$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa File: 8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa (raw, json) Hash identifier: LkZE6ojO+uG0tNsrkk8ovbirF3jfCurYOuQ8lSQfRT8= Subject key identifier: 64:0F:A9:C2:86:B2:4B:1E:E1:17:D2:8B:0A:DB:BE:49:90:05:64:04 Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Certificate serial: 010D0C9F432858498FC9B95054DB588B66476440 Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 401463 IP address blocks: 23.128.140.0/24 maxlen: 24 2602:f7b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b9:50:54:db:58:8b:66:47:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=f66a95fd-a800-4549-a299-d5b072712f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:c9:ad:98:c1:00:73:f7:3a:a3:3d:17:4b: 31:4a:ab:6d:4e:41:c5:88:37:05:a8:35:28:2e:9a: e0:2a:04:c5:be:bd:7a:d4:9e:df:51:03:95:c7:0b: 8f:a9:eb:8a:9c:e8:fc:9c:61:c9:5a:f8:24:44:0d: f6:62:aa:e7:90:bc:28:63:a5:70:36:2d:61:49:d8: d7:5b:96:05:5c:ba:36:4f:12:9b:41:87:14:3e:f1: 3c:91:29:58:82:4c:01:e2:7b:24:bf:e2:92:9d:3b: 7f:cf:fc:ac:6b:13:e0:2e:33:9d:69:b3:d8:59:a9: ee:ca:d8:3e:21:9c:5f:84:b6:f2:5e:02:92:0b:3c: c2:42:15:5d:35:8c:d2:cd:cc:2c:aa:08:66:bb:8e: 6f:60:20:0d:82:fc:56:78:2e:d7:5e:d2:3e:8e:f9: c5:6e:5b:b7:4d:4e:64:e2:5c:fa:78:9c:71:dc:4c: 33:4e:13:07:d6:e6:94:94:ab:56:31:0c:05:fc:22: f8:16:2f:05:f2:a0:bd:41:c1:36:f9:b6:2b:5a:0e: bf:20:18:25:20:e1:6f:8d:96:b3:ca:dd:93:dc:4a: 31:e7:5f:d1:ef:c2:f7:cf:3b:d9:2f:14:fd:cd:ea: 21:f0:5e:eb:34:8e:a3:1a:22:c7:29:d9:b8:45:3f: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0F:A9:C2:86:B2:4B:1E:E1:17:D2:8B:0A:DB:BE:49:90:05:64:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl X509v3 Authority Key Identifier: keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.140.0/24 IPv6: 2602:f7b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f1:c1:cd:b5:b3:95:4d:2a:3a:d4:4f:fe:17:0c:2b:ed:2c: 34:cc:37:b2:fd:c0:8e:8f:de:cc:16:98:78:3d:37:dd:88:84: bc:16:1a:03:65:2f:c7:dd:cf:1c:c3:86:1b:0d:42:b6:67:ae: ce:e3:56:7d:07:76:59:03:7a:d8:a3:33:c4:7e:5e:59:19:55: fe:4a:ec:b2:41:54:27:f7:85:f6:b4:5c:c6:a5:30:76:2a:27: 5f:51:a1:20:04:72:d2:00:61:0c:64:e2:60:09:eb:67:95:f1: 77:37:fc:a3:2e:3e:c1:ff:c5:48:2d:d7:01:58:ff:a3:6c:a2: 9d:6e:ed:3b:86:38:93:c7:ff:c6:be:c2:d2:f8:8d:9c:26:73: b7:b3:73:9b:89:aa:34:47:d7:3a:3f:8a:56:6f:1c:50:70:fd: e4:a5:42:be:02:35:a9:2d:e9:1e:da:92:c1:3b:96:8f:65:c2: 82:d1:3a:dc:3e:79:4f:f5:c4:b2:1d:d3:91:99:92:d0:75:89: 17:93:b9:67:65:05:f3:f4:9b:5b:d2:49:09:ea:ca:ca:f4:73: 10:53:ca:a5:83:16:9f:2a:75:48:e3:5d:91:9e:cd:29:8c:79: 82:2f:05:5a:b9:3d:29:3b:5f:fa:e3:5d:75:a3:2a:a8:e2:75: 36:1c:ba:fc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmPyblQVNtYi2ZHZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxMjZiZDMtMzM3YS00NmVhLThhYWItYzJjZDc1OTRl ZGY5MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZjY2YTk1ZmQtYTgwMC00NTQ5LWEyOTktZDViMDcyNzEyZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQDJrZjBAHP3OqM9F0sxSqttTkHFiDcFqDUo LprgKgTFvr161J7fUQOVxwuPqeuKnOj8nGHJWvgkRA32YqrnkLwoY6VwNi1hSdjX W5YFXLo2TxKbQYcUPvE8kSlYgkwB4nskv+KSnTt/z/ysaxPgLjOdabPYWanuytg+ IZxfhLbyXgKSCzzCQhVdNYzSzcwsqghmu45vYCANgvxWeC7XXtI+jvnFblu3TU5k 4lz6eJxx3EwzThMH1uaUlKtWMQwF/CL4Fi8F8qC9QcE2+bYrWg6/IBglIOFvjZaz yt2T3Eox51/R78L3zzvZLxT9zeoh8F7rNI6jGiLHKdm4RT8YlQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGQPqcKGskse4RfSiwrbvkmQBWQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYzEy NmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNkNzU5NGVkZjkvOGU0YzNjNTItZDdjYi0z YzBkLWE0MjEtMDYyZTUyZjNhYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2MxMjZiZDMtMzM3YS00NmVhLThh YWItYzJjZDc1OTRlZGY5LzNjMTI2YmQzLTMzN2EtNDZlYS04YWFiLWMyY2Q3NTk0 ZWRmOS5jcmwwHwYDVR0jBBgwFoAUHDl90qorw7uxOU2srEhzcFL5CnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYzEyNmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNk NzU5NGVkZjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CMMA4E AgACMAgDBgAmAvezADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD8cHNtbOVTSo61E/+Fwwr7Sw0zDey/cCO j97MFph4PTfdiIS8FhoDZS/H3c8cw4YbDUK2Z67O41Z9B3ZZA3rYozPEfl5ZGVX+ SuyyQVQn94X2tFzGpTB2KidfUaEgBHLSAGEMZOJgCetnlfF3N/yjLj7B/8VILdcB WP+jbKKdbu07hjiTx//GvsLS+I2cJnO3s3Obiao0R9c6P4pWbxxQcP3kpUK+AjWp Leke2pLBO5aPZcKC0TrcPnlP9cSyHdORmZLQdYkXk7lnZQXz9Jtb0kkJ6srK9HMQ U8qlgxafKnVI412Rns0pjHmCLwVauT0pO1/64111oyqo4nU2HLr8 -----END CERTIFICATE-----Generated at Sun May 11 18:08:39 2025 by rpki-client