$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/b53566fd-9c77-37b2-a97d-d5e18e0bafe3.roa File: b53566fd-9c77-37b2-a97d-d5e18e0bafe3.roa (raw, json) Hash identifier: GcTCNzRsMYClMH50nXl5TKDLLrHJyEQsppS8dDT0HUE= Subject key identifier: 27:18:87:03:AD:DC:64:76:47:F8:F8:27:42:69:35:2A:31:40:24:71 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F43285849393E74BE331ACF51583F8700 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/b53566fd-9c77-37b2-a97d-d5e18e0bafe3.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 398712 IP address blocks: 23.227.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:74:be:33:1a:cf:51:58:3f:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=56e44958-166d-4e16-a609-02c58c7baefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:ab:de:00:43:00:f3:4d:1c:53:32:2c:37: 92:70:07:7c:65:15:03:d6:09:d8:26:28:90:65:61: b9:51:5c:9d:f7:e1:92:86:18:fb:91:17:55:97:62: 06:ee:5b:e6:cd:7a:7a:9b:b7:3d:c0:18:d4:c3:e6: 89:a7:ae:da:8f:1f:7b:4a:9c:0b:c2:22:66:33:ec: 83:53:ea:e0:48:d8:0f:13:04:cf:ec:94:49:8d:62: 40:ba:26:60:63:26:b0:42:d0:a1:e8:bd:a1:44:8b: 7d:34:f2:e9:13:d4:7c:22:c7:b9:c7:59:75:23:94: 0b:72:a0:e2:81:78:07:73:53:9d:57:bd:35:7d:f2: 7b:52:25:ab:0a:b4:3e:68:49:c7:9a:95:69:f6:99: 4d:02:c1:75:00:d2:62:a6:ce:cc:42:b2:26:38:47: c6:ec:ce:91:47:0b:d8:a9:bd:6b:12:80:41:69:86: fd:a1:fc:7c:96:af:eb:db:2b:3c:78:cd:5b:df:db: 7a:ff:c8:d4:80:9e:7c:39:26:1c:49:2c:b6:7c:e1: d5:0f:10:42:df:b3:73:b2:76:27:71:d0:51:df:31: 18:26:cd:8f:c8:38:07:2c:a3:34:ac:48:10:8e:d5: 63:19:71:7d:e2:f5:05:fb:1b:99:39:06:47:30:71: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:18:87:03:AD:DC:64:76:47:F8:F8:27:42:69:35:2A:31:40:24:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/b53566fd-9c77-37b2-a97d-d5e18e0bafe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2b:22:32:82:25:cc:08:b2:34:6b:d8:2c:29:18:b8:e5:c7: f8:b7:ce:0d:b7:2f:17:f1:64:6c:90:06:07:b1:12:d8:45:90: 37:5c:ba:47:fb:08:9a:9f:fe:41:f7:57:8b:9f:1d:71:ad:b1: ab:15:88:dc:44:31:2d:c5:fe:3e:d2:46:ca:4a:b6:2b:1d:0c: 4c:65:9c:4b:e9:1f:ca:ce:68:95:b5:54:e4:89:50:ca:e4:d9: f1:67:7b:e4:cd:50:64:23:74:21:da:10:5b:ab:4a:06:12:bb: f1:2e:22:09:4f:71:2d:ff:87:91:5d:41:f6:e7:7a:5a:99:39: ae:82:df:fe:61:87:3c:20:70:5c:3c:79:c4:ba:98:f4:79:7c: 29:4b:5a:79:bf:e0:bb:5b:99:16:bc:e0:e1:2c:26:46:aa:49: 0b:7c:5b:eb:20:07:26:2f:8b:49:89:07:87:4a:5f:95:7c:b0: 19:e9:fe:34:36:e2:8e:df:71:83:d6:47:ca:7d:75:a8:1e:d1: 75:ce:91:6e:c0:9c:26:d8:c0:58:b5:40:d8:f5:63:86:12:34: d2:c2:f3:38:75:00:29:c7:d7:12:3e:07:b9:7d:53:b0:9c:a3: 4f:68:9e:b1:b8:0c:76:d1:3c:7a:bc:2a:1d:57:e5:ba:12:b6: e3:c4:cf:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnS+MxrPUVg/hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NTZlNDQ5NTgtMTY2ZC00ZTE2LWE2MDktMDJjNThjN2JhZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy+r3gBDAPNNHFMyLDeScAd8ZRUD1gnYJiiQ ZWG5UVyd9+GShhj7kRdVl2IG7lvmzXp6m7c9wBjUw+aJp67ajx97SpwLwiJmM+yD U+rgSNgPEwTP7JRJjWJAuiZgYyawQtCh6L2hRIt9NPLpE9R8Ise5x1l1I5QLcqDi gXgHc1OdV701ffJ7UiWrCrQ+aEnHmpVp9plNAsF1ANJips7MQrImOEfG7M6RRwvY qb1rEoBBaYb9ofx8lq/r2ys8eM1b39t6/8jUgJ58OSYcSSy2fOHVDxBC37NzsnYn cdBR3zEYJs2PyDgHLKM0rEgQjtVjGXF94vUF+xuZOQZHMHHmLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcYhwOt3GR2R/j4J0JpNSoxQCRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvYjUzNTY2ZmQtOWM3Ny0z N2IyLWE5N2QtZDVlMThlMGJhZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsrIjKCJcwIsjRr2CwpGLjlx/i3zg23LxfxZGyQBgexEthFkDdcukf7 CJqf/kH3V4ufHXGtsasViNxEMS3F/j7SRspKtisdDExlnEvpH8rOaJW1VOSJUMrk 2fFne+TNUGQjdCHaEFurSgYSu/EuIglPcS3/h5FdQfbnelqZOa6C3/5hhzwgcFw8 ecS6mPR5fClLWnm/4LtbmRa84OEsJkaqSQt8W+sgByYvi0mJB4dKX5V8sBnp/jQ2 4o7fcYPWR8p9dage0XXOkW7AnCbYwFi1QNj1Y4YSNNLC8zh1ACnH1xI+B7l9U7Cc o09onrG4DHbRPHq8Kh1X5boStuPEz/k= -----END CERTIFICATE-----Generated at Sat Apr 5 08:51:07 2025 by rpki-client