$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa File: a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa (raw, json) Hash identifier: Og98HcLb1tByOckWvQvW/z71laIUnEXR9JootSO/iJM= Subject key identifier: 62:D1:0D:57:6C:EB:4B:CC:D5:18:A4:A6:79:8D:10:1C:85:70:B4:9E Certificate issuer: /CN=6df0f127-67c5-46f6-bdda-25948d05d9ec Certificate serial: 010D0C9F4328584988CF24FD0F99F4159FF78000 Authority key identifier: 2E:EB:09:2D:D2:74:0C:6B:33:9D:56:E5:64:9A:F4:B0:60:8A:32:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 40202 IP address blocks: 23.167.64.0/24 maxlen: 24 23.179.160.0/24 maxlen: 24 130.51.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/6df0f127-67c5-46f6-bdda-25948d05d9ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/6df0f127-67c5-46f6-bdda-25948d05d9ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:24:fd:0f:99:f4:15:9f:f7:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6df0f127-67c5-46f6-bdda-25948d05d9ec Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=189a043b-9651-47a2-ba75-59c4663a178a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:e0:de:a2:8b:9b:39:ff:4a:50:54:26:8c: e3:2a:41:9f:60:c4:95:5f:7e:4f:27:0d:f7:05:82: 64:a0:35:06:db:6d:03:80:1b:e8:48:08:14:d6:97: 48:50:a9:a8:13:79:79:7b:7c:ca:a0:b7:a7:d7:cb: b6:6a:09:5a:7b:53:a5:66:72:ab:87:49:59:61:26: df:d6:d7:28:34:08:9a:c9:a1:1f:ba:93:e6:b5:f9: 9b:ae:c8:11:68:b0:d4:87:0e:7e:3b:21:bf:32:e2: 53:3f:b7:c4:8f:e4:a1:fc:15:cb:8b:0e:33:7d:90: 8b:42:88:0d:a0:40:c8:21:d2:43:81:f1:2d:8b:53: bd:4d:01:65:56:d6:41:54:67:df:47:0f:39:2c:d4: ca:f1:65:5c:be:2e:1c:88:d4:d5:78:78:a3:86:a0: 38:8b:eb:d1:d8:cb:1c:e4:fb:29:fb:b9:2a:d5:bc: de:8c:f6:fb:04:84:37:aa:08:be:5f:2a:4f:64:11: 76:a4:34:cf:41:57:d5:01:3c:5c:0f:17:d7:23:bd: ac:1d:8e:53:16:39:a7:c7:ca:91:b0:42:6b:3a:6f: 62:ba:da:e8:b8:90:15:75:38:e5:5b:d8:6c:1c:a2: 7f:7f:3c:f8:02:35:6d:24:8f:d5:eb:66:79:0a:10: b0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D1:0D:57:6C:EB:4B:CC:D5:18:A4:A6:79:8D:10:1C:85:70:B4:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/6df0f127-67c5-46f6-bdda-25948d05d9ec.crl X509v3 Authority Key Identifier: keyid:2E:EB:09:2D:D2:74:0C:6B:33:9D:56:E5:64:9A:F4:B0:60:8A:32:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec.cer sbgp-ipAddrBlock: critical IPv4: 23.167.64.0/24 23.179.160.0/24 130.51.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fe:22:6d:ac:95:02:65:a4:b8:ab:d1:3b:e9:21:52:8d:1a: 58:9d:eb:e4:db:e5:24:3a:28:65:1e:b8:bd:4e:08:86:4e:56: fe:ac:c3:0a:2a:82:17:c2:5f:9a:f3:3a:c4:33:b3:ad:2c:b6: ea:92:22:48:d6:4a:90:b9:fa:84:e0:65:91:d7:68:f4:47:ad: ce:3a:aa:f9:f2:0e:49:ca:a6:13:e8:08:fc:00:25:5a:7c:0d: 76:14:6a:fc:ab:ec:79:cc:46:d0:e1:aa:20:30:f1:b0:c0:cf: 82:41:b9:ca:2e:17:c5:b2:d2:9e:53:bf:61:c7:bf:48:6a:10: bc:73:76:52:a0:59:c6:ba:5e:86:cd:db:58:ed:19:2f:75:09: d0:fd:a3:bf:d5:34:f4:b2:60:8e:9b:53:45:fd:d1:73:56:2b: 08:6c:65:e2:dd:e4:e9:db:71:0d:49:c5:45:e1:bd:f5:bf:7d: 28:3c:0b:be:d3:0e:12:33:a9:ba:70:7a:3e:97:a8:86:36:e1: 30:c5:99:ff:b1:84:db:5e:3e:64:21:b5:c3:c4:71:9e:90:c4: 4a:56:3a:c1:9a:36:e8:d0:cb:83:99:d8:20:a6:ac:72:27:3e: 48:f6:58:7d:ec:c8:c1:d2:90:74:d0:1b:fc:4b:18:ce:b3:8f: 25:82:6e:52 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmIzyT9D5n0FZ/3gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmRmMGYxMjctNjdjNS00NmY2LWJkZGEtMjU5NDhkMDVk OWVjMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTg5YTA0M2ItOTY1MS00N2EyLWJhNzUtNTljNDY2M2ExNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyPg3qKLmzn/SlBUJozjKkGfYMSVX35PJw33 BYJkoDUG220DgBvoSAgU1pdIUKmoE3l5e3zKoLen18u2aglae1OlZnKrh0lZYSbf 1tcoNAiayaEfupPmtfmbrsgRaLDUhw5+OyG/MuJTP7fEj+Sh/BXLiw4zfZCLQogN oEDIIdJDgfEti1O9TQFlVtZBVGffRw85LNTK8WVcvi4ciNTVeHijhqA4i+vR2Msc 5Psp+7kq1bzejPb7BIQ3qgi+XypPZBF2pDTPQVfVATxcDxfXI72sHY5TFjmnx8qR sEJrOm9iutrouJAVdTjlW9hsHKJ/fzz4AjVtJI/V62Z5ChCwywIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGLRDVds60vM1RikpnmNEByFcLSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGYw ZjEyNy02N2M1LTQ2ZjYtYmRkYS0yNTk0OGQwNWQ5ZWMvYTVmZDAxMWItZjc0ZS0z M2MwLWIzZDItMWU5ZWU2N2FmMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRmMGYxMjctNjdjNS00NmY2LWJk ZGEtMjU5NDhkMDVkOWVjLzZkZjBmMTI3LTY3YzUtNDZmNi1iZGRhLTI1OTQ4ZDA1 ZDllYy5jcmwwHwYDVR0jBBgwFoAULusJLdJ0DGsznVblZJr0sGCKMhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZGYwZjEyNy02N2M1LTQ2ZjYtYmRkYS0yNTk0 OGQwNWQ5ZWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF6dAAwQA F7OgAwQCgjPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHX+Im2slQJlpLir0TvpIVKNGlid6+Tb5SQ6KGUe uL1OCIZOVv6swwoqghfCX5rzOsQzs60stuqSIkjWSpC5+oTgZZHXaPRHrc46qvny DknKphPoCPwAJVp8DXYUavyr7HnMRtDhqiAw8bDAz4JBucouF8Wy0p5Tv2HHv0hq ELxzdlKgWca6XobN21jtGS91CdD9o7/VNPSyYI6bU0X90XNWKwhsZeLd5OnbcQ1J xUXhvfW/fSg8C77TDhIzqbpwej6XqIY24TDFmf+xhNtePmQhtcPEcZ6QxEpWOsGa NujQy4OZ2CCmrHInPkj2WH3syMHSkHTQG/xLGM6zjyWCblI= -----END CERTIFICATE-----Generated at Thu May 8 23:18:50 2025 by rpki-client