$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/a56e7a68-0a4c-323f-91ed-1a589cd11b5c.roa File: a56e7a68-0a4c-323f-91ed-1a589cd11b5c.roa (raw, json) Hash identifier: UxPzNZPdDvFs3iHr50gtxQPB3lnSy2vCI8iPLHzcY58= Subject key identifier: EF:DF:AC:71:B5:78:A4:39:BE:47:AF:72:64:FB:F7:16:37:A2:98:06 Certificate issuer: /CN=b576d583-2b59-4fc2-a5c0-b3b3bf040e5c Certificate serial: 010D0C9F432858494B640DEB7F12CA5A1D1248A0 Authority key identifier: 76:10:05:86:D1:AD:6C:50:27:9A:74:0D:1B:2E:48:8F:86:F0:08:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/a56e7a68-0a4c-323f-91ed-1a589cd11b5c.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 1030 IP address blocks: 23.138.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0d:eb:7f:12:ca:5a:1d:12:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b576d583-2b59-4fc2-a5c0-b3b3bf040e5c Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=0bea1728-319b-49f7-bba6-c468e0acb0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4a:98:6f:98:45:8e:69:9d:8b:b3:5a:a5:02: 9e:d7:8b:55:0a:78:e1:f1:44:2a:df:1e:e9:ef:19: ff:a5:70:c3:e0:87:58:c1:b8:b7:df:eb:1a:c5:64: e8:c5:ef:5f:7e:50:55:03:55:31:40:a8:8e:a6:4f: b6:13:98:86:c1:2f:41:80:49:e1:96:10:09:e4:14: 72:6a:aa:37:9b:8f:2f:b1:86:64:0e:86:3b:c8:b6: 45:55:9b:ed:cc:58:fa:3e:64:38:8e:64:17:32:f2: ab:5a:46:df:37:5a:31:0a:4a:33:e1:3b:81:87:c4: f3:02:a5:da:b8:ec:42:4e:57:32:86:1c:0d:44:f2: fa:6a:90:8c:2e:04:ee:27:1c:f4:56:8c:05:f0:e1: 2c:89:d5:e1:01:4a:f4:3e:89:7e:b2:d7:fe:50:6d: 51:55:94:2e:a2:03:2b:d4:69:4e:1f:5d:c6:98:04: 99:36:ff:e2:94:99:e9:e6:da:2e:af:ba:f8:64:3d: 30:e6:c5:38:a3:13:01:8e:76:24:dc:8a:a7:d4:59: c2:64:48:dc:6a:ca:bf:aa:a1:50:bf:65:34:f6:e6: e3:79:91:c5:8d:bc:1a:35:01:d4:96:9b:8c:c2:79: 6c:d6:61:2f:37:03:35:e2:b9:02:38:62:7c:3c:52: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DF:AC:71:B5:78:A4:39:BE:47:AF:72:64:FB:F7:16:37:A2:98:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/a56e7a68-0a4c-323f-91ed-1a589cd11b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.crl X509v3 Authority Key Identifier: keyid:76:10:05:86:D1:AD:6C:50:27:9A:74:0D:1B:2E:48:8F:86:F0:08:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.cer sbgp-ipAddrBlock: critical IPv4: 23.138.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:de:23:dc:02:04:f8:e9:00:92:7c:7b:cd:4f:6d:0f:fc:d6: 1f:7d:fa:6c:a7:83:54:26:99:08:2f:c3:ea:63:86:fc:af:ae: 0f:6b:11:93:5f:56:a8:49:7c:0b:73:5f:77:11:df:e6:d6:e6: 34:48:d2:e6:da:3c:fa:cb:cd:73:32:db:cf:b6:3e:7a:f1:05: 82:6f:f4:63:0a:8c:97:22:3e:80:4b:0d:66:fb:d6:1e:a3:b7: ce:2c:5c:30:23:50:00:68:96:50:de:8a:57:32:1f:0b:1e:12: b0:ce:60:be:08:6c:c1:4a:da:15:f4:1e:3a:1b:ef:35:e1:66: 04:ee:8c:5d:86:89:a1:cb:f7:39:11:17:f0:50:c6:19:e4:5a: a9:15:56:72:99:39:81:ce:d8:20:24:f8:7c:83:07:46:ce:4a: b6:8d:5b:50:ef:af:54:ac:cc:08:a7:9e:e2:10:76:e2:5f:3a: d2:d0:12:1a:bb:b1:56:7c:ca:c4:fb:60:29:f1:df:1b:3d:88: e2:d5:06:0b:8d:ec:83:02:dc:14:f9:e5:03:5f:12:df:9e:71: 1e:07:f3:29:52:cb:18:75:3d:46:28:d6:7e:bb:5f:45:d6:57: 02:29:3f:14:b3:e0:16:e3:03:24:34:34:72:90:5d:03:08:fa: 34:7b:ef:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA3rfxLKWh0SSKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU3NmQ1ODMtMmI1OS00ZmMyLWE1YzAtYjNiM2JmMDQw ZTVjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MGJlYTE3MjgtMzE5Yi00OWY3LWJiYTYtYzQ2OGUwYWNiMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEqYb5hFjmmdi7NapQKe14tVCnjh8UQq3x7p 7xn/pXDD4IdYwbi33+saxWToxe9fflBVA1UxQKiOpk+2E5iGwS9BgEnhlhAJ5BRy aqo3m48vsYZkDoY7yLZFVZvtzFj6PmQ4jmQXMvKrWkbfN1oxCkoz4TuBh8TzAqXa uOxCTlcyhhwNRPL6apCMLgTuJxz0VowF8OEsidXhAUr0Pol+stf+UG1RVZQuogMr 1GlOH13GmASZNv/ilJnp5tour7r4ZD0w5sU4oxMBjnYk3Iqn1FnCZEjcasq/qqFQ v2U09ubjeZHFjbwaNQHUlpuMwnls1mEvNwM14rkCOGJ8PFIEtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/frHG1eKQ5vkevcmT79xY3opgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTc2 ZDU4My0yYjU5LTRmYzItYTVjMC1iM2IzYmYwNDBlNWMvYTU2ZTdhNjgtMGE0Yy0z MjNmLTkxZWQtMWE1ODljZDExYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU3NmQ1ODMtMmI1OS00ZmMyLWE1 YzAtYjNiM2JmMDQwZTVjL2I1NzZkNTgzLTJiNTktNGZjMi1hNWMwLWIzYjNiZjA0 MGU1Yy5jcmwwHwYDVR0jBBgwFoAUdhAFhtGtbFAnmnQNGy5Ij4bwCEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTc2ZDU4My0yYjU5LTRmYzItYTVjMC1iM2Iz YmYwNDBlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7eI9wCBPjpAJJ8e81PbQ/81h99+myng1QmmQgvw+pjhvyvrg9rEZNf VqhJfAtzX3cR3+bW5jRI0ubaPPrLzXMy28+2PnrxBYJv9GMKjJciPoBLDWb71h6j t84sXDAjUABollDeilcyHwseErDOYL4IbMFK2hX0Hjob7zXhZgTujF2GiaHL9zkR F/BQxhnkWqkVVnKZOYHO2CAk+HyDB0bOSraNW1Dvr1SszAinnuIQduJfOtLQEhq7 sVZ8ysT7YCnx3xs9iOLVBguN7IMC3BT55QNfEt+ecR4H8ylSyxh1PUYo1n67X0XW VwIpPxSz4BbjAyQ0NHKQXQMI+jR774g= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:15 2025 by rpki-client