$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa File: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json) Hash identifier: 2u0ncU11WHzCt0+KA5u3fJ6wV1BwhVKWr0axhdSOfXw= Subject key identifier: B0:1E:DA:78:D1:80:E6:9B:20:86:3A:3E:51:42:AA:D5:82:A7:28:0E Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F432858494E2EB1EF229060E5A9EF2700 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 13849 IP address blocks: 23.133.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b1:ef:22:90:60:e5:a9:ef:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=73de80f6-a234-484a-aa3b-aa9a8b6171ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:8d:43:da:1d:a7:b6:a0:6c:e4:7b:97:5c: 9e:da:ba:14:61:ef:1a:f7:32:20:bf:fb:1a:c9:ae: 3b:6c:30:e3:2b:2f:ea:04:49:66:77:10:fc:70:54: af:7b:1e:03:29:3d:3d:81:8c:fa:ff:d4:10:41:db: 05:98:86:6a:96:b0:12:dd:c7:18:20:c2:9b:59:ad: ff:b9:a1:b1:c3:a2:87:81:5a:53:e5:2a:ff:15:85: c9:96:9e:5c:87:73:c2:8c:58:71:ff:ff:2c:99:93: 37:e2:12:16:e6:6f:86:0c:d7:d3:4c:51:1e:f1:a9: 6b:fc:36:df:3e:bc:59:35:ec:ed:da:cd:f1:b4:3a: 7e:a6:4f:ca:67:59:8c:08:92:39:d2:e3:09:56:d8: d0:21:9e:a9:44:60:d2:85:48:a0:70:31:a5:0c:a0: 18:a7:46:7b:f5:10:9a:5c:a4:37:5a:a2:15:a9:a8: 81:ad:0f:a8:d9:a5:83:7c:1a:8a:55:de:aa:27:7b: a2:54:4a:e9:8c:d5:ac:03:de:62:fe:dc:0c:76:cb: be:9b:5e:78:72:e1:e3:08:c0:be:5c:ab:0f:92:6b: 05:fc:03:5a:b3:56:60:94:2f:b9:01:42:3d:ca:98: c2:72:65:34:6c:66:13:f0:8c:55:fd:4d:44:41:50: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1E:DA:78:D1:80:E6:9B:20:86:3A:3E:51:42:AA:D5:82:A7:28:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 23.133.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e2:bd:aa:6f:df:53:bb:18:cf:09:72:36:5c:b3:cc:24:62: 1e:9e:39:eb:b6:92:fc:57:c5:10:3d:5b:1d:29:0b:a1:3f:1a: e7:36:56:ac:1d:c3:47:10:60:b8:9b:e7:fd:6e:34:ca:cb:9a: 29:43:ee:bc:2a:57:af:4b:96:d2:ca:2b:2b:60:16:d7:9f:4f: c7:ac:5e:78:b4:64:3d:fd:27:34:db:35:c1:82:48:66:79:7c: 35:b2:bb:60:ee:d7:b5:2e:f6:1d:6a:d9:8e:de:dc:b3:1f:9c: 8b:8c:0e:0e:fb:d2:58:8f:ec:23:51:d9:0e:66:00:ec:d4:7c: 16:4d:b1:06:84:1c:d7:1e:03:74:e0:b7:65:23:ea:06:55:78: 20:3c:45:1e:58:49:57:ab:ef:8a:2d:d8:b9:a3:fa:1c:6c:bd: fe:3e:ff:21:3d:1c:42:3d:fb:0a:84:0e:6a:f3:3e:46:50:2f: fd:02:ef:49:2d:28:22:49:06:16:af:65:a4:7e:5b:46:b0:90: f4:39:b0:3d:4d:f5:20:bc:d1:ec:1b:65:d1:b5:0f:23:17:5d: ef:d3:b8:98:d0:25:b4:bc:67:9f:2d:d0:a6:35:1b:56:cf:75: e2:14:36:97:a7:70:3c:12:72:05:3c:88:cc:7a:c3:a8:c0:24: 60:13:79:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrHvIpBg5anvJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NzNkZTgwZjYtYTIzNC00ODRhLWFhM2ItYWE5YThiNjE3MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOiNQ9odp7agbOR7l1ye2roUYe8a9zIgv/sa ya47bDDjKy/qBElmdxD8cFSvex4DKT09gYz6/9QQQdsFmIZqlrAS3ccYIMKbWa3/ uaGxw6KHgVpT5Sr/FYXJlp5ch3PCjFhx//8smZM34hIW5m+GDNfTTFEe8alr/Dbf PrxZNezt2s3xtDp+pk/KZ1mMCJI50uMJVtjQIZ6pRGDShUigcDGlDKAYp0Z79RCa XKQ3WqIVqaiBrQ+o2aWDfBqKVd6qJ3uiVErpjNWsA95i/twMdsu+m154cuHjCMC+ XKsPkmsF/ANas1ZglC+5AUI9ypjCcmU0bGYT8IxV/U1EQVDkZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAe2njRgOabIIY6PlFCqtWCpygOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnivapv31O7GM8JcjZcs8wkYh6eOeu2kvxXxRA9Wx0pC6E/Guc2Vqwd w0cQYLib5/1uNMrLmilD7rwqV69LltLKKytgFtefT8esXni0ZD39JzTbNcGCSGZ5 fDWyu2Du17Uu9h1q2Y7e3LMfnIuMDg770liP7CNR2Q5mAOzUfBZNsQaEHNceA3Tg t2Uj6gZVeCA8RR5YSVer74ot2Lmj+hxsvf4+/yE9HEI9+wqEDmrzPkZQL/0C70kt KCJJBhavZaR+W0awkPQ5sD1N9SC80ewbZdG1DyMXXe/TuJjQJbS8Z58t0KY1G1bP deIUNpencDwScgU8iMx6w6jAJGATeYg= -----END CERTIFICATE-----Generated at Wed Apr 16 17:10:46 2025 by rpki-client