$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa File: fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa (raw, json) Hash identifier: ixXWhcocfF2LdubHO1/FhPNffc9mQyuccAgPa3erh+c= Subject key identifier: 3A:16:3D:C2:8D:53:24:DF:3B:95:92:92:E4:C5:2C:52:C7:08:CD:F5 Certificate issuer: /CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d Certificate serial: 010D0C9F432858496218506B77FF7E35B92E3180 Authority key identifier: 9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa Signing time: Tue 01 Apr 2025 16:12:02 +0000 ROA not before: Tue 01 Apr 2025 16:12:02 +0000 ROA not after: Mon 30 Jun 2025 16:12:02 +0000 asID: 401510 IP address blocks: 23.130.116.0/24 maxlen: 24 2602:f80d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:18:50:6b:77:ff:7e:35:b9:2e:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d Validity Not Before: Apr 1 16:12:02 2025 GMT Not After : Jun 30 16:12:02 2025 GMT Subject: CN=32a83afa-3916-4940-91ef-d13713d39e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:12:f1:28:8b:b9:6d:4b:52:bc:25:36:6b: 33:e1:60:31:39:b7:0d:c5:46:e9:35:82:c8:98:7d: d2:18:63:f5:78:38:ba:18:fb:01:7b:44:ee:03:41: 7d:c1:04:5b:9a:34:7f:8b:e9:63:24:87:8a:e2:5e: 86:52:ed:56:28:51:9e:6a:04:92:5f:22:74:47:b4: 49:76:cd:7c:75:c8:0e:10:b3:a8:08:79:3e:12:52: 3d:84:71:9f:7f:31:5c:3a:d2:5e:36:84:e3:cf:0a: 9a:32:5f:e2:0b:30:57:43:b9:32:ab:3a:e2:c8:e0: 47:52:ed:19:a8:19:08:55:c5:67:7c:55:90:00:de: 5f:ae:b7:9f:6d:dc:77:a7:33:f7:67:04:9a:24:99: a7:9e:e8:ca:2a:ac:f4:bd:05:cb:b6:79:25:f6:f8: bb:45:68:e8:12:ee:2d:8a:7b:f2:6e:f6:11:90:a2: 63:6d:f4:a2:90:b4:e8:a5:4d:e7:ec:f5:39:a0:6d: 42:f5:06:51:5f:74:21:3e:a2:28:13:c1:fc:b6:88: be:51:5f:b6:55:22:d4:27:01:47:06:ce:f3:04:1d: 18:94:62:71:ff:44:56:03:36:6d:e5:93:a2:94:fa: f5:b1:ef:49:6f:92:32:42:d7:98:75:6e:c3:ff:78: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:16:3D:C2:8D:53:24:DF:3B:95:92:92:E4:C5:2C:52:C7:08:CD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl X509v3 Authority Key Identifier: keyid:9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.116.0/24 IPv6: 2602:f80d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cf:f9:6b:9f:36:ae:78:85:14:43:8d:9e:e7:6e:bb:f0:44: 39:51:e9:de:04:20:ee:1c:2e:21:8e:54:2b:2b:c8:4a:1c:8a: b9:21:09:0e:c2:70:26:e0:c6:69:84:43:2c:48:80:10:f1:94: cf:fd:18:d5:df:97:0f:57:e3:cd:29:f5:3f:a1:50:3a:53:ca: 3a:b2:84:ce:8a:86:9f:1c:15:ef:dd:ff:0e:17:42:56:fa:20: a5:da:93:89:99:b8:29:95:d4:47:57:fb:23:ef:78:10:3c:f7: 02:86:cf:7f:b4:de:db:f3:b7:5f:28:9e:3d:03:bd:f0:55:b2: ba:df:0d:78:e6:5f:4a:2b:e2:cd:47:20:c7:10:fb:fb:97:43: 0f:a4:13:88:c3:59:01:33:c5:10:b0:33:ce:92:6e:84:2d:a4: 6e:81:63:ab:81:c6:d9:0e:76:4b:fe:30:8b:c4:69:22:f3:da: 8d:4c:54:fe:23:e4:9e:23:af:62:63:b6:17:d7:34:fe:04:47: 7e:ec:eb:f5:fc:1d:05:3e:ca:1a:46:ca:0c:d1:6d:8f:9b:cb: b3:62:53:90:82:fe:c8:ac:4f:6a:a7:fe:8b:50:8a:1d:25:8a: 44:fd:84:47:aa:1f:76:18:da:c0:3d:5c:48:83:d9:20:e0:c8: 67:dd:72:86 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEliGFBrd/9+NbkuMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3YTBhOGMtMmUxZi00OGE2LTg5NjAtN2NlMWFiYjFj NTNkMB4XDTI1MDQwMTE2MTIwMloXDTI1MDYzMDE2MTIwMlowLzEtMCsGA1UEAxMk MzJhODNhZmEtMzkxNi00OTQwLTkxZWYtZDEzNzEzZDM5ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGMS8SiLuW1LUrwlNmsz4WAxObcNxUbpNYLI mH3SGGP1eDi6GPsBe0TuA0F9wQRbmjR/i+ljJIeK4l6GUu1WKFGeagSSXyJ0R7RJ ds18dcgOELOoCHk+ElI9hHGffzFcOtJeNoTjzwqaMl/iCzBXQ7kyqzriyOBHUu0Z qBkIVcVnfFWQAN5frrefbdx3pzP3ZwSaJJmnnujKKqz0vQXLtnkl9vi7RWjoEu4t invybvYRkKJjbfSikLTopU3n7PU5oG1C9QZRX3QhPqIoE8H8toi+UV+2VSLUJwFH Bs7zBB0YlGJx/0RWAzZt5ZOilPr1se9Jb5IyQteYdW7D/3iPEQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDoWPcKNUyTfO5WSkuTFLFLHCM31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdh MGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2UxYWJiMWM1M2QvZmE4YjIxZTEtZWUxNy0z ZmZiLTljMzUtYjdjOGE0YTQ1ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmQ3YTBhOGMtMmUxZi00OGE2LTg5 NjAtN2NlMWFiYjFjNTNkLzZkN2EwYThjLTJlMWYtNDhhNi04OTYwLTdjZTFhYmIx YzUzZC5jcmwwHwYDVR0jBBgwFoAUmtThhXrAnPC1YIKX9LqK8atgtsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdhMGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2Ux YWJiMWM1M2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4J0MA4E AgACMAgDBgAmAvgNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOz/lrnzaueIUUQ42e52678EQ5UeneBCDu HC4hjlQrK8hKHIq5IQkOwnAm4MZphEMsSIAQ8ZTP/RjV35cPV+PNKfU/oVA6U8o6 soTOioafHBXv3f8OF0JW+iCl2pOJmbgpldRHV/sj73gQPPcChs9/tN7b87dfKJ49 A73wVbK63w145l9KK+LNRyDHEPv7l0MPpBOIw1kBM8UQsDPOkm6ELaRugWOrgcbZ DnZL/jCLxGki89qNTFT+I+SeI69iY7YX1zT+BEd+7Ov1/B0FPsoaRsoM0W2Pm8uz YlOQgv7IrE9qp/6LUIodJYpE/YRHqh92GNrAPVxIg9kg4Mhn3XKG -----END CERTIFICATE-----Generated at Tue May 13 16:54:23 2025 by rpki-client