$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa File: 1af27fcc-c087-3992-bbed-aa65a2857848.roa (raw, json) Hash identifier: jZqQit1+JXaWIDDMxWK1pj4qeABWUr9VaIMvC4yPa5o= Subject key identifier: 8D:43:DE:28:34:79:C9:D6:B1:6F:DB:67:41:CC:DE:13:3F:0C:8B:7F Certificate issuer: /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Certificate serial: 010D0C9F43285849EBEA576068C82A9C972ABD80 Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 23297 IP address blocks: 23.130.44.0/24 maxlen: 24 2602:f780::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:57:60:68:c8:2a:9c:97:2a:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=f0885272-52ef-4214-adbd-cf87980be913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:93:14:40:02:9d:74:84:c9:c8:69:2a:ec: 39:07:09:64:27:aa:eb:ff:67:6e:40:86:56:27:16: e1:40:14:e1:be:ca:1a:59:21:d1:6c:a0:27:77:42: c9:d7:7d:fc:65:23:4c:0d:74:aa:09:b3:be:b5:a7: 3d:4c:bd:d5:f8:b4:83:fb:a8:95:64:5d:bc:2a:f8: a4:15:ac:8f:16:a3:3c:4c:55:a8:2b:f6:eb:3f:80: 71:08:ba:fe:88:32:28:49:20:e6:69:db:cb:ed:8f: ce:46:4e:1d:2c:20:02:96:4a:fe:ff:ba:43:e8:b2: 7b:5e:9b:f3:c7:81:b4:63:4c:e5:0e:d4:37:11:eb: 8c:06:5a:b9:a7:76:3e:2d:34:be:bf:46:32:60:7f: 82:fd:f6:dc:9c:bd:ce:1d:ba:29:10:60:90:52:3c: b7:7d:d7:94:08:87:63:9b:5d:68:68:4d:aa:6a:2b: 5d:86:77:9a:f6:2c:97:d3:ba:a2:c9:c8:ee:db:2b: fe:2e:0b:c1:98:94:75:59:8b:97:6e:97:4e:61:6a: 48:48:03:f8:46:e7:48:1b:ec:cf:76:7c:95:a6:4c: 03:df:f4:14:f3:e3:ad:4a:79:eb:a0:5f:3b:35:7d: ab:91:dc:dc:c9:5a:b6:9e:74:72:b2:68:03:bf:87: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:43:DE:28:34:79:C9:D6:B1:6F:DB:67:41:CC:DE:13:3F:0C:8B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl X509v3 Authority Key Identifier: keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer sbgp-ipAddrBlock: critical IPv4: 23.130.44.0/24 IPv6: 2602:f780::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a5:a8:55:57:46:5d:0c:94:02:c6:84:6f:7f:a9:a2:dc:34: bd:43:70:34:d2:79:d1:ca:2b:53:e7:cf:cb:54:a2:93:a8:d5: f1:db:d3:57:da:49:10:c2:13:7d:eb:88:ef:76:ec:ff:8b:c0: 76:2b:e7:57:ab:ea:b7:ad:92:c6:81:d1:0f:b0:74:b1:e3:61: 78:e0:d6:75:92:b0:0e:d3:be:f8:99:3c:a2:38:1d:4b:99:6d: 1e:1a:12:31:a9:1e:88:59:4b:d1:9f:8d:63:ba:e4:24:51:29: cf:9c:c6:10:2a:9b:84:5e:56:cd:7e:69:2f:bb:c0:28:0f:35: 2c:90:68:3b:cb:a4:1c:5c:c4:a9:46:fa:cb:36:13:a8:74:63: 00:f2:0c:8b:cd:49:f9:65:c5:00:ec:8f:4f:38:a4:4d:06:e5: 61:37:4b:71:02:dd:e7:69:d1:38:b2:73:06:4a:e6:bf:3a:53: dc:83:fc:a2:86:a0:cd:5d:c9:59:2c:30:7b:4a:c8:74:93:c2: f8:2b:29:90:ea:f4:c9:1f:a1:8e:5a:da:19:76:dc:7f:56:7e: 2e:51:2e:62:53:78:94:3c:0a:ec:a8:5a:c2:e1:f7:c5:73:86: 8a:90:1e:81:bc:78:bd:46:e0:7c:aa:a0:76:8a:b8:33:50:ec: ff:e4:c2:08 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnr6ldgaMgqnJcqvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTVi MjUxMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZjA4ODUyNzItNTJlZi00MjE0LWFkYmQtY2Y4Nzk4MGJlOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKWTFEACnXSEychpKuw5BwlkJ6rr/2duQIZW JxbhQBThvsoaWSHRbKAnd0LJ1338ZSNMDXSqCbO+tac9TL3V+LSD+6iVZF28Kvik FayPFqM8TFWoK/brP4BxCLr+iDIoSSDmadvL7Y/ORk4dLCAClkr+/7pD6LJ7Xpvz x4G0Y0zlDtQ3EeuMBlq5p3Y+LTS+v0YyYH+C/fbcnL3OHbopEGCQUjy3fdeUCIdj m11oaE2qaitdhnea9iyX07qiycju2yv+LgvBmJR1WYuXbpdOYWpISAP4RudIG+zP dnyVpkwD3/QU8+OtSnnroF87NX2rkdzcyVq2nnRysmgDv4dpWQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI1D3ig0ecnWsW/bZ0HM3hM/DIt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5 NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvMWFmMjdmY2MtYzA4Ny0z OTkyLWJiZWQtYWE2NWEyODU3ODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1OTQ3ZTQtNjFlNi00ZGRmLThj MmUtMGI4NDgyMTViMjUxLzJiNTk0N2U0LTYxZTYtNGRkZi04YzJlLTBiODQ4MjE1 YjI1MS5jcmwwHwYDVR0jBBgwFoAUxuUzm27bDltZqbZkAm6OGJo8kNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0 ODIxNWIyNTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4IsMA4E AgACMAgDBgQmAveAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZpahVV0ZdDJQCxoRvf6mi3DS9Q3A00nnR yitT58/LVKKTqNXx29NX2kkQwhN964jvduz/i8B2K+dXq+q3rZLGgdEPsHSx42F4 4NZ1krAO0774mTyiOB1LmW0eGhIxqR6IWUvRn41juuQkUSnPnMYQKpuEXlbNfmkv u8AoDzUskGg7y6QcXMSpRvrLNhOodGMA8gyLzUn5ZcUA7I9POKRNBuVhN0txAt3n adE4snMGSua/OlPcg/yihqDNXclZLDB7Ssh0k8L4KymQ6vTJH6GOWtoZdtx/Vn4u US5iU3iUPArsqFrC4ffFc4aKkB6BvHi9RuB8qqB2irgzUOz/5MII -----END CERTIFICATE-----Generated at Sun Jun 8 04:57:56 2025 by rpki-client