$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa File: db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa (raw, json) Hash identifier: YpKn1hKiIGLsbCQWI7gsaPtFqm02Gg04IpqB55bEP+o= Subject key identifier: A5:63:6E:7E:C8:F3:57:8E:6B:5F:5A:D3:63:6F:D8:51:AB:27:BC:A2 Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F43285849244E7A18D50358B070CBA500 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7a:18:d5:03:58:b0:70:cb:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=b4d0b5cb-6241-4abc-89f0-0212a3200307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:45:4e:ad:0b:d5:89:48:15:69:e0:1c:32: b5:22:2e:8c:d6:44:2a:f0:d2:37:45:5c:da:e9:60: b2:02:49:a9:09:c3:c8:b1:5d:02:91:71:81:ae:39: 1b:12:e4:ea:71:97:48:72:83:65:2b:18:e6:b1:bc: da:3e:3d:2a:04:39:93:14:0a:d8:3a:a3:4b:0c:8e: 72:05:23:b8:2a:92:2a:08:53:96:a0:6c:08:32:b0: a3:bb:6d:53:a4:e5:1c:b5:c7:3e:69:24:08:26:3f: 8a:55:f6:18:09:49:a1:4f:58:47:03:af:c4:d7:f6: 74:d8:3c:6c:2a:52:f3:27:52:45:e9:ff:11:fe:eb: 44:fb:b5:4b:8b:01:31:f3:17:09:2b:c4:04:73:ae: 31:3a:07:4b:62:dd:0d:d9:79:9b:5b:38:e9:d8:5e: 72:60:07:df:e1:06:09:be:5e:d9:35:d2:5b:b4:bd: c7:e2:f1:b2:27:15:1c:26:71:b4:d7:6d:16:1c:3b: 5c:96:31:5c:1c:ae:d0:d1:4b:8e:ec:44:cb:26:d8: 17:5f:a6:5e:90:2b:24:bc:16:77:3a:61:66:70:3e: d7:e9:bc:00:42:5e:ea:8a:db:46:f7:91:65:de:93: 1b:fd:77:3c:ae:60:97:6d:26:15:68:d5:01:fa:05: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:63:6E:7E:C8:F3:57:8E:6B:5F:5A:D3:63:6F:D8:51:AB:27:BC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e7:b7:39:a4:3f:e5:f1:2e:38:64:9e:ff:10:10:82:a3:07: 5b:3a:e0:ec:1b:1d:93:29:19:b2:7a:3a:d5:1d:0b:57:79:73: 4d:cc:24:ac:d0:51:ef:19:09:3b:da:f6:c3:9b:24:97:8e:5d: fa:2e:77:dd:fa:b7:9e:3b:a5:db:fc:7d:df:46:8d:78:3d:27: 35:f2:6b:00:65:f7:70:28:e6:f8:20:b0:cf:ca:54:4e:b9:cb: 72:ab:8e:30:fb:59:23:2d:a0:bb:05:4a:bc:1b:b2:5d:a1:c2: d8:3f:5a:90:5b:9a:e0:9b:58:ce:a5:f3:67:39:93:88:16:1b: 26:07:26:db:f8:b2:bd:47:e2:12:65:1a:62:c8:5c:db:6a:3c: 53:10:99:f1:d9:22:0f:41:41:6e:7c:53:4f:03:1a:a6:3d:40: 27:f4:55:92:1e:e1:51:b6:de:bc:61:cc:d9:19:48:c7:be:97: e4:4a:0a:aa:44:cb:31:ab:58:92:3a:9b:cd:28:26:4b:51:50: 91:e7:d3:5d:ea:ce:23:f0:8f:30:91:15:06:43:98:5c:a0:8c: 33:b3:53:9c:6e:1f:b2:35:76:71:0b:aa:67:09:e4:0e:e6:56: a2:00:cc:70:88:a5:4c:27:52:ff:1c:f6:f8:24:bc:c5:00:66: 90:22:4b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnoY1QNYsHDLpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YjRkMGI1Y2ItNjI0MS00YWJjLTg5ZjAtMDIxMmEzMjAwMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW5FTq0L1YlIFWngHDK1Ii6M1kQq8NI3RVza 6WCyAkmpCcPIsV0CkXGBrjkbEuTqcZdIcoNlKxjmsbzaPj0qBDmTFArYOqNLDI5y BSO4KpIqCFOWoGwIMrCju21TpOUctcc+aSQIJj+KVfYYCUmhT1hHA6/E1/Z02Dxs KlLzJ1JF6f8R/utE+7VLiwEx8xcJK8QEc64xOgdLYt0N2XmbWzjp2F5yYAff4QYJ vl7ZNdJbtL3H4vGyJxUcJnG0120WHDtcljFcHK7Q0UuO7ETLJtgXX6ZekCskvBZ3 OmFmcD7X6bwAQl7qittG95Fl3pMb/Xc8rmCXbSYVaNUB+gUKyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVjbn7I81eOa19a02Nv2FGrJ7yiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvZGI2OGVmODYtOTQ3NS0z Y2IwLWI1NGUtZGU2N2M1MWExZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvntzmkP+XxLjhknv8QEIKjB1s64OwbHZMpGbJ6OtUdC1d5c03MJKzQ Ue8ZCTva9sObJJeOXfoud936t547pdv8fd9GjXg9JzXyawBl93Ao5vggsM/KVE65 y3KrjjD7WSMtoLsFSrwbsl2hwtg/WpBbmuCbWM6l82c5k4gWGyYHJtv4sr1H4hJl GmLIXNtqPFMQmfHZIg9BQW58U08DGqY9QCf0VZIe4VG23rxhzNkZSMe+l+RKCqpE yzGrWJI6m80oJktRUJHn013qziPwjzCRFQZDmFygjDOzU5xuH7I1dnELqmcJ5A7m VqIAzHCIpUwnUv8c9vgkvMUAZpAiS4M= -----END CERTIFICATE-----Generated at Fri Apr 4 23:44:17 2025 by rpki-client