$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa File: d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa (raw, json) Hash identifier: lNTESEU9XAJk4UuxS1PWDr5+5eEx7FqDxb9vuz83glo= Subject key identifier: 24:7A:DF:9D:6E:D4:BB:7F:2C:2F:5E:6E:58:E1:F0:19:C7:2C:F7:1B Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F4328584961B9A46BADD36F8390505680 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 31799 IP address blocks: 23.138.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a4:6b:ad:d3:6f:83:90:50:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=43481219-b6f7-4c43-b47f-3fd5f411d5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:40:2d:c2:78:f4:cc:dd:a0:42:26:52:30: 69:cd:7c:94:5a:92:aa:9e:c8:73:76:34:2a:a6:df: 18:12:15:4c:ac:d5:fd:ed:a9:5f:34:b2:4b:61:bc: 1e:22:20:02:7f:5b:18:73:4f:0e:c4:7e:e8:64:2d: 62:59:d3:a9:23:f6:2b:90:65:3f:5b:ad:75:1d:9a: 5c:7c:6e:7c:e8:03:fe:ad:e6:a8:50:20:3f:33:b8: 01:e7:9b:6e:e2:42:9b:86:e0:17:db:ec:73:52:df: 32:cc:32:9c:0d:f8:97:45:c8:ba:20:2a:29:ea:5c: 38:28:0d:ee:1a:58:1d:d9:2d:2a:18:65:66:e0:58: 40:82:ba:16:17:83:26:91:35:44:37:e6:66:af:10: c2:e1:67:a8:62:68:99:a0:9c:7e:e5:bb:20:a1:52: 33:77:77:34:35:dc:8c:5c:84:c3:e6:61:5c:1e:8d: 34:4b:46:6d:3c:48:ff:45:05:06:e8:67:5f:c6:2a: ab:52:2a:af:bc:58:05:f8:60:7d:1e:e7:fb:02:69: ad:36:9a:b3:52:cc:ca:8f:1e:5c:70:1e:f2:2d:72: 1c:96:13:8d:f6:f0:5c:90:c7:dc:76:1c:78:a2:1f: 39:ba:db:e5:b4:11:84:2a:a8:06:7c:aa:c0:a5:95: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7A:DF:9D:6E:D4:BB:7F:2C:2F:5E:6E:58:E1:F0:19:C7:2C:F7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 23.138.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d2:70:98:c3:88:f6:5a:4a:d8:07:3b:a7:b1:5e:07:15:52: ab:57:86:35:21:7c:23:02:63:0e:f3:13:8a:39:6a:71:64:e5: 1f:ef:3c:be:79:e2:05:b5:8f:4d:d4:34:47:da:84:79:41:a8: 2f:75:27:59:97:16:70:44:b4:d0:48:60:8c:c9:5d:87:19:4c: 8d:bc:74:e4:42:eb:4e:2f:c8:94:f0:2e:34:47:1e:6c:8c:9e: 78:14:11:71:46:19:e6:2b:40:bd:48:3e:bc:89:fc:23:00:17: 2e:79:9e:f4:5d:b9:f1:13:5d:4e:d6:2f:17:05:79:a8:32:06: 00:ac:cc:6b:a4:83:f5:21:b4:60:3e:6e:b2:eb:a1:f7:f0:43: c8:05:5c:9c:32:51:6e:b1:4e:0c:9c:68:a6:af:07:45:ec:93: 2a:39:35:1f:a0:e2:76:2b:82:46:d3:67:47:79:47:ca:f4:f5: 48:55:de:6b:74:68:8e:b6:ff:b9:13:8a:b2:29:7c:88:b7:8b: 1c:c5:6a:c9:7a:64:46:7b:58:fd:16:43:de:af:33:4b:0c:b7: b6:24:c0:a0:0c:c0:63:9a:75:b5:a0:6e:17:88:88:f8:05:5f: 12:c3:1d:c7:c2:a0:34:96:6d:16:f8:2a:fc:8b:84:a0:c0:03: e2:32:c8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaRrrdNvg5BQVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NDM0ODEyMTktYjZmNy00YzQzLWI0N2YtM2ZkNWY0MTFkNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/JALcJ49MzdoEImUjBpzXyUWpKqnshzdjQq pt8YEhVMrNX97alfNLJLYbweIiACf1sYc08OxH7oZC1iWdOpI/YrkGU/W611HZpc fG586AP+reaoUCA/M7gB55tu4kKbhuAX2+xzUt8yzDKcDfiXRci6ICop6lw4KA3u Glgd2S0qGGVm4FhAgroWF4MmkTVEN+ZmrxDC4WeoYmiZoJx+5bsgoVIzd3c0NdyM XITD5mFcHo00S0ZtPEj/RQUG6GdfxiqrUiqvvFgF+GB9Huf7AmmtNpqzUszKjx5c cB7yLXIclhON9vBckMfcdhx4oh85utvltBGEKqgGfKrApZVucwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR6351u1Lt/LC9ebljh8BnHLPcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvZDYyOWYxZjAtMGNjZC0z YzlkLTk1NDgtYmYxOTJjZDMyZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrScJjDiPZaStgHO6exXgcVUqtXhjUhfCMCYw7zE4o5anFk5R/vPL55 4gW1j03UNEfahHlBqC91J1mXFnBEtNBIYIzJXYcZTI28dORC604vyJTwLjRHHmyM nngUEXFGGeYrQL1IPryJ/CMAFy55nvRdufETXU7WLxcFeagyBgCszGukg/UhtGA+ brLroffwQ8gFXJwyUW6xTgycaKavB0Xskyo5NR+g4nYrgkbTZ0d5R8r09UhV3mt0 aI62/7kTirIpfIi3ixzFasl6ZEZ7WP0WQ96vM0sMt7YkwKAMwGOadbWgbheIiPgF XxLDHcfCoDSWbRb4KvyLhKDAA+IyyOw= -----END CERTIFICATE-----Generated at Sat Apr 12 15:09:37 2025 by rpki-client