$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa File: bb1446ec-203d-312c-8541-36f60d5e2778.roa (raw, json) Hash identifier: kQ7DaVjj7XwwGprw/3X/3vdP6MqVa1kV2/mbDGbKkGs= Subject key identifier: B8:4E:DD:AD:3A:22:45:E4:64:FD:19:27:58:1B:56:93:AD:18:4B:E7 Certificate issuer: /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Certificate serial: 010D0C9F43285849AE7F3829E77FA2D2EC16FA80 Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 21665 IP address blocks: 23.133.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:38:29:e7:7f:a2:d2:ec:16:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=99d4b030-f950-4987-95db-1726994ef244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:fb:e6:13:ba:89:ad:fe:9f:48:e4:ab:14: bf:0f:00:0b:0b:c1:4c:0e:f5:09:25:9f:7a:9c:a1: e3:a4:fd:14:eb:0d:eb:0f:6d:40:98:8b:b9:b8:9e: dc:f4:8e:62:aa:6a:5e:b6:2f:13:6b:35:13:c1:20: 5d:53:ac:ca:ef:3a:40:e2:3f:a8:c4:18:8c:3e:7a: 3b:09:dd:30:26:f1:21:d5:26:28:b2:2e:9f:d1:c4: fb:a3:d1:fa:f4:17:43:4b:f7:80:34:e7:90:3e:23: e7:4e:ad:2b:97:9f:51:7e:88:9c:a7:e8:f7:e2:13: 8a:63:b1:f2:7a:4d:0b:36:5b:d9:dc:91:95:6b:12: f7:1c:de:1a:b4:8e:23:56:8e:f2:73:cd:e2:55:04: 83:f7:2a:9c:a3:d6:d1:49:61:c9:3a:bd:24:04:34: 93:39:3a:15:51:eb:dd:9e:70:d6:1c:34:80:df:d3: 8e:04:37:60:8c:2b:73:2a:d5:8e:3f:bd:b9:82:d6: d0:ee:b9:41:f2:62:27:84:83:08:10:6f:2c:72:e5: 43:ba:1a:a2:a9:fa:5c:a1:29:3a:d9:27:c9:1f:1f: fc:eb:32:bf:bb:13:e2:64:54:2b:af:f6:67:46:e2: 42:09:4b:90:6b:84:62:a6:da:d8:1a:ce:83:54:58: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4E:DD:AD:3A:22:45:E4:64:FD:19:27:58:1B:56:93:AD:18:4B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl X509v3 Authority Key Identifier: keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer sbgp-ipAddrBlock: critical IPv4: 23.133.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:89:04:07:7b:2d:0f:e5:67:25:3e:62:76:80:b3:dd:10:ff: a7:f6:50:ae:94:33:51:68:7b:a5:e4:bc:02:fa:1f:c8:78:da: f5:06:e6:62:f3:ac:40:f8:e1:8e:27:49:d0:32:85:31:46:ce: ea:da:c5:1e:43:07:26:1c:31:75:74:f8:8c:5a:b9:5d:84:f1: 1a:85:b6:8f:31:d1:bd:d9:59:79:91:99:dd:de:dc:34:59:96: de:bc:5a:26:0f:8e:47:df:bd:cf:9e:cb:69:ba:ab:31:0a:e1: b0:7f:60:f2:40:d9:4e:65:4c:6b:e6:53:9b:09:3c:6e:c7:84: 72:2c:65:5b:8f:82:30:7a:fc:cc:f7:41:01:1e:6a:4c:69:95: a5:27:4b:4c:1e:7c:78:65:d8:85:e4:80:2e:da:73:54:57:0c: dc:d2:30:fc:de:b0:0c:9e:5a:39:54:ad:d7:ab:9d:40:a3:d2: f1:3c:b6:b0:b4:39:d1:46:d6:ac:c5:61:71:d9:37:26:77:72: 64:a0:ac:b0:b2:ab:e8:0e:44:eb:3b:f6:77:9d:53:47:44:b6: 6e:d2:ac:1f:0d:5d:2e:6a:6e:2a:4b:d8:9a:e0:41:c2:1b:ac: 37:84:22:ee:9e:e8:57:08:63:ad:cf:86:76:47:56:82:6b:ed: b2:ed:d5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmufzgp53+i0uwW+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYzI4YzAtYmJjZS00ODcxLWFlZjMtYzExMmFiYzJi ZTVkMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk OTlkNGIwMzAtZjk1MC00OTg3LTk1ZGItMTcyNjk5NGVmMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxP75hO6ia3+n0jkqxS/DwALC8FMDvUJJZ96 nKHjpP0U6w3rD21AmIu5uJ7c9I5iqmpeti8TazUTwSBdU6zK7zpA4j+oxBiMPno7 Cd0wJvEh1SYosi6f0cT7o9H69BdDS/eANOeQPiPnTq0rl59Rfoicp+j34hOKY7Hy ek0LNlvZ3JGVaxL3HN4atI4jVo7yc83iVQSD9yqco9bRSWHJOr0kBDSTOToVUevd nnDWHDSA39OOBDdgjCtzKtWOP725gtbQ7rlB8mInhIMIEG8scuVDuhqiqfpcoSk6 2SfJHx/86zK/uxPiZFQrr/ZnRuJCCUuQa4RiptrYGs6DVFgebwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhO3a06IkXkZP0ZJ1gbVpOtGEvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjBj MjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEyYWJjMmJlNWQvYmIxNDQ2ZWMtMjAzZC0z MTJjLTg1NDEtMzZmNjBkNWUyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYwYzI4YzAtYmJjZS00ODcxLWFl ZjMtYzExMmFiYzJiZTVkLzhmMGMyOGMwLWJiY2UtNDg3MS1hZWYzLWMxMTJhYmMy YmU1ZC5jcmwwHwYDVR0jBBgwFoAU+l+mYJ25YaEjom+6ktFoHTmPbhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjBjMjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEy YWJjMmJlNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICJBAd7LQ/lZyU+YnaAs90Q/6f2UK6UM1Foe6XkvAL6H8h42vUG5mLz rED44Y4nSdAyhTFGzuraxR5DByYcMXV0+IxauV2E8RqFto8x0b3ZWXmRmd3e3DRZ lt68WiYPjkffvc+ey2m6qzEK4bB/YPJA2U5lTGvmU5sJPG7HhHIsZVuPgjB6/Mz3 QQEeakxplaUnS0wefHhl2IXkgC7ac1RXDNzSMPzesAyeWjlUrdernUCj0vE8trC0 OdFG1qzFYXHZNyZ3cmSgrLCyq+gOROs79nedU0dEtm7SrB8NXS5qbipL2JrgQcIb rDeEIu6e6FcIY63PhnZHVoJr7bLt1cA= -----END CERTIFICATE-----Generated at Fri May 9 07:16:34 2025 by rpki-client