$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/69c9ea56-0cbf-3da5-b3e0-5dc6d85813f7.roa File: 69c9ea56-0cbf-3da5-b3e0-5dc6d85813f7.roa (raw, json) Hash identifier: 1vLnMrbpyykgFUqrnQ1r+WqcGjQnCJmxF5xGkCKC4YI= Subject key identifier: 30:D0:A5:FB:66:3D:40:82:16:C4:60:BF:B8:A4:60:33:4F:0F:AD:42 Certificate issuer: /CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6 Certificate serial: 010D0C9F432858495EEEE9AECBF58D30D1768200 Authority key identifier: 22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/69c9ea56-0cbf-3da5-b3e0-5dc6d85813f7.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 394449 IP address blocks: 23.170.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e9:ae:cb:f5:8d:30:d1:76:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=95bc3be6-4f32-4aef-87b5-901a723b1894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:32:45:8a:94:e3:7a:38:d8:22:67:90:9a: 96:97:10:a4:ff:39:36:6d:d8:c3:06:0e:c4:e0:f7: b7:eb:f5:2c:cb:bf:02:9b:39:c0:98:08:60:10:5c: 34:3d:d1:b3:8c:21:a9:fa:e2:86:eb:dc:ce:31:2f: 0f:cf:8a:83:d0:a8:2c:dc:4f:2b:a2:29:d7:ed:7e: 31:93:a2:9b:e3:8c:c4:09:2f:84:0e:21:53:cd:7b: 00:4f:ed:4a:8a:97:fc:f8:f2:cc:44:6b:d9:55:dc: 0c:0c:ea:83:3e:62:65:0d:8c:4a:2c:c0:25:5c:9a: 8a:2a:3f:45:8b:74:f4:18:07:83:1d:c5:3e:37:75: b1:49:a3:b6:2f:92:6c:2a:6d:a4:30:66:41:dd:d9: 63:09:3d:f4:1b:08:8d:5d:7f:a4:5b:00:0b:6c:60: c7:e3:4d:94:fa:2f:f8:f2:9c:74:db:e4:eb:72:f7: 8e:29:c3:2a:ad:00:c2:e7:1d:9d:a9:93:99:8f:a7: 6b:a0:94:b2:d7:84:72:0f:8b:2f:57:e6:d9:4e:82: 39:cc:b4:40:f3:3e:19:be:15:b7:f5:ac:6e:d3:27: 23:4b:4c:01:ca:56:b0:a6:a6:ea:65:50:1a:ab:cd: 4d:4b:5b:e8:7a:cf:b2:0f:67:33:2e:f1:15:e7:1d: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:A5:FB:66:3D:40:82:16:C4:60:BF:B8:A4:60:33:4F:0F:AD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/69c9ea56-0cbf-3da5-b3e0-5dc6d85813f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl X509v3 Authority Key Identifier: keyid:22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer sbgp-ipAddrBlock: critical IPv4: 23.170.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:23:03:23:45:8c:f3:a5:70:5b:3e:da:f7:7f:1c:91:a3:b7: f8:5b:57:c3:d9:cf:a9:74:0e:07:e2:9d:9f:0b:00:d8:c5:a8: ee:86:1e:3a:35:1d:61:ad:65:be:a4:6c:51:39:9a:b5:58:b0: 03:ea:c3:ab:2a:36:cf:54:64:8d:69:3b:50:dd:3d:d2:e9:75: 3d:69:9b:23:88:50:f0:ac:37:c8:d0:b0:35:59:84:5e:13:8a: 86:62:9b:ec:cd:e2:ed:da:3b:2f:26:d6:9e:ad:58:d9:a3:df: 42:28:61:f7:b5:80:4b:fa:dc:71:37:66:16:97:e4:2c:30:d7: 7a:d7:af:16:75:46:10:e2:c2:fc:d2:39:12:5a:67:44:5a:09: a1:d8:c3:63:fc:89:7a:b8:de:5b:02:8b:34:a8:2b:8b:b2:e2: b7:dc:cc:b0:a5:66:9a:3d:19:ac:51:17:a7:74:f9:10:d6:21: e8:8a:16:3b:59:a8:ec:29:dd:a1:c9:be:6f:a0:94:f3:3a:00: 50:42:d5:a4:5c:f4:5f:9a:67:29:38:a2:2b:03:bf:55:de:61: 99:e4:b0:34:84:47:16:17:52:c0:9a:0f:3d:2a:4f:ca:bc:1d: da:69:17:2f:fb:35:be:f4:64:40:bc:61:d4:14:c0:62:64:51: f1:fd:6b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7umuy/WNMNF2ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZhNzE1MzItZWExYi00ZTI3LWEyYTctYzkwYjlkYjEx OWI2MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk OTViYzNiZTYtNGYzMi00YWVmLTg3YjUtOTAxYTcyM2IxODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBQyRYqU43o42CJnkJqWlxCk/zk2bdjDBg7E 4Pe36/Usy78CmznAmAhgEFw0PdGzjCGp+uKG69zOMS8Pz4qD0Kgs3E8roinX7X4x k6Kb44zECS+EDiFTzXsAT+1Kipf8+PLMRGvZVdwMDOqDPmJlDYxKLMAlXJqKKj9F i3T0GAeDHcU+N3WxSaO2L5JsKm2kMGZB3dljCT30GwiNXX+kWwALbGDH402U+i/4 8px02+TrcveOKcMqrQDC5x2dqZOZj6droJSy14RyD4svV+bZToI5zLRA8z4ZvhW3 9axu0ycjS0wBylawpqbqZVAaq81NS1voes+yD2czLvEV5x2mewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDQpftmPUCCFsRgv7ikYDNPD61CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZmE3 MTUzMi1lYTFiLTRlMjctYTJhNy1jOTBiOWRiMTE5YjYvNjljOWVhNTYtMGNiZi0z ZGE1LWIzZTAtNWRjNmQ4NTgxM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWZhNzE1MzItZWExYi00ZTI3LWEy YTctYzkwYjlkYjExOWI2L2VmYTcxNTMyLWVhMWItNGUyNy1hMmE3LWM5MGI5ZGIx MTliNi5jcmwwHwYDVR0jBBgwFoAUIv1HcFYH7lAkyWZbFcmDwyI94T4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZmE3MTUzMi1lYTFiLTRlMjctYTJhNy1jOTBi OWRiMTE5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6rAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwjAyNFjPOlcFs+2vd/HJGjt/hbV8PZz6l0DgfinZ8LANjFqO6GHjo1 HWGtZb6kbFE5mrVYsAPqw6sqNs9UZI1pO1DdPdLpdT1pmyOIUPCsN8jQsDVZhF4T ioZim+zN4u3aOy8m1p6tWNmj30IoYfe1gEv63HE3ZhaX5Cww13rXrxZ1RhDiwvzS ORJaZ0RaCaHYw2P8iXq43lsCizSoK4uy4rfczLClZpo9GaxRF6d0+RDWIeiKFjtZ qOwp3aHJvm+glPM6AFBC1aRc9F+aZyk4oisDv1XeYZnksDSERxYXUsCaDz0qT8q8 HdppFy/7Nb70ZEC8YdQUwGJkUfH9axc= -----END CERTIFICATE-----Generated at Sat Apr 12 04:44:34 2025 by rpki-client