$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa File: fb010d6b-7d25-3356-9204-7877f12fc870.roa (raw, json) Hash identifier: 9T6vG6X0yTv5IcTItlihXIN6T+Hy9yjJY//zVBvhzk0= Subject key identifier: 65:89:EE:82:28:7B:ED:5B:1A:26:BC:A7:5C:A9:91:1B:24:A8:4A:71 Certificate issuer: /CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27 Certificate serial: 010D0C9F43285849350EAEEC577696AE02F19C60 Authority key identifier: 43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 893 IP address blocks: 23.137.88.0/24 maxlen: 24 2602:fb61::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ae:ec:57:76:96:ae:02:f1:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=bd42ff86-b042-4ce1-b770-debb7a0841b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:ec:20:63:0b:a2:f0:55:32:9f:76:0b:0a: db:50:7c:48:f8:2f:21:a2:1c:77:ca:28:fb:62:5e: a5:51:93:e1:a6:11:ea:e9:8e:21:41:aa:29:8c:7d: c1:19:af:2d:78:57:39:10:e4:6d:47:e9:8f:ec:dc: f5:a8:54:bc:cb:be:d2:d7:3c:b6:93:0c:21:ab:4c: 17:6c:97:15:56:66:fd:fd:42:f2:81:38:bb:3a:ed: 37:cc:57:d9:ce:1c:77:81:db:f8:fa:f0:0d:b6:a4: c6:1f:81:40:b8:99:39:9d:88:b2:5e:a8:9f:71:9c: 35:78:c3:7d:a1:59:c4:86:12:04:8b:7f:18:6d:a7: b1:75:ff:65:46:c8:c7:26:20:d8:c8:af:f1:28:46: 13:8f:36:88:4b:87:e0:61:08:5a:3b:d1:0c:88:ea: da:2d:69:e2:c9:c2:6b:9a:ae:0a:84:28:71:4f:69: 1b:5e:69:3b:e8:90:94:23:e2:90:82:11:f5:3b:6d: f7:5a:c5:c5:4c:19:be:80:9f:24:c0:74:00:fd:46: 92:2a:d2:e7:30:ee:03:c4:43:af:22:cc:74:91:e0: 6e:7e:f7:b3:f6:ea:1a:46:7c:64:5b:49:91:11:02: 33:49:02:0b:f7:19:99:76:0e:ac:45:98:fc:2c:8b: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:89:EE:82:28:7B:ED:5B:1A:26:BC:A7:5C:A9:91:1B:24:A8:4A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl X509v3 Authority Key Identifier: keyid:43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer sbgp-ipAddrBlock: critical IPv4: 23.137.88.0/24 IPv6: 2602:fb61::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:70:78:b8:49:a1:7d:cd:f0:9d:54:74:17:8f:89:56:f2:a8: 08:d6:c1:cb:54:21:0b:e1:44:0c:b7:50:75:8e:e2:e5:61:3e: 65:9f:93:c8:3a:00:1f:26:38:f5:6d:38:15:2e:36:a0:bd:c8: 46:0b:8a:e6:f7:34:93:7c:28:dd:22:44:52:23:a9:3d:1d:0d: 50:6c:75:68:5d:d5:72:bf:8f:4f:51:7f:b6:b3:29:ec:ca:97: c6:e3:14:68:14:00:4c:1f:5c:03:e5:3b:9e:27:7c:22:f5:b0: a9:76:89:7f:f7:c2:ae:f4:56:94:27:b7:0e:83:09:fc:5d:b1: b1:32:a8:bf:7d:b6:ad:7e:14:c6:d1:64:08:a3:d9:8f:ea:bc: 27:55:33:00:60:60:e8:93:5b:3d:05:d1:81:fe:7d:c8:4d:82: a9:1a:71:17:d7:c3:15:c4:75:6f:40:24:5c:af:3f:11:47:15: 92:db:22:12:b3:23:5d:a7:b3:ef:4a:f2:c7:f8:04:e8:3f:d2: a9:5a:4c:78:92:b6:06:67:8f:08:f9:87:10:69:c9:5d:d5:8a: ad:03:53:17:67:31:11:f0:d4:bf:66:80:03:b1:d9:1e:c6:dd: 3b:92:68:57:7d:b8:90:64:a6:59:8a:43:07:c2:3a:d5:6f:b9: f1:38:f6:31 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEk1Dq7sV3aWrgLxnGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUwZjZlNzctNzhhNC00NzMwLWFhOWItM2I1ZTAxOWZl ZDI3MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmQ0MmZmODYtYjA0Mi00Y2UxLWI3NzAtZGViYjdhMDg0MWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC/sIGMLovBVMp92CwrbUHxI+C8hohx3yij7 Yl6lUZPhphHq6Y4hQaopjH3BGa8teFc5EORtR+mP7Nz1qFS8y77S1zy2kwwhq0wX bJcVVmb9/ULygTi7Ou03zFfZzhx3gdv4+vANtqTGH4FAuJk5nYiyXqifcZw1eMN9 oVnEhhIEi38Ybaexdf9lRsjHJiDYyK/xKEYTjzaIS4fgYQhaO9EMiOraLWniycJr mq4KhChxT2kbXmk76JCUI+KQghH1O233WsXFTBm+gJ8kwHQA/UaSKtLnMO4DxEOv Isx0keBufvez9uoaRnxkW0mREQIzSQIL9xmZdg6sRZj8LItZCQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGWJ7oIoe+1bGia8p1ypkRskqEpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZTBm NmU3Ny03OGE0LTQ3MzAtYWE5Yi0zYjVlMDE5ZmVkMjcvZmIwMTBkNmItN2QyNS0z MzU2LTkyMDQtNzg3N2YxMmZjODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmUwZjZlNzctNzhhNC00NzMwLWFh OWItM2I1ZTAxOWZlZDI3LzJlMGY2ZTc3LTc4YTQtNDczMC1hYTliLTNiNWUwMTlm ZWQyNy5jcmwwHwYDVR0jBBgwFoAUQzket8wFeSbEbyDGZE+jl+aFnGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZTBmNmU3Ny03OGE0LTQ3MzAtYWE5Yi0zYjVl MDE5ZmVkMjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4lYMA4E AgACMAgDBgAmAvthADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3cHi4SaF9zfCdVHQXj4lW8qgI1sHLVCEL 4UQMt1B1juLlYT5ln5PIOgAfJjj1bTgVLjagvchGC4rm9zSTfCjdIkRSI6k9HQ1Q bHVoXdVyv49PUX+2synsypfG4xRoFABMH1wD5TueJ3wi9bCpdol/98Ku9FaUJ7cO gwn8XbGxMqi/fbatfhTG0WQIo9mP6rwnVTMAYGDok1s9BdGB/n3ITYKpGnEX18MV xHVvQCRcrz8RRxWS2yISsyNdp7PvSvLH+AToP9KpWkx4krYGZ48I+YcQacld1Yqt A1MXZzER8NS/ZoADsdkext07kmhXfbiQZKZZikMHwjrVb7nxOPYx -----END CERTIFICATE-----Generated at Sun May 11 00:38:29 2025 by rpki-client