$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa File: d823da31-dfeb-3482-8118-efd174a432a0.roa (raw, json) Hash identifier: cvkQDzbMpOZyzwXPeGPRk4e7g460WDjDZy3g+DODBik= Subject key identifier: EF:A3:1A:30:BF:A8:B0:7B:07:B9:A2:7F:69:C8:EE:47:01:E5:99:25 Certificate issuer: /CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Certificate serial: 010D0C9F432858496B7ED21D6609E8EA614B09A0 Authority key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 400402 IP address blocks: 23.134.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d2:1d:66:09:e8:ea:61:4b:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=815811c3-f2c8-4e74-9892-e28739b778bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:80:2c:71:7d:fa:51:d7:1b:e6:4e:58:80:38: 61:46:a2:6a:a6:97:f1:42:61:96:44:d2:28:da:e4: b2:3a:dc:29:29:66:ae:f4:90:2f:ee:ff:52:a1:f9: 96:92:06:12:0d:5b:4c:6c:ca:f4:c2:46:96:db:0c: 71:3b:51:03:4d:7b:91:f3:52:08:a7:82:7e:12:67: 19:34:29:ca:fc:c8:e7:c4:59:a1:69:ab:40:c1:4f: 3a:28:5b:94:e7:26:f6:c1:d1:a4:95:50:19:45:d9: e8:52:8f:d2:f4:2d:e8:57:58:bc:2c:8a:39:1a:4d: 27:96:78:ed:36:0d:9d:e8:50:1d:ad:1d:b7:b3:83: 31:b5:22:88:73:b0:91:5e:b6:11:62:19:b5:62:01: f4:43:cb:46:99:f5:d8:12:45:78:96:7e:35:8a:55: 0c:48:94:45:77:4a:a8:b8:04:07:6c:17:85:3a:df: 80:fa:64:7c:4e:e0:26:37:79:74:b6:24:ff:76:36: 8f:7a:c8:9a:b7:fd:ae:5a:d2:55:4e:49:cd:19:b8: 09:38:b9:aa:44:2d:8c:1d:20:aa:08:99:98:67:3b: 2d:06:e6:16:61:fe:4a:41:1f:b4:05:0b:c9:5a:15: 34:d5:20:24:e5:37:8e:9f:d3:5f:a7:48:f9:7d:0d: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A3:1A:30:BF:A8:B0:7B:07:B9:A2:7F:69:C8:EE:47:01:E5:99:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl X509v3 Authority Key Identifier: keyid:DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer sbgp-ipAddrBlock: critical IPv4: 23.134.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4e:b1:5a:64:5b:66:09:00:1b:a2:fc:2a:12:1f:e2:ea:76: 9f:76:67:51:c7:df:3f:89:a3:08:ac:d0:14:c9:90:c6:19:3e: c4:7d:a5:fc:70:c2:e9:00:e6:b1:12:81:0a:5e:c7:e6:b2:23: fa:70:b3:59:42:1f:45:b3:f1:35:67:40:73:f6:21:70:ca:ef: 03:28:ed:d3:92:7d:fd:04:a0:b3:fe:3c:ce:d0:f1:91:ac:c7: 81:6b:a8:d8:11:0a:a2:15:05:fb:5f:0c:e8:13:23:31:96:bc: de:01:32:9f:54:4c:71:cb:1c:b1:ab:87:27:2c:d5:87:20:dd: c3:a1:06:38:84:cc:85:55:5e:de:a4:95:e7:f6:2d:23:1c:c7: 64:73:bb:1b:4f:3b:8e:eb:cf:27:70:32:51:db:f4:7d:b7:b2: 7c:4a:3a:6e:59:de:74:1c:7b:91:d8:48:b9:03:29:54:e5:21: ad:3e:92:b3:c5:81:e2:c1:d8:21:ed:05:b3:b7:d3:e1:7a:d2: 16:2b:41:e4:2c:62:e4:a6:cb:e1:4c:b8:54:96:35:30:6c:62: 07:3a:6c:b6:b3:cc:76:86:9c:ed:bf:e6:d3:28:d9:96:16:42: 12:11:aa:22:f7:07:f8:05:c0:f5:68:01:09:62:ae:13:8d:f4: e2:8e:9f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftIdZgno6mFLCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhYTViMjItYmRhMi00MTQxLThiZGYtOThhNzg2OTZk ZDAzMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk ODE1ODExYzMtZjJjOC00ZTc0LTk4OTItZTI4NzM5Yjc3OGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YAscX36Udcb5k5YgDhhRqJqppfxQmGWRNIo 2uSyOtwpKWau9JAv7v9SofmWkgYSDVtMbMr0wkaW2wxxO1EDTXuR81IIp4J+EmcZ NCnK/MjnxFmhaatAwU86KFuU5yb2wdGklVAZRdnoUo/S9C3oV1i8LIo5Gk0nlnjt Ng2d6FAdrR23s4MxtSKIc7CRXrYRYhm1YgH0Q8tGmfXYEkV4ln41ilUMSJRFd0qo uAQHbBeFOt+A+mR8TuAmN3l0tiT/djaPesiat/2uWtJVTknNGbgJOLmqRC2MHSCq CJmYZzstBuYWYf5KQR+0BQvJWhU01SAk5TeOn9Nfp0j5fQ1czwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+jGjC/qLB7B7mif2nI7kcB5ZklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGFh NWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5NmRkMDMvZDgyM2RhMzEtZGZlYi0z NDgyLTgxMTgtZWZkMTc0YTQzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRhYTViMjItYmRhMi00MTQxLThi ZGYtOThhNzg2OTZkZDAzLzc0YWE1YjIyLWJkYTItNDE0MS04YmRmLTk4YTc4Njk2 ZGQwMy5jcmwwHwYDVR0jBBgwFoAU3qp9sUUjQBMBvni32v/Oz8/U868wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3 ODY5NmRkMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJROsVpkW2YJABui/CoSH+Lqdp92Z1HH3z+Jowis0BTJkMYZPsR9pfxw wukA5rESgQpex+ayI/pws1lCH0Wz8TVnQHP2IXDK7wMo7dOSff0EoLP+PM7Q8ZGs x4FrqNgRCqIVBftfDOgTIzGWvN4BMp9UTHHLHLGrhycs1Ycg3cOhBjiEzIVVXt6k lef2LSMcx2RzuxtPO47rzydwMlHb9H23snxKOm5Z3nQce5HYSLkDKVTlIa0+krPF geLB2CHtBbO30+F60hYrQeQsYuSmy+FMuFSWNTBsYgc6bLazzHaGnO2/5tMo2ZYW QhIRqiL3B/gFwPVoAQlirhON9OKOnw8= -----END CERTIFICATE-----Generated at Sun Apr 6 02:32:08 2025 by rpki-client