$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa File: f0621ac2-276f-3c57-aad1-63daa946e435.roa (raw, json) Hash identifier: Bv870KI1QBqoeagFz7GARFvv8NT1cQoH8h/YhUxBq5o= Subject key identifier: E1:F4:80:59:AC:EF:21:A8:22:16:CE:8E:FA:9C:9C:CA:54:7E:57:33 Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F43285848AF2B7458100976C656B0EA40 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 23539 IP address blocks: 23.138.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:74:58:10:09:76:c6:56:b0:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=12db6d47-f431-4ea2-bb44-7fa6904af0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:39:96:01:f4:47:d9:a7:32:4e:a6:ed:8e: ce:c6:52:7d:f7:89:62:68:08:f5:d1:ec:ca:85:44: 39:f3:a5:5a:cc:99:c0:3d:7c:61:69:d7:b4:52:0e: 5c:46:a7:a1:d3:01:f6:1a:44:ad:7c:32:6e:f2:a0: 27:6e:4c:8e:8d:a7:6c:d5:ae:5f:07:3a:2a:82:04: a7:ad:f0:3a:0d:3c:ee:ce:3e:83:aa:06:e2:4c:3a: d3:2b:c6:61:26:da:38:99:ab:a0:c5:fb:cd:04:14: 0f:e3:1f:95:9e:fa:ee:42:6f:ac:aa:f0:d2:e8:84: f9:3a:2f:2a:a4:c9:f2:e2:9d:5c:3e:cc:67:3c:15: dc:29:07:7b:c8:02:33:5a:37:d0:39:51:07:dc:89: 8b:1e:99:14:e6:e2:44:14:66:37:aa:e0:87:ac:4b: 6e:3a:7c:4b:96:8a:4a:e3:1f:9f:59:76:ec:13:15: 26:1f:e4:09:38:53:3a:1b:d5:40:56:8f:85:50:80: e1:0c:f3:3c:03:57:a9:a9:ff:8c:0c:da:3f:82:3c: 59:65:d3:cf:18:ff:b4:03:32:fb:fd:46:c1:c4:b4: 5b:22:3d:26:5b:4b:1e:eb:c4:0d:1f:bd:7a:8a:16: a6:3a:11:fd:85:70:d1:c1:a4:c8:7b:07:4d:a2:2c: 76:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F4:80:59:AC:EF:21:A8:22:16:CE:8E:FA:9C:9C:CA:54:7E:57:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 23.138.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bf:0a:4c:a4:56:e8:b5:a7:70:05:bf:e1:bc:43:04:bd:f1: fd:b5:12:e0:8c:66:17:ed:44:47:4f:06:69:46:80:6f:d3:5a: 1a:12:6e:35:0b:d7:57:b1:62:36:5c:6f:2e:92:ed:77:53:2c: e4:13:51:7c:2b:3c:20:0b:9f:76:96:97:6a:d0:97:13:77:34: fe:63:05:89:4c:f8:9e:51:e3:7e:58:23:67:5e:82:ff:41:b3: 1c:de:38:93:b5:a9:fe:71:fe:4e:83:d5:d9:41:a3:16:b3:70: 33:0f:e9:3f:20:0f:bd:10:06:c5:39:e6:fa:91:51:84:ed:12: d7:8a:cc:0b:29:b6:e7:f3:6e:43:7b:be:05:15:51:d1:06:5b: fc:e5:71:4f:ce:40:c0:50:49:28:c5:a2:fd:ef:e9:af:a0:ae: 8f:a9:9e:e4:04:62:fc:14:5b:e9:0a:64:78:7e:7c:4d:78:f7: c9:94:de:e5:2c:27:89:41:5c:1d:54:bc:33:11:54:f4:a8:8a: 77:96:5a:a2:4b:3f:42:8f:b5:56:2e:0c:39:13:ed:c1:0c:7c: f8:7f:0d:61:48:fc:5f:1a:71:49:65:47:92:eb:4e:e3:93:b7: 4e:e3:fb:5c:ee:d5:75:b1:ee:a5:a1:b2:6e:ac:c7:9f:4b:0b: d4:50:57:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3RYEAl2xlaw6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MTJkYjZkNDctZjQzMS00ZWEyLWJiNDQtN2ZhNjkwNGFmMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD85lgH0R9mnMk6m7Y7OxlJ994liaAj10ezK hUQ586VazJnAPXxhade0Ug5cRqeh0wH2GkStfDJu8qAnbkyOjads1a5fBzoqggSn rfA6DTzuzj6DqgbiTDrTK8ZhJto4maugxfvNBBQP4x+VnvruQm+sqvDS6IT5Oi8q pMny4p1cPsxnPBXcKQd7yAIzWjfQOVEH3ImLHpkU5uJEFGY3quCHrEtuOnxLlopK 4x+fWXbsExUmH+QJOFM6G9VAVo+FUIDhDPM8A1epqf+MDNo/gjxZZdPPGP+0AzL7 /UbBxLRbIj0mW0se68QNH716ihamOhH9hXDRwaTIewdNoix2FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOH0gFms7yGoIhbOjvqcnMpUflczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvZjA2MjFhYzItMjc2Zi0z YzU3LWFhZDEtNjNkYWE5NDZlNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2/CkykVui1p3AFv+G8QwS98f21EuCMZhftREdPBmlGgG/TWhoSbjUL 11exYjZcby6S7XdTLOQTUXwrPCALn3aWl2rQlxN3NP5jBYlM+J5R435YI2degv9B sxzeOJO1qf5x/k6D1dlBoxazcDMP6T8gD70QBsU55vqRUYTtEteKzAsptufzbkN7 vgUVUdEGW/zlcU/OQMBQSSjFov3v6a+gro+pnuQEYvwUW+kKZHh+fE1498mU3uUs J4lBXB1UvDMRVPSoineWWqJLP0KPtVYuDDkT7cEMfPh/DWFI/F8acUllR5LrTuOT t07j+1zu1XWx7qWhsm6sx59LC9RQV9E= -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:40 2025 by rpki-client