$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/25390b21-bdd0-35cb-b226-e2626b45dc25.roa File: 25390b21-bdd0-35cb-b226-e2626b45dc25.roa (raw, json) Hash identifier: j4+1+b5p1MkXqocqrkLtybo53XMVD4EpE7BHVsCuZ6g= Subject key identifier: 11:7F:19:7D:A6:FE:87:4F:7D:4E:66:39:DB:B2:41:51:C1:98:4A:65 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584923B6A0531093B797E0AA6EC0 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/25390b21-bdd0-35cb-b226-e2626b45dc25.roa Signing time: Mon 10 Mar 2025 07:55:05 +0000 ROA not before: Mon 10 Mar 2025 07:55:05 +0000 ROA not after: Sun 08 Jun 2025 07:55:05 +0000 asID: 9516 IP address blocks: 23.148.40.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:23:b6:a0:53:10:93:b7:97:e0:aa:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Mar 10 07:55:05 2025 GMT Not After : Jun 8 07:55:05 2025 GMT Subject: CN=59944b49-6b73-4c95-b292-46868220f24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:d0:46:b2:f9:2e:14:f2:c2:e2:0f:2f:b3: 3e:a4:42:3f:f0:d6:01:ca:ee:1a:43:32:c6:a1:5f: 3c:97:2d:b6:fd:8b:36:ec:76:17:b2:04:ef:46:71: e4:01:c3:56:49:69:58:69:e2:a1:ce:54:d2:39:60: 5d:08:2d:5a:f5:96:8f:0c:26:93:c2:37:33:53:16: 20:4c:85:de:52:a8:19:53:dd:02:4d:28:8d:63:4a: 95:c0:e2:76:88:71:12:09:81:74:aa:14:6e:5a:5b: 25:fa:4f:86:e7:20:51:8b:4b:53:97:a4:a9:d4:fe: 71:bf:47:03:df:fb:31:4c:3d:4a:de:d9:a9:5a:2b: 30:7c:ec:67:09:b4:b0:5b:9a:95:72:32:d1:c8:85: 55:39:61:eb:20:1d:c1:34:be:21:45:23:4f:4e:57: 5b:2b:35:e0:57:cd:e3:4b:09:aa:2d:65:f0:48:90: 43:38:22:c3:96:06:0e:a1:44:c2:de:39:1d:78:0b: 9f:de:ca:e6:06:dd:34:a7:79:94:ef:d2:2c:4a:ab: a5:7c:9e:1b:64:af:a4:2b:c6:aa:8f:02:c4:40:2b: 57:27:6d:bf:d8:0a:96:5d:62:2e:f7:69:a7:df:ea: dd:68:3c:e3:d1:74:d3:88:a9:fa:af:e4:9f:80:ea: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7F:19:7D:A6:FE:87:4F:7D:4E:66:39:DB:B2:41:51:C1:98:4A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/25390b21-bdd0-35cb-b226-e2626b45dc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 23.148.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:02:d6:f2:90:16:27:6a:4b:f1:71:8f:2a:a1:b6:c4:63:56: db:d0:46:3b:3c:2e:40:5b:7a:da:9c:bc:51:07:e1:30:c8:19: 7d:a7:3f:02:57:07:82:4e:15:43:28:4a:64:db:e6:9d:1f:1d: 40:ff:3b:9d:1f:8d:9b:4e:28:cb:4e:7b:ba:12:21:1d:39:65: e0:2d:2e:c6:31:0a:aa:19:81:23:39:2e:8f:7b:ef:d5:99:0c: b0:24:b3:dd:4d:71:09:9a:4f:b1:8f:dc:5f:98:a3:5f:51:8d: d3:a8:e2:3a:bf:99:d5:80:87:41:ed:df:34:24:36:86:ff:75: 34:5c:2c:a8:67:09:e2:d5:66:86:67:64:27:e0:bf:3a:fa:29: 1e:b3:45:2f:29:15:21:ca:c0:f8:7a:e1:c8:06:92:32:9b:6b: 13:60:84:88:06:e5:1a:eb:84:48:8b:e5:95:38:cb:34:60:68: 27:d2:30:23:6a:dd:74:2f:ec:2b:15:f7:7d:bc:a4:72:a3:f5: c6:6e:97:1b:03:95:93:a9:98:0e:2e:d7:de:4f:f6:ab:8a:69: a4:7f:9e:08:fb:c4:f7:10:81:c4:30:51:cc:a0:0b:07:83:9c: 78:ba:bc:0a:1b:f0:a0:f2:ca:86:e1:1a:41:9c:aa:c4:d9:68: 19:70:81:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkjtqBTEJO3l+CqbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI1MDMxMDA3NTUwNVoXDTI1MDYwODA3NTUwNVowLzEtMCsGA1UEAxMk NTk5NDRiNDktNmI3My00Yzk1LWIyOTItNDY4NjgyMjBmMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo7QRrL5LhTywuIPL7M+pEI/8NYByu4aQzLG oV88ly22/Ys27HYXsgTvRnHkAcNWSWlYaeKhzlTSOWBdCC1a9ZaPDCaTwjczUxYg TIXeUqgZU90CTSiNY0qVwOJ2iHESCYF0qhRuWlsl+k+G5yBRi0tTl6Sp1P5xv0cD 3/sxTD1K3tmpWiswfOxnCbSwW5qVcjLRyIVVOWHrIB3BNL4hRSNPTldbKzXgV83j SwmqLWXwSJBDOCLDlgYOoUTC3jkdeAuf3srmBt00p3mU79IsSqulfJ4bZK+kK8aq jwLEQCtXJ22/2AqWXWIu92mn3+rdaDzj0XTTiKn6r+SfgOrGjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF/GX2m/odPfU5mOduyQVHBmEplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMjUzOTBiMjEtYmRkMC0z NWNiLWIyMjYtZTI2MjZiNDVkYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5QoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4C1vKQFidqS/FxjyqhtsRjVtvQRjs8LkBbetqcvFEH4TDIGX2nPwJX B4JOFUMoSmTb5p0fHUD/O50fjZtOKMtOe7oSIR05ZeAtLsYxCqoZgSM5Lo9779WZ DLAks91NcQmaT7GP3F+Yo19RjdOo4jq/mdWAh0Ht3zQkNob/dTRcLKhnCeLVZoZn ZCfgvzr6KR6zRS8pFSHKwPh64cgGkjKbaxNghIgG5RrrhEiL5ZU4yzRgaCfSMCNq 3XQv7CsV9328pHKj9cZulxsDlZOpmA4u195P9quKaaR/ngj7xPcQgcQwUcygCweD nHi6vAob8KDyyobhGkGcqsTZaBlwgZ4= -----END CERTIFICATE-----Generated at Sun Apr 6 19:21:36 2025 by rpki-client