$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa File: c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa (raw, json) Hash identifier: 1YMPfn9fs5I5yX7dGe1SQTMs1ZvpB4ylALM/EuVWPM0= Subject key identifier: 54:66:F6:C1:13:C5:52:D4:F3:FD:46:C8:B8:8F:E6:E8:BB:9B:50:10 Certificate issuer: /CN=13a90422-997f-4e00-bfd1-3d9f4331b9c5 Certificate serial: 010D0C9F4328584968B41FEAD5B3F26BBFC6FB80 Authority key identifier: 8A:26:C3:9F:90:A8:FE:0B:D1:96:D3:3F:D7:EA:82:A1:C9:86:B0:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 16611 IP address blocks: 23.132.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/13a90422-997f-4e00-bfd1-3d9f4331b9c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/13a90422-997f-4e00-bfd1-3d9f4331b9c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:1f:ea:d5:b3:f2:6b:bf:c6:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13a90422-997f-4e00-bfd1-3d9f4331b9c5 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=7e3e0c5a-7960-42e6-bdb0-b37cf1431028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:90:29:8f:59:0a:34:63:fb:a0:92:cf:00: 58:cb:d4:17:fa:8d:fe:75:37:55:0b:ab:bb:35:f7: 3d:79:23:1a:22:ce:c6:a6:cc:54:0d:b5:db:33:26: 1e:8c:7e:16:63:7b:a9:15:49:7c:3d:e9:ea:f5:f2: db:dd:3e:c8:0f:71:f6:3a:0b:32:de:8e:36:77:eb: a0:1f:aa:f3:ba:d3:ce:1c:de:56:c1:0b:d5:55:35: 1f:9f:4f:bb:86:89:04:88:c3:0b:06:82:7e:49:ac: 53:54:00:83:50:90:79:27:04:07:22:2b:d7:54:89: 08:17:34:5e:d8:6d:c1:4c:00:21:b8:15:81:ac:88: 83:52:05:db:6f:80:53:a5:29:b2:b4:cf:1c:08:9c: 88:23:19:b8:f7:85:91:54:54:d8:b6:ca:70:17:1e: b3:1b:06:69:d7:b3:89:2f:6f:31:79:1b:ab:13:66: 27:b3:ba:25:7a:cd:ce:3d:37:45:04:54:11:ea:b4: 5d:d3:61:fd:87:3a:90:d0:4a:0f:17:0c:01:8c:db: c5:7d:a5:81:21:a5:5a:52:32:4a:af:ba:f7:1f:cc: 9e:fe:66:2e:a5:04:85:4f:21:59:c5:c4:5f:78:43: 38:dc:96:aa:c0:d5:18:d5:8e:91:30:00:75:29:20: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:66:F6:C1:13:C5:52:D4:F3:FD:46:C8:B8:8F:E6:E8:BB:9B:50:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/13a90422-997f-4e00-bfd1-3d9f4331b9c5.crl X509v3 Authority Key Identifier: keyid:8A:26:C3:9F:90:A8:FE:0B:D1:96:D3:3F:D7:EA:82:A1:C9:86:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5.cer sbgp-ipAddrBlock: critical IPv4: 23.132.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:cb:6c:85:c2:2c:66:78:4a:b0:c2:b9:1d:97:1b:a6:b5:2a: f7:dc:ee:fc:0f:99:0f:ab:47:aa:c0:98:be:ac:b7:45:04:77: 27:8e:40:c1:1e:25:5a:1d:c5:cb:86:e6:f1:4c:aa:77:7b:05: 58:b1:37:6a:67:25:20:dd:ae:43:7f:93:bb:4b:bb:58:6d:77: c7:ce:a0:ac:b4:ae:ae:cc:a9:e0:f4:e3:06:c9:e6:1b:5d:19: ce:12:1a:5f:b6:6e:55:f7:aa:9b:96:55:00:ab:ec:cb:11:e0: d8:a9:0c:81:4a:9b:eb:aa:64:cd:18:8c:da:8a:80:54:63:dc: 75:b7:39:6b:6a:c3:64:67:15:41:2d:0a:b2:be:84:65:b9:dc: 25:91:f4:b9:bb:1c:33:05:6b:10:9c:15:32:30:e0:44:cf:57: b8:8a:3c:fc:48:27:50:0c:dd:e8:a5:a6:1a:e6:55:69:c2:1c: 5c:79:4f:c5:5d:e9:97:71:72:f0:23:fc:28:74:c4:60:56:01: 14:8b:eb:2a:c0:a2:09:b9:20:48:67:82:af:8e:c0:d6:56:fd: 53:af:1d:91:25:15:9f:7d:e2:92:6e:d0:87:f7:99:c5:44:cd: 19:84:e2:42:ad:50:de:65:b2:9c:40:fe:f9:e4:72:25:b5:d3: a8:80:47:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotB/q1bPya7/G+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNhOTA0MjItOTk3Zi00ZTAwLWJmZDEtM2Q5ZjQzMzFi OWM1MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk N2UzZTBjNWEtNzk2MC00MmU2LWJkYjAtYjM3Y2YxNDMxMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aCQKY9ZCjRj+6CSzwBYy9QX+o3+dTdVC6u7 Nfc9eSMaIs7GpsxUDbXbMyYejH4WY3upFUl8Penq9fLb3T7ID3H2Ogsy3o42d+ug H6rzutPOHN5WwQvVVTUfn0+7hokEiMMLBoJ+SaxTVACDUJB5JwQHIivXVIkIFzRe 2G3BTAAhuBWBrIiDUgXbb4BTpSmytM8cCJyIIxm494WRVFTYtspwFx6zGwZp17OJ L28xeRurE2Yns7oles3OPTdFBFQR6rRd02H9hzqQ0EoPFwwBjNvFfaWBIaVaUjJK r7r3H8ye/mYupQSFTyFZxcRfeEM43JaqwNUY1Y6RMAB1KSCv7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRm9sETxVLU8/1GyLiP5ui7m1AQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xM2E5 MDQyMi05OTdmLTRlMDAtYmZkMS0zZDlmNDMzMWI5YzUvYzM5MjlhMDAtNzFkZC0z ZmJlLThiYjAtN2IyNjNiZWMxZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTNhOTA0MjItOTk3Zi00ZTAwLWJm ZDEtM2Q5ZjQzMzFiOWM1LzEzYTkwNDIyLTk5N2YtNGUwMC1iZmQxLTNkOWY0MzMx YjljNS5jcmwwHwYDVR0jBBgwFoAUiibDn5Co/gvRltM/1+qCocmGsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xM2E5MDQyMi05OTdmLTRlMDAtYmZkMS0zZDlm NDMzMWI5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDLbIXCLGZ4SrDCuR2XG6a1Kvfc7vwPmQ+rR6rAmL6st0UEdyeOQMEe JVodxcuG5vFMqnd7BVixN2pnJSDdrkN/k7tLu1htd8fOoKy0rq7MqeD04wbJ5htd Gc4SGl+2blX3qpuWVQCr7MsR4NipDIFKm+uqZM0YjNqKgFRj3HW3OWtqw2RnFUEt CrK+hGW53CWR9Lm7HDMFaxCcFTIw4ETPV7iKPPxIJ1AM3eilphrmVWnCHFx5T8Vd 6ZdxcvAj/Ch0xGBWARSL6yrAogm5IEhngq+OwNZW/VOvHZElFZ994pJu0If3mcVE zRmE4kKtUN5lspxA/vnkciW106iAR68= -----END CERTIFICATE-----Generated at Fri Apr 11 21:01:28 2025 by rpki-client