$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa File: cb3b5a70-df8d-3963-a739-28f2b078237e.roa (raw, json) Hash identifier: SYnntLdrx5doH7XEJhOcy8gVaLLyykdlPDTWdUM0DiU= Subject key identifier: D3:37:B1:69:A9:2D:D0:22:5A:C0:4B:12:40:13:C4:F6:DA:26:03:6A Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F432858494039469DA8C1B177F6B85A80 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 3257 IP address blocks: 23.234.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:46:9d:a8:c1:b1:77:f6:b8:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=f7411918-35af-445c-b02c-4afa647584e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:61:5a:6d:67:b2:fa:67:76:33:5f:6e:d8: f8:09:b7:cd:9c:dd:fb:e2:47:93:b7:b7:b7:bb:6f: 7f:56:eb:33:25:68:8a:53:77:e5:ff:a1:ba:b4:2f: 1e:df:03:61:d0:72:c4:0a:57:8a:b2:88:a2:a0:74: dc:df:95:c5:34:ff:d4:a6:1f:bc:c6:a7:28:96:86: 4f:b1:c2:9e:cd:cc:38:a0:eb:45:e2:0b:84:53:05: 1f:53:04:c6:ea:d7:cc:a2:f2:04:a9:e1:64:79:47: 14:05:43:00:7a:29:0c:02:ac:e4:08:9f:94:20:10: d3:51:d8:44:eb:14:23:09:b5:fe:4f:f6:c8:b0:bc: 5c:81:f0:33:4f:af:8c:dc:ea:94:73:bb:ab:a5:72: c5:ea:38:fb:1f:56:46:58:f3:82:64:77:82:87:fa: e3:39:8a:00:3e:78:5c:e1:38:90:6c:f4:a7:6e:ee: b0:c0:99:b1:c9:1f:48:fc:96:36:2d:90:96:3c:e8: cb:f9:71:e3:51:d5:82:45:8a:8e:57:7b:12:9a:ef: 3c:53:24:d1:93:85:6f:cb:e0:9e:2d:92:6b:b5:fe: 38:03:23:51:c4:bc:c5:dd:2d:d5:9c:81:3d:06:e3: 7a:38:f5:d5:e5:fc:17:4d:d3:c5:d1:58:62:35:27: 79:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:B1:69:A9:2D:D0:22:5A:C0:4B:12:40:13:C4:F6:DA:26:03:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:42:c6:86:5e:59:ec:45:b1:93:c5:7c:40:f4:42:05:2c:17: a6:43:ac:9c:e4:62:cb:d1:69:eb:fd:f0:e8:06:3a:4c:21:b1: 78:0c:48:5a:57:7c:63:85:9c:f3:af:1b:d3:7f:10:b6:e2:b0: 40:92:8c:5d:6a:23:f9:d5:c9:95:de:a9:b2:ee:42:d6:49:04: bb:bf:2c:49:b1:e8:5e:70:df:f7:d6:24:dc:61:73:8c:79:84: ba:ee:03:fa:d2:ae:e4:e3:40:6a:6c:9b:40:c4:da:ab:df:5f: 2b:d6:51:a7:b2:28:4b:8a:d3:e8:04:7c:a0:4f:b0:0c:eb:d6: 4b:2b:76:39:35:6b:13:e6:d6:cf:43:3b:5e:97:62:68:3c:61: da:27:b1:6f:1c:3d:93:fd:82:48:90:f8:c5:07:26:cf:71:75: 7b:27:91:6e:45:6c:c5:97:cf:7c:19:00:3b:09:c9:a8:8b:7a: 1e:93:65:bf:d4:47:5f:ac:8f:f4:81:b8:df:8f:d4:54:35:37: 5c:dd:cc:4b:85:2c:5f:e6:df:e7:ad:ce:71:42:a9:c3:0d:10: 3e:f1:92:a2:51:7e:93:7c:16:1e:51:3f:2d:e3:c1:d2:56:47: a6:4b:04:55:e5:ba:25:85:08:eb:f2:d8:57:a7:8e:a8:b2:bc: c4:e3:b0:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUadqMGxd/a4WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk Zjc0MTE5MTgtMzVhZi00NDVjLWIwMmMtNGFmYTY0NzU4NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYJhWm1nsvpndjNfbtj4CbfNnN374keTt7e3 u29/VuszJWiKU3fl/6G6tC8e3wNh0HLECleKsoiioHTc35XFNP/Uph+8xqcoloZP scKezcw4oOtF4guEUwUfUwTG6tfMovIEqeFkeUcUBUMAeikMAqzkCJ+UIBDTUdhE 6xQjCbX+T/bIsLxcgfAzT6+M3OqUc7urpXLF6jj7H1ZGWPOCZHeCh/rjOYoAPnhc 4TiQbPSnbu6wwJmxyR9I/JY2LZCWPOjL+XHjUdWCRYqOV3sSmu88UyTRk4Vvy+Ce LZJrtf44AyNRxLzF3S3VnIE9BuN6OPXV5fwXTdPF0VhiNSd5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM3sWmpLdAiWsBLEkATxPbaJgNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvY2IzYjVhNzAtZGY4ZC0z OTYzLWE3MzktMjhmMmIwNzgyMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9CxoZeWexFsZPFfED0QgUsF6ZDrJzkYsvRaev98OgGOkwhsXgMSFpX fGOFnPOvG9N/ELbisECSjF1qI/nVyZXeqbLuQtZJBLu/LEmx6F5w3/fWJNxhc4x5 hLruA/rSruTjQGpsm0DE2qvfXyvWUaeyKEuK0+gEfKBPsAzr1ksrdjk1axPm1s9D O16XYmg8YdonsW8cPZP9gkiQ+MUHJs9xdXsnkW5FbMWXz3wZADsJyaiLeh6TZb/U R1+sj/SBuN+P1FQ1N1zdzEuFLF/m3+etznFCqcMNED7xkqJRfpN8Fh5RPy3jwdJW R6ZLBFXluiWFCOvy2FenjqiyvMTjsIk= -----END CERTIFICATE-----Generated at Sat Apr 5 08:34:41 2025 by rpki-client