$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa File: a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa (raw, json) Hash identifier: Kbk8ERhcpSjdOP3059bm+Qn7uzBYD6ReuT8QyRHX48I= Subject key identifier: A1:8F:7C:FA:87:9D:C9:40:8F:A1:77:83:88:8D:60:1C:95:3E:78:B1 Certificate issuer: /CN=ac699a48-185c-4550-bdcf-e3cf55ab56f2 Certificate serial: 010D0C9F43285848A1361975D6A5064973138D80 Authority key identifier: D3:A1:36:49:AD:4E:5B:81:8E:DA:0A:92:E1:DE:48:AE:02:AF:91:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 399803 IP address blocks: 23.188.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:19:75:d6:a5:06:49:73:13:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac699a48-185c-4550-bdcf-e3cf55ab56f2 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=cc70303d-2bbc-42ee-aaf9-447713d7915e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6b:c2:f8:7c:f0:32:51:d2:5c:50:43:c6:65: 43:64:39:6e:34:d2:f8:65:ae:20:0a:cb:75:ab:df: 4e:82:62:a2:10:5b:c0:9f:56:72:b5:c0:cf:96:d4: 2e:26:92:40:a7:2f:e2:b9:c0:61:61:63:86:33:8a: aa:c5:ef:20:66:a7:af:05:00:e6:f4:62:49:67:78: 7e:eb:79:33:6d:bf:e6:e0:6c:56:c4:78:4e:2e:a4: e9:94:6e:90:f9:bf:5a:63:b1:8c:30:d3:b9:b8:fe: 34:b5:d7:02:0a:10:b9:eb:b7:ff:0e:d2:a9:35:6f: 67:36:b7:77:b4:ea:60:e3:5a:e0:c7:62:66:7f:0e: 0f:c4:b1:78:83:09:51:58:ed:af:41:9c:ef:39:8e: 11:10:fa:34:d4:aa:25:f0:b5:12:f5:b7:a6:8a:36: ae:b1:9e:12:5d:1b:fb:39:53:17:c2:b3:2b:fb:82: 41:19:82:f9:19:1a:bc:30:ab:d5:41:c2:10:6b:ae: cc:4b:8d:6e:28:e0:55:32:e7:10:4f:79:26:f1:3c: 96:b0:d8:96:49:56:50:26:2c:24:f7:ff:51:08:63: 5b:b5:91:1a:b6:c8:8b:7c:e3:75:55:07:5d:81:90: 98:f7:a4:e2:93:16:c9:69:7d:18:79:a9:43:d8:cc: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:7C:FA:87:9D:C9:40:8F:A1:77:83:88:8D:60:1C:95:3E:78:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.crl X509v3 Authority Key Identifier: keyid:D3:A1:36:49:AD:4E:5B:81:8E:DA:0A:92:E1:DE:48:AE:02:AF:91:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer sbgp-ipAddrBlock: critical IPv4: 23.188.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b3:ac:e1:0f:1a:99:f9:96:72:f1:e8:39:7c:41:50:7c:4d: a0:c0:25:a7:06:5b:19:ff:76:02:9a:f0:58:c1:70:dd:90:8e: d8:f4:36:6f:39:76:73:76:7f:20:62:ff:d3:2e:6c:d8:09:9e: 85:48:d6:fc:fc:21:77:da:c4:ae:e5:d5:c5:16:fa:f7:9c:30: 94:e9:36:81:9a:46:31:be:cc:93:d7:fe:e5:46:02:69:29:47: 60:b4:99:c0:bf:02:c7:93:5a:c2:0e:42:63:45:0f:2b:f6:d1: 8b:b8:27:1b:19:a5:a0:5b:73:48:8e:0c:da:ba:b1:8b:67:9c: 49:fd:92:39:19:f2:c6:22:b5:78:9a:17:b2:dc:33:c9:a0:6c: a7:1a:98:0e:a1:60:b9:4c:33:0b:5a:99:8a:44:90:5b:52:27: 77:d0:dc:0f:43:1e:ef:56:fa:a0:8f:3c:3f:4f:5c:30:53:2c: 2f:ac:d1:d9:16:a0:d8:2f:28:f3:05:0f:11:e5:54:f1:79:bf: e0:1f:4d:ce:ba:78:73:16:23:23:fd:e2:d0:fb:10:7d:ae:65: 95:66:10:ab:eb:a3:88:68:c4:4f:2e:27:9f:9e:e3:06:0d:00: 61:d5:c8:b5:5a:a4:a1:77:1b:e6:66:8c:ad:41:6b:17:42:88: a1:8f:04:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhl11qUGSXMTjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM2OTlhNDgtMTg1Yy00NTUwLWJkY2YtZTNjZjU1YWI1 NmYyMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk Y2M3MDMwM2QtMmJiYy00MmVlLWFhZjktNDQ3NzEzZDc5MTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWvC+HzwMlHSXFBDxmVDZDluNNL4Za4gCst1 q99OgmKiEFvAn1ZytcDPltQuJpJApy/iucBhYWOGM4qqxe8gZqevBQDm9GJJZ3h+ 63kzbb/m4GxWxHhOLqTplG6Q+b9aY7GMMNO5uP40tdcCChC567f/DtKpNW9nNrd3 tOpg41rgx2Jmfw4PxLF4gwlRWO2vQZzvOY4REPo01Kol8LUS9bemijausZ4SXRv7 OVMXwrMr+4JBGYL5GRq8MKvVQcIQa67MS41uKOBVMucQT3km8TyWsNiWSVZQJiwk 9/9RCGNbtZEatsiLfON1VQddgZCY96TikxbJaX0YealD2MzYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGPfPqHnclAj6F3g4iNYByVPnixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYzY5 OWE0OC0xODVjLTQ1NTAtYmRjZi1lM2NmNTVhYjU2ZjIvYTNlODJjNzktYTRhNS0z M2I5LWFmYmYtOWFiOGY1NzJjMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWM2OTlhNDgtMTg1Yy00NTUwLWJk Y2YtZTNjZjU1YWI1NmYyL2FjNjk5YTQ4LTE4NWMtNDU1MC1iZGNmLWUzY2Y1NWFi NTZmMi5jcmwwHwYDVR0jBBgwFoAU06E2Sa1OW4GO2gqS4d5IrgKvkUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hYzY5OWE0OC0xODVjLTQ1NTAtYmRjZi1lM2Nm NTVhYjU2ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSzrOEPGpn5lnLx6Dl8QVB8TaDAJacGWxn/dgKa8FjBcN2Qjtj0Nm85 dnN2fyBi/9MubNgJnoVI1vz8IXfaxK7l1cUW+vecMJTpNoGaRjG+zJPX/uVGAmkp R2C0mcC/AseTWsIOQmNFDyv20Yu4JxsZpaBbc0iODNq6sYtnnEn9kjkZ8sYitXia F7LcM8mgbKcamA6hYLlMMwtamYpEkFtSJ3fQ3A9DHu9W+qCPPD9PXDBTLC+s0dkW oNgvKPMFDxHlVPF5v+AfTc66eHMWIyP94tD7EH2uZZVmEKvro4hoxE8uJ5+e4wYN AGHVyLVapKF3G+ZmjK1BaxdCiKGPBBw= -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:09 2025 by rpki-client