$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/b390eecf-1fca-39ac-bd46-503ff4a684cd.roa File: b390eecf-1fca-39ac-bd46-503ff4a684cd.roa (raw, json) Hash identifier: IRsf0XNrzpC16piyfh0kxGkUX9Lo9qYyybjoPxNpxWY= Subject key identifier: 62:D9:2B:A7:ED:7B:BE:1A:31:A2:0D:A0:CE:E7:89:12:2E:B7:57:02 Certificate issuer: /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Certificate serial: 010D0C9F43285849998F354F51C6CE667D8BF000 Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/b390eecf-1fca-39ac-bd46-503ff4a684cd.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 395261 IP address blocks: 23.155.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:35:4f:51:c6:ce:66:7d:8b:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=c332264a-0a8e-4117-b219-b957d2f522a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:85:54:15:ba:b4:a5:d3:96:d5:0b:81:3b: 2f:5d:61:36:30:45:a0:7b:ee:67:d7:5f:a1:8b:8c: 40:dd:dd:94:ff:27:2d:7f:f0:fc:75:01:f8:6a:d7: 3e:e0:03:75:94:e4:cb:ca:f9:28:1f:87:39:6a:16: 4f:1e:c0:6d:2a:b8:a2:45:74:8f:8e:16:7c:23:2a: 71:a0:43:6c:8e:ac:82:4b:71:26:81:bb:3f:c2:48: a1:42:ba:e6:13:75:60:22:a9:7f:f9:3d:5e:55:e2: f9:35:0b:df:cf:e3:a5:08:0c:0a:62:19:3b:b6:e3: 0c:34:8e:5a:b3:b2:91:28:ef:92:0c:cc:b3:a6:64: 23:0f:65:f7:90:23:12:64:f0:18:29:28:d6:82:4e: cb:98:b2:34:c5:76:a2:9c:e7:0f:6b:fa:92:a5:a7: cd:24:a3:c6:7c:89:1e:33:91:da:c8:6b:cc:c6:92: a7:5b:c9:29:5e:f7:a6:5a:fb:cf:13:8a:2f:f8:95: 2e:3d:2e:63:b3:08:8f:95:43:eb:10:4b:86:d5:cb: 64:36:e9:f9:9d:85:57:b6:51:57:3e:b1:eb:a1:1f: d3:8f:e4:f0:be:04:49:a5:ab:80:a6:e6:4e:da:fc: 40:75:e7:a6:a7:f8:31:cc:89:9d:56:92:e2:06:47: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:2B:A7:ED:7B:BE:1A:31:A2:0D:A0:CE:E7:89:12:2E:B7:57:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/b390eecf-1fca-39ac-bd46-503ff4a684cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl X509v3 Authority Key Identifier: keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer sbgp-ipAddrBlock: critical IPv4: 23.155.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:15:ae:66:25:f5:87:c8:66:df:dc:1d:ea:2b:3d:51:ed:10: c3:68:ac:71:a8:ee:0f:4a:71:16:f6:ad:25:45:1f:13:13:87: 06:bc:43:91:6c:1c:32:ce:1d:4e:45:2a:c6:03:d8:d7:39:19: 09:9d:b2:31:58:0a:72:62:f8:69:8d:4b:aa:95:ac:50:07:1a: 67:5e:c6:b9:d8:98:bb:a5:e9:23:4f:16:d5:42:30:a5:68:76: 9f:f1:97:3a:28:b9:4d:a8:81:bf:74:2e:b9:7d:48:7f:95:f7: db:8e:f2:a0:9d:93:5b:cf:5a:5f:c3:ef:06:ac:05:07:ef:0b: 12:b5:6e:4b:01:a9:bc:fc:55:39:a0:38:1e:49:bb:6a:12:dc: af:d7:03:ad:c5:2a:af:77:b8:44:33:fe:b1:b0:a3:56:d2:81: a9:4d:bc:c8:16:93:c6:12:93:35:4d:f1:b5:0b:ee:ee:6e:ff: 34:66:30:97:12:1b:6e:3b:c2:d9:35:95:be:40:2c:2c:fb:7b: f0:3e:c7:4c:77:47:1b:d9:b8:2a:18:81:3c:25:36:3e:fa:0a: 7b:62:2f:e5:33:fd:73:d9:dd:48:37:74:98:fc:4c:87:79:4a: 50:04:11:e9:4f:64:37:fa:3f:89:16:68:e6:f9:c7:81:77:76: 89:f5:18:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzVPUcbOZn2L8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzMmU1ZmQtMzc0ZS00MzBmLTlhZjMtMzA4YzFlYzZj NzJkMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YzMzMjI2NGEtMGE4ZS00MTE3LWIyMTktYjk1N2QyZjUyMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSOFVBW6tKXTltULgTsvXWE2MEWge+5n11+h i4xA3d2U/yctf/D8dQH4atc+4AN1lOTLyvkoH4c5ahZPHsBtKriiRXSPjhZ8Iypx oENsjqyCS3Emgbs/wkihQrrmE3VgIql/+T1eVeL5NQvfz+OlCAwKYhk7tuMMNI5a s7KRKO+SDMyzpmQjD2X3kCMSZPAYKSjWgk7LmLI0xXainOcPa/qSpafNJKPGfIke M5HayGvMxpKnW8kpXvemWvvPE4ov+JUuPS5jswiPlUPrEEuG1ctkNun5nYVXtlFX PrHroR/Tj+TwvgRJpauApuZO2vxAdeemp/gxzImdVpLiBkc5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLZK6fte74aMaINoM7niRIut1cCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NjMy ZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhjMWVjNmM3MmQvYjM5MGVlY2YtMWZjYS0z OWFjLWJkNDYtNTAzZmY0YTY4NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDYzMmU1ZmQtMzc0ZS00MzBmLTlh ZjMtMzA4YzFlYzZjNzJkLzQ2MzJlNWZkLTM3NGUtNDMwZi05YWYzLTMwOGMxZWM2 YzcyZC5jcmwwHwYDVR0jBBgwFoAUjNzpjNBqpO6W666ZAcVHnYuuD+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NjMyZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhj MWVjNmM3MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5uDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoVrmYl9YfIZt/cHeorPVHtEMNorHGo7g9KcRb2rSVFHxMThwa8Q5Fs HDLOHU5FKsYD2Nc5GQmdsjFYCnJi+GmNS6qVrFAHGmdexrnYmLul6SNPFtVCMKVo dp/xlzoouU2ogb90Lrl9SH+V99uO8qCdk1vPWl/D7wasBQfvCxK1bksBqbz8VTmg OB5Ju2oS3K/XA63FKq93uEQz/rGwo1bSgalNvMgWk8YSkzVN8bUL7u5u/zRmMJcS G247wtk1lb5ALCz7e/A+x0x3RxvZuCoYgTwlNj76CntiL+Uz/XPZ3Ug3dJj8TId5 SlAEEelPZDf6P4kWaOb5x4F3don1GMQ= -----END CERTIFICATE-----Generated at Mon Apr 21 19:19:07 2025 by rpki-client