$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/7f68eef0-af35-3ade-8c11-9f18d445997d.roa File: 7f68eef0-af35-3ade-8c11-9f18d445997d.roa (raw, json) Hash identifier: n+kjDHpiXMpC6LAMF2vg8A0/mqMeXHIyc+sYOtLRvgI= Subject key identifier: B7:08:48:DA:7D:2D:5B:83:2A:2A:7C:0E:E3:6D:F8:B7:B0:8B:F6:31 Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F432858487A29CDB68043BADCA5820600 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/7f68eef0-af35-3ade-8c11-9f18d445997d.roa Signing time: Wed 08 Jan 2025 14:19:44 +0000 ROA not before: Wed 08 Jan 2025 14:19:44 +0000 ROA not after: Tue 08 Apr 2025 13:19:44 +0000 asID: 40788 IP address blocks: 23.182.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:29:cd:b6:80:43:ba:dc:a5:82:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Jan 8 14:19:44 2025 GMT Not After : Apr 8 13:19:44 2025 GMT Subject: CN=d83f768b-8a9c-48a0-a971-d7e1c92eda86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:a4:a7:1f:94:b3:c9:5d:19:31:b0:79:dc: da:47:de:a3:69:f4:8f:3f:fa:71:1f:b1:db:eb:c7: 6a:60:51:23:88:9a:65:11:1c:d6:ae:0d:8d:6c:ce: ef:5a:62:d5:93:d9:92:97:11:12:12:07:e9:8f:79: aa:93:c0:c4:e2:35:ce:cc:bb:f3:17:96:e1:b5:5b: fa:cb:af:04:75:4b:53:6b:2b:39:40:f8:2a:85:47: a9:aa:1f:1a:40:84:86:4c:24:4c:38:b3:75:0b:db: c4:fd:ae:59:b8:b2:8f:d4:94:16:47:6c:d2:93:ad: 43:a0:3b:03:5a:77:ed:29:55:ff:2f:b4:9d:77:39: 70:d7:8c:1d:b0:05:df:ba:ca:20:9b:4e:7b:7e:4b: 29:39:a0:33:d0:60:ff:d8:64:5a:e6:4b:32:6c:9e: ec:c0:71:6e:42:c2:c9:77:72:65:6c:d1:d8:87:af: 99:f4:76:96:7f:f1:f8:02:e2:30:0e:26:b4:3a:8b: d0:2c:19:00:3d:2d:37:26:bf:c6:b2:9d:cb:6b:0e: 46:3e:2a:fe:9a:64:70:99:8e:c9:53:61:0e:04:6a: ca:a0:a2:4e:e8:10:c6:85:48:4f:56:10:cf:34:5d: 8b:3e:83:f0:d5:55:cc:91:d2:e2:fd:75:97:c1:79: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:08:48:DA:7D:2D:5B:83:2A:2A:7C:0E:E3:6D:F8:B7:B0:8B:F6:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/7f68eef0-af35-3ade-8c11-9f18d445997d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 23.182.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:28:a1:cb:25:40:27:bf:60:e9:e6:1e:d5:ea:8e:93:4f:9a: 6b:68:32:cc:59:1e:97:ec:c6:4a:00:5a:46:d7:9d:a0:0f:47: 2a:94:c8:40:76:5b:e2:c0:8d:8c:71:7f:14:10:a2:6d:13:bf: 6d:0b:f2:b1:bc:28:55:0d:94:f7:9a:d8:07:23:ca:c7:49:ac: 29:4a:71:41:90:06:41:22:58:57:d2:52:14:17:95:e4:23:bc: db:ad:58:fc:b9:60:ac:37:19:56:99:64:ef:56:bc:14:5a:8c: e7:dd:d4:c0:e7:0e:da:9d:ac:57:ba:a5:82:96:49:c7:53:9a: e8:f9:eb:4b:32:a0:7a:72:2c:8d:e2:a9:d4:7d:02:d0:6c:20: 85:30:b7:97:01:fd:fb:78:7e:96:60:0d:1c:55:53:e6:9a:13: 99:83:01:98:56:a1:68:2f:47:e4:c1:de:13:f7:aa:34:19:ce: 7a:9d:a7:5c:e0:80:5c:23:4a:55:87:78:e0:aa:cb:01:97:51: 78:30:70:b6:76:d5:ed:aa:0d:81:ec:b1:5a:e4:40:7e:e0:43: c3:6a:ca:d3:48:28:a7:2d:9b:df:b6:39:ea:b6:23:68:9c:2e: d8:91:67:21:4c:9f:33:f1:59:4e:98:79:48:a2:23:ae:d0:7e: 60:11:0f:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6Kc22gEO63KWCBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI1MDEwODE0MTk0NFoXDTI1MDQwODEzMTk0NFowLzEtMCsGA1UEAxMk ZDgzZjc2OGItOGE5Yy00OGEwLWE5NzEtZDdlMWM5MmVkYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hekpx+Us8ldGTGwedzaR96jafSPP/pxH7Hb 68dqYFEjiJplERzWrg2NbM7vWmLVk9mSlxESEgfpj3mqk8DE4jXOzLvzF5bhtVv6 y68EdUtTays5QPgqhUepqh8aQISGTCRMOLN1C9vE/a5ZuLKP1JQWR2zSk61DoDsD WnftKVX/L7Sddzlw14wdsAXfusogm057fkspOaAz0GD/2GRa5ksybJ7swHFuQsLJ d3JlbNHYh6+Z9HaWf/H4AuIwDia0OovQLBkAPS03Jr/Gsp3Law5GPir+mmRwmY7J U2EOBGrKoKJO6BDGhUhPVhDPNF2LPoPw1VXMkdLi/XWXwXk69QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcISNp9LVuDKip8DuNt+Lewi/YxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvN2Y2OGVlZjAtYWYzNS0z YWRlLThjMTEtOWYxOGQ0NDU5OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0oocslQCe/YOnmHtXqjpNPmmtoMsxZHpfsxkoAWkbXnaAPRyqUyEB2 W+LAjYxxfxQQom0Tv20L8rG8KFUNlPea2AcjysdJrClKcUGQBkEiWFfSUhQXleQj vNutWPy5YKw3GVaZZO9WvBRajOfd1MDnDtqdrFe6pYKWScdTmuj560syoHpyLI3i qdR9AtBsIIUwt5cB/ft4fpZgDRxVU+aaE5mDAZhWoWgvR+TB3hP3qjQZznqdp1zg gFwjSlWHeOCqywGXUXgwcLZ21e2qDYHssVrkQH7gQ8NqytNIKKctm9+2Oeq2I2ic LtiRZyFMnzPxWU6YeUiiI67QfmARD8w= -----END CERTIFICATE-----Generated at Wed Feb 5 18:59:59 2025 by rpki-client