$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa File: 77efcf0c-d256-3988-b1d9-86cfee38f155.roa (raw, json) Hash identifier: bN1jBZgyB7rxiQnbJk+G5ViKOY6zzcgVDBZG64LORjM= Subject key identifier: AC:BF:AB:9F:8D:47:79:4B:26:A0:93:8D:7C:5B:7E:47:F3:9F:05:83 Certificate issuer: /CN=41fd7014-304a-4567-8e40-00c686067021 Certificate serial: 010D0C9F43285849403950A5959CACEF27840F00 Authority key identifier: BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 31788 IP address blocks: 23.191.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:50:a5:95:9c:ac:ef:27:84:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fd7014-304a-4567-8e40-00c686067021 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=c62c88ce-9c96-42ac-aa7a-dafc7aed54a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a9:6c:88:01:ec:d4:3b:46:ad:62:d2:c7:9c: fd:a6:30:51:25:51:c0:3b:12:d3:ba:82:e2:fd:88: e2:b9:88:fb:85:5c:b7:b5:67:20:43:7e:31:9f:e5: 09:10:7f:f5:a4:69:65:6d:f8:39:52:54:f6:2c:3e: ad:c8:14:fb:37:b9:03:46:bf:1e:ae:64:b3:4f:a6: 56:2e:3b:d1:dd:58:7b:9e:aa:5a:df:eb:c8:b7:72: b2:7c:ae:c8:74:08:d6:03:ba:33:e7:99:91:21:0d: f9:a2:4c:c7:ba:f6:96:34:4d:9f:61:b5:34:97:29: 91:29:61:f1:b4:f9:2d:c1:9d:09:a7:a7:b5:fd:ec: 9e:cc:b6:47:a8:c7:92:7f:c0:83:b7:a8:d6:1a:44: 14:63:17:6d:f8:7e:41:88:f7:27:07:a5:d4:9a:49: 95:c6:d3:34:06:69:f3:d0:2a:88:29:fb:89:7d:5d: 0b:ae:b7:af:9f:d9:d6:6d:2f:48:5d:09:c4:32:01: c4:be:1f:88:3c:3b:ab:9a:80:26:4a:ab:05:82:ea: 56:18:a7:34:a9:c5:3a:ef:9c:60:f4:f4:a0:e7:8a: a8:8e:a7:80:24:d6:de:24:ae:6c:17:29:4d:96:d7: cb:7e:f1:6f:d9:38:4d:f7:59:a2:fd:f2:a1:e8:a7: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BF:AB:9F:8D:47:79:4B:26:A0:93:8D:7C:5B:7E:47:F3:9F:05:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl X509v3 Authority Key Identifier: keyid:BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer sbgp-ipAddrBlock: critical IPv4: 23.191.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ed:be:30:43:1d:e3:83:3d:df:d8:33:a3:cb:b5:e7:08:d5: 1d:0c:cb:b9:b3:23:a2:56:44:35:ce:54:af:79:55:cc:09:59: 4c:f4:a3:22:bb:61:d9:32:0a:ba:00:d0:c3:c2:60:ff:1d:d0: 66:3e:55:92:5f:ae:84:fa:cc:5b:bb:d3:86:40:12:00:85:8a: 0c:db:c2:c4:59:6c:50:aa:1d:30:90:10:b4:ac:44:77:57:67: b3:43:89:d7:44:46:35:92:c1:1e:b6:e5:94:b5:c0:0b:80:d8: 6d:b9:5b:2b:3e:18:f8:00:95:73:0c:cf:a6:3a:bc:6d:3b:d4: fd:c6:2e:ad:79:70:ed:d9:d2:60:a2:e4:ca:28:68:f5:62:bc: d9:af:91:f6:c2:42:bb:b4:d1:05:35:86:fe:de:b7:3e:f9:3a: bc:34:0f:35:87:f2:d7:d1:d4:9c:0b:78:15:24:37:98:f1:df: 83:59:c2:8e:ae:1e:50:85:50:2a:8b:96:69:ac:c1:a9:6c:00: e9:ce:74:1f:a0:34:9e:2f:8a:67:40:70:f4:36:58:86:93:95: fb:90:01:b5:81:e4:a0:86:27:29:0b:ac:b0:c5:6f:54:79:22: 9b:1c:c7:29:88:75:f3:38:48:87:6a:93:7e:a2:43:e8:bb:44: 61:3c:e3:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOVCllZys7yeEDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFmZDcwMTQtMzA0YS00NTY3LThlNDAtMDBjNjg2MDY3 MDIxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YzYyYzg4Y2UtOWM5Ni00MmFjLWFhN2EtZGFmYzdhZWQ1NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKlsiAHs1DtGrWLSx5z9pjBRJVHAOxLTuoLi /YjiuYj7hVy3tWcgQ34xn+UJEH/1pGllbfg5UlT2LD6tyBT7N7kDRr8ermSzT6ZW LjvR3Vh7nqpa3+vIt3KyfK7IdAjWA7oz55mRIQ35okzHuvaWNE2fYbU0lymRKWHx tPktwZ0Jp6e1/eyezLZHqMeSf8CDt6jWGkQUYxdt+H5BiPcnB6XUmkmVxtM0Bmnz 0CqIKfuJfV0Lrrevn9nWbS9IXQnEMgHEvh+IPDurmoAmSqsFgupWGKc0qcU675xg 9PSg54qojqeAJNbeJK5sFylNltfLfvFv2ThN91mi/fKh6KfiHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy/q5+NR3lLJqCTjXxbfkfznwWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MWZk NzAxNC0zMDRhLTQ1NjctOGU0MC0wMGM2ODYwNjcwMjEvNzdlZmNmMGMtZDI1Ni0z OTg4LWIxZDktODZjZmVlMzhmMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDFmZDcwMTQtMzA0YS00NTY3LThl NDAtMDBjNjg2MDY3MDIxLzQxZmQ3MDE0LTMwNGEtNDU2Ny04ZTQwLTAwYzY4NjA2 NzAyMS5jcmwwHwYDVR0jBBgwFoAUvwLbAMTMW4yEOJmhoTwhtBEm7D0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MWZkNzAxNC0zMDRhLTQ1NjctOGU0MC0wMGM2 ODYwNjcwMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjtvjBDHeODPd/YM6PLtecI1R0My7mzI6JWRDXOVK95VcwJWUz0oyK7 YdkyCroA0MPCYP8d0GY+VZJfroT6zFu704ZAEgCFigzbwsRZbFCqHTCQELSsRHdX Z7NDiddERjWSwR625ZS1wAuA2G25Wys+GPgAlXMMz6Y6vG071P3GLq15cO3Z0mCi 5MooaPVivNmvkfbCQru00QU1hv7etz75Orw0DzWH8tfR1JwLeBUkN5jx34NZwo6u HlCFUCqLlmmswalsAOnOdB+gNJ4vimdAcPQ2WIaTlfuQAbWB5KCGJykLrLDFb1R5 IpscxymIdfM4SIdqk36iQ+i7RGE843U= -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:26 2025 by rpki-client