$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa File: f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa (raw, json) Hash identifier: yl8SbyueDdh+QkTXTHE+wE9uN9TWktpB9gZztO/6LGQ= Subject key identifier: 1D:4B:06:1B:80:FC:09:CF:DE:C7:0B:23:92:CD:44:6C:92:6E:C4:5A Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F43285849C20A18F7612F8E13EBFCF480 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 35008 IP address blocks: 23.153.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:18:f7:61:2f:8e:13:eb:fc:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=ff45bc36-c52f-46c7-a32c-8bb1990a3d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:ae:5a:28:ca:97:b5:6a:3f:29:5f:c3:f6: 68:e7:34:e7:80:92:36:8b:ff:8b:ff:0c:fd:67:7e: 0a:d5:e8:b8:48:a3:39:56:da:59:fa:19:76:7d:bb: c6:dd:d8:2f:7a:6c:9c:67:dd:d0:1d:8e:c0:a7:d5: 2c:b3:a4:e1:8f:1d:66:df:78:4e:15:89:9a:77:55: 9d:c7:5b:86:c5:3b:24:e5:72:10:91:d4:fe:aa:e6: 6f:dc:cd:33:a9:79:60:26:0b:3d:90:60:34:74:83: a8:89:20:b1:ff:a0:de:53:1c:e0:0e:ca:bb:f7:de: a6:d8:46:1f:d2:8e:a1:6c:7a:8f:12:74:1d:a0:b6: fd:ef:ef:a7:62:57:a4:68:79:8d:19:f0:2c:9c:33: a4:b6:d8:2e:ab:48:b2:11:01:ad:50:e5:7b:14:d8: 77:a0:3d:c9:ed:66:c0:a1:59:9d:17:7c:e5:e8:6f: 79:de:5f:9e:97:8d:bb:6e:6f:83:db:b3:89:d7:a2: 25:0f:ce:ff:42:4a:2c:98:1c:7a:03:c7:fc:dd:c1: 55:34:d1:4b:2f:be:2a:c0:06:7f:94:73:09:ad:b5: d8:4f:3a:1c:22:98:55:f6:89:8a:54:63:fe:93:04: 03:1b:59:18:12:f5:80:23:c9:a7:1e:e2:12:ab:64: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4B:06:1B:80:FC:09:CF:DE:C7:0B:23:92:CD:44:6C:92:6E:C4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv4: 23.153.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:73:cf:38:28:8e:65:d6:4f:1b:62:c2:26:0c:66:22:f1:5d: f9:50:05:b3:c7:fa:33:c5:93:dc:12:51:ae:a3:ed:e1:4f:ce: 2a:ce:ba:6a:d5:db:0e:f6:54:ad:09:dc:0a:22:c5:92:b7:e5: 42:70:f2:4b:d3:df:95:1d:9a:bc:3f:11:b7:88:2f:77:cf:c1: da:7d:b6:9e:7a:8b:67:35:8b:33:13:1b:d1:0e:4a:c8:96:48: 6c:03:89:5f:6d:f5:7c:79:e5:3d:d5:22:8f:fa:15:88:45:ce: 4a:42:7c:7e:19:9e:f2:b7:9a:7f:08:c3:74:07:31:c8:20:c7: b7:3c:ce:ee:8b:51:de:fe:cb:d7:0f:02:08:9a:65:e7:0d:7a: 8a:c4:36:73:41:05:1c:e9:ec:84:97:eb:2a:49:c5:6f:c0:c9: 18:e6:99:17:29:51:2b:7e:20:f1:fb:df:a6:a4:78:bc:d9:93: 83:8b:cf:80:1a:dc:ce:61:3a:f0:47:34:b6:fd:c7:bb:54:4b: f3:7e:27:d1:1d:53:48:c0:b0:4e:29:be:db:30:44:61:05:0b: 2a:02:46:f7:b2:76:88:f1:b4:8b:64:c8:59:69:d5:2e:e8:23: 43:43:54:82:7a:01:59:58:dd:bb:09:9e:b0:6d:58:b1:24:1c: 18:c0:e2:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChj3YS+OE+v89IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZmY0NWJjMzYtYzUyZi00NmM3LWEzMmMtOGJiMTk5MGEzZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYuuWijKl7VqPylfw/Zo5zTngJI2i/+L/wz9 Z34K1ei4SKM5VtpZ+hl2fbvG3dgvemycZ93QHY7Ap9Uss6Thjx1m33hOFYmad1Wd x1uGxTsk5XIQkdT+quZv3M0zqXlgJgs9kGA0dIOoiSCx/6DeUxzgDsq7996m2EYf 0o6hbHqPEnQdoLb97++nYlekaHmNGfAsnDOkttguq0iyEQGtUOV7FNh3oD3J7WbA oVmdF3zl6G953l+el427bm+D27OJ16IlD87/QkosmBx6A8f83cFVNNFLL74qwAZ/ lHMJrbXYTzocIphV9omKVGP+kwQDG1kYEvWAI8mnHuISq2T3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1LBhuA/AnP3scLI5LNRGySbsRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvZjFjNDBmOGYtNGM5Yy0z YWNiLTkzY2QtZjZjOWIyZTlkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlzzzgojmXWTxtiwiYMZiLxXflQBbPH+jPFk9wSUa6j7eFPzirOumrV 2w72VK0J3AoixZK35UJw8kvT35Udmrw/EbeIL3fPwdp9tp56i2c1izMTG9EOSsiW SGwDiV9t9Xx55T3VIo/6FYhFzkpCfH4ZnvK3mn8Iw3QHMcggx7c8zu6LUd7+y9cP AgiaZecNeorENnNBBRzp7ISX6ypJxW/AyRjmmRcpUSt+IPH736akeLzZk4OLz4Aa 3M5hOvBHNLb9x7tUS/N+J9EdU0jAsE4pvtswRGEFCyoCRveydojxtItkyFlp1S7o I0NDVIJ6AVlY3bsJnrBtWLEkHBjA4gQ= -----END CERTIFICATE-----Generated at Sun Jun 8 05:08:42 2025 by rpki-client