$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa File: 41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa (raw, json) Hash identifier: woOya3gIy4W8GxNzcqgQbY8UchiL7aDYNLYJCMTTHfc= Subject key identifier: 76:8E:43:0C:05:66:C2:4F:17:B2:92:F7:9A:C0:FD:AC:9D:85:88:5E Certificate issuer: /CN=7d992196-6f15-4590-b76f-b34e1ea329f8 Certificate serial: 010D0C9F43285849287E4FEAC006271881CAE0E0 Authority key identifier: C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 63023 IP address blocks: 23.168.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:4f:ea:c0:06:27:18:81:ca:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d992196-6f15-4590-b76f-b34e1ea329f8 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=433ed1aa-04a7-4225-b0f3-a92827b9af03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:46:e1:5f:e4:96:ff:99:3a:51:99:3c:a5: 7f:1f:0b:23:1b:27:19:14:fd:cb:b0:75:a7:23:dc: 09:f2:d8:8e:24:fe:a9:81:58:6a:06:aa:01:bc:69: 22:2f:b2:68:37:54:a6:9b:4b:bc:1a:c9:0d:4f:ee: 9b:84:55:0e:8d:b0:94:6b:d3:57:16:d1:30:01:4a: 34:9f:28:4c:8a:48:47:23:72:cc:b1:78:b6:7c:c6: 28:be:29:aa:fe:7e:bd:a7:fb:37:e8:f7:62:68:61: 00:48:82:9c:11:05:4d:97:10:15:d9:4f:50:6f:30: 3b:dd:02:06:df:20:23:1b:f8:35:df:8a:a1:12:2e: 58:c5:3f:ad:c1:c2:46:b9:b8:d4:81:e7:a0:e1:23: b8:d0:c1:ae:a4:9d:7a:e1:92:4d:59:4c:a5:83:e8: 83:22:d1:6b:d8:d0:0e:35:c6:7a:04:be:ad:aa:01: 67:e8:75:47:17:aa:4c:e5:48:31:0f:c7:21:2a:6c: 99:03:6a:0b:00:81:62:62:99:e9:f7:4c:24:19:6e: b6:72:5f:cf:7f:6d:89:0b:cf:0b:d4:38:cb:f5:ec: 6b:a6:27:23:4f:7e:55:b8:4e:39:c2:0d:e4:c4:c4: 5c:07:60:a0:52:b3:ef:92:1a:22:47:da:cf:9f:4d: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8E:43:0C:05:66:C2:4F:17:B2:92:F7:9A:C0:FD:AC:9D:85:88:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.crl X509v3 Authority Key Identifier: keyid:C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer sbgp-ipAddrBlock: critical IPv4: 23.168.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:19:a6:6f:2d:b8:97:9d:1a:25:6d:15:88:7b:f0:4a:44:b7: 49:ec:f4:d2:29:f8:6e:f6:a6:4e:19:1f:41:e3:e7:32:fe:b4: 0c:9d:dd:2f:c1:74:d7:a1:35:51:c4:1c:51:a2:0e:2e:a6:5e: b6:dd:f2:d5:e6:0d:aa:0e:58:32:98:a6:ba:c3:11:e6:98:63: 95:27:48:de:6d:79:4b:a0:53:ad:d5:ff:c8:a5:cc:98:14:fc: 13:74:f8:9e:b9:d1:1c:00:0f:ba:fd:dd:bc:b2:e6:b1:24:89: c7:a1:a2:57:60:c3:f1:2f:b7:da:1e:7e:d6:9d:de:dd:66:71: be:1c:ea:eb:1b:ac:ad:50:85:7f:20:44:6b:67:03:c1:9a:77: e0:62:19:cd:47:42:63:38:b8:b2:71:73:65:00:4a:f3:37:93: c1:b8:65:ae:c0:0d:76:33:e4:92:23:8c:f3:82:36:0b:a3:a6: e2:0a:5f:cb:3c:97:27:e1:53:04:51:06:54:e7:1c:24:6f:d4: 25:f1:33:c2:4e:8d:9b:6d:0f:31:5d:6c:41:ff:7b:e7:aa:1b: 89:c3:f2:36:df:b0:fd:c0:84:9f:53:63:49:c7:a3:44:d2:3f: f3:06:d8:24:1f:a0:81:ef:27:45:9e:2c:ab:b4:30:81:89:a8: 94:9c:ae:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofk/qwAYnGIHK4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q5OTIxOTYtNmYxNS00NTkwLWI3NmYtYjM0ZTFlYTMy OWY4MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDMzZWQxYWEtMDRhNy00MjI1LWIwZjMtYTkyODI3YjlhZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI9G4V/klv+ZOlGZPKV/HwsjGycZFP3LsHWn I9wJ8tiOJP6pgVhqBqoBvGkiL7JoN1Smm0u8GskNT+6bhFUOjbCUa9NXFtEwAUo0 nyhMikhHI3LMsXi2fMYovimq/n69p/s36PdiaGEASIKcEQVNlxAV2U9QbzA73QIG 3yAjG/g134qhEi5YxT+twcJGubjUgeeg4SO40MGupJ164ZJNWUylg+iDItFr2NAO NcZ6BL6tqgFn6HVHF6pM5UgxD8chKmyZA2oLAIFiYpnp90wkGW62cl/Pf22JC88L 1DjL9exrpicjT35VuE45wg3kxMRcB2CgUrPvkhoiR9rPn03HHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaOQwwFZsJPF7KS95rA/aydhYheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZDk5 MjE5Ni02ZjE1LTQ1OTAtYjc2Zi1iMzRlMWVhMzI5ZjgvNDFiODY2NWQtM2JmMi0z NmMzLTk5NjMtMGYyNmYzZjdiMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2Q5OTIxOTYtNmYxNS00NTkwLWI3 NmYtYjM0ZTFlYTMyOWY4LzdkOTkyMTk2LTZmMTUtNDU5MC1iNzZmLWIzNGUxZWEz MjlmOC5jcmwwHwYDVR0jBBgwFoAUxCGjmgfFSd28vSIb8T9B7iDzBFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ZDk5MjE5Ni02ZjE1LTQ1OTAtYjc2Zi1iMzRl MWVhMzI5ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Zpm8tuJedGiVtFYh78EpEt0ns9NIp+G72pk4ZH0Hj5zL+tAyd3S/B dNehNVHEHFGiDi6mXrbd8tXmDaoOWDKYprrDEeaYY5UnSN5teUugU63V/8ilzJgU /BN0+J650RwAD7r93byy5rEkiceholdgw/Evt9oeftad3t1mcb4c6usbrK1QhX8g RGtnA8Gad+BiGc1HQmM4uLJxc2UASvM3k8G4Za7ADXYz5JIjjPOCNgujpuIKX8s8 lyfhUwRRBlTnHCRv1CXxM8JOjZttDzFdbEH/e+eqG4nD8jbfsP3AhJ9TY0nHo0TS P/MG2CQfoIHvJ0WeLKu0MIGJqJScrlQ= -----END CERTIFICATE-----Generated at Sat Apr 5 00:25:17 2025 by rpki-client