$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa File: a3b8b1ae-7662-39b8-9a83-169fa490def1.roa (raw, json) Hash identifier: cnmAXu/L5LveFfGun9KrfBTGVHYw0+O2c6zlV0BPyds= Subject key identifier: 80:6A:8B:83:79:BA:8D:2B:D2:30:81:8C:46:E6:1E:20:73:BF:F4:C2 Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584965E97857634354C7ACB8AA80 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 203888 IP address blocks: 23.167.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:78:57:63:43:54:c7:ac:b8:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=0e1072a8-e4ce-4ece-8cf9-f79e9058786a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:5d:3e:5e:5e:c9:f2:22:49:75:63:2b:ad: 43:40:a6:82:fc:fe:0b:46:c9:6d:e0:7d:59:55:11: aa:2a:e7:f2:27:33:b7:98:2c:bc:51:f1:95:8d:39: 20:cc:dc:12:80:c1:5f:da:e4:fd:9f:18:0e:d4:f5: 57:c6:64:d3:c0:e5:9f:cd:7a:d2:f6:b1:d9:56:32: 74:02:3a:d6:5a:fc:cb:7d:b7:4b:a0:49:ff:b2:c7: ce:0b:58:35:77:f4:cc:da:9c:3e:dd:98:ac:dc:40: c0:65:3f:1d:8d:af:c0:90:67:f3:0a:2b:76:0f:a4: e5:a1:00:ea:ec:22:cb:3e:e3:7e:96:90:47:28:17: 8d:53:46:0b:07:5e:e6:f6:0d:23:fb:05:67:62:ed: 25:e6:89:40:f4:62:f4:79:8f:3d:af:8c:3e:89:cb: 23:e2:87:20:b2:e1:bb:e6:9c:99:46:d2:e6:4c:ee: b9:5a:dc:ca:89:ef:3e:f4:af:6a:63:00:ac:20:31: cf:e6:17:03:e7:88:34:34:46:e1:d9:75:df:ea:07: e2:17:54:3f:25:a6:59:9a:fa:bf:17:47:30:7a:1e: 89:b1:c8:05:a6:b4:93:b7:96:5e:f3:41:31:a7:28: df:67:17:93:61:be:31:01:c2:d2:96:d0:8c:8e:88: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6A:8B:83:79:BA:8D:2B:D2:30:81:8C:46:E6:1E:20:73:BF:F4:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv4: 23.167.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:46:3d:82:f3:9e:eb:e6:46:94:94:d1:d9:3f:af:bb:95:be: 55:0d:40:e3:bc:f8:68:fc:0b:64:a3:18:33:0a:da:da:f3:e9: 10:37:a5:07:d1:7f:0e:9e:ca:48:f7:21:73:80:64:ee:ae:3b: 18:3f:ba:42:b2:0b:7a:31:73:e5:46:e5:43:f3:ab:89:a1:c1: ca:b6:09:a6:dd:22:94:dd:c3:a1:93:8b:d2:ee:4d:06:b0:33: a0:53:80:fb:a3:fc:95:6f:83:c1:4d:a0:c0:88:22:07:c6:d9: 54:03:70:3e:c1:50:aa:28:94:79:f5:71:03:d8:83:36:e9:4c: a4:bb:30:7d:d9:b2:b4:10:39:5d:cf:f9:c6:d0:c8:41:b1:d2: 2b:a3:1f:55:b2:c6:27:db:5b:80:14:9d:e1:3c:f0:fe:ea:dd: 7f:9b:3b:83:e8:83:37:88:92:ef:34:fa:61:85:89:f7:55:7d: 3b:f0:7f:99:bb:d0:25:0f:d4:2b:cd:a6:f5:09:37:10:a5:3d: 37:1b:0e:21:51:5f:99:fc:12:c4:b4:a9:f8:ca:e8:0d:24:45: ef:cd:38:24:59:65:fd:3f:a9:3a:d9:36:dd:a8:eb:df:b7:cf: 50:da:ec:c5:c6:55:5a:d5:c8:bb:8e:eb:3d:83:e3:eb:bb:61: a7:5d:f9:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XhXY0NUx6y4qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk MGUxMDcyYTgtZTRjZS00ZWNlLThjZjktZjc5ZTkwNTg3ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5FdPl5eyfIiSXVjK61DQKaC/P4LRslt4H1Z VRGqKufyJzO3mCy8UfGVjTkgzNwSgMFf2uT9nxgO1PVXxmTTwOWfzXrS9rHZVjJ0 AjrWWvzLfbdLoEn/ssfOC1g1d/TM2pw+3Zis3EDAZT8dja/AkGfzCit2D6TloQDq 7CLLPuN+lpBHKBeNU0YLB17m9g0j+wVnYu0l5olA9GL0eY89r4w+icsj4ocgsuG7 5pyZRtLmTO65WtzKie8+9K9qYwCsIDHP5hcD54g0NEbh2XXf6gfiF1Q/JaZZmvq/ F0cweh6JscgFprSTt5Ze80ExpyjfZxeTYb4xAcLSltCMjoj7twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBqi4N5uo0r0jCBjEbmHiBzv/TCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvYTNiOGIxYWUtNzY2Mi0z OWI4LTlhODMtMTY5ZmE0OTBkZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6cIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANGPYLznuvmRpSU0dk/r7uVvlUNQOO8+Gj8C2SjGDMK2trz6RA3pQfR fw6eykj3IXOAZO6uOxg/ukKyC3oxc+VG5UPzq4mhwcq2CabdIpTdw6GTi9LuTQaw M6BTgPuj/JVvg8FNoMCIIgfG2VQDcD7BUKoolHn1cQPYgzbpTKS7MH3ZsrQQOV3P +cbQyEGx0iujH1WyxifbW4AUneE88P7q3X+bO4PogzeIku80+mGFifdVfTvwf5m7 0CUP1CvNpvUJNxClPTcbDiFRX5n8EsS0qfjK6A0kRe/NOCRZZf0/qTrZNt2o69+3 z1Da7MXGVVrVyLuO6z2D4+u7Yadd+WY= -----END CERTIFICATE-----Generated at Fri Apr 4 19:31:50 2025 by rpki-client