$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa File: 1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa (raw, json) Hash identifier: qkfZXXLs87L2enOuQ7aaEpqSGbdQIDjTEWalvGDnPbM= Subject key identifier: 49:80:0C:09:A6:A4:D2:92:B6:04:E5:87:EE:F8:B9:0D:30:D0:F6:9B Certificate issuer: /CN=b59002d2-8fd4-446f-987c-e63485cf1a5a Certificate serial: 010D0C9F43285849955F112CDC7A2D92D5F56180 Authority key identifier: FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 401630 IP address blocks: 23.133.100.0/24 maxlen: 24 2602:f724::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:11:2c:dc:7a:2d:92:d5:f5:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59002d2-8fd4-446f-987c-e63485cf1a5a Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=d86ad2d3-d0b8-4a16-86fa-23a2feb75e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:15:b2:64:00:bc:f6:c2:78:b0:f8:25:70: 92:9d:cb:23:5d:d4:fb:a9:ca:ef:9e:04:48:02:f1: 57:01:46:f2:8c:e0:25:70:de:ff:7e:61:8b:94:03: 95:8f:c0:df:8e:8f:c2:0f:72:1a:2d:45:37:e6:89: aa:5d:fb:5a:ca:53:52:86:a4:42:aa:95:4d:bd:69: 81:e5:4c:e4:c7:8a:f1:fa:b3:e8:e4:2a:14:a6:34: 55:88:3e:15:95:ef:a3:3f:8a:45:9a:4e:ef:32:2e: 17:dd:95:1b:82:b7:09:85:af:c6:45:0b:9d:3a:b0: 7f:df:73:ad:ac:d9:d5:bf:a0:91:8a:4b:4a:30:6e: b8:ec:77:78:67:1d:16:e9:11:41:2f:5a:44:db:b0: 6f:3e:1b:e8:34:24:91:2e:ee:5e:07:a1:09:a9:f8: c7:95:49:f0:4d:1c:b4:2d:d5:23:1e:bb:34:28:2a: c4:40:39:f3:61:66:2d:47:f2:af:2f:43:91:89:e4: 61:14:94:52:29:c4:62:da:b7:a3:46:0f:cf:e5:4d: 2b:78:73:09:8d:85:97:b8:80:89:3d:10:21:46:06: 7a:1e:60:8b:ba:fa:81:44:18:de:6f:32:56:31:3d: aa:08:f6:ee:27:dd:25:f3:87:a2:36:59:d0:57:78: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:80:0C:09:A6:A4:D2:92:B6:04:E5:87:EE:F8:B9:0D:30:D0:F6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl X509v3 Authority Key Identifier: keyid:FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer sbgp-ipAddrBlock: critical IPv4: 23.133.100.0/24 IPv6: 2602:f724::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:de:46:8c:5e:20:0c:b3:ae:42:94:d4:93:d8:82:f9:1a:6e: a4:c0:50:68:49:e2:d3:37:3b:cc:cd:6b:f9:9a:b4:b8:a7:df: 05:68:da:d9:84:90:39:50:1d:4d:c5:fe:2e:ca:86:1d:50:3a: 41:a6:0b:31:b7:38:4d:37:67:0b:95:ec:b5:3b:cd:73:dd:ef: 10:e6:cf:f4:5b:e2:92:fb:f3:2b:e0:ce:2f:5f:13:37:a8:32: 8f:5c:da:5f:f0:ba:c5:77:a5:18:d7:ac:7d:4e:82:44:f9:ac: 07:98:59:4e:e6:46:19:21:14:bf:e2:22:6d:0f:41:2e:fa:cb: 29:15:32:2b:18:de:d1:1d:2a:aa:de:8f:be:d0:09:49:f5:ae: f5:ec:88:58:e8:9e:d7:63:a2:aa:22:8c:b0:6a:22:be:4e:7a: e3:14:ff:16:fe:af:06:a1:c8:12:26:0b:a3:be:53:87:b4:f8: f7:8f:40:39:a6:41:4b:8c:be:99:6d:3b:96:f9:af:b0:ad:f1: 49:4e:2f:61:2f:03:0d:ad:79:2e:88:c1:51:05:10:3f:67:cc: b8:44:01:28:e8:90:c3:4a:f5:84:c6:e0:9c:c9:f1:71:00:e2: 3a:d8:4d:5e:4e:b4:0b:1b:19:db:96:fc:6f:66:45:4a:f5:f0: 78:e5:59:92 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmVXxEs3HotktX1YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU5MDAyZDItOGZkNC00NDZmLTk4N2MtZTYzNDg1Y2Yx YTVhMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDg2YWQyZDMtZDBiOC00YTE2LTg2ZmEtMjNhMmZlYjc1ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC4VsmQAvPbCeLD4JXCSncsjXdT7qcrvngRI AvFXAUbyjOAlcN7/fmGLlAOVj8Dfjo/CD3IaLUU35omqXftaylNShqRCqpVNvWmB 5Uzkx4rx+rPo5CoUpjRViD4Vle+jP4pFmk7vMi4X3ZUbgrcJha/GRQudOrB/33Ot rNnVv6CRiktKMG647Hd4Zx0W6RFBL1pE27BvPhvoNCSRLu5eB6EJqfjHlUnwTRy0 LdUjHrs0KCrEQDnzYWYtR/KvL0ORieRhFJRSKcRi2rejRg/P5U0reHMJjYWXuICJ PRAhRgZ6HmCLuvqBRBjebzJWMT2qCPbuJ90l84eiNlnQV3juCQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEmADAmmpNKStgTlh+74uQ0w0PabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNTkw MDJkMi04ZmQ0LTQ0NmYtOTg3Yy1lNjM0ODVjZjFhNWEvMWMzMDA5ZDYtYjNkOC0z ZWM2LWE1ZjUtYjlhY2Q3YjMyZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjU5MDAyZDItOGZkNC00NDZmLTk4 N2MtZTYzNDg1Y2YxYTVhL2I1OTAwMmQyLThmZDQtNDQ2Zi05ODdjLWU2MzQ4NWNm MWE1YS5jcmwwHwYDVR0jBBgwFoAU/+LGVpY+PHvaE/LxAWasVBvyCrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNTkwMDJkMi04ZmQ0LTQ0NmYtOTg3Yy1lNjM0 ODVjZjFhNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VkMA4E AgACMAgDBgQmAvckADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBn3kaMXiAMs65ClNST2IL5Gm6kwFBoSeLT NzvMzWv5mrS4p98FaNrZhJA5UB1Nxf4uyoYdUDpBpgsxtzhNN2cLley1O81z3e8Q 5s/0W+KS+/Mr4M4vXxM3qDKPXNpf8LrFd6UY16x9ToJE+awHmFlO5kYZIRS/4iJt D0Eu+sspFTIrGN7RHSqq3o++0AlJ9a717IhY6J7XY6KqIoywaiK+TnrjFP8W/q8G ocgSJgujvlOHtPj3j0A5pkFLjL6ZbTuW+a+wrfFJTi9hLwMNrXkuiMFRBRA/Z8y4 RAEo6JDDSvWExuCcyfFxAOI62E1eTrQLGxnblvxvZkVK9fB45VmS -----END CERTIFICATE-----Generated at Tue May 6 05:14:43 2025 by rpki-client