$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa File: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (raw, json) Hash identifier: F6av60BkrRI3OurNwt0mVMaP/7p+K84JKpcNt/OjrEo= Subject key identifier: E0:DD:D7:0A:76:51:FC:48:34:66:2B:F3:DD:C7:CA:D6:94:E3:07:11 Certificate issuer: /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Certificate serial: 010D0C9F432858491246AC2B836E2B664A9EA280 Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 398193 IP address blocks: 23.165.112.0/24 maxlen: 24 148.59.95.0/24 maxlen: 24 2602:fd18::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ac:2b:83:6e:2b:66:4a:9e:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=43a1409f-009e-42fa-a397-1a3f7bd0e3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7e:5b:42:26:74:2a:2d:bb:4b:5d:96:4e:93: 8b:3a:65:43:f4:1e:d8:8e:03:f0:04:0d:33:da:2c: 19:0c:35:ef:90:35:9c:e7:cd:95:bc:da:90:aa:c5: 21:b4:a2:b6:b8:26:7c:d6:29:58:40:eb:4c:a7:99: 15:e8:72:69:21:64:8d:ae:4f:a3:b6:16:74:ff:9f: 87:04:1a:94:b3:fd:f8:b3:8c:28:da:a2:14:ee:03: 3d:6b:a9:8e:ce:70:16:7a:cc:d5:b2:de:10:51:80: cf:b5:c1:a4:80:a5:31:34:fa:df:56:c4:d2:8d:44: 1a:5e:7f:e7:15:00:f0:e2:a5:59:2c:b2:d8:b9:b6: 09:4e:74:c7:96:5e:5e:6e:9b:5c:e7:2e:f0:64:b1: ae:46:95:4d:05:8c:33:51:db:ba:e0:a7:c7:bd:57: 61:aa:77:37:87:f1:95:60:53:75:14:33:ab:b3:8f: 41:c4:7a:fc:a9:7f:ff:29:55:e9:8b:e2:47:12:2e: 2b:7b:2f:69:9f:52:06:30:ad:ad:ce:4d:6d:46:04: ff:e2:7c:1b:e8:ba:c4:11:8c:68:d2:cd:b9:3b:1f: 8d:77:90:15:e9:da:c4:74:5b:ca:9e:70:c0:12:39: b2:88:ae:e4:4d:dc:5f:0b:b5:98:ca:ab:63:5c:9c: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:D7:0A:76:51:FC:48:34:66:2B:F3:DD:C7:CA:D6:94:E3:07:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl X509v3 Authority Key Identifier: keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.112.0/24 148.59.95.0/24 IPv6: 2602:fd18::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4b:72:70:d2:fc:0d:77:30:19:8d:8e:a4:d3:50:f4:dd:05: f4:11:d6:a6:fe:1e:45:94:77:5b:93:cd:a4:63:b8:1b:d6:65: be:22:bd:0c:13:df:b1:1c:7e:64:19:1b:df:3b:54:8a:16:3a: 82:9a:5d:f9:6e:c8:88:c7:d2:9f:54:45:8a:79:6e:98:0f:5d: dd:b2:a7:08:1c:4c:60:29:c4:67:cf:d3:3a:20:cd:05:04:62: ee:6b:21:b4:e9:07:45:86:ec:26:ee:9a:e3:7b:b2:0f:2d:6d: b1:35:ee:23:71:ac:5d:ed:34:34:ef:37:03:e2:82:5c:8f:ba: 0a:7b:a6:0a:20:83:0d:9e:46:fc:93:4f:df:a6:29:24:a8:0b: ca:dc:7f:26:3e:de:2f:f9:08:10:b9:7e:e9:9e:9d:8b:d3:3a: c7:cb:08:a9:cd:21:a3:ed:0a:d9:78:a1:35:62:dc:b6:a2:e9: 75:f1:fa:ba:c5:71:7b:9c:12:29:03:53:a0:41:3b:23:b6:c0: ab:73:12:6a:e8:78:63:34:c4:ea:55:80:dc:46:c4:ae:7e:ce: 79:1a:b4:27:1a:75:e5:66:81:f4:57:17:a4:bb:5a:6c:bb:9e: 42:21:b4:c6:42:c4:01:91:0e:c0:db:02:49:76:9a:5f:0c:09: ed:48:d0:e1 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEkSRqwrg24rZkqeooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIz M2E5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDNhMTQwOWYtMDA5ZS00MmZhLWEzOTctMWEzZjdiZDBlM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH5bQiZ0Ki27S12WTpOLOmVD9B7YjgPwBA0z 2iwZDDXvkDWc582VvNqQqsUhtKK2uCZ81ilYQOtMp5kV6HJpIWSNrk+jthZ0/5+H BBqUs/34s4wo2qIU7gM9a6mOznAWeszVst4QUYDPtcGkgKUxNPrfVsTSjUQaXn/n FQDw4qVZLLLYubYJTnTHll5ebptc5y7wZLGuRpVNBYwzUdu64KfHvVdhqnc3h/GV YFN1FDOrs49BxHr8qX//KVXpi+JHEi4rey9pn1IGMK2tzk1tRgT/4nwb6LrEEYxo 0s25Ox+Nd5AV6drEdFvKnnDAEjmyiK7kTdxfC7WYyqtjXJw3KQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFODd1wp2UfxINGYr893HytaU4wcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZi N2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvN2MyMGRlZWMtMTE1Mi0z YzU2LThlYTQtZDg5OWE5MjlkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFmYjdiNGMtMDhjYy00ZDc2LWFk YTItYjU3MmEyZDIzM2E5L2RhZmI3YjRjLTA4Y2MtNGQ3Ni1hZGEyLWI1NzJhMmQy MzNhOS5jcmwwHwYDVR0jBBgwFoAUNX/ggAcTwJH090DQumO5Cuj1sxEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcy YTJkMjMzYTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6VwAwQA lDtfMA4EAgACMAgDBgQmAv0YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6S3Jw0vwNdzAZjY6k01D03QX0 Edam/h5FlHdbk82kY7gb1mW+Ir0ME9+xHH5kGRvfO1SKFjqCml35bsiIx9KfVEWK eW6YD13dsqcIHExgKcRnz9M6IM0FBGLuayG06QdFhuwm7prje7IPLW2xNe4jcaxd 7TQ07zcD4oJcj7oKe6YKIIMNnkb8k0/fpikkqAvK3H8mPt4v+QgQuX7pnp2L0zrH ywipzSGj7QrZeKE1Yty2oul18fq6xXF7nBIpA1OgQTsjtsCrcxJq6HhjNMTqVYDc RsSufs55GrQnGnXlZoH0Vxeku1psu55CIbTGQsQBkQ7A2wJJdppfDAntSNDh -----END CERTIFICATE-----Generated at Sat Apr 12 13:11:59 2025 by rpki-client