$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa File: cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa (raw, json) Hash identifier: Zs2JUEwwjBgUUyHqGUQqGIhrBoTyTAx2TLAd5IM6bz4= Subject key identifier: EA:A1:48:55:89:98:EF:8B:08:60:A4:9F:00:74:09:8D:56:2E:05:D2 Certificate issuer: /CN=42804204-aefa-4fac-9d39-1599fa403e46 Certificate serial: 010D0C9F43285849E38A3CDEBF711687FBA884C0 Authority key identifier: 05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa Signing time: Sun 18 May 2025 01:00:47 +0000 ROA not before: Sun 18 May 2025 01:00:47 +0000 ROA not after: Sat 16 Aug 2025 01:00:47 +0000 asID: 401414 IP address blocks: 23.128.76.0/24 maxlen: 24 2602:f7c6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:8a:3c:de:bf:71:16:87:fb:a8:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42804204-aefa-4fac-9d39-1599fa403e46 Validity Not Before: May 18 01:00:47 2025 GMT Not After : Aug 16 01:00:47 2025 GMT Subject: CN=81b41023-82b0-4851-bafe-250445837ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:e8:9d:7d:25:29:7c:6e:a0:1f:9b:b0:b0: 11:11:c6:65:93:92:c9:f9:76:82:69:20:76:92:71: 00:48:a0:ee:3b:81:3b:0c:b5:cc:ae:e3:fa:bc:05: b0:e0:30:7a:d1:22:50:c9:9d:74:2d:a1:21:a3:85: c6:1b:e3:8e:7a:16:8b:ae:73:c3:48:5d:2a:b8:37: 4a:01:ef:93:4b:b5:7e:e2:5e:62:be:fd:f1:c3:b2: aa:50:6d:42:5c:ee:63:24:c6:2d:d8:35:5a:e6:c0: 9e:73:c4:87:b8:a2:9c:a6:57:ef:0c:79:c4:a4:6e: 77:86:a0:e3:47:62:04:8c:2c:6b:96:b0:b2:84:f7: aa:13:43:43:ce:ae:7f:29:72:11:21:13:7f:9b:5d: 70:33:9d:29:6a:f7:7c:8e:bc:6e:b3:68:92:0b:98: fe:5b:c8:cc:9b:66:fc:a8:2b:5e:ec:ab:80:eb:fd: ca:58:1d:8a:47:7f:1c:96:1a:65:38:63:a6:6e:b6: f8:ab:ac:60:47:dd:6e:dc:8d:a6:3d:7a:43:33:5b: c2:8a:a8:47:84:e8:fb:e6:0e:e7:d4:3c:98:b0:25: 29:69:59:68:ad:d4:14:16:80:3f:92:90:31:8f:26: 73:34:3f:02:ce:33:77:ab:b0:16:7b:e4:91:7c:ee: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A1:48:55:89:98:EF:8B:08:60:A4:9F:00:74:09:8D:56:2E:05:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl X509v3 Authority Key Identifier: keyid:05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer sbgp-ipAddrBlock: critical IPv4: 23.128.76.0/24 IPv6: 2602:f7c6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:dd:b2:b5:aa:ca:a2:0d:11:56:21:f5:9a:ba:6f:9f:6a:70: fc:31:ac:0d:25:35:0a:fd:85:c8:da:e1:e3:1b:a4:ae:dd:d8: 31:51:2c:5d:91:3e:e0:91:fb:34:1d:2c:78:83:b7:fa:61:f7: 8d:3c:98:78:28:fc:d3:e6:70:0e:9a:af:02:68:7b:51:d1:a8: 08:43:ce:8b:b9:a3:7b:7a:dc:93:8f:9f:5c:91:1a:66:1d:6c: 3f:5d:06:a1:bd:16:b6:2d:d0:c7:b8:40:32:20:c8:d4:16:30: c6:b3:81:46:7c:f8:db:c4:e3:da:7a:b4:70:31:14:87:18:32: 9f:01:3e:43:7b:fb:18:e4:17:ba:e7:78:9a:2c:49:99:fa:f3: ca:a4:2f:b7:4d:d9:02:87:a0:e7:46:71:30:bd:c6:00:ce:85: 1e:a3:fb:24:14:a4:0e:4b:5c:a8:24:4f:35:e3:75:d0:be:33: 56:17:93:84:5b:ac:2c:5e:ee:2a:20:7c:63:71:2e:b5:de:8f: 22:c9:41:9e:5e:05:56:21:8e:59:a7:4e:69:56:82:8c:30:1d: f7:9f:a3:b6:66:8b:20:11:7d:e0:0f:32:f0:8e:2d:e3:18:a6: 8f:d9:3e:84:7b:7c:37:97:23:a3:f2:67:4e:b4:23:db:1d:c6: b6:0f:d6:38 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnjijzev3EWh/uohMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MDQyMDQtYWVmYS00ZmFjLTlkMzktMTU5OWZhNDAz ZTQ2MB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk ODFiNDEwMjMtODJiMC00ODUxLWJhZmUtMjUwNDQ1ODM3ZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyDonX0lKXxuoB+bsLAREcZlk5LJ+XaCaSB2 knEASKDuO4E7DLXMruP6vAWw4DB60SJQyZ10LaEho4XGG+OOehaLrnPDSF0quDdK Ae+TS7V+4l5ivv3xw7KqUG1CXO5jJMYt2DVa5sCec8SHuKKcplfvDHnEpG53hqDj R2IEjCxrlrCyhPeqE0NDzq5/KXIRIRN/m11wM50pavd8jrxus2iSC5j+W8jMm2b8 qCte7KuA6/3KWB2KR38clhplOGOmbrb4q6xgR91u3I2mPXpDM1vCiqhHhOj75g7n 1DyYsCUpaVlordQUFoA/kpAxjyZzND8CzjN3q7AWe+SRfO4kNQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOqhSFWJmO+LCGCknwB0CY1WLgXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80Mjgw NDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5ZmE0MDNlNDYvY2JlNzUwYjUtYTQ4ZC0z ZWQ3LTgxZjYtYjkzZWIxYTM2NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDI4MDQyMDQtYWVmYS00ZmFjLTlk MzktMTU5OWZhNDAzZTQ2LzQyODA0MjA0LWFlZmEtNGZhYy05ZDM5LTE1OTlmYTQw M2U0Ni5jcmwwHwYDVR0jBBgwFoAUBXzILUv4qGmvJ6oIhxcWElC11HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MjgwNDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5 ZmE0MDNlNDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BMMA4E AgACMAgDBgAmAvfGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ3bK1qsqiDRFWIfWaum+fanD8MawNJTUK /YXI2uHjG6Su3dgxUSxdkT7gkfs0HSx4g7f6YfeNPJh4KPzT5nAOmq8CaHtR0agI Q86LuaN7etyTj59ckRpmHWw/XQahvRa2LdDHuEAyIMjUFjDGs4FGfPjbxOPaerRw MRSHGDKfAT5De/sY5Be653iaLEmZ+vPKpC+3TdkCh6DnRnEwvcYAzoUeo/skFKQO S1yoJE8143XQvjNWF5OEW6wsXu4qIHxjcS613o8iyUGeXgVWIY5Zp05pVoKMMB33 n6O2ZosgEX3gDzLwji3jGKaP2T6Ee3w3lyOj8mdOtCPbHca2D9Y4 -----END CERTIFICATE-----Generated at Tue Jul 1 11:44:18 2025 by rpki-client