$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa File: 07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa (raw, json) Hash identifier: t8AU3gRGs/aac3uGKvofjXhCE/50dv0YLqquHye+k6g= Subject key identifier: A2:45:3E:FC:A3:AF:3A:4A:E9:9F:5E:95:B0:DB:2E:F4:EE:37:FA:4D Certificate issuer: /CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Certificate serial: 010D0C9F43285849AE51CAE2E793BEAE6C5A7C00 Authority key identifier: 1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa Signing time: Mon 28 Apr 2025 23:29:17 +0000 ROA not before: Mon 28 Apr 2025 23:29:17 +0000 ROA not after: Sun 27 Jul 2025 23:29:17 +0000 asID: 398174 IP address blocks: 23.147.80.0/24 maxlen: 24 2602:802:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:51:ca:e2:e7:93:be:ae:6c:5a:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Validity Not Before: Apr 28 23:29:17 2025 GMT Not After : Jul 27 23:29:17 2025 GMT Subject: CN=923fbb5d-56d8-4018-8c62-533c596a8e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:9d:1d:85:73:58:ea:75:1d:5c:25:24:58: ca:eb:a4:e3:12:b0:6d:09:a9:62:b4:92:16:05:02: 5c:e7:d7:af:88:be:df:87:98:1e:f6:27:3e:4b:57: 25:7e:13:0f:57:f4:1b:d2:a9:46:bb:14:90:09:8f: 8e:b1:e9:4f:f3:ef:87:ab:8a:99:4b:f5:cb:eb:0e: 48:16:06:1b:0e:c4:db:b0:b5:b8:f3:00:56:28:56: 3a:97:cc:be:91:26:50:6b:55:ee:b5:a8:1c:ca:e7: 70:ba:8a:75:a2:e4:a9:2c:94:9f:72:e3:70:87:fa: e2:1d:66:e1:f0:a1:27:32:9b:ef:42:46:8f:49:b7: 1a:a1:27:41:a6:6b:9a:57:08:d3:04:fa:5c:73:2b: bc:7c:3e:53:58:b6:5f:e4:ae:65:d7:9b:61:c0:3c: d4:52:3b:ae:e7:6f:18:37:c0:06:47:7f:82:cd:f0: 6d:80:d9:dd:ff:81:9f:34:8d:fa:7c:19:1a:81:de: 35:21:20:f1:14:21:6e:99:22:9b:f1:9b:d1:30:7a: e3:cc:c0:37:0a:75:78:8a:de:97:d5:fd:37:28:b8: f0:8d:12:2c:c3:f9:3d:ec:e7:ee:74:2d:ff:a4:7c: 56:ee:95:6b:3e:c8:ed:eb:1e:94:c2:24:b8:8e:31: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:45:3E:FC:A3:AF:3A:4A:E9:9F:5E:95:B0:DB:2E:F4:EE:37:FA:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl X509v3 Authority Key Identifier: keyid:1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer sbgp-ipAddrBlock: critical IPv4: 23.147.80.0/24 IPv6: 2602:802:7000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:df:d9:eb:04:81:17:1a:2d:10:63:47:2c:7a:ac:c3:56:72: b8:cd:15:50:8e:85:f0:80:a7:8e:d0:5a:0e:61:0e:c7:d1:61: 17:04:a9:3b:15:ab:5c:24:bb:6c:3f:4a:8c:43:88:cf:a4:9b: 6a:cb:a1:c2:eb:cc:f0:c3:61:49:4c:3e:7f:91:ec:ad:20:18: f9:88:5e:23:a2:6c:81:50:7a:3f:b2:a4:d9:eb:3b:75:35:68: f2:a9:47:09:7d:73:cf:4b:c0:1b:55:b4:c3:70:5b:c7:09:f4: cf:26:73:d1:2a:52:40:15:0e:de:e2:9c:4f:88:6a:35:93:6c: cd:88:3f:a3:2a:aa:ff:52:13:e5:c0:d4:b4:3f:5c:1c:9f:1d: 20:d0:15:d2:0f:de:42:f8:fd:25:3e:25:ee:91:c5:ad:7d:61: 28:2e:7f:86:13:d5:d7:b1:d5:72:3f:c2:7d:f1:9c:e1:bd:95: a3:43:90:6c:b7:36:97:c0:d3:eb:77:75:ca:ad:88:23:5e:c5: 9f:ce:0e:6f:ab:02:2c:c1:9c:7c:da:fb:69:42:e1:45:12:9b: 45:f2:24:fb:69:7c:f7:f7:2c:4e:60:cc:90:4e:2e:5a:b9:c3: da:a9:7f:8c:b6:97:47:ae:7d:b6:e7:18:5e:f9:fa:4d:5b:aa: 3c:0b:75:67 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmuUcri55O+rmxafAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxZTAyODctOGFiNC00MzBiLTlmMDktMGM0NWZhOGQ3 NzEzMB4XDTI1MDQyODIzMjkxN1oXDTI1MDcyNzIzMjkxN1owLzEtMCsGA1UEAxMk OTIzZmJiNWQtNTZkOC00MDE4LThjNjItNTMzYzU5NmE4ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g6dHYVzWOp1HVwlJFjK66TjErBtCalitJIW BQJc59eviL7fh5ge9ic+S1clfhMPV/Qb0qlGuxSQCY+OselP8++Hq4qZS/XL6w5I FgYbDsTbsLW48wBWKFY6l8y+kSZQa1Xutagcyudwuop1ouSpLJSfcuNwh/riHWbh 8KEnMpvvQkaPSbcaoSdBpmuaVwjTBPpccyu8fD5TWLZf5K5l15thwDzUUjuu528Y N8AGR3+CzfBtgNnd/4GfNI36fBkagd41ISDxFCFumSKb8ZvRMHrjzMA3CnV4it6X 1f03KLjwjRIsw/k97OfudC3/pHxW7pVrPsjt6x6UwiS4jjEDCQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKJFPvyjrzpK6Z9elbDbLvTuN/pNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFl MDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1ZmE4ZDc3MTMvMDdjZGU2NWEtODMxNS0z YmI2LWExNTMtNjhkZDJkZGZlYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjIxZTAyODctOGFiNC00MzBiLTlm MDktMGM0NWZhOGQ3NzEzLzIyMWUwMjg3LThhYjQtNDMwYi05ZjA5LTBjNDVmYThk NzcxMy5jcmwwHwYDVR0jBBgwFoAUHEGrBWrRcQ68xXL9zqGB367fp3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFlMDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1 ZmE4ZDc3MTMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5NQMA4E AgACMAgDBgAmAggCcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAp39nrBIEXGi0QY0cseqzDVnK4zRVQjoXw gKeO0FoOYQ7H0WEXBKk7FatcJLtsP0qMQ4jPpJtqy6HC68zww2FJTD5/keytIBj5 iF4jomyBUHo/sqTZ6zt1NWjyqUcJfXPPS8AbVbTDcFvHCfTPJnPRKlJAFQ7e4pxP iGo1k2zNiD+jKqr/UhPlwNS0P1wcnx0g0BXSD95C+P0lPiXukcWtfWEoLn+GE9XX sdVyP8J98ZzhvZWjQ5BstzaXwNPrd3XKrYgjXsWfzg5vqwIswZx82vtpQuFFEptF 8iT7aXz39yxOYMyQTi5aucPaqX+MtpdHrn225xhe+fpNW6o8C3Vn -----END CERTIFICATE-----Generated at Tue May 13 06:25:11 2025 by rpki-client