$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa File: 51f23690-2c9e-3571-8cfe-0e89c650c651.roa (raw, json) Hash identifier: tHALRXYHTaYDFvmApxSsAmQIqYNyjKHV6YJGF6ZJrUI= Subject key identifier: 1B:14:21:B5:84:2A:9D:FA:87:D5:4A:4A:06:0A:0C:4D:55:2A:89:6D Certificate issuer: /CN=e7f205fa-32db-476e-9815-f418a58479c3 Certificate serial: 010D0C9F43285849C20A1F7463A3D0364212D880 Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 398041 IP address blocks: 23.146.136.0/24 maxlen: 24 2607:20c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1f:74:63:a3:d0:36:42:12:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=5c7a505a-e4e1-4d7a-910b-121bcc585859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:02:52:c6:c2:ad:40:aa:be:d0:fc:3d:0e: ea:3b:f1:d1:2b:d8:ee:75:30:42:49:06:fb:5a:a3: 56:5b:f7:8a:b7:ef:3d:73:28:56:e5:33:c7:49:26: ce:d0:5a:e3:c5:9f:44:4d:3f:35:99:f3:15:9d:45: bf:de:d0:87:0c:06:d0:86:a1:52:8e:97:a8:d8:3a: eb:1b:ca:b2:2e:a4:53:8d:fe:81:47:cf:e1:87:c5: 19:50:f8:b2:a3:9d:42:f2:a7:ea:1e:de:03:79:98: 1a:50:d1:17:a8:60:7a:2f:2f:71:7a:b2:8b:42:7a: 77:79:86:18:a9:bb:7d:a7:9f:26:5b:0d:a0:45:82: f5:90:3e:df:4a:aa:24:bc:8d:ac:36:ed:5e:75:85: 5b:c6:08:70:44:e7:13:d6:2d:3a:3a:99:4f:5f:8b: d6:1d:b0:9f:68:ee:12:88:d2:59:e7:ce:33:2c:8f: 74:0d:9f:da:58:54:7b:03:75:c7:fc:88:b2:86:d6: bc:ba:34:23:46:5c:da:f8:84:4a:9d:43:25:ff:2a: 11:32:ca:bb:31:8b:68:d4:4b:13:ee:79:2e:a1:0c: 89:4f:91:1e:a6:64:54:79:34:ea:06:31:73:bd:37: 8f:b1:fe:fe:19:e7:86:0d:42:fd:4e:f6:32:2a:6d: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:14:21:B5:84:2A:9D:FA:87:D5:4A:4A:06:0A:0C:4D:55:2A:89:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl X509v3 Authority Key Identifier: keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer sbgp-ipAddrBlock: critical IPv4: 23.146.136.0/24 IPv6: 2607:20c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:57:0a:01:e2:f2:ba:5a:a2:d3:c5:7a:22:23:e8:c6:63:72: c9:2e:b5:dc:f0:1a:a5:99:d8:ff:be:53:3d:c0:61:e0:0d:48: f7:d7:a9:a6:91:b8:ed:06:bb:b6:7a:5d:64:e8:95:11:c7:6e: d2:b5:97:50:b2:c1:7e:30:19:35:11:12:0a:73:99:63:8c:f7: 94:b3:49:d4:29:22:b8:ec:18:da:b8:0e:f5:ba:67:c4:28:69: 2a:40:72:4e:e4:06:aa:67:a6:06:b8:91:55:b7:13:f9:71:a4: 30:00:33:4f:96:e8:8a:26:cf:af:5e:e7:3f:e5:20:c2:c3:8c: bc:96:d2:b0:70:6e:ea:50:27:31:26:40:a1:f1:99:2a:6c:f4: 9a:2c:ec:c6:52:3a:28:c8:3b:2b:cc:3e:12:97:90:ce:46:2b: dc:e5:02:4b:d1:48:5a:4a:ae:46:d3:38:49:38:e8:b2:e3:29: 72:42:6e:91:8e:36:41:34:e4:57:de:10:22:de:0c:c0:41:3e: e8:eb:41:38:3e:73:98:8e:dc:c5:af:9d:e9:9e:55:ff:3e:0f: c7:95:a1:f3:84:b2:34:41:24:cc:90:a1:cc:5a:f4:dd:3c:a1: 07:91:23:85:9b:13:fd:b4:87:2c:fe:b1:a4:44:ee:36:5d:45: 7e:47:8f:87 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEnCCh90Y6PQNkIS2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmMjA1ZmEtMzJkYi00NzZlLTk4MTUtZjQxOGE1ODQ3 OWMzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NWM3YTUwNWEtZTRlMS00ZDdhLTkxMGItMTIxYmNjNTg1ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkQCUsbCrUCqvtD8PQ7qO/HRK9judTBCSQb7 WqNWW/eKt+89cyhW5TPHSSbO0FrjxZ9ETT81mfMVnUW/3tCHDAbQhqFSjpeo2Drr G8qyLqRTjf6BR8/hh8UZUPiyo51C8qfqHt4DeZgaUNEXqGB6Ly9xerKLQnp3eYYY qbt9p58mWw2gRYL1kD7fSqokvI2sNu1edYVbxghwROcT1i06OplPX4vWHbCfaO4S iNJZ584zLI90DZ/aWFR7A3XH/Iiyhta8ujQjRlza+IRKnUMl/yoRMsq7MYto1EsT 7nkuoQyJT5EepmRUeTTqBjFzvTePsf7+GeeGDUL9TvYyKm08PwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBsUIbWEKp36h9VKSgYKDE1VKoltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lN2Yy MDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4YTU4NDc5YzMvNTFmMjM2OTAtMmM5ZS0z NTcxLThjZmUtMGU4OWM2NTBjNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTdmMjA1ZmEtMzJkYi00NzZlLTk4 MTUtZjQxOGE1ODQ3OWMzL2U3ZjIwNWZhLTMyZGItNDc2ZS05ODE1LWY0MThhNTg0 NzljMy5jcmwwHwYDVR0jBBgwFoAUKk3SLv7NUyuTmDmyXraVXh0jwB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lN2YyMDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4 YTU4NDc5YzMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5KIMA0E AgACMAcDBQAmByDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAONXCgHi8rpaotPFeiIj6MZjcskutdzwGqWZ 2P++Uz3AYeANSPfXqaaRuO0Gu7Z6XWTolRHHbtK1l1CywX4wGTUREgpzmWOM95Sz SdQpIrjsGNq4DvW6Z8QoaSpAck7kBqpnpga4kVW3E/lxpDAAM0+W6Iomz69e5z/l IMLDjLyW0rBwbupQJzEmQKHxmSps9Jos7MZSOijIOyvMPhKXkM5GK9zlAkvRSFpK rkbTOEk46LLjKXJCbpGONkE05FfeECLeDMBBPujrQTg+c5iO3MWvnemeVf8+D8eV ofOEsjRBJMyQocxa9N08oQeRI4WbE/20hyz+saRE7jZdRX5Hj4c= -----END CERTIFICATE-----Generated at Tue May 6 09:49:24 2025 by rpki-client