$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa File: 19601375-8b5a-3c05-9dfe-bdc6f601106d.roa (raw, json) Hash identifier: z9wGZyCsxcUo2wd/1QXye+1+gNaZ2/P/oIxVJzjAyGE= Subject key identifier: 75:76:32:93:F9:9A:61:27:AA:07:19:E4:FF:4C:75:67:D7:1F:79:41 Certificate issuer: /CN=a1853cd3-3329-4b61-a321-f6705ea74197 Certificate serial: 010D0C9F43285849350EA7C1E41C81BCA03728C0 Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 400554 IP address blocks: 23.134.120.0/24 maxlen: 24 2602:fb9d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a7:c1:e4:1c:81:bc:a0:37:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=e3e94a27-c93c-4087-9db6-2c4386db8009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:98:ff:94:54:62:64:76:d9:dc:c9:9b:69:59: bd:10:39:f0:e9:30:2f:37:87:6c:41:16:c5:8e:79: 68:96:e8:b2:29:d7:04:04:be:4d:32:72:f1:f7:c0: b2:fe:e9:7a:d0:dc:4d:9a:ec:eb:8d:a3:84:9f:93: 7b:86:4f:30:61:63:bc:ab:5c:fb:a9:13:79:d5:74: ed:8c:02:9f:61:f9:18:0e:c3:fe:62:3c:de:e1:00: 5c:3a:ea:90:c4:cd:70:92:98:bb:7f:b9:86:55:41: f1:21:68:68:6d:3f:41:69:0e:64:d8:74:0f:2f:09: 0e:d5:a1:25:50:5a:45:ee:63:b2:0c:30:66:ad:e8: 3c:47:b0:ec:74:eb:e7:52:43:db:09:fc:a0:76:b8: f9:fe:b1:dd:a5:94:ae:ac:cb:0b:48:a5:85:f7:88: 03:3e:cc:c7:14:fa:c8:ef:04:10:8c:75:a4:15:e3: 15:dd:f6:0e:da:d7:92:c6:2a:82:08:8d:f7:f2:2b: 4c:b8:14:85:62:63:82:b9:2d:6b:7a:60:c0:28:c2: f6:69:ff:e2:47:ce:23:ad:b4:19:20:bf:b8:83:e1: dc:75:6d:ad:b9:21:dd:c4:14:a5:48:ce:5c:bd:49: 31:9a:dd:6e:53:11:2e:5c:e1:b2:36:26:37:25:5e: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:76:32:93:F9:9A:61:27:AA:07:19:E4:FF:4C:75:67:D7:1F:79:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl X509v3 Authority Key Identifier: keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer sbgp-ipAddrBlock: critical IPv4: 23.134.120.0/24 IPv6: 2602:fb9d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d7:e1:e4:05:39:61:58:9b:55:f3:4f:4d:b8:6d:21:d9:aa: 4a:fd:aa:3b:33:cd:2a:02:b7:0a:78:26:c8:f1:55:80:30:3c: f1:b7:cf:d0:b1:02:b2:22:c0:60:f9:ce:37:d5:3d:8d:31:1c: 2c:30:e9:f6:d0:d9:30:98:3d:5b:e3:de:5e:ab:34:a1:cf:45: 24:06:e4:25:1f:f3:ef:ca:9d:a8:86:b4:f5:08:8e:11:d4:12: e1:c8:56:ef:e7:f5:ce:2b:fc:b7:ae:58:e0:23:61:13:64:7b: fc:4c:f0:73:8d:40:73:dd:0b:e0:29:4d:a3:1d:be:ed:3a:d0: 29:d6:4c:04:4e:e7:b7:ca:11:69:51:35:20:26:9a:ac:1e:f7: b2:ab:6b:6e:bd:6e:c0:94:da:4e:51:3a:e3:ef:14:7b:f1:03: 88:17:eb:af:f4:40:0d:b5:31:29:36:1f:c6:dd:49:93:fe:46: ec:64:f0:99:57:f7:e8:6d:f8:95:8b:01:71:f1:2d:28:a6:1f: dd:e1:ef:e8:52:ff:92:0b:7e:2c:59:96:4a:d9:93:b4:bd:9d: 9c:55:73:c2:7a:99:06:f2:5f:88:6c:73:e5:69:8e:b1:90:31: 7a:58:41:70:80:95:87:a0:85:66:c0:b4:11:d6:c9:a5:ad:04: c9:06:5e:54 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEk1DqfB5ByBvKA3KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4NTNjZDMtMzMyOS00YjYxLWEzMjEtZjY3MDVlYTc0 MTk3MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTNlOTRhMjctYzkzYy00MDg3LTlkYjYtMmM0Mzg2ZGI4MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpj/lFRiZHbZ3MmbaVm9EDnw6TAvN4dsQRbF jnloluiyKdcEBL5NMnLx98Cy/ul60NxNmuzrjaOEn5N7hk8wYWO8q1z7qRN51XTt jAKfYfkYDsP+Yjze4QBcOuqQxM1wkpi7f7mGVUHxIWhobT9BaQ5k2HQPLwkO1aEl UFpF7mOyDDBmreg8R7DsdOvnUkPbCfygdrj5/rHdpZSurMsLSKWF94gDPszHFPrI 7wQQjHWkFeMV3fYO2teSxiqCCI338itMuBSFYmOCuS1remDAKML2af/iR84jrbQZ IL+4g+HcdW2tuSHdxBSlSM5cvUkxmt1uUxEuXOGyNiY3JV4iqQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHV2MpP5mmEnqgcZ5P9MdWfXH3lBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1 M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcwNWVhNzQxOTcvMTk2MDEzNzUtOGI1YS0z YzA1LTlkZmUtYmRjNmY2MDExMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTE4NTNjZDMtMzMyOS00YjYxLWEz MjEtZjY3MDVlYTc0MTk3L2ExODUzY2QzLTMzMjktNGI2MS1hMzIxLWY2NzA1ZWE3 NDE5Ny5jcmwwHwYDVR0jBBgwFoAULRqm+IvbbR+NejRyQ7HyrW75zQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcw NWVhNzQxOTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Z4MA4E AgACMAgDBgAmAvudADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA61+HkBTlhWJtV809NuG0h2apK/ao7M80q ArcKeCbI8VWAMDzxt8/QsQKyIsBg+c431T2NMRwsMOn20NkwmD1b495eqzShz0Uk BuQlH/Pvyp2ohrT1CI4R1BLhyFbv5/XOK/y3rljgI2ETZHv8TPBzjUBz3QvgKU2j Hb7tOtAp1kwETue3yhFpUTUgJpqsHveyq2tuvW7AlNpOUTrj7xR78QOIF+uv9EAN tTEpNh/G3UmT/kbsZPCZV/fobfiViwFx8S0oph/d4e/oUv+SC34sWZZK2ZO0vZ2c VXPCepkG8l+IbHPlaY6xkDF6WEFwgJWHoIVmwLQR1smlrQTJBl5U -----END CERTIFICATE-----Generated at Wed May 14 00:19:29 2025 by rpki-client