$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa File: d4df3a08-c899-316f-abc6-b58548efce04.roa (raw, json) Hash identifier: NFyHEt7E5yMvBHt6avVWdBjq+Cwp1WWtGy1PRihsrEg= Subject key identifier: A7:D3:F9:7B:EF:2C:0A:5E:D5:92:36:FC:F6:E2:79:55:37:01:E5:60 Certificate issuer: /CN=d7396eb8-1550-4d28-9285-c71c97fd087d Certificate serial: 010D0C9F432858491AA6B2A67F7B0406C9308780 Authority key identifier: FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 31959 IP address blocks: 23.130.252.0/24 maxlen: 24 2602:f76a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b2:a6:7f:7b:04:06:c9:30:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7396eb8-1550-4d28-9285-c71c97fd087d Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=b08686c0-e909-4969-ab71-2ff796d0efec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:3a:37:ba:d5:55:15:8f:3f:28:54:43:bf: 3d:d8:50:3d:ce:d1:d3:bc:02:03:f1:aa:04:54:76: 13:7c:6e:3e:70:fa:53:a0:eb:8c:fc:e8:b0:a1:7d: 75:40:ac:e0:ad:6f:14:05:d8:b6:7c:e9:28:bc:29: 11:06:c4:95:27:81:e4:5f:e7:50:12:75:c4:0e:e3: b7:79:ff:ae:99:3a:ce:9f:f5:8b:2f:18:79:40:63: f5:cc:71:bb:bc:a7:47:e4:00:e2:02:e1:7e:e3:49: fd:81:71:ea:4e:98:fe:9c:3e:87:d3:8d:b9:ea:c9: 4a:68:f5:65:57:3b:f3:42:23:09:fa:4e:70:76:30: 9b:34:52:e2:71:70:f3:2e:58:1f:bf:87:91:fd:de: b5:27:f4:f0:97:b9:d4:5f:c0:d7:49:7c:36:78:26: 8d:8a:22:22:3a:95:db:21:89:d9:9b:18:ab:0e:52: 4f:7d:6d:44:31:67:89:7f:95:49:cb:1f:cf:ff:bd: 10:69:7e:79:67:3b:5f:d0:41:77:34:a5:e9:29:a5: f7:40:cd:7d:25:c5:55:44:d4:95:ec:a3:ed:ee:59: 6d:7b:cc:85:ff:b2:7b:28:62:97:35:db:49:3b:3d: 95:99:23:b8:e3:01:7d:a5:9c:33:b6:1a:66:11:af: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D3:F9:7B:EF:2C:0A:5E:D5:92:36:FC:F6:E2:79:55:37:01:E5:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl X509v3 Authority Key Identifier: keyid:FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.252.0/24 IPv6: 2602:f76a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6c:1f:d8:03:03:7f:72:d6:ef:73:63:3b:78:b1:69:99:13: a8:df:16:d2:51:eb:3a:3d:5a:2a:4d:be:57:ad:b3:6f:43:4b: 52:7d:77:3a:fd:73:5e:0c:75:42:0e:39:dc:04:da:ec:09:3f: 76:14:ea:33:62:e9:60:49:1b:cb:65:f0:ef:dd:c1:5f:bf:25: 89:11:57:05:48:66:57:e5:ed:08:09:fe:61:0e:2c:32:1d:2a: 30:79:c2:3e:d1:38:af:1e:86:2f:4d:7b:30:e3:15:b6:35:b6: a4:77:a1:a5:06:82:dc:05:23:84:70:ae:21:0c:70:32:bd:79: e6:d5:d6:68:3f:c8:8a:05:f2:5d:b0:42:1d:32:bf:c1:c7:a8: 3f:90:23:eb:61:2f:91:3e:29:f7:7c:db:14:17:27:71:80:ee: dc:23:ed:4d:26:7a:ae:d3:bc:10:f9:d6:b1:b9:0e:01:2a:9d: 44:61:07:f3:21:9e:91:f2:3c:7f:82:f5:c1:51:d2:ee:29:87: d7:b8:ae:6d:c1:1d:a4:6c:14:d6:81:19:ee:b7:c5:99:3a:1c: 71:0c:98:c3:0b:95:93:96:28:19:fa:54:46:54:16:90:12:44: 27:83:e6:89:38:48:23:0f:39:d6:e0:58:9b:ec:5a:72:fc:2f: f3:05:7d:c9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkaprKmf3sEBskwh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDczOTZlYjgtMTU1MC00ZDI4LTkyODUtYzcxYzk3ZmQw ODdkMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YjA4Njg2YzAtZTkwOS00OTY5LWFiNzEtMmZmNzk2ZDBlZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsc6N7rVVRWPPyhUQ7892FA9ztHTvAID8aoE VHYTfG4+cPpToOuM/OiwoX11QKzgrW8UBdi2fOkovCkRBsSVJ4HkX+dQEnXEDuO3 ef+umTrOn/WLLxh5QGP1zHG7vKdH5ADiAuF+40n9gXHqTpj+nD6H04256slKaPVl VzvzQiMJ+k5wdjCbNFLicXDzLlgfv4eR/d61J/Twl7nUX8DXSXw2eCaNiiIiOpXb IYnZmxirDlJPfW1EMWeJf5VJyx/P/70QaX55Zztf0EF3NKXpKaX3QM19JcVVRNSV 7KPt7llte8yF/7J7KGKXNdtJOz2VmSO44wF9pZwzthpmEa8WMwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKfT+XvvLApe1ZI2/PbieVU3AeVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5 NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFjOTdmZDA4N2QvZDRkZjNhMDgtYzg5OS0z MTZmLWFiYzYtYjU4NTQ4ZWZjZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDczOTZlYjgtMTU1MC00ZDI4LTky ODUtYzcxYzk3ZmQwODdkL2Q3Mzk2ZWI4LTE1NTAtNGQyOC05Mjg1LWM3MWM5N2Zk MDg3ZC5jcmwwHwYDVR0jBBgwFoAU/fXEy1utd3VckcIWxmi9xeQPFkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFj OTdmZDA4N2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4L8MA4E AgACMAgDBgQmAvdqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGbB/YAwN/ctbvc2M7eLFpmROo3xbSUes6 PVoqTb5XrbNvQ0tSfXc6/XNeDHVCDjncBNrsCT92FOozYulgSRvLZfDv3cFfvyWJ EVcFSGZX5e0ICf5hDiwyHSowecI+0TivHoYvTXsw4xW2Nbakd6GlBoLcBSOEcK4h DHAyvXnm1dZoP8iKBfJdsEIdMr/Bx6g/kCPrYS+RPin3fNsUFydxgO7cI+1NJnqu 07wQ+daxuQ4BKp1EYQfzIZ6R8jx/gvXBUdLuKYfXuK5twR2kbBTWgRnut8WZOhxx DJjDC5WTligZ+lRGVBaQEkQng+aJOEgjDznW4Fib7Fpy/C/zBX3J -----END CERTIFICATE-----Generated at Sat May 10 18:00:00 2025 by rpki-client