$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa File: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (raw, json) Hash identifier: wiavP+k/NGXGAsAQDbeaPQDub6Ey2koOEdiq2v3Ilac= Subject key identifier: 44:52:3B:D2:17:E3:94:7F:B5:A7:D7:87:C3:81:AB:C1:0B:76:33:93 Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F43285848E0065A9260B188BA0877C580 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 393524 IP address blocks: 23.134.16.0/24 maxlen: 24 23.134.17.0/24 maxlen: 24 23.135.18.0/24 maxlen: 24 104.192.96.0/22 maxlen: 22 104.245.136.0/22 maxlen: 22 2602:ff44::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5a:92:60:b1:88:ba:08:77:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=ea6358d1-a5d8-4acb-90a7-199fbb179f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:86:b9:c9:e6:1f:7b:23:85:2d:36:3b:39: 9e:bf:f4:f6:fd:53:de:45:1a:3b:08:c5:75:f9:45: 88:dd:c1:a1:4b:a4:01:ee:9a:62:19:c1:bd:b1:ac: a3:39:ba:8f:a6:14:a7:8f:09:46:9b:1e:3c:c8:a7: d5:86:14:aa:6a:b4:b9:b6:69:c3:42:6f:9b:6e:76: 12:05:59:59:10:08:87:25:fb:c4:06:6e:ec:a4:13: 40:af:e7:e8:c4:ac:84:93:a2:39:84:10:26:e5:b9: 3b:bf:d1:86:13:9b:b3:8c:12:76:eb:a0:3d:33:e8: d1:49:58:f6:af:97:5f:a5:25:8a:74:4f:a6:00:62: ee:d0:0d:88:92:ed:f9:be:a9:87:2f:19:ed:eb:3a: f2:da:a3:bb:c7:d6:6a:9c:95:aa:af:0a:ac:bf:83: 18:30:09:11:68:dc:74:c4:4b:0b:1b:27:a5:e0:17: 57:0b:c3:c5:b8:24:4a:29:84:06:da:fc:8a:1d:13: a1:5a:13:99:70:6b:ba:e2:fc:2f:f4:d4:59:af:90: 58:43:90:ce:85:5d:d9:b9:d2:ac:e0:19:5b:b0:54: 5c:73:39:41:59:fe:5f:59:20:2f:af:f6:d2:58:10: f8:29:9d:4a:8b:36:c7:db:2a:e4:47:17:97:79:a2: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:3B:D2:17:E3:94:7F:B5:A7:D7:87:C3:81:AB:C1:0B:76:33:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: 23.134.16.0/23 23.135.18.0/24 104.192.96.0/22 104.245.136.0/22 IPv6: 2602:ff44::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:02:df:a4:82:f7:f7:6e:d4:e5:0e:25:fd:5b:39:90:df:c5: 69:bf:aa:2a:5e:7e:87:d7:a2:51:ca:ab:4f:2b:2b:fd:b2:54: 9d:22:0a:00:53:a7:ba:77:9c:f5:5b:5a:f4:b0:a9:9e:34:df: 84:e6:e7:6c:13:1a:f0:9e:02:c1:a3:be:43:c4:79:45:cd:60: d1:10:ac:d8:80:29:5c:c4:dc:9a:d3:92:fd:4b:ea:da:4c:e8: 5e:51:65:01:2e:c3:5e:7d:91:07:b0:75:48:6f:51:75:eb:ff: 35:85:d3:cd:2a:c8:c7:dc:67:31:b1:49:bf:96:ed:ba:08:3d: d8:05:5b:47:09:ed:dd:66:dc:fe:47:ae:10:56:28:16:45:a6: be:d9:dc:ad:2b:a6:df:6e:45:7f:e7:ec:b1:aa:e1:4f:e7:3c: cb:83:2b:c1:5c:a6:09:e9:a8:79:f8:5d:23:71:ce:4b:7a:80: 2d:bc:3f:66:28:a7:07:65:4e:c1:ba:e1:19:8e:3b:6e:39:4d: 05:2f:88:9a:2b:39:69:db:a8:4f:8b:4e:ec:8e:2b:cf:3d:78: 9e:04:e8:79:e8:19:d3:fe:9f:63:9e:fb:dc:66:34:74:50:b9: 98:2b:6b:a7:33:21:8e:eb:49:55:f5:ea:9e:a3:28:ad:48:66: 37:8f:bf:8f -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEjgBlqSYLGIugh3xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZWE2MzU4ZDEtYTVkOC00YWNiLTkwYTctMTk5ZmJiMTc5ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dCGucnmH3sjhS02Ozmev/T2/VPeRRo7CMV1 +UWI3cGhS6QB7ppiGcG9sayjObqPphSnjwlGmx48yKfVhhSqarS5tmnDQm+bbnYS BVlZEAiHJfvEBm7spBNAr+foxKyEk6I5hBAm5bk7v9GGE5uzjBJ266A9M+jRSVj2 r5dfpSWKdE+mAGLu0A2Iku35vqmHLxnt6zry2qO7x9ZqnJWqrwqsv4MYMAkRaNx0 xEsLGyel4BdXC8PFuCRKKYQG2vyKHROhWhOZcGu64vwv9NRZr5BYQ5DOhV3ZudKs 4BlbsFRcczlBWf5fWSAvr/bSWBD4KZ1KizbH2yrkRxeXeaKN6QIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFERSO9IX45R/tafXh8OBq8ELdjOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMDdhZmRiNWItZjMzOS0z YTFmLTkwOGEtMmI1YzkyMDQ0ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQBF4YQAwQA F4cSAwQCaMBgAwQCaPWIMA4EAgACMAgDBgQmAv9EADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkAt+kgvf3 btTlDiX9WzmQ38Vpv6oqXn6H16JRyqtPKyv9slSdIgoAU6e6d5z1W1r0sKmeNN+E 5udsExrwngLBo75DxHlFzWDREKzYgClcxNya05L9S+raTOheUWUBLsNefZEHsHVI b1F16/81hdPNKsjH3GcxsUm/lu26CD3YBVtHCe3dZtz+R64QVigWRaa+2dytK6bf bkV/5+yxquFP5zzLgyvBXKYJ6ah5+F0jcc5LeoAtvD9mKKcHZU7BuuEZjjtuOU0F L4iaKzlp26hPi07sjivPPXieBOh56BnT/p9jnvvcZjR0ULmYK2unMyGO60lV9eqe oyitSGY3j7+P -----END CERTIFICATE-----Generated at Sat Apr 12 05:17:41 2025 by rpki-client