:4d:92:12:44:0b:cd:4b:d1:2f:b0:35: eb:da:98:0f:b3:9e:c9:54:dd:41:6b:a2:8e:a9:c2: d0:0a:40:cc:34:21:d8:93:89:15:ca:6b:2a:6d:27: fc:df:10:b7:b3:8b:58:c8:54:62:8f:d6:c2:9b:80: 54:c6:89:a3:ff:c4:3d:c0:91:25:2b:10:27:da:f1: 10:a1:4a:12:1c:ba:08:bd:0f:b9:ec:d3:54:36:f3: 14:b6:b5:53:69:71:54:2f:6c:ee:f6:8d:68:c8:88: 51:f4:61:9a:21:64:3f:a3:1a:e7:14:4d:08:ee:f5: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5A:9A:89:B4:79:22:91:D7:2F:12:68:82:2C:C7:A4:F1:2F:34:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/d2cf7dfe-2efa-3596-8691-89d338b48f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl X509v3 Authority Key Identifier: keyid:BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer sbgp-ipAddrBlock: critical IPv4: 23.136.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:04:21:75:f6:8a:85:ff:1f:4d:8c:24:54:4c:93:f3:9a:56: ba:4d:e8:69:f2:31:28:38:cc:d7:74:94:d9:87:70:ea:76:78: a4:3c:4a:e0:21:08:20:6b:b1:f6:d2:ab:3f:4c:e1:e8:70:db: 1b:db:b9:93:ef:3b:8a:10:ca:3e:e6:d2:b1:a0:b1:13:fb:65: 37:08:c6:86:5d:09:df:d1:a5:59:3b:6e:26:1e:0e:e5:4d:11: b7:ce:75:55:9f:6a:7d:08:33:90:95:ef:7b:fb:3d:b4:26:aa: 47:1e:17:0c:07:e7:b0:25:74:45:1c:de:6b:e2:2c:d6:1a:f4: 52:96:73:8d:d5:14:14:29:01:1e:e1:33:91:dd:32:7d:71:0d: ee:42:17:82:f3:43:55:89:00:b1:ef:7a:b1:83:cd:cc:4f:e1: 76:54:d0:ea:32:b6:1b:01:83:37:02:fa:5b:31:12:65:c9:8a: 66:47:fe:1b:f5:69:8f:6b:78:80:46:58:41:21:de:be:74:c1: 36:8f:d5:5d:f2:f4:09:9f:aa:89:4f:5f:4f:5f:dd:1a:c7:4e: e8:8f:fa:5b:68:e8:e3:fa:68:9b:94:fe:2e:b5:cb:98:d2:7d: 43:e9:24:cf:b0:28:36:13:73:e7:7e:ee:85:3f:4a:22:9b:ac: 9a:d6:c7:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfkIC8pIVtsqVFOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE1Nzc2NGItN2IzMC00ZjE5LWE5Y2EtMzBhNWRmZWZh MzMyMB4XDTI1MDMzMTE4MjY0NloXDTI1MDYyOTE4MjY0NlowLzEtMCsGA1UEAxMk M2EwZWFlNDAtOWM5Ny00ODE0LWE5NzktZDlmYWZmNWM0NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvoss3wfIhZ+hijLY7JNEXvtNPqvoUDXd6WT bj++leJowlGsedQo+5xnD10iRG3nUuZcZYyKRM0DjJn4CHo2YXmPHHXWg+dtxLzW 2BwsPaoy93tpp6GQIoI15WkqZIchMXD3MwJonSs2m7m69LRqF+tYRu3mxbsS6RyK i2VhflUNPDJ8EAlcOwu1TZISRAvNS9EvsDXr2pgPs57JVN1Ba6KOqcLQCkDMNCHY k4kVymsqbSf83xC3s4tYyFRij9bCm4BUxomj/8Q9wJElKxAn2vEQoUoSHLoIvQ+5 7NNUNvMUtrVTaXFUL2zu9o1oyIhR9GGaIWQ/oxrnFE0I7vVm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlamom0eSKR1y8SaIIsx6TxLzTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTU3 NzY0Yi03YjMwLTRmMTktYTljYS0zMGE1ZGZlZmEzMzIvZDJjZjdkZmUtMmVmYS0z NTk2LTg2OTEtODlkMzM4YjQ4ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE1Nzc2NGItN2IzMC00ZjE5LWE5 Y2EtMzBhNWRmZWZhMzMyLzUxNTc3NjRiLTdiMzAtNGYxOS1hOWNhLTMwYTVkZmVm YTMzMi5jcmwwHwYDVR0jBBgwFoAUvXjfvxs5GKVvx3moHfThmeohVXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTU3NzY0Yi03YjMwLTRmMTktYTljYS0zMGE1 ZGZlZmEzMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4hEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMEIXX2ioX/H02MJFRMk/OaVrpN6GnyMSg4zNd0lNmHcOp2eKQ8SuAh CCBrsfbSqz9M4ehw2xvbuZPvO4oQyj7m0rGgsRP7ZTcIxoZdCd/RpVk7biYeDuVN EbfOdVWfan0IM5CV73v7PbQmqkceFwwH57AldEUc3mviLNYa9FKWc43VFBQpAR7h M5HdMn1xDe5CF4LzQ1WJALHverGDzcxP4XZU0OoythsBgzcC+lsxEmXJimZH/hv1 aY9reIBGWEEh3r50wTaP1V3y9AmfqolPX09f3RrHTuiP+lto6OP6aJuU/i61y5jS fUPpJM+wKDYTc+d+7oU/SiKbrJrWx8M= -----END CERTIFICATE-----Generated at Sat Apr 5 13:27:25 2025 by rpki-client