$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa File: 3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa (raw, json) Hash identifier: AK4oWUc8HV77Mus3Hddz4gFSvJNQ2LD5OBtsSCHoClg= Subject key identifier: 71:1D:DA:B8:31:2A:BE:A1:3A:C8:DD:DF:07:70:3D:FC:98:4A:5F:00 Certificate issuer: /CN=86d41278-dbec-4ce1-a2aa-72427ed93680 Certificate serial: 010D0C9F432858494303E8DC9681E51C187A1200 Authority key identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 393857 IP address blocks: 23.148.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:e8:dc:96:81:e5:1c:18:7a:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d41278-dbec-4ce1-a2aa-72427ed93680 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=44585b83-0e3c-4f5f-8429-50670188c201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:c5:8c:ad:24:20:4d:ab:fd:29:08:3e:55: d3:ae:e3:27:5d:6c:c8:ab:0b:47:cf:17:13:e9:73: f7:d0:81:5c:f9:a3:e5:99:fc:fe:61:c3:2d:3a:63: 61:3b:e7:e5:8c:a9:39:0d:5c:a7:0a:98:9b:84:7e: 1e:68:76:02:0a:67:a5:9d:66:bb:85:69:5e:f6:5f: 45:6f:e4:e1:d7:3d:3f:0b:3e:88:34:72:2b:b0:31: bb:d2:2f:65:3c:79:90:2c:e9:c1:77:e8:81:69:60: 40:50:ce:67:85:52:db:1b:e7:a2:c9:65:dd:cd:68: 6e:0e:4f:fa:3b:be:97:fc:c3:1c:ae:ff:a9:67:3e: 0b:5c:e1:12:40:42:1b:70:0c:2b:da:70:eb:da:f8: be:7e:41:d0:e3:90:80:76:fd:39:08:09:dc:24:24: a3:bc:a3:3a:75:82:e4:61:ac:f7:6f:2c:23:e5:ed: 8e:36:da:6e:2e:92:00:fb:ef:28:ab:2e:79:cd:30: 08:86:54:eb:ea:d6:51:a3:a3:9c:f2:ea:53:53:f7: 49:c6:9c:99:4e:5c:3a:73:69:59:fd:07:de:f0:b5: be:16:bd:15:9a:83:1a:6b:60:16:32:2b:7c:86:a1: 60:8b:80:12:c7:67:43:d9:9a:01:a0:3e:b0:ad:6d: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:DA:B8:31:2A:BE:A1:3A:C8:DD:DF:07:70:3D:FC:98:4A:5F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.crl X509v3 Authority Key Identifier: keyid:89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer sbgp-ipAddrBlock: critical IPv4: 23.148.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:0e:04:ff:1a:16:0d:29:70:e7:33:28:26:a1:a7:48:4a:41: b7:c0:78:11:67:4a:d4:4d:38:7f:d9:fa:8f:9c:1e:e8:5e:a8: b8:19:26:3f:35:f3:a2:84:3a:d0:59:a5:d9:be:8f:ed:e5:3f: 47:73:23:6b:21:bb:13:ad:a2:a8:e8:e9:13:60:55:ba:4d:2e: 1a:ed:16:7d:f6:6e:b5:97:0f:86:53:b5:84:cc:e2:0b:5d:ce: 57:8a:05:75:86:31:0d:a0:0f:30:bb:66:86:bf:76:0e:b9:f9: aa:b9:9f:74:e3:85:b9:3c:8f:92:17:23:f8:67:8c:b5:aa:c0: 09:87:f5:27:6b:9b:b0:63:eb:40:ac:97:37:10:6e:12:62:9c: 3b:21:ba:4a:03:e1:57:6c:4e:5d:8c:fa:a7:4f:f8:08:eb:79: ff:f2:0b:18:f6:3d:23:89:03:ad:98:8a:08:d0:c2:a4:11:7c: d7:51:0a:70:7a:59:35:94:3c:e3:d9:7e:d4:22:60:ad:c3:71: d5:a9:a4:e4:f1:c3:07:e3:c4:a1:39:53:4b:00:45:e6:6b:08: e0:f0:58:84:65:bd:3e:21:1c:24:9e:fb:b2:e5:93:3b:9c:46: 6c:4a:42:e6:17:bd:f1:f9:11:80:c1:65:e2:9f:68:e9:ec:bc: 6b:26:f2:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA+jcloHlHBh6EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZkNDEyNzgtZGJlYy00Y2UxLWEyYWEtNzI0MjdlZDkz NjgwMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk NDQ1ODViODMtMGUzYy00ZjVmLTg0MjktNTA2NzAxODhjMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6bFjK0kIE2r/SkIPlXTruMnXWzIqwtHzxcT 6XP30IFc+aPlmfz+YcMtOmNhO+fljKk5DVynCpibhH4eaHYCCmelnWa7hWle9l9F b+Th1z0/Cz6INHIrsDG70i9lPHmQLOnBd+iBaWBAUM5nhVLbG+eiyWXdzWhuDk/6 O76X/MMcrv+pZz4LXOESQEIbcAwr2nDr2vi+fkHQ45CAdv05CAncJCSjvKM6dYLk Yaz3bywj5e2ONtpuLpIA++8oqy55zTAIhlTr6tZRo6Oc8upTU/dJxpyZTlw6c2lZ /Qfe8LW+Fr0VmoMaa2AWMit8hqFgi4ASx2dD2ZoBoD6wrW1RuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEd2rgxKr6hOsjd3wdwPfyYSl8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NmQ0 MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQyN2VkOTM2ODAvMzk3MTg3MWUtZmRhNy0z ZWNmLWExZDYtNGVmN2NmNDE3ZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODZkNDEyNzgtZGJlYy00Y2UxLWEy YWEtNzI0MjdlZDkzNjgwLzg2ZDQxMjc4LWRiZWMtNGNlMS1hMmFhLTcyNDI3ZWQ5 MzY4MC5jcmwwHwYDVR0jBBgwFoAUiT2MWxo/CaLa1FdjJsBwSmcbdYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NmQ0MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQy N2VkOTM2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoOBP8aFg0pcOczKCahp0hKQbfAeBFnStRNOH/Z+o+cHuheqLgZJj81 86KEOtBZpdm+j+3lP0dzI2shuxOtoqjo6RNgVbpNLhrtFn32brWXD4ZTtYTM4gtd zleKBXWGMQ2gDzC7Zoa/dg65+aq5n3Tjhbk8j5IXI/hnjLWqwAmH9Sdrm7Bj60Cs lzcQbhJinDshukoD4VdsTl2M+qdP+Ajref/yCxj2PSOJA62YigjQwqQRfNdRCnB6 WTWUPOPZftQiYK3DcdWppOTxwwfjxKE5U0sAReZrCODwWIRlvT4hHCSe+7Llkzuc RmxKQuYXvfH5EYDBZeKfaOnsvGsm8nQ= -----END CERTIFICATE-----Generated at Fri Apr 18 05:02:46 2025 by rpki-client