$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa File: bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa (raw, json) Hash identifier: vpENcwt0/CI154bhkeV63kQYcP+vILqjsFCwk3S9fJs= Subject key identifier: D0:BD:40:5C:32:88:F7:30:79:ED:2A:D8:37:1A:B4:3D:8F:C7:F8:CF Certificate issuer: /CN=687d1923-22fe-4744-9984-8ca387a57cf3 Certificate serial: 010D0C9F432858492E13BA61A4C5444F8FB79440 Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 400495 IP address blocks: 23.133.104.0/24 maxlen: 24 2602:fbae::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:ba:61:a4:c5:44:4f:8f:b7:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=e14ed04c-7ccc-4635-90ef-7774146d77fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:0c:ef:cc:30:77:9b:57:06:4b:82:2d:6e: ca:0e:20:a9:dc:2f:57:f8:3c:4b:6d:d4:5d:d2:4b: c9:a2:95:08:23:20:40:12:07:5b:7c:0a:18:80:a0: c7:81:62:c5:98:ea:a8:f2:0e:2a:69:4c:37:17:5a: 30:72:af:b1:71:3e:41:9c:67:ab:fe:05:ac:53:4e: 9f:0e:fe:61:77:e7:38:55:d0:e3:bc:f8:17:81:6b: 30:d9:b6:50:d1:22:6b:fb:01:7f:33:89:82:e8:aa: b0:b3:4c:89:02:43:67:d7:f3:79:8d:5b:25:fd:fd: a2:dc:bb:f8:69:4c:63:e8:06:48:8e:b1:7a:37:b6: 32:37:00:8e:95:66:c9:42:68:88:81:67:1d:3b:53: f4:93:be:71:a1:3b:1b:ee:10:30:11:b3:aa:40:4a: 99:94:99:fe:f3:25:89:85:5d:c8:01:4a:ea:a4:e4: 36:da:8f:e0:02:e3:32:2f:22:26:14:94:d1:09:34: cf:26:6c:5e:08:81:7a:49:0e:90:40:8b:12:13:03: 23:14:df:d3:ab:92:e1:7b:8f:9c:55:27:8c:a4:81: 76:4d:29:2b:02:9e:da:a4:85:fe:1c:06:b8:43:5b: c8:6d:e3:ef:99:14:56:57:3d:6e:d3:3c:c3:66:40: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BD:40:5C:32:88:F7:30:79:ED:2A:D8:37:1A:B4:3D:8F:C7:F8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl X509v3 Authority Key Identifier: keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer sbgp-ipAddrBlock: critical IPv4: 23.133.104.0/24 IPv6: 2602:fbae::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:db:32:04:ed:b8:11:21:b1:d7:3d:84:ec:40:e4:ea:99:a6: c1:f1:c2:1f:11:90:81:87:a1:a8:1b:06:25:85:3b:33:ce:4b: 6a:61:51:96:97:ad:d2:24:02:f4:fd:de:dc:f0:62:55:2d:24: 0c:6d:1d:44:3f:34:a0:1d:ec:3d:da:f5:81:7c:c0:92:1c:e2: 62:82:58:19:b4:5d:0a:67:2d:fd:83:f1:af:56:67:be:e6:48: bc:f7:c4:af:18:12:c4:0a:ba:09:f0:aa:ec:00:00:70:20:41: dc:e6:67:fc:0c:b5:7a:03:bd:84:71:19:4f:91:d1:21:5e:85: 0b:f0:ba:eb:dd:7e:03:93:fd:9d:4a:d0:6f:ea:8f:a1:8d:45: 55:22:aa:bc:c2:f3:fd:2c:4a:be:48:1c:a8:13:68:db:45:de: d4:13:2f:f8:ff:45:2c:54:64:79:ce:d6:6f:d9:7c:f4:78:33: 87:77:a1:65:41:0c:e7:4a:36:a1:dc:39:3f:8a:2a:d5:e1:bf: 27:5d:c0:8e:6a:20:e6:e5:2c:2e:98:9d:6a:ff:f9:a1:f4:62: 4e:3d:8f:a5:b4:56:bf:af:e6:55:df:e1:1d:33:8d:94:e3:40: 01:38:1b:62:dd:1c:fd:2c:37:bf:b4:63:56:f8:d0:9e:7a:4a: ba:7a:b7:a0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkuE7phpMVET4+3lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3ZDE5MjMtMjJmZS00NzQ0LTk5ODQtOGNhMzg3YTU3 Y2YzMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZTE0ZWQwNGMtN2NjYy00NjM1LTkwZWYtNzc3NDE0NmQ3N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnEM78wwd5tXBkuCLW7KDiCp3C9X+DxLbdRd 0kvJopUIIyBAEgdbfAoYgKDHgWLFmOqo8g4qaUw3F1owcq+xcT5BnGer/gWsU06f Dv5hd+c4VdDjvPgXgWsw2bZQ0SJr+wF/M4mC6Kqws0yJAkNn1/N5jVsl/f2i3Lv4 aUxj6AZIjrF6N7YyNwCOlWbJQmiIgWcdO1P0k75xoTsb7hAwEbOqQEqZlJn+8yWJ hV3IAUrqpOQ22o/gAuMyLyImFJTRCTTPJmxeCIF6SQ6QQIsSEwMjFN/Tq5Lhe4+c VSeMpIF2TSkrAp7apIX+HAa4Q1vIbePvmRRWVz1u0zzDZkBOewIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNC9QFwyiPcwee0q2DcatD2Px/jPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODdk MTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdhNTdjZjMvYmY2MTgzY2YtMTdjMi0z YTYzLWI5ZDgtYThjNGU2OWY0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg3ZDE5MjMtMjJmZS00NzQ0LTk5 ODQtOGNhMzg3YTU3Y2YzLzY4N2QxOTIzLTIyZmUtNDc0NC05OTg0LThjYTM4N2E1 N2NmMy5jcmwwHwYDVR0jBBgwFoAUuhD3Zvx04hITn+zVuCQ4jiO2RpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2Ez ODdhNTdjZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VoMA4E AgACMAgDBgAmAvuuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQ2zIE7bgRIbHXPYTsQOTqmabB8cIfEZCB h6GoGwYlhTszzktqYVGWl63SJAL0/d7c8GJVLSQMbR1EPzSgHew92vWBfMCSHOJi glgZtF0KZy39g/GvVme+5ki898SvGBLECroJ8KrsAABwIEHc5mf8DLV6A72EcRlP kdEhXoUL8Lrr3X4Dk/2dStBv6o+hjUVVIqq8wvP9LEq+SByoE2jbRd7UEy/4/0Us VGR5ztZv2Xz0eDOHd6FlQQznSjah3Dk/iirV4b8nXcCOaiDm5SwumJ1q//mh9GJO PY+ltFa/r+ZV3+EdM42U40ABOBti3Rz9LDe/tGNW+NCeekq6ereg -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:55 2025 by rpki-client