$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa File: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (raw, json) Hash identifier: OSR/frnPR/QFH6CP3pjuaZpSB459uuwgF5Th6tGxrhc= Subject key identifier: 7E:B2:60:44:9A:5B:01:81:1D:E8:A6:6E:4F:92:54:B9:91:95:82:A0 Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Certificate serial: 010D0C9F43285849E38A353FBDDB4C3566492C80 Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa Signing time: Sun 18 May 2025 01:00:47 +0000 ROA not before: Sun 18 May 2025 01:00:47 +0000 ROA not after: Sat 16 Aug 2025 01:00:47 +0000 asID: 2914 IP address blocks: 23.133.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:8a:35:3f:bd:db:4c:35:66:49:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Validity Not Before: May 18 01:00:47 2025 GMT Not After : Aug 16 01:00:47 2025 GMT Subject: CN=5417f4d7-d2aa-47b8-8678-4d13f1165683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:ed:ca:1e:6f:fa:97:e7:85:88:0f:99:26: 27:d9:3b:32:3f:bc:60:ca:37:2e:a3:82:36:26:4e: 57:94:3a:d7:98:9e:1d:4f:ad:5b:5e:86:f9:f2:2e: 41:5a:f0:43:17:98:97:7c:ae:d5:c1:2d:7c:a3:f5: 36:f1:83:dd:cf:74:52:36:13:f3:c9:12:e7:8f:db: e6:c3:34:23:dd:ba:78:f2:ef:a3:c3:be:4f:88:29: d2:6d:fb:f3:35:63:d8:53:2f:70:da:58:69:f0:93: 01:57:51:15:7c:50:47:e4:05:dc:6d:4e:b4:da:77: a0:b4:f3:03:52:1e:d2:8a:49:f2:14:da:9b:8f:f0: 9e:6f:07:94:f0:bf:69:df:d7:7c:1e:8c:98:80:5a: 82:55:98:b7:9a:e9:87:2c:ba:ba:82:a3:33:d0:f9: 31:cf:77:04:df:a2:ab:0e:bb:0d:30:aa:ff:74:db: d0:37:df:ab:3a:86:10:e2:a6:a5:e1:88:f3:5e:7b: fa:65:80:91:19:e7:63:7d:71:09:cb:ef:d6:79:4f: 0e:29:64:1a:23:df:d6:0e:f7:5f:0f:d0:33:8c:84: 9f:74:e3:1f:2e:74:0c:db:7c:19:8f:a7:f2:cc:65: 00:f0:28:81:0b:0d:aa:fa:39:d1:c6:d5:92:81:d9: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B2:60:44:9A:5B:01:81:1D:E8:A6:6E:4F:92:54:B9:91:95:82:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl X509v3 Authority Key Identifier: keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer sbgp-ipAddrBlock: critical IPv4: 23.133.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:05:2d:36:eb:60:74:87:76:91:0b:dc:1c:fc:b0:1d:26:18: 55:ab:17:2f:10:9a:8d:4d:6d:e7:82:f2:f5:b7:07:c2:b6:a9: 7c:b7:5b:78:81:d2:e9:d3:29:ff:54:f0:cb:82:a3:5b:d1:73: cc:ec:62:7b:5c:87:e0:cc:aa:55:aa:49:49:02:3e:4b:5d:99: 51:89:bc:0c:f9:12:10:e6:32:21:45:d6:cb:33:d2:66:96:45: ee:71:51:0d:e3:cf:d4:3f:e1:de:b2:ee:c1:c0:8f:b1:70:62: 24:5d:dd:d7:f6:6b:dc:95:1f:87:0c:91:4c:2a:df:ca:3a:ae: ca:38:00:2c:5d:d7:db:16:2b:4c:3e:78:1f:a3:cf:4a:80:8d: e7:5f:41:31:e5:25:39:d2:f7:2f:f4:19:26:ef:c6:89:6d:0e: 50:f5:b1:52:44:47:30:b4:0d:c0:fd:ac:35:b9:89:12:04:f3: 5d:19:3b:eb:1d:25:5a:da:54:7d:79:f0:d3:af:68:68:c3:e9: db:c3:6f:b9:5a:03:be:05:ed:93:e0:f9:cd:29:d6:12:98:d4: de:c6:61:a7:7d:95:6c:f6:4d:75:85:b3:33:26:d8:6f:d0:f0: 74:70:a4:e7:96:d2:3c:97:2a:cf:f3:f6:5a:40:48:ca:07:93: a4:e1:3d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjijU/vdtMNWZJLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4 OGY2MB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk NTQxN2Y0ZDctZDJhYS00N2I4LTg2NzgtNGQxM2YxMTY1NjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOTtyh5v+pfnhYgPmSYn2TsyP7xgyjcuo4I2 Jk5XlDrXmJ4dT61bXob58i5BWvBDF5iXfK7VwS18o/U28YPdz3RSNhPzyRLnj9vm wzQj3bp48u+jw75PiCnSbfvzNWPYUy9w2lhp8JMBV1EVfFBH5AXcbU602negtPMD Uh7SiknyFNqbj/CebweU8L9p39d8HoyYgFqCVZi3mumHLLq6gqMz0Pkxz3cE36Kr DrsNMKr/dNvQN9+rOoYQ4qal4YjzXnv6ZYCRGedjfXEJy+/WeU8OKWQaI9/WDvdf D9AzjISfdOMfLnQM23wZj6fyzGUA8CiBCw2q+jnRxtWSgdlh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6yYESaWwGBHeimbk+SVLmRlYKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3 YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvYmQ0YzAxNTYtMWUxMy0z MzY4LWEzOTktNWRjZmM3NWY0ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkN2IzZWEtOGNmNi00NGM0LWI2 ODEtN2I2MjcyZTY4OGY2LzQwZDdiM2VhLThjZjYtNDRjNC1iNjgxLTdiNjI3MmU2 ODhmNi5jcmwwHwYDVR0jBBgwFoAU/SxsTRDJ7FBhwetdhFIkO2J7LkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYy NzJlNjg4ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0FLTbrYHSHdpEL3Bz8sB0mGFWrFy8Qmo1NbeeC8vW3B8K2qXy3W3iB 0unTKf9U8MuCo1vRc8zsYntch+DMqlWqSUkCPktdmVGJvAz5EhDmMiFF1ssz0maW Re5xUQ3jz9Q/4d6y7sHAj7FwYiRd3df2a9yVH4cMkUwq38o6rso4ACxd19sWK0w+ eB+jz0qAjedfQTHlJTnS9y/0GSbvxoltDlD1sVJERzC0DcD9rDW5iRIE810ZO+sd JVraVH158NOvaGjD6dvDb7laA74F7ZPg+c0p1hKY1N7GYad9lWz2TXWFszMm2G/Q 8HRwpOeW0jyXKs/z9lpASMoHk6ThPWI= -----END CERTIFICATE-----Generated at Sat Jun 7 12:33:29 2025 by rpki-client