$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa File: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (raw, json) Hash identifier: EUwbkaGpaXni2jq5X+n0OeoHAAL0oQBDFFfmFURXdrI= Subject key identifier: A6:7B:DE:30:D0:E0:6B:CD:B0:C5:C5:D5:A3:8C:C2:FF:D5:F8:70:6B Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F432858490E16CA5E5A56EC2196EBF400 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 32526 IP address blocks: 23.160.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ca:5e:5a:56:ec:21:96:eb:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=b656a32e-802a-4166-a537-682de91d31b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:66:b7:d5:7a:2a:fd:bb:70:45:67:7f:da:d4: 63:d2:32:eb:3e:8f:32:75:2f:1f:da:97:a7:16:46: c6:1f:c1:2a:8f:8f:9e:ca:fd:1f:c5:70:1e:2a:89: 7c:54:20:81:ec:aa:d9:14:4a:c0:40:7d:b2:67:f2: 2e:ed:a0:e0:b7:1a:8d:42:f1:87:81:c1:51:f8:81: 2c:26:d9:7b:1b:d9:97:09:48:49:0e:90:b8:c0:2d: 05:2e:9f:27:7e:3d:9d:6e:d3:af:4a:82:9e:1c:9f: 57:50:b2:8a:72:85:9a:97:e6:c4:11:b9:41:76:38: 29:38:ed:41:93:df:5e:8d:65:48:a7:71:2b:94:71: f8:d5:64:24:70:31:29:fe:b7:07:dc:dd:16:68:ef: 91:8d:39:1e:41:d4:ce:30:01:23:c9:84:f5:a4:9d: da:62:ce:5e:f4:36:8f:62:6a:18:22:6c:11:a8:ad: 3f:0c:11:17:fa:8b:d0:12:25:fa:92:90:5d:5c:8d: 30:ac:64:b9:92:9a:d9:48:21:40:19:a8:55:a9:e4: 6f:2c:dc:9d:d4:37:44:8a:f8:96:d5:df:1b:2d:7a: d7:10:1d:3c:ce:80:a8:3e:f5:44:d7:3e:ce:61:3f: 5b:09:6a:98:8c:7f:9b:fb:c2:80:4c:70:01:c3:29: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:DE:30:D0:E0:6B:CD:B0:C5:C5:D5:A3:8C:C2:FF:D5:F8:70:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: 23.160.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6b:d6:ff:9b:85:a1:cc:15:82:19:08:dc:3d:73:f8:76:41: 85:e0:91:a6:0d:7d:32:70:19:e2:30:b5:5c:e0:9a:54:11:4e: 0b:00:d8:0b:f4:03:bd:5e:6f:4a:dd:8f:ff:46:61:07:85:50: d8:d4:4f:2e:04:5b:8d:c2:a9:57:b0:36:bb:d8:fe:5c:25:a4: f2:75:82:2e:63:42:a3:b5:7b:29:f5:21:94:be:b8:ff:52:1e: dc:d7:c2:b6:39:82:7e:ba:87:c4:d6:72:ed:b7:45:df:ec:fd: e0:15:d4:bb:4e:e1:05:23:1a:1e:55:2b:81:bd:13:3d:b0:10: f1:bf:76:04:bd:d1:35:fa:c5:ea:d3:8b:26:28:66:21:4d:7e: aa:78:a6:fd:1a:d7:bf:13:3e:a8:00:20:73:6b:1b:01:21:ca: 35:a0:24:b4:78:56:1f:3f:fe:6c:b6:ca:38:47:47:11:f1:1a: 07:92:34:f5:73:7a:04:0a:5f:bd:d6:e1:e1:f6:5f:cd:a5:83: aa:60:7f:50:60:32:a2:af:a8:6c:0d:fc:f6:98:23:d9:85:bb: 40:11:76:7e:e3:4a:1c:df:f4:70:ec:ab:03:16:3b:6c:04:73: 50:cd:35:72:12:17:25:6b:f8:6f:97:43:f7:21:d4:26:2b:2d: 02:8c:ed:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFspeWlbsIZbr9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk YjY1NmEzMmUtODAyYS00MTY2LWE1MzctNjgyZGU5MWQzMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAima31Xoq/btwRWd/2tRj0jLrPo8ydS8f2pen FkbGH8Eqj4+eyv0fxXAeKol8VCCB7KrZFErAQH2yZ/Iu7aDgtxqNQvGHgcFR+IEs Jtl7G9mXCUhJDpC4wC0FLp8nfj2dbtOvSoKeHJ9XULKKcoWal+bEEblBdjgpOO1B k99ejWVIp3ErlHH41WQkcDEp/rcH3N0WaO+RjTkeQdTOMAEjyYT1pJ3aYs5e9DaP YmoYImwRqK0/DBEX+ovQEiX6kpBdXI0wrGS5kprZSCFAGahVqeRvLNyd1DdEiviW 1d8bLXrXEB08zoCoPvVE1z7OYT9bCWqYjH+b+8KATHABwylq/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ73jDQ4GvNsMXF1aOMwv/V+HBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvMTY2NGI1MDktNWQ4Yy0z MGFkLTg2OWUtZTllMmJiMTU5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRr1v+bhaHMFYIZCNw9c/h2QYXgkaYNfTJwGeIwtVzgmlQRTgsA2Av0 A71eb0rdj/9GYQeFUNjUTy4EW43CqVewNrvY/lwlpPJ1gi5jQqO1eyn1IZS+uP9S HtzXwrY5gn66h8TWcu23Rd/s/eAV1LtO4QUjGh5VK4G9Ez2wEPG/dgS90TX6xerT iyYoZiFNfqp4pv0a178TPqgAIHNrGwEhyjWgJLR4Vh8//my2yjhHRxHxGgeSNPVz egQKX73W4eH2X82lg6pgf1BgMqKvqGwN/PaYI9mFu0ARdn7jShzf9HDsqwMWO2wE c1DNNXISFyVr+G+XQ/ch1CYrLQKM7V0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:24 2025 by rpki-client