$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa File: 6f898a92-27c5-34f5-ab5d-94a7194d0508.roa (raw, json) Hash identifier: pNeksgGWSKQATrOC9zIsCjFJJiPDLCyKrODBjQip9T0= Subject key identifier: 0E:97:73:A0:6D:52:A3:02:22:8F:0E:8F:A8:BB:96:30:BF:02:1A:7B Certificate issuer: /CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94 Certificate serial: 010D0C9F43285848F47073C5366327AEE0270680 Authority key identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa Signing time: Fri 21 Feb 2025 09:30:42 +0000 ROA not before: Fri 21 Feb 2025 09:30:42 +0000 ROA not after: Thu 22 May 2025 08:30:42 +0000 asID: 10753 IP address blocks: 23.132.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:70:73:c5:36:63:27:ae:e0:27:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94 Validity Not Before: Feb 21 09:30:42 2025 GMT Not After : May 22 08:30:42 2025 GMT Subject: CN=c2ce631e-1967-4679-9baa-293b7dd7d274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:85:c9:bf:e9:41:ba:51:29:5c:e5:cc:67: 20:c5:e7:57:52:c0:d4:a7:5f:14:e2:81:22:43:f4: 52:10:b9:aa:e9:85:57:e7:4e:bf:d6:5b:db:55:17: 51:48:36:ab:df:ff:7a:31:df:a2:c2:f9:36:23:9f: 39:a3:61:4c:d1:e5:0e:1e:bd:8e:1d:69:f9:7c:56: 8a:a6:fa:80:82:3c:40:96:03:40:68:06:9f:f2:18: c1:3f:eb:76:cf:f1:49:47:df:c0:78:0f:ed:c0:e4: c9:de:76:6f:03:36:11:8a:e8:0d:ef:79:6f:b2:65: 9d:3a:ce:5d:17:fb:54:76:b8:04:a3:dc:40:f6:62: 60:b0:ec:cc:df:f3:3d:fb:d0:d2:ca:cd:ac:ae:85: 77:85:43:2c:52:2b:f0:01:6a:b8:44:0f:09:57:ca: fe:3d:2b:3d:e5:1b:1f:99:b5:f3:81:8a:d5:d3:7a: e4:5a:0e:58:3b:ca:ff:8d:35:28:b6:a8:58:10:81: 72:b3:5c:85:d9:87:34:ac:62:58:ef:98:0a:e8:3f: 24:88:97:15:1a:58:77:fb:7f:3e:5e:d0:d9:19:e1: ab:4c:e8:16:30:fb:91:59:4f:9e:d0:f8:8c:60:ca: 65:48:e9:d5:f1:bf:a2:a0:46:88:11:38:7a:3d:c6: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:73:A0:6D:52:A3:02:22:8F:0E:8F:A8:BB:96:30:BF:02:1A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl X509v3 Authority Key Identifier: keyid:06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer sbgp-ipAddrBlock: critical IPv4: 23.132.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a7:77:d8:12:21:d0:bb:9d:87:1d:2c:b0:73:05:28:9b:b4: 18:1f:7b:e0:c9:9e:dd:5d:42:0b:e5:98:39:3c:08:d0:3c:67: b7:2a:09:9d:cb:08:ac:34:30:42:31:f4:9c:fd:5b:34:b6:bc: 24:db:f9:28:ea:c9:d2:18:8c:89:d2:05:8a:e4:8d:a6:21:f2: 45:b6:cf:0b:ae:ff:5c:60:40:23:97:2e:ca:c9:46:0f:8c:84: 9c:c4:e9:83:32:98:fa:65:75:3d:75:fb:18:8c:49:e4:53:15: 56:54:24:92:28:5b:bc:4c:5b:31:b7:81:65:d5:68:37:51:ef: fb:7e:4b:03:c2:be:57:fa:9c:5a:4f:67:1d:9d:59:d6:de:88: d1:60:de:ac:6a:e7:f9:9c:6f:45:6c:6b:80:4c:94:be:5e:fc: 65:b9:0a:86:e5:c8:90:26:01:f0:28:3e:e9:2d:0f:39:b6:8d: 56:2b:2b:1a:02:7f:d9:ae:ca:87:d4:29:ba:e6:dc:b6:51:96: 3a:3c:a1:ea:e4:46:60:5a:c9:c5:62:02:01:91:a8:9f:f4:bb: 4e:05:74:35:ce:6d:27:a8:b3:6a:02:3c:c1:5a:23:30:54:ae: c6:1e:f1:0d:73:67:3f:d9:bf:55:73:4a:e8:08:bf:2c:d1:aa: be:de:82:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0cHPFNmMnruAnBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQxMTUxZjEtZDA2YS00ZWQ5LWEwNmUtN2Q5ZTBlODk3 Yjk0MB4XDTI1MDIyMTA5MzA0MloXDTI1MDUyMjA4MzA0MlowLzEtMCsGA1UEAxMk YzJjZTYzMWUtMTk2Ny00Njc5LTliYWEtMjkzYjdkZDdkMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkKFyb/pQbpRKVzlzGcgxedXUsDUp18U4oEi Q/RSELmq6YVX506/1lvbVRdRSDar3/96Md+iwvk2I585o2FM0eUOHr2OHWn5fFaK pvqAgjxAlgNAaAaf8hjBP+t2z/FJR9/AeA/twOTJ3nZvAzYRiugN73lvsmWdOs5d F/tUdrgEo9xA9mJgsOzM3/M9+9DSys2sroV3hUMsUivwAWq4RA8JV8r+PSs95Rsf mbXzgYrV03rkWg5YO8r/jTUotqhYEIFys1yF2Yc0rGJY75gK6D8kiJcVGlh3+38+ XtDZGeGrTOgWMPuRWU+e0PiMYMplSOnV8b+ioEaIETh6PcbDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6Xc6BtUqMCIo8Oj6i7ljC/Ahp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82NDEx NTFmMS1kMDZhLTRlZDktYTA2ZS03ZDllMGU4OTdiOTQvNmY4OThhOTItMjdjNS0z NGY1LWFiNWQtOTRhNzE5NGQwNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjQxMTUxZjEtZDA2YS00ZWQ5LWEw NmUtN2Q5ZTBlODk3Yjk0LzY0MTE1MWYxLWQwNmEtNGVkOS1hMDZlLTdkOWUwZTg5 N2I5NC5jcmwwHwYDVR0jBBgwFoAUBuNIuirztXxJ5f0k0ROImRoFWrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82NDExNTFmMS1kMDZhLTRlZDktYTA2ZS03ZDll MGU4OTdiOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4TEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGnd9gSIdC7nYcdLLBzBSibtBgfe+DJnt1dQgvlmDk8CNA8Z7cqCZ3L CKw0MEIx9Jz9WzS2vCTb+SjqydIYjInSBYrkjaYh8kW2zwuu/1xgQCOXLsrJRg+M hJzE6YMymPpldT11+xiMSeRTFVZUJJIoW7xMWzG3gWXVaDdR7/t+SwPCvlf6nFpP Zx2dWdbeiNFg3qxq5/mcb0Vsa4BMlL5e/GW5CoblyJAmAfAoPuktDzm2jVYrKxoC f9muyofUKbrm3LZRljo8oerkRmBaycViAgGRqJ/0u04FdDXObSeos2oCPMFaIzBU rsYe8Q1zZz/Zv1VzSugIvyzRqr7egvs= -----END CERTIFICATE-----Generated at Tue May 6 03:19:37 2025 by rpki-client