$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa File: 032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json) Hash identifier: i4eUVD1JPEqHr3YuDIBdEhjA9mQAp8tNFc6jwcjPG3o= Subject key identifier: 16:00:37:1B:84:0B:77:40:F2:50:A5:AF:84:84:80:CD:81:9F:AA:2F Certificate issuer: /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Certificate serial: 010D0C9F432858494B63FB3F45F2B47C5F374180 Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 22597 IP address blocks: 23.159.120.0/24 maxlen: 24 2607:5fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:fb:3f:45:f2:b4:7c:5f:37:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=535c0f4a-96f9-4e9e-a3e6-6dfbc52e484a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:7d:09:7c:b3:40:2c:0b:2e:e9:a1:c1:0d: 23:c9:48:ff:fa:b9:5d:b4:43:2f:67:6b:a7:c4:b0: 7a:a8:ee:e2:c5:ab:3d:3d:82:fd:c6:2a:a4:e8:1e: 10:6b:56:0d:76:2e:56:e5:07:7c:d1:b9:d2:2a:8b: 41:cb:5a:f5:55:df:dd:f1:75:b3:ad:06:28:75:13: 25:18:6a:1d:8c:35:0d:7b:ff:19:0c:c9:45:03:ec: 31:b1:04:ed:ac:f7:29:f3:62:5d:f9:a7:58:57:d8: 61:9b:df:17:63:62:57:09:fa:3c:58:47:3d:78:71: 5c:aa:8a:90:85:7c:81:a7:76:ff:4b:38:3c:91:6c: 67:c0:6b:a6:06:d2:38:6a:1e:f0:c5:42:e4:b4:7a: 92:96:82:bf:9b:fe:05:bd:fb:6e:2e:24:50:0a:16: e7:4e:eb:c5:63:9d:4b:f1:a0:f2:dd:a8:4a:47:d1: 66:43:58:5b:ae:3e:f2:91:eb:93:b0:02:b0:f0:da: 12:3b:0d:29:6a:87:05:6e:83:25:21:e5:4d:3d:9f: 02:68:39:b4:ee:9d:0a:b7:40:ee:c8:31:eb:ee:1d: 43:bf:2d:13:01:f0:ec:e1:62:b8:82:32:d8:73:71: 17:f7:c5:6d:30:a3:23:f7:01:7b:c3:c5:df:8e:ac: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:00:37:1B:84:0B:77:40:F2:50:A5:AF:84:84:80:CD:81:9F:AA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl X509v3 Authority Key Identifier: keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer sbgp-ipAddrBlock: critical IPv4: 23.159.120.0/24 IPv6: 2607:5fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ea:92:0d:42:be:ba:4a:bc:79:c7:72:3f:d7:4e:4f:9d:b2: 2d:41:a9:bc:52:65:d5:2f:c3:3f:c7:79:a4:4d:05:61:e8:af: 91:02:f4:70:92:92:34:ee:3a:6b:cd:c4:19:e7:7c:e8:e5:91: 18:d9:21:14:ac:f7:6c:6e:f8:99:95:dc:bb:52:af:c7:0d:b5: 47:11:a8:ce:af:6e:7a:f1:d6:a2:7a:ba:21:96:d7:51:35:69: 83:5c:ee:56:cf:22:92:c7:7b:d7:cf:6e:cf:f0:3b:44:0a:c6: f2:e1:27:4e:5d:cb:73:af:a4:b6:cd:b3:b6:89:3d:fe:8f:d3: 2b:e7:08:66:d5:02:f9:6f:b5:f2:fa:e9:d5:84:9a:1a:66:2f: db:0b:f5:7d:38:02:de:4c:b2:5c:cc:a8:be:3c:ef:f9:6a:90: aa:5f:b6:d0:16:44:76:e5:82:7a:4e:19:4c:7f:44:cc:65:07: d0:c5:c6:d6:89:ff:4c:ae:35:fe:d3:d8:f9:56:b0:01:97:06: 7e:52:1f:07:13:96:c0:ca:0d:9d:1d:91:57:f6:dd:6c:d9:c0: ea:89:a0:89:d2:d0:a2:3d:dc:22:e2:ab:b2:dd:22:57:3e:77: 17:75:5a:9a:b4:0a:00:66:e5:9f:4f:d8:33:48:a2:cc:29:04: cd:8a:c0:42 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWElLY/s/RfK0fF83QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQy OGY2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NTM1YzBmNGEtOTZmOS00ZTllLWEzZTYtNmRmYmM1MmU0ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybV9CXyzQCwLLumhwQ0jyUj/+rldtEMvZ2un xLB6qO7ixas9PYL9xiqk6B4Qa1YNdi5W5Qd80bnSKotBy1r1Vd/d8XWzrQYodRMl GGodjDUNe/8ZDMlFA+wxsQTtrPcp82Jd+adYV9hhm98XY2JXCfo8WEc9eHFcqoqQ hXyBp3b/Szg8kWxnwGumBtI4ah7wxULktHqSloK/m/4FvftuLiRQChbnTuvFY51L 8aDy3ahKR9FmQ1hbrj7ykeuTsAKw8NoSOw0paocFboMlIeVNPZ8CaDm07p0Kt0Du yDHr7h1Dvy0TAfDs4WK4gjLYc3EX98VtMKMj9wF7w8XfjqyWoQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBYANxuEC3dA8lClr4SEgM2Bn6ovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YWZk ODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMDMyZmMxYjAtYjlhYy0z YzU0LWE2Y2ItYmRiNjQyYWMwMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGFmZDg4OTUtMTFlOS00M2Q0LWJi OWYtNjQwNDJiMWQyOGY2LzhhZmQ4ODk1LTExZTktNDNkNC1iYjlmLTY0MDQyYjFk MjhmNi5jcmwwHwYDVR0jBBgwFoAUGJWuJgDr5qBg6hkQe1mWeu7iWBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0 MmIxZDI4ZjYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF594MA0E AgACMAcDBQAmB1/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADHqkg1CvrpKvHnHcj/XTk+dsi1BqbxSZdUv wz/HeaRNBWHor5EC9HCSkjTuOmvNxBnnfOjlkRjZIRSs92xu+JmV3LtSr8cNtUcR qM6vbnrx1qJ6uiGW11E1aYNc7lbPIpLHe9fPbs/wO0QKxvLhJ05dy3OvpLbNs7aJ Pf6P0yvnCGbVAvlvtfL66dWEmhpmL9sL9X04At5MslzMqL487/lqkKpfttAWRHbl gnpOGUx/RMxlB9DFxtaJ/0yuNf7T2PlWsAGXBn5SHwcTlsDKDZ0dkVf23WzZwOqJ oInS0KI93CLiq7LdIlc+dxd1Wpq0CgBm5Z9P2DNIoswpBM2KwEI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:05:02 2025 by rpki-client