$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa File: 942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa (raw, json) Hash identifier: 7bbRbvw1fQQ1hkSlU9nCUxNMvs6ILb89z6v68pDTJHE= Subject key identifier: 91:66:8F:3A:EF:B7:B9:00:4B:23:D9:71:F8:EE:BF:07:EE:0A:8B:16 Certificate issuer: /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d Certificate serial: 010D0C9F4328584968B426DD73B2D86CAB5B0580 Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 20119 IP address blocks: 23.151.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:26:dd:73:b2:d8:6c:ab:5b:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=44303e56-db51-4a86-b7e9-97e289e200e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:39:4b:52:ef:7d:f0:4d:83:7a:6c:91:04: 9f:4a:9c:be:a1:7e:32:d4:1e:11:1e:9d:e2:1f:82: de:08:d8:f6:78:4b:a4:e6:9e:90:41:df:7e:39:ea: fc:8d:cb:95:c2:39:35:f6:e0:b1:84:32:c5:e7:e6: 43:59:34:24:b1:a7:61:ab:8c:d7:02:af:b4:64:3a: 6c:a0:31:76:3c:df:c2:ed:c0:63:52:f4:ad:e4:0f: c0:fd:4e:ac:2c:5e:96:ed:61:cb:18:53:28:5e:92: 98:a6:8e:0e:ae:66:20:52:80:72:79:29:9a:d4:49: 93:9f:c3:a5:56:c2:89:a2:02:14:3f:1b:51:82:48: 89:d9:d4:fa:1f:e7:52:8c:ca:25:92:62:b9:cf:6b: 1f:ef:5c:1d:95:c4:94:93:8c:8a:35:b0:cc:67:26: 52:ff:9b:b6:bc:e6:05:cc:c5:0c:6d:7e:12:5d:71: fe:e5:3f:08:13:6f:c2:db:2f:28:05:21:bd:94:e9: 26:5b:8e:db:11:cd:f4:eb:a4:88:77:d7:4f:ee:09: 32:dc:55:f2:1e:26:92:1c:19:eb:cb:b9:67:6d:40: ae:35:4a:a6:5d:bb:a9:24:38:f1:ce:59:48:a1:b5: 9a:ce:6b:46:e3:18:de:6c:32:8b:9b:5e:34:d8:1b: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:66:8F:3A:EF:B7:B9:00:4B:23:D9:71:F8:EE:BF:07:EE:0A:8B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl X509v3 Authority Key Identifier: keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer sbgp-ipAddrBlock: critical IPv4: 23.151.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d9:aa:c5:ea:7a:ff:7a:6b:c2:73:62:dc:77:87:fc:09:76: 5c:e5:43:58:d2:0e:dd:03:ed:15:de:83:f9:7f:63:1c:56:f3: 2b:e1:ac:66:36:da:62:97:b0:72:f6:5c:20:27:e8:f2:f5:95: 9d:f6:0a:0d:8f:6c:38:34:61:9a:1b:6f:ab:97:32:ae:b6:54: 7f:29:7d:3f:e0:37:d5:c8:a6:fc:bc:52:1c:41:92:0a:52:e9: 81:c5:f7:e5:d1:29:92:8d:d5:7a:b9:f4:1e:78:8e:36:1c:1c: b7:32:ca:60:c7:e6:19:da:62:97:6a:ca:69:22:88:7d:a9:1f: 80:7f:64:fc:6c:b6:7b:5f:8f:d4:7e:7c:a2:05:4d:ce:46:5f: 8f:7a:92:e0:c5:8c:d5:d9:3e:ba:9f:81:4e:fc:3e:8e:36:64: c4:bf:7e:2f:71:21:b8:56:14:37:9e:da:ef:52:26:0d:04:0a: 57:07:f9:37:13:2f:d5:89:e9:ee:84:6c:0d:7a:28:28:ab:45: 8b:91:f9:65:48:97:cd:c0:4d:64:d0:43:1d:51:ff:1c:d6:b9: 3c:05:09:64:91:0e:da:ed:4b:4b:39:1f:c9:4e:b7:00:37:29: 66:03:f6:73:1d:d1:d8:7f:32:0c:41:c2:36:bf:76:d8:fd:1d: 02:5e:05:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCbdc7LYbKtbBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBmMWJiYzYtYjZlNy00ZTE5LWFlMjktNWVlYzY4Yzlm MjZkMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NDQzMDNlNTYtZGI1MS00YTg2LWI3ZTktOTdlMjg5ZTIwMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPM5S1LvffBNg3pskQSfSpy+oX4y1B4RHp3i H4LeCNj2eEuk5p6QQd9+Oer8jcuVwjk19uCxhDLF5+ZDWTQksadhq4zXAq+0ZDps oDF2PN/C7cBjUvSt5A/A/U6sLF6W7WHLGFMoXpKYpo4OrmYgUoByeSma1EmTn8Ol VsKJogIUPxtRgkiJ2dT6H+dSjMolkmK5z2sf71wdlcSUk4yKNbDMZyZS/5u2vOYF zMUMbX4SXXH+5T8IE2/C2y8oBSG9lOkmW47bEc3066SId9dP7gky3FXyHiaSHBnr y7lnbUCuNUqmXbupJDjxzllIobWazmtG4xjebDKLm1402BvMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFmjzrvt7kASyPZcfjuvwfuCosWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGYx YmJjNi1iNmU3LTRlMTktYWUyOS01ZWVjNjhjOWYyNmQvOTQyZmUzOTYtNWIyOC0z YzgwLThjZWEtZDhkOWQ0ZTY5ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTBmMWJiYzYtYjZlNy00ZTE5LWFl MjktNWVlYzY4YzlmMjZkLzEwZjFiYmM2LWI2ZTctNGUxOS1hZTI5LTVlZWM2OGM5 ZjI2ZC5jcmwwHwYDVR0jBBgwFoAUdx6796Yo4OWqiQvWT4K9ecy5bUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGYxYmJjNi1iNmU3LTRlMTktYWUyOS01ZWVj NjhjOWYyNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5dgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvZqsXqev96a8JzYtx3h/wJdlzlQ1jSDt0D7RXeg/l/YxxW8yvhrGY2 2mKXsHL2XCAn6PL1lZ32Cg2PbDg0YZobb6uXMq62VH8pfT/gN9XIpvy8UhxBkgpS 6YHF9+XRKZKN1Xq59B54jjYcHLcyymDH5hnaYpdqymkiiH2pH4B/ZPxstntfj9R+ fKIFTc5GX496kuDFjNXZPrqfgU78Po42ZMS/fi9xIbhWFDee2u9SJg0EClcH+TcT L9WJ6e6EbA16KCirRYuR+WVIl83ATWTQQx1R/xzWuTwFCWSRDtrtS0s5H8lOtwA3 KWYD9nMd0dh/MgxBwja/dtj9HQJeBYg= -----END CERTIFICATE-----Generated at Fri Apr 11 21:26:28 2025 by rpki-client