$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa File: d4df3a08-c899-316f-abc6-b58548efce04.roa (raw, json) Hash identifier: NDiSpol24XXCGDZmCT83P260xJDLE839Et63ZdrKwi0= Subject key identifier: 2E:93:CF:4F:AD:51:60:0F:6B:78:0C:17:FB:80:BB:F8:4B:C6:FA:B1 Certificate issuer: /CN=d7396eb8-1550-4d28-9285-c71c97fd087d Certificate serial: 010D0C9F43285849F9DFE0CE0860B3B27B634700 Authority key identifier: FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 31959 IP address blocks: 23.130.252.0/24 maxlen: 24 2602:f76a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:e0:ce:08:60:b3:b2:7b:63:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7396eb8-1550-4d28-9285-c71c97fd087d Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=d700ced4-3d4d-4d52-8103-9f1292ff03c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e5:d4:1a:7b:cf:9a:bf:b8:42:09:ad:f1:16: 0e:f4:7d:07:d8:ce:8b:ff:a0:f6:9a:95:58:54:21: d2:4e:3e:8f:0b:2d:fe:10:dd:31:f3:36:b1:c2:da: 50:d7:c9:1f:72:fc:ee:43:99:36:1e:18:36:24:ad: 1c:5a:80:db:4b:f5:5a:6e:f6:d1:83:a1:35:6a:a1: 1a:0e:13:1a:0b:4d:cc:29:9e:f6:e3:a7:52:f8:e1: 24:19:e8:48:84:e3:76:0a:e3:87:57:c4:c2:8e:0e: 33:38:9f:c9:18:e3:55:26:f8:33:13:8c:a2:e9:a9: 9d:50:93:a6:5a:37:cd:12:dc:25:b2:4b:c3:d2:0b: fb:3b:e1:33:e4:c1:c5:f5:a0:72:df:d2:f3:80:4f: 9b:17:ac:4c:65:e9:5f:b2:83:f2:68:cf:04:a1:56: 40:ef:6f:b0:c8:04:a9:ae:bf:1f:51:46:88:ff:11: 02:0a:7d:de:9a:29:39:94:11:3d:c7:cc:52:49:b8: 31:65:32:37:cf:7b:f9:29:cd:b6:83:b6:52:77:8b: 41:42:50:5e:f1:4d:c3:32:75:19:81:45:1a:38:75: 00:a2:02:16:c6:b6:56:3d:d8:95:93:de:ad:28:13: 47:6e:0f:20:71:1d:c5:9f:a4:57:2b:47:18:50:5d: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:CF:4F:AD:51:60:0F:6B:78:0C:17:FB:80:BB:F8:4B:C6:FA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl X509v3 Authority Key Identifier: keyid:FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.252.0/24 IPv6: 2602:f76a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:88:f1:d2:1f:e1:08:af:a7:4f:ee:5f:2c:c6:5b:bc:b0:81: e8:5a:da:a4:42:57:e2:aa:46:ee:55:39:91:bc:fb:dc:2e:0b: f6:e8:ce:8b:c8:d0:4f:31:c1:af:42:ec:9a:87:37:8f:6f:a3: 98:15:cf:fe:45:02:6e:d3:b7:d4:6a:c4:66:ce:5a:00:c4:3e: 03:b8:fa:04:8d:83:66:81:1a:db:87:a7:43:f5:2a:65:f4:e0: 74:97:8b:4f:03:41:b2:7c:4f:96:76:e2:b7:ea:3b:a6:4f:82: 9a:23:58:1e:f6:e6:2a:73:9b:16:cb:29:45:24:b7:c7:42:5c: fb:0e:14:a5:2d:b1:12:f2:e7:88:f9:fe:ed:22:0d:77:71:75: b1:79:a6:e3:ef:e2:44:97:35:12:57:dc:8f:93:99:36:b8:c5: 47:62:f2:4a:5f:d0:b0:9e:2e:58:11:20:55:e7:43:4e:0d:fa: 33:4c:6a:74:1a:75:04:c0:fb:6f:02:f2:b7:5f:c3:db:39:eb: 41:e3:d2:3f:b2:f4:c7:7b:3a:9e:42:e2:ea:37:39:ee:d6:0e: ec:96:73:04:50:0c:c6:cf:ff:9b:b3:d0:7a:d8:a0:14:22:4a: 8a:f4:6e:90:a5:0e:c2:36:56:c9:78:84:57:b7:ac:ff:af:e6: ff:d0:27:53 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEn53+DOCGCzsntjRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDczOTZlYjgtMTU1MC00ZDI4LTkyODUtYzcxYzk3ZmQw ODdkMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk ZDcwMGNlZDQtM2Q0ZC00ZDUyLTgxMDMtOWYxMjkyZmYwM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+XUGnvPmr+4Qgmt8RYO9H0H2M6L/6D2mpVY VCHSTj6PCy3+EN0x8zaxwtpQ18kfcvzuQ5k2Hhg2JK0cWoDbS/VabvbRg6E1aqEa DhMaC03MKZ7246dS+OEkGehIhON2CuOHV8TCjg4zOJ/JGONVJvgzE4yi6amdUJOm WjfNEtwlskvD0gv7O+Ez5MHF9aBy39LzgE+bF6xMZelfsoPyaM8EoVZA72+wyASp rr8fUUaI/xECCn3emik5lBE9x8xSSbgxZTI3z3v5Kc22g7ZSd4tBQlBe8U3DMnUZ gUUaOHUAogIWxrZWPdiVk96tKBNHbg8gcR3Fn6RXK0cYUF0d/QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC6Tz0+tUWAPa3gMF/uAu/hLxvqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5 NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFjOTdmZDA4N2QvZDRkZjNhMDgtYzg5OS0z MTZmLWFiYzYtYjU4NTQ4ZWZjZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDczOTZlYjgtMTU1MC00ZDI4LTky ODUtYzcxYzk3ZmQwODdkL2Q3Mzk2ZWI4LTE1NTAtNGQyOC05Mjg1LWM3MWM5N2Zk MDg3ZC5jcmwwHwYDVR0jBBgwFoAU/fXEy1utd3VckcIWxmi9xeQPFkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFj OTdmZDA4N2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4L8MA4E AgACMAgDBgQmAvdqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUiPHSH+EIr6dP7l8sxlu8sIHoWtqkQlfi qkbuVTmRvPvcLgv26M6LyNBPMcGvQuyahzePb6OYFc/+RQJu07fUasRmzloAxD4D uPoEjYNmgRrbh6dD9Spl9OB0l4tPA0GyfE+WduK36jumT4KaI1ge9uYqc5sWyylF JLfHQlz7DhSlLbES8ueI+f7tIg13cXWxeabj7+JElzUSV9yPk5k2uMVHYvJKX9Cw ni5YESBV50NODfozTGp0GnUEwPtvAvK3X8PbOetB49I/svTHezqeQuLqNznu1g7s lnMEUAzGz/+bs9B62KAUIkqK9G6QpQ7CNlbJeIRXt6z/r+b/0CdT -----END CERTIFICATE-----Generated at Wed Jul 2 04:20:02 2025 by rpki-client