$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa File: 43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa (raw, json) Hash identifier: 2LBUXNJfH/wdqJGdmWLn0ncnpD+Op2e5M+J6f+rkRZY= Subject key identifier: EB:B3:2B:44:64:90:01:DA:30:17:3A:73:31:E6:FC:AA:8A:61:08:AB Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F432858492CAE84B4DD88777E761F69E0 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 393336 IP address blocks: 23.163.210.0/24 maxlen: 24 23.163.211.0/24 maxlen: 24 23.163.212.0/24 maxlen: 24 23.163.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:84:b4:dd:88:77:7e:76:1f:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1fd5cef0-fd15-44f1-a931-1bd963d72b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5b:b2:9f:22:af:0b:87:14:c0:8e:f1:9b:08: 69:a6:a2:b0:ca:93:41:95:16:d7:c1:82:70:a1:df: 72:81:11:18:aa:54:43:5a:98:60:da:e0:f4:b9:b8: 12:da:00:77:8a:27:f0:1d:79:87:3e:75:4a:be:3b: f9:72:67:6e:c3:a6:99:7d:89:ed:c2:19:64:09:a5: b3:89:b4:e2:49:0d:63:fc:b3:4d:bd:a8:1b:3f:b0: b7:33:71:9d:90:a1:63:45:ab:ad:88:9b:8e:d4:f9: b9:d1:97:c6:e0:9e:dc:4d:84:24:e9:5e:8d:d3:28: a8:85:f1:3a:a2:cd:2b:36:b2:c5:5d:5a:27:1b:30: f8:f3:5e:28:cb:d0:8e:62:4b:ec:0e:65:ee:ac:0d: 24:ee:ce:07:2d:ba:3a:25:f1:6e:d3:42:0f:4e:95: c9:79:e0:54:a4:5d:a1:7e:6c:fa:41:8e:d5:4f:43: 64:aa:38:97:0a:c1:a6:cb:3f:b0:35:7b:59:d3:2d: 73:b1:be:53:1e:1a:1e:fd:a2:f9:b4:38:0c:d9:6f: 8a:75:e1:16:e6:94:af:4a:12:5b:6d:23:61:04:70: d6:91:1b:4b:36:d6:02:1a:16:2f:33:51:ac:2c:0d: b1:05:52:09:f9:e1:d1:2e:91:cf:5a:f9:ce:c5:ad: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B3:2B:44:64:90:01:DA:30:17:3A:73:31:E6:FC:AA:8A:61:08:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 23.163.210.0-23.163.213.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e7:0e:20:e5:dc:6f:3f:51:58:02:de:bd:4c:43:2d:21:a6:bd: 7d:f7:53:54:a6:f8:f4:bf:70:0b:97:e9:55:1e:30:f0:70:65: 29:67:55:e1:3e:37:c5:7f:7f:a6:eb:0e:27:d5:eb:bf:48:3c: 56:71:31:39:7a:a6:fb:59:06:43:f6:17:fa:e0:10:bc:ce:8e: 15:4f:c3:57:b5:a6:9a:80:6a:b0:87:cc:06:58:d4:d8:63:f3: 44:0b:3f:e9:e0:e9:e3:ba:6c:2a:b8:14:64:41:7f:a8:47:e6: d8:26:10:b6:ea:4e:41:66:d5:fb:c8:93:a9:b4:cd:e5:b4:17: 45:ef:56:b5:23:b6:59:62:c7:14:98:54:4a:13:89:18:2d:e8: d9:70:be:9e:6c:6d:f7:62:cb:06:05:b3:3e:2f:b5:95:5e:0f: dd:41:13:95:7e:87:19:4f:5c:3d:b0:53:f9:27:c0:be:c7:32: 53:a6:60:69:52:53:90:f7:55:8f:73:7e:22:ef:59:99:2f:95: b7:d8:0c:95:11:51:a7:5b:7d:26:f8:48:d1:45:e0:e2:d6:58: 63:79:d9:12:e2:b6:73:a2:8e:2a:32:4c:cb:21:32:4d:b1:1e: 13:3e:4a:65:de:e8:db:b0:d7:4c:86:bb:e0:ac:8a:2d:3b:69: f3:ef:2f:15 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEksroS03Yh3fnYfaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWZkNWNlZjAtZmQxNS00NGYxLWE5MzEtMWJkOTYzZDcyYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1uynyKvC4cUwI7xmwhppqKwypNBlRbXwYJw od9ygREYqlRDWphg2uD0ubgS2gB3iifwHXmHPnVKvjv5cmduw6aZfYntwhlkCaWz ibTiSQ1j/LNNvagbP7C3M3GdkKFjRautiJuO1Pm50ZfG4J7cTYQk6V6N0yiohfE6 os0rNrLFXVonGzD4814oy9COYkvsDmXurA0k7s4HLbo6JfFu00IPTpXJeeBUpF2h fmz6QY7VT0NkqjiXCsGmyz+wNXtZ0y1zsb5THhoe/aL5tDgM2W+KdeEW5pSvShJb bSNhBHDWkRtLNtYCGhYvM1GsLA2xBVIJ+eHRLpHPWvnOxa316QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOuzK0RkkAHaMBc6czHm/KqKYQirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvNDNkMGVjNjItZTZjOS0z Njk0LWE0YmItYmMxYjA0NzJmNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEXo9ID BAEXo9QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEA5w4g5dxvP1FYAt69TEMtIaa9ffdTVKb49L9wC5fpVR4w 8HBlKWdV4T43xX9/pusOJ9Xrv0g8VnExOXqm+1kGQ/YX+uAQvM6OFU/DV7WmmoBq sIfMBljU2GPzRAs/6eDp47psKrgUZEF/qEfm2CYQtupOQWbV+8iTqbTN5bQXRe9W tSO2WWLHFJhUShOJGC3o2XC+nmxt92LLBgWzPi+1lV4P3UETlX6HGU9cPbBT+SfA vscyU6ZgaVJTkPdVj3N+Iu9ZmS+Vt9gMlRFRp1t9JvhI0UXg4tZYY3nZEuK2c6KO KjJMyyEyTbEeEz5KZd7o27DXTIa74KyKLTtp8+8vFQ== -----END CERTIFICATE-----Generated at Sun Apr 6 14:46:49 2025 by rpki-client