$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa File: acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa (raw, json) Hash identifier: LDE218Sq4sr5H2zk4AKEkKp14kO1ZXAHZviX8vnbQVo= Subject key identifier: 23:0D:5B:7E:1C:22:4D:32:CA:4E:AD:84:ED:D6:CE:02:BC:49:73:C9 Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F43285849C693982A7FD0F82C577BD440 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa Signing time: Wed 07 May 2025 16:01:16 +0000 ROA not before: Wed 07 May 2025 16:01:16 +0000 ROA not after: Tue 05 Aug 2025 16:01:16 +0000 asID: 19814 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:6d::/48 maxlen: 48 2602:f805:74::/48 maxlen: 48 2602:f805:560::/48 maxlen: 48 2602:f805:5e3::/48 maxlen: 48 2602:f805:67e::/48 maxlen: 48 2602:f805:6b3::/48 maxlen: 48 2602:f805:746::/48 maxlen: 48 2602:f805:8c7::/48 maxlen: 48 2602:f805:98c::/48 maxlen: 48 2602:f805:b0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:93:98:2a:7f:d0:f8:2c:57:7b:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: May 7 16:01:16 2025 GMT Not After : Aug 5 16:01:16 2025 GMT Subject: CN=371410b8-fdbd-446b-a421-8e66e4691799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:91:bf:b1:44:20:ab:f7:04:4a:a2:38:c5: f2:b9:aa:b0:19:c5:5e:74:6e:bc:d8:f9:db:b9:0d: 51:44:21:01:54:50:ef:c7:4d:59:c9:2e:07:f1:4c: b3:ad:29:93:d7:c7:99:d9:aa:9d:80:b5:35:b5:af: 19:12:65:d6:35:17:b6:6a:09:15:c8:62:9c:f4:50: 28:03:38:0f:71:95:d0:9c:52:f1:ad:fe:c2:5a:9b: 63:11:60:45:84:0a:93:d3:48:a9:87:03:cb:e0:9f: f4:51:be:d4:a8:58:bc:fd:70:71:4f:1c:a9:3a:3f: 72:3a:d3:60:f1:29:47:34:4a:2b:bc:31:b2:d3:41: 14:a0:39:29:a2:19:e8:71:5e:0e:20:77:66:cc:01: 2f:78:3f:4f:23:30:bf:a7:1b:f5:80:0f:0f:63:7e: 24:f9:48:d3:46:12:79:93:9d:30:a6:df:f2:cb:f4: ab:71:91:25:c6:4b:75:1e:d0:a7:50:a0:cc:02:c1: f0:0e:84:0d:57:d7:aa:92:77:91:97:c4:be:3b:e7: a9:36:79:69:34:78:86:70:1a:2e:4e:0d:6e:69:54: 5a:ee:c0:56:5b:75:a5:33:18:46:7c:1b:92:ba:10: 7c:f0:85:30:de:f2:3a:85:ac:0e:92:d5:dd:d6:53: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0D:5B:7E:1C:22:4D:32:CA:4E:AD:84:ED:D6:CE:02:BC:49:73:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:6d::/48 2602:f805:74::/48 2602:f805:560::/48 2602:f805:5e3::/48 2602:f805:67e::/48 2602:f805:6b3::/48 2602:f805:746::/48 2602:f805:8c7::/48 2602:f805:98c::/48 2602:f805:b0c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7d:bc:e7:1b:51:2e:73:82:a7:f3:f4:0e:74:e8:cb:f7:85: 47:fb:01:a9:7b:cd:2c:59:d3:38:5b:e0:c2:0f:8f:04:28:d5: a6:16:9f:68:84:50:f0:68:46:0c:71:86:7e:4c:3e:ea:a6:74: 4b:85:3d:11:31:ef:3b:4f:4d:01:0a:9c:75:4f:84:f1:1a:83: 51:d6:3e:90:03:c9:04:a0:36:2e:1b:46:e5:e9:33:22:71:32: 91:8c:af:e0:0a:94:b4:ba:f1:5b:ea:eb:35:db:d3:34:00:28: ca:8d:2b:69:6e:36:85:93:d2:12:b7:12:09:9d:bc:ac:5e:0b: 78:2d:e9:92:b4:6f:2a:34:14:52:57:04:8b:cd:08:fc:6a:2c: 87:7a:0a:02:a6:42:37:af:bd:4f:71:7f:03:40:02:70:6e:e7: 21:33:45:65:b5:b2:ab:13:c5:f8:4f:8c:4b:4b:27:3f:a2:5e: 8b:e1:47:eb:26:1e:9d:eb:7c:20:9d:96:00:fe:46:fc:2a:50: bd:7e:f9:eb:3f:98:64:99:f4:71:d5:e9:e4:9f:22:5f:30:95: 2d:30:a0:b6:55:50:97:fd:09:cc:23:7a:8a:fe:d9:eb:da:87: bc:05:68:34:30:33:78:d0:3d:ba:93:a7:2e:be:e9:7a:b8:ce: 67:75:be:6b -----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIUAQ0Mn0MoWEnGk5gqf9D4LFd71EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MDUwNzE2MDExNloXDTI1MDgwNTE2MDExNlowLzEtMCsGA1UEAxMk MzcxNDEwYjgtZmRiZC00NDZiLWE0MjEtOGU2NmU0NjkxNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7SRv7FEIKv3BEqiOMXyuaqwGcVedG682Pnb uQ1RRCEBVFDvx01ZyS4H8UyzrSmT18eZ2aqdgLU1ta8ZEmXWNRe2agkVyGKc9FAo AzgPcZXQnFLxrf7CWptjEWBFhAqT00iphwPL4J/0Ub7UqFi8/XBxTxypOj9yOtNg 8SlHNEorvDGy00EUoDkpohnocV4OIHdmzAEveD9PIzC/pxv1gA8PY34k+UjTRhJ5 k50wpt/yy/SrcZElxkt1HtCnUKDMAsHwDoQNV9eqkneRl8S+O+epNnlpNHiGcBou Tg1uaVRa7sBWW3WlMxhGfBuSuhB88IUw3vI6hawOktXd1lN1qQIDAQABo4IDwTCC A70wHQYDVR0OBBYEFCMNW34cIk0yyk6thO3WzgK8SXPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYWNiMWNmYTYtYmE3Mi0z ZjljLWExMGQtNDMwYzU5MjA5YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMIGKBggrBgEFBQcBBwEB/wR7MHkwDAQCAAEwBgMEABe9eDBp BAIAAjBjAwcAJgL4BQAAAwcAJgL4BQBtAwcAJgL4BQB0AwcAJgL4BQVgAwcAJgL4 BQXjAwcAJgL4BQZ+AwcAJgL4BQazAwcAJgL4BQdGAwcAJgL4BQjHAwcAJgL4BQmM AwcAJgL4BQsMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABB9vOcbUS5zgqfz9A506Mv3hUf7Aal7zSxZ0zhb 4MIPjwQo1aYWn2iEUPBoRgxxhn5MPuqmdEuFPREx7ztPTQEKnHVPhPEag1HWPpAD yQSgNi4bRuXpMyJxMpGMr+AKlLS68Vvq6zXb0zQAKMqNK2luNoWT0hK3EgmdvKxe C3gt6ZK0byo0FFJXBIvNCPxqLId6CgKmQjevvU9xfwNAAnBu5yEzRWW1sqsTxfhP jEtLJz+iXovhR+smHp3rfCCdlgD+RvwqUL1++es/mGSZ9HHV6eSfIl8wlS0woLZV UJf9Ccwjeor+2evah7wFaDQwM3jQPbqTpy6+6Xq4zmd1vms= -----END CERTIFICATE-----Generated at Sat May 10 08:37:42 2025 by rpki-client