$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa File: 74168fc4-19c5-3549-abc7-a40124cbc34c.roa (raw, json) Hash identifier: pwD/b3s5Cug1Q/eS5XdmJGf7hXb5P+Nzz+w8gPHiGN8= Subject key identifier: 21:B9:53:0B:57:EA:97:E2:91:45:80:EF:57:0C:4C:40:EA:C0:6A:B1 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F432858491D7183E8196C5D35F81BB400 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 26904 IP address blocks: 23.247.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:83:e8:19:6c:5d:35:f8:1b:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=67fc8a71-e289-419e-bc62-9712cc6d7088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:b2:3f:50:fb:33:1c:e8:be:31:2e:10:e1: b3:7a:56:73:cc:92:2b:01:60:9c:c3:f9:d3:77:39: e7:c7:46:d1:bc:c4:00:c4:f0:eb:1c:40:02:a8:59: da:10:0f:cc:48:24:fc:06:2a:57:e4:3d:ca:5b:ac: 57:e7:81:e5:11:e9:a6:b9:6a:1b:04:a3:b4:ba:a1: 68:df:94:be:c7:f3:d3:3d:6a:82:2c:c3:60:2d:13: 88:38:67:bf:6b:0f:8a:51:bb:b7:a5:50:89:b8:74: a0:af:f8:fa:17:4b:6b:c1:92:95:5c:63:8e:fc:96: c1:a9:ab:e0:ea:ed:3a:e2:73:46:e0:55:49:21:fb: 81:99:e3:69:c7:88:f3:f4:5e:d7:69:63:fb:7c:4e: f8:02:eb:be:b0:72:ca:17:58:52:5c:80:41:f9:d3: 85:8d:bd:ae:fc:8f:fb:dc:44:b0:6f:9d:f2:e4:bb: ca:5b:3a:bc:cb:ee:fe:79:b6:e6:e9:54:76:63:02: 02:ae:7c:21:5a:04:54:55:c5:58:37:cc:dc:6b:71: 3b:e7:1a:d3:25:e4:ee:e7:05:a4:ad:06:24:49:40: 8c:fa:4d:39:a4:ce:a2:f2:ba:a0:92:fe:79:f4:9f: 3b:1c:87:5e:f6:87:06:01:5e:c8:d1:de:6a:1c:09: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B9:53:0B:57:EA:97:E2:91:45:80:EF:57:0C:4C:40:EA:C0:6A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c1:29:40:10:14:61:30:9a:f0:bc:d7:64:df:6c:b9:8b:56: e3:e6:d8:83:d6:60:e0:ec:83:08:64:21:c2:a6:89:02:ef:d6: bb:4e:a7:6a:75:c7:0f:23:cd:67:27:d9:52:fa:c8:1b:53:06: 2f:be:18:39:5f:39:88:28:bb:3d:ad:c2:c2:24:6f:26:d3:e1: 93:e3:cb:52:d2:e9:2c:96:1d:e6:c3:32:d1:fb:7a:6c:81:c6: af:1c:59:7e:38:95:cc:6e:1b:b8:08:51:4d:9c:c6:e6:56:9a: 1a:23:c6:ae:93:aa:07:04:d1:c6:55:1b:7f:fb:2f:61:c4:64: a6:0e:c9:5c:f6:28:55:3d:76:f9:ab:65:e8:96:ed:b7:9d:11: 09:2c:2b:49:c6:39:15:ac:d6:20:c8:fc:a8:d9:c8:a4:86:cf: 55:29:a8:4a:26:a3:74:9e:cb:b5:c2:9a:4d:34:2b:51:e0:e0: a3:d1:0f:16:27:c2:fa:2f:cf:00:e3:5d:ae:be:69:26:79:c0: 54:fc:72:c6:fd:11:de:9b:0a:88:2f:94:d8:45:23:40:5f:12: 94:bf:eb:85:47:20:a7:aa:21:63:c3:06:c9:ef:c0:45:cb:19: 30:d0:d2:13:f4:12:76:45:f3:8b:25:41:9d:ae:a3:a5:42:aa: 42:91:d4:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYPoGWxdNfgbtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NjdmYzhhNzEtZTI4OS00MTllLWJjNjItOTcxMmNjNmQ3MDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlmyP1D7MxzovjEuEOGzelZzzJIrAWCcw/nT dznnx0bRvMQAxPDrHEACqFnaEA/MSCT8BipX5D3KW6xX54HlEemmuWobBKO0uqFo 35S+x/PTPWqCLMNgLROIOGe/aw+KUbu3pVCJuHSgr/j6F0trwZKVXGOO/JbBqavg 6u064nNG4FVJIfuBmeNpx4jz9F7XaWP7fE74Auu+sHLKF1hSXIBB+dOFjb2u/I/7 3ESwb53y5LvKWzq8y+7+ebbm6VR2YwICrnwhWgRUVcVYN8zca3E75xrTJeTu5wWk rQYkSUCM+k05pM6i8rqgkv559J87HIde9ocGAV7I0d5qHAki2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG5UwtX6pfikUWA71cMTEDqwGqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvNzQxNjhmYzQtMTljNS0z NTQ5LWFiYzctYTQwMTI0Y2JjMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHBKUAQFGEwmvC812TfbLmLVuPm2IPWYODsgwhkIcKmiQLv1rtOp2p1 xw8jzWcn2VL6yBtTBi++GDlfOYgouz2twsIkbybT4ZPjy1LS6SyWHebDMtH7emyB xq8cWX44lcxuG7gIUU2cxuZWmhojxq6TqgcE0cZVG3/7L2HEZKYOyVz2KFU9dvmr ZeiW7bedEQksK0nGORWs1iDI/KjZyKSGz1UpqEomo3Sey7XCmk00K1Hg4KPRDxYn wvovzwDjXa6+aSZ5wFT8csb9Ed6bCogvlNhFI0BfEpS/64VHIKeqIWPDBsnvwEXL GTDQ0hP0EnZF84slQZ2uo6VCqkKR1LU= -----END CERTIFICATE-----Generated at Sat Apr 12 02:07:38 2025 by rpki-client