$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa File: 143a0d57-0f9f-393b-bc63-7c750f27a196.roa (raw, json) Hash identifier: qy/rzRV0S3AxLq3dkbfM34noa46bqBu/OkFGoAkh13Q= Subject key identifier: F8:DF:71:78:02:AF:20:1E:45:8B:D9:53:E8:B1:3F:80:87:9F:B2:21 Certificate issuer: /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef Certificate serial: 010D0C9F43285849B14A023C2AD9032CDAC56A00 Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 399861 IP address blocks: 23.133.196.0/24 maxlen: 24 2602:f705::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:02:3c:2a:d9:03:2c:da:c5:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=044dccd7-146f-4a59-9d24-fa39701a32a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:83:52:bc:c6:a1:f5:3a:26:24:fb:83:21: 67:00:61:01:ab:2a:2e:4b:c2:9e:62:6e:46:d8:ab: 20:d0:4f:96:a2:72:31:0f:d3:11:5f:a2:ba:d9:c8: 52:39:58:76:8b:1a:77:79:86:53:2c:10:49:64:7a: b6:ad:b4:a4:05:30:0c:50:d1:07:26:9d:88:37:09: c7:c9:57:e0:40:01:04:80:fd:f3:88:91:f5:84:eb: d8:0c:cb:25:6e:4c:e4:ed:a3:89:ab:24:89:f5:47: 80:4d:75:57:09:5d:a7:42:93:7c:36:95:79:aa:be: a7:80:fe:f7:37:a8:b6:86:e8:51:b9:1f:a6:a2:58: f9:46:47:d7:f7:0a:8f:64:28:4f:85:77:92:b1:28: 2b:2b:cd:9a:d4:85:7e:e0:54:9e:1b:d8:34:ff:d5: 9a:33:4a:44:dd:8a:8a:2b:9f:85:68:2e:ef:2a:4b: e7:87:9a:3c:c6:4b:8e:58:46:21:2d:13:cf:f8:c4: 28:2c:57:a6:6f:c9:ae:1e:ba:ba:72:9a:bd:43:c0: 84:8b:d5:4d:a1:74:86:6c:d4:cd:e5:42:fe:d1:b6: eb:4d:21:a4:eb:27:75:1e:01:eb:ad:ab:00:82:4e: ca:74:10:04:29:81:d1:2b:51:9e:f2:e1:03:ba:50: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DF:71:78:02:AF:20:1E:45:8B:D9:53:E8:B1:3F:80:87:9F:B2:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl X509v3 Authority Key Identifier: keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer sbgp-ipAddrBlock: critical IPv4: 23.133.196.0/24 IPv6: 2602:f705::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ce:d3:d9:22:e4:31:5d:2f:2c:9c:3c:11:37:cc:86:85:c6: a4:22:fe:7c:ab:d3:3d:08:e6:ed:4e:fa:04:67:05:33:be:cc: c1:7e:be:aa:4e:b7:cd:04:0a:ef:1a:09:bc:09:3d:cd:28:74: a1:e4:3f:34:51:53:22:b7:7f:06:e3:90:5a:87:14:29:d4:b7: 7d:74:61:40:39:2f:37:ad:cc:56:6e:50:84:d0:12:e4:0f:3c: 22:cb:76:c6:33:a2:11:e2:c6:08:a0:30:29:d8:4f:c2:59:b9: e9:8e:58:73:c5:43:ce:71:e2:44:91:9f:46:00:20:b3:59:b9: bb:db:07:fa:1e:8e:11:02:cc:c4:9e:1a:5a:ee:e6:c6:fe:a1: 36:61:39:bc:15:8d:2a:c6:9b:0f:d7:2c:cc:15:f3:cc:f7:c8: ce:dc:58:da:8a:83:5b:aa:40:aa:54:96:2a:67:9c:3e:b2:1c: 0a:17:8e:7b:1a:2a:ad:38:05:c1:51:61:ab:58:b2:d0:8d:a5: 6b:02:4d:bb:5e:0f:db:7a:2e:c5:7c:10:5f:60:cd:3c:c9:c0: 25:c0:11:32:5f:75:d3:87:22:cd:1c:61:71:81:82:f4:dc:58: fe:41:03:dd:42:75:81:7a:49:79:b5:47:cf:4b:84:1d:ef:86: 1b:e8:9d:58 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmxSgI8KtkDLNrFagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZkZDc0ZTYtN2U2NS00MmQ0LWE0OWEtMDdlMGNjMThj MWVmMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDQ0ZGNjZDctMTQ2Zi00YTU5LTlkMjQtZmEzOTcwMWEzMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoSDUrzGofU6JiT7gyFnAGEBqyouS8KeYm5G 2Ksg0E+WonIxD9MRX6K62chSOVh2ixp3eYZTLBBJZHq2rbSkBTAMUNEHJp2INwnH yVfgQAEEgP3ziJH1hOvYDMslbkzk7aOJqySJ9UeATXVXCV2nQpN8NpV5qr6ngP73 N6i2huhRuR+molj5RkfX9wqPZChPhXeSsSgrK82a1IV+4FSeG9g0/9WaM0pE3YqK K5+FaC7vKkvnh5o8xkuOWEYhLRPP+MQoLFemb8muHrq6cpq9Q8CEi9VNoXSGbNTN 5UL+0bbrTSGk6yd1HgHrrasAgk7KdBAEKYHRK1Ge8uEDulAj+wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPjfcXgCryAeRYvZU+ixP4CHn7IhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wNmRk NzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2UwY2MxOGMxZWYvMTQzYTBkNTctMGY5Zi0z OTNiLWJjNjMtN2M3NTBmMjdhMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDZkZDc0ZTYtN2U2NS00MmQ0LWE0 OWEtMDdlMGNjMThjMWVmLzA2ZGQ3NGU2LTdlNjUtNDJkNC1hNDlhLTA3ZTBjYzE4 YzFlZi5jcmwwHwYDVR0jBBgwFoAUYi13yGYulJlhcXxC8kNoQfFqT1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wNmRkNzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2Uw Y2MxOGMxZWYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4XEMA4E AgACMAgDBgQmAvcFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkztPZIuQxXS8snDwRN8yGhcakIv58q9M9 CObtTvoEZwUzvszBfr6qTrfNBArvGgm8CT3NKHSh5D80UVMit38G45BahxQp1Ld9 dGFAOS83rcxWblCE0BLkDzwiy3bGM6IR4sYIoDAp2E/CWbnpjlhzxUPOceJEkZ9G ACCzWbm72wf6Ho4RAszEnhpa7ubG/qE2YTm8FY0qxpsP1yzMFfPM98jO3FjaioNb qkCqVJYqZ5w+shwKF457GiqtOAXBUWGrWLLQjaVrAk27Xg/bei7FfBBfYM08ycAl wBEyX3XThyLNHGFxgYL03Fj+QQPdQnWBekl5tUfPS4Qd74Yb6J1Y -----END CERTIFICATE-----Generated at Sun May 11 17:49:04 2025 by rpki-client