$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976702a7-d8db-3c3b-a6d5-137267df4791.roa File: 976702a7-d8db-3c3b-a6d5-137267df4791.roa (raw, json) Hash identifier: 673vQSA8bAg9ko2XSXi56obWsqvPVZmNRSfR5DRTuCc= Subject key identifier: B5:31:4C:57:B7:43:FB:03:51:73:14:D5:84:50:23:65:30:FC:D3:41 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D2114267093BA258F0D17000 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976702a7-d8db-3c3b-a6d5-137267df4791.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 62564 IP address blocks: 23.230.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:42:67:09:3b:a2:58:f0:d1:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=42c9b34a-b72c-47b5-adf4-da39c8deb0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:4a:75:6a:ad:ba:e4:c8:6d:dd:de:1d:8e: 7b:4f:19:1d:10:ad:0b:9f:99:c6:e9:ec:4e:33:c3: 6d:00:4b:76:e7:f6:f5:5c:d9:09:34:bc:df:b2:4c: ae:9a:6d:b5:37:2b:7c:b2:a2:c5:12:71:45:ac:c4: c8:43:2e:43:bc:c6:f1:41:85:e3:50:de:69:7d:ad: 9f:f7:3b:88:56:66:97:b2:31:3f:35:78:9a:07:6f: 48:b7:4e:c3:58:05:9b:a9:11:5b:8c:9d:fb:0c:2b: d8:fe:8e:73:a6:ad:45:ef:bd:fd:d8:12:0d:4f:04: d8:66:70:2f:be:0b:72:fa:f4:b7:06:c4:67:b3:0a: a6:e3:cf:c7:75:22:fd:18:81:0c:28:22:68:ec:5a: 87:d1:50:4a:cd:79:33:c0:b6:54:66:84:9e:3c:25: f1:eb:c3:dc:27:cf:a3:a9:7d:a4:1b:63:88:2f:ef: 7a:db:1a:e9:d2:57:4c:d6:4c:fe:60:03:69:f6:04: 84:fa:af:47:ab:c0:e5:82:fd:ce:62:91:5a:55:a3: d4:2f:f8:df:4f:d7:e3:bd:7e:7a:80:1a:b9:58:72: 7b:3d:b4:54:76:57:fa:b0:1f:0c:18:90:fd:bd:0a: 42:c1:4b:30:72:69:84:f7:77:24:d2:e6:87:59:84: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:4C:57:B7:43:FB:03:51:73:14:D5:84:50:23:65:30:FC:D3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976702a7-d8db-3c3b-a6d5-137267df4791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7b:49:e0:1f:70:ce:0d:e1:2b:50:3b:fd:ce:ff:7c:d4:89: 65:87:bd:8d:aa:0a:7b:a0:16:02:68:0f:10:ae:cd:27:29:8e: e8:39:db:ec:08:42:16:7e:aa:b8:dc:b5:75:e6:85:c0:8d:b1: 02:30:6e:05:46:53:03:00:21:37:a4:1a:2e:8d:29:12:f2:ae: 12:b1:d1:b5:b8:55:01:56:b9:71:39:19:34:05:42:eb:82:f5: 90:86:ae:20:24:7c:5b:40:e2:2d:a7:4d:64:cc:7b:22:28:06: 1f:18:1b:d3:a9:3f:28:f3:b5:70:4d:e0:95:6c:03:0d:74:c1: bc:37:18:4b:5a:6a:18:24:66:04:7a:78:26:0a:9f:ff:ab:45: 34:bf:a5:12:97:f4:a6:11:c7:e6:6a:2e:e7:30:42:78:70:94: a8:00:3a:b7:2a:c3:6c:e0:2c:00:d8:0d:1c:a9:82:77:c8:b6: 10:51:99:56:ca:38:52:18:75:d1:f2:78:6e:33:54:86:58:9c: f2:12:e3:8e:9b:6a:31:74:ef:89:43:ee:77:11:d8:bb:7d:e2: e5:ad:70:3d:d5:6e:1b:52:fb:d4:df:fd:e5:9f:01:56:c7:e5: 06:9a:ca:07:97:b6:8c:87:41:2e:36:fe:15:d2:33:bf:13:56: df:8a:d4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUJnCTuiWPDRcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDJjOWIzNGEtYjcyYy00N2I1LWFkZjQtZGEzOWM4ZGViMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmVKdWqtuuTIbd3eHY57TxkdEK0Ln5nG6exO M8NtAEt25/b1XNkJNLzfskyumm21Nyt8sqLFEnFFrMTIQy5DvMbxQYXjUN5pfa2f 9zuIVmaXsjE/NXiaB29It07DWAWbqRFbjJ37DCvY/o5zpq1F77392BINTwTYZnAv vgty+vS3BsRnswqm48/HdSL9GIEMKCJo7FqH0VBKzXkzwLZUZoSePCXx68PcJ8+j qX2kG2OIL+962xrp0ldM1kz+YANp9gSE+q9Hq8Dlgv3OYpFaVaPUL/jfT9fjvX56 gBq5WHJ7PbRUdlf6sB8MGJD9vQpCwUswcmmE93ck0uaHWYRAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUxTFe3Q/sDUXMU1YRQI2Uw/NNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTc2NzAyYTctZDhkYi0z YzNiLWE2ZDUtMTM3MjY3ZGY0NzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+b9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC17SeAfcM4N4StQO/3O/3zUiWWHvY2qCnugFgJoDxCuzScpjug52+wI QhZ+qrjctXXmhcCNsQIwbgVGUwMAITekGi6NKRLyrhKx0bW4VQFWuXE5GTQFQuuC 9ZCGriAkfFtA4i2nTWTMeyIoBh8YG9OpPyjztXBN4JVsAw10wbw3GEtaahgkZgR6 eCYKn/+rRTS/pRKX9KYRx+ZqLucwQnhwlKgAOrcqw2zgLADYDRypgnfIthBRmVbK OFIYddHyeG4zVIZYnPIS446bajF074lD7ncR2Lt94uWtcD3VbhtS+9Tf/eWfAVbH 5QaaygeXtoyHQS42/hXSM78TVt+K1Ho= -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:15 2025 by rpki-client