$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa File: d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa (raw, json) Hash identifier: L6pOitZ/ucPfQQHuKq+HuPTe+UvJDzx26/QR7unk5HU= Subject key identifier: 26:CA:72:18:BD:B9:8B:76:A8:1C:11:BC:5F:C6:FB:49:A0:FE:51:FE Certificate issuer: /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab Certificate serial: 010D0C9F43285849C4D4CBFBCA8728442C258580 Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 19879 IP address blocks: 23.169.88.0/24 maxlen: 24 23.169.89.0/24 maxlen: 24 2602:f9a6::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:cb:fb:ca:87:28:44:2c:25:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=bd2d1dbd-dc6b-4e7a-bdc8-57227dafea06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:58:e7:7a:f9:56:aa:32:a5:f7:14:b5:1e: 94:7b:f2:e6:3c:7b:fa:5c:6f:cf:b5:2b:ba:f7:92: 75:47:37:45:6c:f7:83:29:ac:7f:8b:7f:42:99:96: d5:85:0e:6e:07:71:f5:5e:83:d2:de:12:48:f4:1e: 85:ff:d0:86:47:32:25:09:f7:af:39:2b:e2:a5:35: 05:c2:1c:3f:1d:85:2b:03:ad:11:06:77:e3:84:41: b3:11:68:53:0e:ff:44:bb:c6:28:ae:db:e2:43:bb: b0:72:1b:6e:d4:4a:96:d7:02:78:66:f5:e3:89:e8: 6b:59:4b:44:91:b8:7b:af:cd:ec:5a:2e:5d:6f:d2: dd:8c:4c:23:1c:51:0c:ae:79:2c:01:da:5a:85:7a: 8a:d7:2c:d4:c7:d2:81:82:a3:cd:db:80:55:e3:bf: f0:85:a3:19:a8:81:df:5c:bc:64:b7:4c:d7:91:95: 16:a8:b3:7a:51:a7:58:54:1d:86:da:03:34:c0:c5: ad:f6:4b:3b:53:bc:24:02:35:a4:33:36:82:c1:a8: 0e:fc:42:5e:f0:c6:b4:85:8c:5d:68:c1:18:99:36: 76:8e:0c:12:54:df:ea:00:8e:76:ea:5b:5a:03:34: 7a:11:5b:e3:28:09:fe:6b:32:03:0f:7c:0d:62:6b: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:72:18:BD:B9:8B:76:A8:1C:11:BC:5F:C6:FB:49:A0:FE:51:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl X509v3 Authority Key Identifier: keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer sbgp-ipAddrBlock: critical IPv4: 23.169.88.0/23 IPv6: 2602:f9a6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3d:5a:7f:9c:6c:0b:95:8a:e9:2a:13:ad:c4:c9:30:3a:a1: e5:70:7a:d1:32:35:b5:ec:e1:04:46:6a:0a:16:57:3d:83:ef: 9b:bc:76:1c:6c:a0:24:81:51:d5:21:ec:ca:b0:5f:f0:f5:4a: 0e:ff:35:94:3b:af:b8:26:52:b5:2f:dd:c6:59:af:68:0f:33: 35:be:69:7f:21:3b:5a:a4:d3:ae:ad:88:20:93:41:b8:5f:cf: 4d:46:e9:e2:b2:6b:d8:4e:e0:3d:9f:02:4c:8b:7c:9c:fd:de: 57:1e:f8:0f:7a:e0:de:ff:34:0b:69:ea:9b:69:47:10:0f:b2: c5:15:74:13:55:85:1e:26:23:23:cd:68:68:5a:80:41:72:f6: 0b:25:6f:72:b9:84:1c:b6:54:f0:ea:e5:c8:b7:e9:4b:30:e9: ad:76:d3:97:0c:c0:8a:58:2b:f8:fd:18:37:dd:b4:e7:89:3b: 1a:3b:0d:21:49:40:b0:5b:23:38:cb:39:de:a9:d5:81:ff:72: 32:5f:31:88:f7:4f:04:22:8a:2f:42:47:97:34:77:f2:f0:05: cf:e7:fe:06:47:cf:ca:9a:fc:bb:57:bb:63:c8:66:e6:39:fd: 8f:f0:3f:56:f9:b5:40:6a:4f:85:8e:13:dd:96:23:a8:85:de: 88:f8:fb:19 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnE1Mv7yocoRCwlhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkxOGE2MGItMmYxNi00ZGI5LThkNDctZGRkZmFmYjVm ZGFiMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YmQyZDFkYmQtZGM2Yi00ZTdhLWJkYzgtNTcyMjdkYWZlYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJtY53r5VqoypfcUtR6Ue/LmPHv6XG/PtSu6 95J1RzdFbPeDKax/i39CmZbVhQ5uB3H1XoPS3hJI9B6F/9CGRzIlCfevOSvipTUF whw/HYUrA60RBnfjhEGzEWhTDv9Eu8YortviQ7uwchtu1EqW1wJ4ZvXjiehrWUtE kbh7r83sWi5db9LdjEwjHFEMrnksAdpahXqK1yzUx9KBgqPN24BV47/whaMZqIHf XLxkt0zXkZUWqLN6UadYVB2G2gM0wMWt9ks7U7wkAjWkMzaCwagO/EJe8Ma0hYxd aMEYmTZ2jgwSVN/qAI526ltaAzR6EVvjKAn+azIDD3wNYmu/jwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCbKchi9uYt2qBwRvF/G+0mg/lH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4 YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRmYWZiNWZkYWIvZDgyMzA0MGQtMmRmYi0z NWFiLWI5YzQtOTVlNmIyZGUyYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjkxOGE2MGItMmYxNi00ZGI5LThk NDctZGRkZmFmYjVmZGFiLzY5MThhNjBiLTJmMTYtNGRiOS04ZDQ3LWRkZGZhZmI1 ZmRhYi5jcmwwHwYDVR0jBBgwFoAUl8NQrsFalDaWyPb4G3kBnULiTaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRm YWZiNWZkYWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF6lYMA4E AgACMAgDBgQmAvmmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARPVp/nGwLlYrpKhOtxMkwOqHlcHrRMjW1 7OEERmoKFlc9g++bvHYcbKAkgVHVIezKsF/w9UoO/zWUO6+4JlK1L93GWa9oDzM1 vml/ITtapNOurYggk0G4X89NRunismvYTuA9nwJMi3yc/d5XHvgPeuDe/zQLaeqb aUcQD7LFFXQTVYUeJiMjzWhoWoBBcvYLJW9yuYQctlTw6uXIt+lLMOmtdtOXDMCK WCv4/Rg33bTniTsaOw0hSUCwWyM4yzneqdWB/3IyXzGI908EIoovQkeXNHfy8AXP 5/4GR8/Kmvy7V7tjyGbmOf2P8D9W+bVAak+FjhPdliOohd6I+PsZ -----END CERTIFICATE-----Generated at Wed May 7 23:42:33 2025 by rpki-client