$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa File: 3eb42a5a-0fa5-3564-a10d-1674d389315c.roa (raw, json) Hash identifier: NbUhY05nJ8q171Lq61jQ8+g1xtUx71C0EKeKHw7k2ek= Subject key identifier: 75:FC:2D:EF:28:E2:7F:6F:D8:7A:4D:20:E2:A7:79:85:53:1F:78:CB Certificate issuer: /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Certificate serial: 010D0C9F43285848F65BF5B9024E9D5560060680 Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 40343 IP address blocks: 23.168.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f5:b9:02:4e:9d:55:60:06:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=5744a531-545e-45e6-92f7-4b04d2599736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:22:9c:93:69:eb:6d:b6:00:23:df:df:6f: 32:b0:e2:51:06:22:c1:a7:ed:54:3a:99:46:cb:4e: c7:11:59:ab:f3:ba:66:62:5b:9d:76:21:70:92:3a: 50:8f:32:21:78:13:61:0c:d7:05:54:4a:a3:31:24: 3b:c6:b6:97:be:65:4a:58:ef:be:e8:ab:19:c3:86: 0c:1c:91:47:7c:eb:54:5f:e7:06:63:92:61:13:86: 5e:b4:8c:c1:64:34:0c:78:f6:7a:ab:88:53:1f:8a: 9f:61:ce:5e:fd:fd:00:53:30:8f:7a:7f:9f:56:09: 46:95:68:dd:38:d4:3d:55:8b:a2:bd:a1:87:00:df: 17:48:2d:b8:8c:5c:23:87:1c:f7:23:80:af:68:8d: 30:6b:51:eb:c1:84:9f:e1:5d:33:e5:86:09:3e:ec: 2f:82:cb:73:37:05:d6:93:da:8a:1d:c1:aa:6a:62: 2a:ca:a6:a1:e6:1c:75:c7:e5:34:fe:65:27:01:de: 14:49:d8:f3:7e:9e:56:0c:88:20:bd:cd:10:f7:06: 98:ed:47:ab:60:07:1a:31:35:1a:63:95:ce:91:51: 4e:0d:be:53:2c:fc:98:68:07:96:9c:ae:7b:95:69: 65:0b:b9:04:31:e4:ec:97:85:26:67:2c:00:ce:f4: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FC:2D:EF:28:E2:7F:6F:D8:7A:4D:20:E2:A7:79:85:53:1F:78:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl X509v3 Authority Key Identifier: keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer sbgp-ipAddrBlock: critical IPv4: 23.168.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e4:1a:b1:78:52:47:8f:5f:b2:d9:2f:47:33:27:c4:07:8c: a7:7f:04:01:63:48:f2:02:20:97:c7:84:39:49:30:af:1d:62: d0:7c:01:f1:57:4a:c2:58:d9:5a:7d:5a:22:b2:32:c6:05:bc: 28:4c:79:6d:4c:7a:80:5a:63:4f:89:28:8a:08:14:67:eb:ea: fc:89:ca:bf:4e:0d:aa:6b:d6:9d:fd:20:d9:45:87:e7:66:67: 31:7c:9f:92:73:1c:38:56:5d:6a:7e:8e:b5:95:62:09:41:48: 53:ef:d1:a8:a9:60:20:5b:18:4a:b9:69:88:8c:ef:90:c6:60: 22:8f:0a:fa:ab:b7:9e:ad:db:14:c7:1e:17:e0:36:6a:13:28: 82:77:f7:35:6d:4d:71:f9:cb:33:65:99:e0:df:1f:18:56:e6: 86:4c:28:42:10:1c:9e:61:1b:bb:c9:d2:b6:e6:d4:5c:9e:88: 59:a4:02:f0:45:56:d0:82:25:b8:01:51:31:7a:12:7d:e7:89: 27:76:7a:eb:49:28:a2:fb:48:aa:b4:40:ae:df:5a:a1:75:b9: 74:b7:94:64:40:da:72:55:4b:39:74:ce:06:4b:7b:82:6e:36: ed:68:a4:f1:5c:a5:ad:6f:20:5c:32:aa:dd:9d:20:7a:cf:b4: 3c:6b:12:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/W5Ak6dVWAGBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2 OWE3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NTc0NGE1MzEtNTQ1ZS00NWU2LTkyZjctNGIwNGQyNTk5NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVcinJNp6222ACPf328ysOJRBiLBp+1UOplG y07HEVmr87pmYluddiFwkjpQjzIheBNhDNcFVEqjMSQ7xraXvmVKWO++6KsZw4YM HJFHfOtUX+cGY5JhE4ZetIzBZDQMePZ6q4hTH4qfYc5e/f0AUzCPen+fVglGlWjd ONQ9VYuivaGHAN8XSC24jFwjhxz3I4CvaI0wa1HrwYSf4V0z5YYJPuwvgstzNwXW k9qKHcGqamIqyqah5hx1x+U0/mUnAd4USdjzfp5WDIggvc0Q9waY7UerYAcaMTUa Y5XOkVFODb5TLPyYaAeWnK57lWllC7kEMeTsl4UmZywAzvTP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX8Le8o4n9v2HpNIOKneYVTH3jLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0 ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvM2ViNDJhNWEtMGZhNS0z NTY0LWExMGQtMTY3NGQzODkzMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY1NGViNjMtMWJiYi00N2NjLThm YzMtZjQ1YTliMmE2OWE3L2I2NTRlYjYzLTFiYmItNDdjYy04ZmMzLWY0NWE5YjJh NjlhNy5jcmwwHwYDVR0jBBgwFoAUbFnfTx45b4mX0TjBDYuBvFS868MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVh OWIyYTY5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLkGrF4UkePX7LZL0czJ8QHjKd/BAFjSPICIJfHhDlJMK8dYtB8AfFX SsJY2Vp9WiKyMsYFvChMeW1MeoBaY0+JKIoIFGfr6vyJyr9ODapr1p39INlFh+dm ZzF8n5JzHDhWXWp+jrWVYglBSFPv0aipYCBbGEq5aYiM75DGYCKPCvqrt56t2xTH HhfgNmoTKIJ39zVtTXH5yzNlmeDfHxhW5oZMKEIQHJ5hG7vJ0rbm1FyeiFmkAvBF VtCCJbgBUTF6En3niSd2eutJKKL7SKq0QK7fWqF1uXS3lGRA2nJVSzl0zgZLe4Ju Nu1opPFcpa1vIFwyqt2dIHrPtDxrEnM= -----END CERTIFICATE-----Generated at Sun Apr 6 13:26:55 2025 by rpki-client