$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/0d3c43d7-7a6f-39db-a820-d9e63fc07237.roa File: 0d3c43d7-7a6f-39db-a820-d9e63fc07237.roa (raw, json) Hash identifier: xFweyT6uo6/uluUeAxxsLT3CiJIRzM7kPHpNp2crqI8= Subject key identifier: 18:86:92:2F:36:7B:37:67:D3:A9:0E:09:3F:2B:49:4C:FB:14:29:C5 Certificate issuer: /CN=713e9415-01be-4e53-a6d3-2fe0b3bd335d Certificate serial: 010D0C9F4328584925B3A7436FE9E252B992B600 Authority key identifier: 48:22:83:97:A4:52:28:6C:A5:C8:CF:42:5F:BE:2A:9D:21:7E:B9:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/0d3c43d7-7a6f-39db-a820-d9e63fc07237.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 401227 IP address blocks: 23.131.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a7:43:6f:e9:e2:52:b9:92:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713e9415-01be-4e53-a6d3-2fe0b3bd335d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=4b2c3d3a-d257-4c1a-83fc-156b97a753f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:05:7c:f9:de:d6:4f:1e:89:85:ef:29:52:c2: 38:b2:b2:a6:92:7d:bc:01:fc:2c:55:c0:b8:3c:5e: 10:f2:3d:e7:2f:51:3d:00:3d:3a:71:e7:25:e1:d8: eb:6a:8d:a1:5f:81:ce:a1:00:83:dc:e2:30:71:72: c1:5b:b0:f7:3c:7b:66:b4:10:db:4f:4b:dc:59:85: ad:1e:a4:2a:a3:c2:39:fd:37:74:5b:ab:8c:d4:05: 7d:4a:af:ca:9c:8b:1b:5e:75:5e:e7:d3:b1:9a:2d: 08:d6:f9:74:60:7b:6a:09:d9:1d:e6:33:6a:2e:d7: ed:c5:b5:6e:af:01:cf:26:d7:02:b1:75:d4:3b:95: f2:ed:7c:3d:c1:7c:a9:56:70:bb:5e:e3:13:db:30: 39:17:5d:9d:a5:0a:ff:b1:3b:33:ae:bc:ef:54:f3: b5:c8:0a:da:3d:49:c8:04:5b:6b:57:30:94:13:46: 21:aa:2f:88:42:73:70:74:bb:08:0c:ff:aa:63:ca: e9:3d:23:b0:bf:22:30:45:e1:a0:2c:bc:cb:73:0f: ff:3c:31:1c:6c:aa:8b:30:ab:cf:91:4a:c9:06:0c: 3f:3e:86:94:7d:4e:53:10:e8:ff:dd:0a:8c:69:3a: ad:e3:17:07:3b:10:aa:b2:71:8a:e5:70:fb:18:17: c6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:86:92:2F:36:7B:37:67:D3:A9:0E:09:3F:2B:49:4C:FB:14:29:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/0d3c43d7-7a6f-39db-a820-d9e63fc07237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.crl X509v3 Authority Key Identifier: keyid:48:22:83:97:A4:52:28:6C:A5:C8:CF:42:5F:BE:2A:9D:21:7E:B9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a9:f6:ea:3b:e2:d1:0e:b2:30:18:5e:af:b2:66:8f:87:1d: 97:2e:e2:fc:da:a5:8d:90:04:6f:7a:b3:eb:b8:b9:9e:ea:db: 51:d4:2a:3b:41:32:64:48:86:a2:dd:82:bf:17:dc:78:f9:99: 0e:72:92:50:59:59:bd:96:10:87:f3:57:c4:68:28:f9:94:ff: 8d:b7:ac:cd:c0:7c:d5:f4:cd:f4:a9:e1:e3:ed:41:09:13:4b: 8c:05:55:c5:c5:c1:7c:83:13:9d:f8:39:df:37:5a:9c:b2:90: ba:a2:e6:fa:a4:5e:a7:20:36:59:2d:8b:c5:11:27:75:b9:de: 9d:b7:4a:51:52:e9:93:ab:07:04:06:18:ab:73:9c:7e:ca:9d: f0:a9:8b:6a:a3:0b:a4:8b:83:50:4f:94:6a:e7:ee:65:25:e5: db:d4:52:e2:6e:b7:38:c2:63:9c:1a:84:92:ee:91:ec:be:97: aa:b1:96:eb:64:55:b8:07:b2:d0:0a:9f:f3:89:39:14:b8:55: 7e:7b:01:84:26:78:d9:a1:1c:36:e1:ad:4b:d5:c2:fd:25:fc: 31:f3:c6:5b:c9:83:ad:93:6e:0c:b1:85:42:fb:d7:28:37:9d: f5:d7:e4:47:4d:7d:6e:d7:0c:8f:8c:c8:f5:84:41:67:0b:19: e2:ab:5b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6dDb+niUrmStgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzEzZTk0MTUtMDFiZS00ZTUzLWE2ZDMtMmZlMGIzYmQz MzVkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NGIyYzNkM2EtZDI1Ny00YzFhLTgzZmMtMTU2Yjk3YTc1M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QV8+d7WTx6Jhe8pUsI4srKmkn28AfwsVcC4 PF4Q8j3nL1E9AD06cecl4djrao2hX4HOoQCD3OIwcXLBW7D3PHtmtBDbT0vcWYWt HqQqo8I5/Td0W6uM1AV9Sq/KnIsbXnVe59Oxmi0I1vl0YHtqCdkd5jNqLtftxbVu rwHPJtcCsXXUO5Xy7Xw9wXypVnC7XuMT2zA5F12dpQr/sTszrrzvVPO1yAraPUnI BFtrVzCUE0Yhqi+IQnNwdLsIDP+qY8rpPSOwvyIwReGgLLzLcw//PDEcbKqLMKvP kUrJBgw/PoaUfU5TEOj/3QqMaTqt4xcHOxCqsnGK5XD7GBfGJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiGki82ezdn06kOCT8rSUz7FCnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MTNl OTQxNS0wMWJlLTRlNTMtYTZkMy0yZmUwYjNiZDMzNWQvMGQzYzQzZDctN2E2Zi0z OWRiLWE4MjAtZDllNjNmYzA3MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzEzZTk0MTUtMDFiZS00ZTUzLWE2 ZDMtMmZlMGIzYmQzMzVkLzcxM2U5NDE1LTAxYmUtNGU1My1hNmQzLTJmZTBiM2Jk MzM1ZC5jcmwwHwYDVR0jBBgwFoAUSCKDl6RSKGylyM9CX74qnSF+uXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MTNlOTQxNS0wMWJlLTRlNTMtYTZkMy0yZmUw YjNiZDMzNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHep9uo74tEOsjAYXq+yZo+HHZcu4vzapY2QBG96s+u4uZ7q21HUKjtB MmRIhqLdgr8X3Hj5mQ5yklBZWb2WEIfzV8RoKPmU/423rM3AfNX0zfSp4ePtQQkT S4wFVcXFwXyDE534Od83WpyykLqi5vqkXqcgNlkti8URJ3W53p23SlFS6ZOrBwQG GKtznH7KnfCpi2qjC6SLg1BPlGrn7mUl5dvUUuJutzjCY5wahJLukey+l6qxlutk VbgHstAKn/OJORS4VX57AYQmeNmhHDbhrUvVwv0l/DHzxlvJg62TbgyxhUL71yg3 nfXX5EdNfW7XDI+MyPWEQWcLGeKrWzk= -----END CERTIFICATE-----Generated at Sun Apr 20 04:16:22 2025 by rpki-client