$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa File: 00dde76e-d01e-31a4-a3b3-7b4024f40125.roa (raw, json) Hash identifier: I4OeXISKA3/QIWG7Vvgn7Vi1fEe5iMVR3JN5F11Tyok= Subject key identifier: 84:59:31:E7:F4:C0:3E:F7:2D:85:08:48:33:F3:2F:5C:65:42:B3:19 Certificate issuer: /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9 Certificate serial: 010D0C9F4328584973DEDBFBBEF0458B73182980 Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 401595 IP address blocks: 23.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:db:fb:be:f0:45:8b:73:18:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=3a8dc0bf-cf47-413a-9ee5-3386bf95c915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:6b:bf:5c:07:a8:d5:98:1a:ea:f0:e4:5a: 50:e9:8a:ac:9d:a8:2a:4a:7f:8c:a7:db:03:42:b1: bd:90:67:d6:08:8b:a5:6b:41:dd:72:db:07:47:71: 84:a7:13:ac:33:b5:59:91:ec:22:e4:40:27:80:ad: 20:22:81:27:66:eb:c5:c8:83:ae:66:c6:55:0d:52: d2:d8:ec:61:0a:a6:d7:1f:0b:e7:fb:3e:44:8a:f1: d2:0d:2a:51:8e:28:d3:00:d2:cd:e7:d3:29:fa:c9: d5:94:5c:c6:01:30:0e:aa:74:51:d6:d2:ae:b0:cd: 98:61:07:09:fa:65:4f:9e:cd:33:e6:82:05:a8:5c: f8:ee:d2:86:10:6a:d9:2d:f6:2c:dc:13:12:2e:4b: 30:79:c0:9b:4a:18:dd:61:91:92:e1:e4:e1:0d:d8: ed:17:ac:58:33:e8:d1:c7:2e:04:d2:6d:1f:7e:57: 55:d0:98:80:58:fa:d0:0f:73:ee:72:3a:0d:72:e7: 23:35:f2:ef:31:db:32:b1:e4:10:ca:dd:b2:68:f0: 1e:0c:6d:94:36:5d:75:b7:88:b7:3b:d8:a5:72:fa: 06:0f:32:2d:1b:a7:ad:45:ae:a4:53:43:fc:e9:01: 16:c9:dc:7a:6d:ca:3f:75:da:ef:ef:d1:69:30:b5: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:59:31:E7:F4:C0:3E:F7:2D:85:08:48:33:F3:2F:5C:65:42:B3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl X509v3 Authority Key Identifier: keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer sbgp-ipAddrBlock: critical IPv4: 23.132.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:09:a5:a1:65:30:b8:d7:42:87:55:de:59:0b:50:eb:3b:8f: 2c:bc:04:79:af:b6:34:b7:f2:cc:d8:43:03:64:2e:f4:2b:07: b1:13:3e:bd:8e:ac:e2:70:9e:d8:ad:12:d5:c8:1f:7e:9a:40: 1a:2f:d0:b9:35:52:82:56:b1:28:42:9f:67:4e:ae:e3:8c:ed: fd:24:01:a9:f1:9e:f1:a4:51:01:f3:a5:cd:bd:d4:07:0f:0d: 28:1a:d5:9a:ba:ea:a7:4a:4b:cb:d3:64:90:5a:bf:3a:be:b9: 8b:0b:54:b1:bb:a2:f5:51:48:12:68:e8:00:d5:a4:55:ba:1d: 3b:7a:76:da:7a:36:bd:3d:a2:52:99:f2:1d:d4:a8:4b:b3:e0: 4b:f6:2e:c7:28:08:15:7a:3a:fc:60:d1:9e:9d:ee:81:71:ee: 38:2f:77:f3:1f:ec:4a:2f:7d:bb:04:32:ed:dc:0d:ad:15:3a: 43:9e:cd:69:a5:da:93:5c:b3:ab:c3:84:54:3c:0e:c0:09:43: 4c:d1:be:e1:32:cd:18:bd:7f:a9:0e:8a:a1:8b:c7:d5:d1:eb: 33:eb:51:9d:4a:59:c8:66:e6:82:85:2c:fb:8f:1d:29:dd:b5: 41:ac:96:d3:28:13:a8:3a:5a:08:8c:a6:e7:d0:53:24:4c:d0: df:72:2b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3tv7vvBFi3MYKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJkZjllYWUtNjQ0Ny00ZDNiLTkxODItN2EwNGNlNmYy ZGI5MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk M2E4ZGMwYmYtY2Y0Ny00MTNhLTllZTUtMzM4NmJmOTVjOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfJrv1wHqNWYGurw5FpQ6YqsnagqSn+Mp9sD QrG9kGfWCIula0HdctsHR3GEpxOsM7VZkewi5EAngK0gIoEnZuvFyIOuZsZVDVLS 2OxhCqbXHwvn+z5EivHSDSpRjijTANLN59Mp+snVlFzGATAOqnRR1tKusM2YYQcJ +mVPns0z5oIFqFz47tKGEGrZLfYs3BMSLkswecCbShjdYZGS4eThDdjtF6xYM+jR xy4E0m0ffldV0JiAWPrQD3PucjoNcucjNfLvMdsyseQQyt2yaPAeDG2UNl11t4i3 O9ilcvoGDzItG6etRa6kU0P86QEWydx6bco/ddrv79FpMLX/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRZMef0wD73LYUISDPzL1xlQrMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mYmRm OWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0Y2U2ZjJkYjkvMDBkZGU3NmUtZDAxZS0z MWE0LWEzYjMtN2I0MDI0ZjQwMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmJkZjllYWUtNjQ0Ny00ZDNiLTkx ODItN2EwNGNlNmYyZGI5L2ZiZGY5ZWFlLTY0NDctNGQzYi05MTgyLTdhMDRjZTZm MmRiOS5jcmwwHwYDVR0jBBgwFoAUjaAY3SaxKgm0LMdpzwaxRu+Dy2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mYmRmOWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0 Y2U2ZjJkYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4JpaFlMLjXQodV3lkLUOs7jyy8BHmvtjS38szYQwNkLvQrB7ETPr2O rOJwntitEtXIH36aQBov0Lk1UoJWsShCn2dOruOM7f0kAanxnvGkUQHzpc291AcP DSga1Zq66qdKS8vTZJBavzq+uYsLVLG7ovVRSBJo6ADVpFW6HTt6dtp6Nr09olKZ 8h3UqEuz4Ev2LscoCBV6Ovxg0Z6d7oFx7jgvd/Mf7EovfbsEMu3cDa0VOkOezWml 2pNcs6vDhFQ8DsAJQ0zRvuEyzRi9f6kOiqGLx9XR6zPrUZ1KWchm5oKFLPuPHSnd tUGsltMoE6g6WgiMpufQUyRM0N9yK84= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:34 2025 by rpki-client