$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105/502e5b6e-55b5-37d5-9d71-6a8856d456a7.roa File: 502e5b6e-55b5-37d5-9d71-6a8856d456a7.roa (raw, json) Hash identifier: v3geRy+8S1bdAzW+AK4dnt+qeT6c+gxAf836B0GCL7g= Subject key identifier: 3B:62:2C:12:E8:62:0B:CB:C0:99:D4:36:6C:62:70:12:16:13:9E:F3 Certificate issuer: /CN=06cbcca2-1bce-4c2f-a529-681dc483a105 Certificate serial: 010D0C9F43285849BDDA200C1AE018A905FB1F00 Authority key identifier: A4:4B:52:7F:EF:39:7C:79:F9:09:61:D4:A5:B5:98:34:47:78:67:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105/502e5b6e-55b5-37d5-9d71-6a8856d456a7.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 19369 IP address blocks: 23.152.184.0/24 maxlen: 24 2607:45c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105/06cbcca2-1bce-4c2f-a529-681dc483a105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105/06cbcca2-1bce-4c2f-a529-681dc483a105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:20:0c:1a:e0:18:a9:05:fb:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cbcca2-1bce-4c2f-a529-681dc483a105 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=21b566a7-901e-4b2a-81a2-26aece035421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:c0:a6:0e:45:3c:08:af:ae:ef:ac:54:75: 5c:d0:45:04:86:e8:25:e3:7c:25:52:76:73:4f:fa: 71:b5:91:e0:a7:11:79:81:67:54:ca:ce:5f:ed:10: 6c:de:3e:7c:f1:b4:c2:e8:da:c4:68:cc:b0:90:29: 90:8e:c0:81:60:24:7d:58:d8:68:27:f9:61:24:c9: 7b:c8:ef:cc:20:03:ea:f1:c1:a3:b1:3c:99:27:2e: 31:78:c3:98:d3:3d:2a:2f:3e:5e:26:94:1d:f2:83: 9c:d9:c9:e9:37:94:c0:ab:07:fc:ee:38:ae:54:7b: 89:0b:f0:46:79:81:63:70:1f:eb:6a:26:cd:c7:50: f1:cd:64:5d:4c:cf:c2:3a:22:c1:68:4e:63:d5:2a: 9d:e6:27:45:38:25:af:16:d2:2e:6f:a6:02:1a:0a: 8e:9f:e7:56:db:f4:49:78:5d:69:37:0f:9c:87:56: de:5d:ae:71:2b:0a:63:9b:e9:d2:53:e3:13:6b:03: 06:5a:c4:4b:c3:23:95:a8:a5:c4:cd:4c:71:6d:88: 17:1a:62:49:53:e3:50:a8:1a:e1:34:87:a7:25:0b: 71:94:bf:6d:50:70:1d:bf:a7:8d:77:aa:b8:db:fe: 4a:ce:58:d9:cc:50:a2:87:79:d2:c2:df:42:a4:1d: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:62:2C:12:E8:62:0B:CB:C0:99:D4:36:6C:62:70:12:16:13:9E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105/502e5b6e-55b5-37d5-9d71-6a8856d456a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105/06cbcca2-1bce-4c2f-a529-681dc483a105.crl X509v3 Authority Key Identifier: keyid:A4:4B:52:7F:EF:39:7C:79:F9:09:61:D4:A5:B5:98:34:47:78:67:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06cbcca2-1bce-4c2f-a529-681dc483a105.cer sbgp-ipAddrBlock: critical IPv4: 23.152.184.0/24 IPv6: 2607:45c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:76:d7:98:09:a0:0c:fc:29:5b:ad:34:0e:89:d2:42:4e:1a: b9:5c:82:bc:93:d4:01:f6:cf:45:ec:ba:75:5e:98:4d:44:49: 52:4a:25:b4:5e:51:70:2f:84:83:d0:e0:0f:91:27:82:47:a9: 14:0a:ae:6d:7c:9c:e0:d3:4f:9d:fe:bd:db:d8:93:16:70:57: 79:26:0c:c6:f0:28:6a:2f:2e:9f:2c:33:97:6f:c9:3e:91:35: 0d:e9:29:2f:2e:da:73:a6:a5:35:79:87:c5:73:f7:53:87:8f: 4e:c6:a6:73:42:82:cc:44:43:d1:d8:9b:18:0c:99:df:32:d0: 1a:e5:6f:97:b9:b2:4f:15:00:89:e1:08:61:bc:5d:df:71:b5: da:a6:b0:de:d9:ca:79:7f:0a:11:ea:d2:5c:ed:f6:91:82:91: 64:6b:c3:ba:ab:f3:92:1a:ab:70:44:44:18:0d:82:78:aa:a1: 59:01:bc:bf:bf:07:7d:e6:24:86:c6:3d:d3:8f:6c:00:61:d7: 0b:80:10:be:24:f7:97:28:4f:37:82:98:3d:b1:d3:d6:85:5f: ef:28:79:3b:b0:7b:cd:d4:ba:19:17:6b:21:be:24:b2:fb:bd: 3c:1e:df:05:ff:27:64:64:40:fe:67:15:cf:a8:ff:1d:19:de: 0b:67:38:8f -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEm92iAMGuAYqQX7HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZjYmNjYTItMWJjZS00YzJmLWE1MjktNjgxZGM0ODNh MTA1MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MjFiNTY2YTctOTAxZS00YjJhLTgxYTItMjZhZWNlMDM1NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1fApg5FPAivru+sVHVc0EUEhugl43wlUnZz T/pxtZHgpxF5gWdUys5f7RBs3j588bTC6NrEaMywkCmQjsCBYCR9WNhoJ/lhJMl7 yO/MIAPq8cGjsTyZJy4xeMOY0z0qLz5eJpQd8oOc2cnpN5TAqwf87jiuVHuJC/BG eYFjcB/raibNx1DxzWRdTM/COiLBaE5j1Sqd5idFOCWvFtIub6YCGgqOn+dW2/RJ eF1pNw+ch1beXa5xKwpjm+nSU+MTawMGWsRLwyOVqKXEzUxxbYgXGmJJU+NQqBrh NIenJQtxlL9tUHAdv6eNd6q42/5KzljZzFCih3nSwt9CpB2KOwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDtiLBLoYgvLwJnUNmxicBIWE57zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmNi Y2NhMi0xYmNlLTRjMmYtYTUyOS02ODFkYzQ4M2ExMDUvNTAyZTViNmUtNTViNS0z N2Q1LTlkNzEtNmE4ODU2ZDQ1NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDZjYmNjYTItMWJjZS00YzJmLWE1 MjktNjgxZGM0ODNhMTA1LzA2Y2JjY2EyLTFiY2UtNGMyZi1hNTI5LTY4MWRjNDgz YTEwNS5jcmwwHwYDVR0jBBgwFoAUpEtSf+85fHn5CWHUpbWYNEd4ZzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmNiY2NhMi0xYmNlLTRjMmYtYTUyOS02ODFk YzQ4M2ExMDUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5i4MA0E AgACMAcDBQAmB0XAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADN215gJoAz8KVutNA6J0kJOGrlcgryT1AH2 z0XsunVemE1ESVJKJbReUXAvhIPQ4A+RJ4JHqRQKrm18nODTT53+vdvYkxZwV3km DMbwKGovLp8sM5dvyT6RNQ3pKS8u2nOmpTV5h8Vz91OHj07GpnNCgsxEQ9HYmxgM md8y0Brlb5e5sk8VAInhCGG8Xd9xtdqmsN7Zynl/ChHq0lzt9pGCkWRrw7qr85Ia q3BERBgNgniqoVkBvL+/B33mJIbGPdOPbABh1wuAEL4k95coTzeCmD2x09aFX+8o eTuwe83UuhkXayG+JLL7vTwe3wX/J2RkQP5nFc+o/x0Z3gtnOI8= -----END CERTIFICATE-----Generated at Fri May 9 07:50:38 2025 by rpki-client