$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa File: e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa (raw, json) Hash identifier: K6y9Sbsh1By2N5SuwfqGtLB57jkAddRIGXz6B2Y8wjQ= Subject key identifier: 14:3E:82:97:B2:1A:E0:E4:7C:25:66:2A:64:8C:84:2E:25:8D:8D:89 Certificate issuer: /CN=3008c6be-8f83-4728-81bb-6e10f0181cf3 Certificate serial: 010D0C9F432858494E2EB296A1FA804747962600 Authority key identifier: DC:1B:D4:9D:8C:91:9B:A4:43:15:B7:82:0D:B1:7B:EF:89:99:18:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 397915 IP address blocks: 23.159.88.0/23 maxlen: 24 2602:815:5000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/3008c6be-8f83-4728-81bb-6e10f0181cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/3008c6be-8f83-4728-81bb-6e10f0181cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b2:96:a1:fa:80:47:47:96:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008c6be-8f83-4728-81bb-6e10f0181cf3 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=563ad3f5-dc69-40ac-ad2d-31ddd0226d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:5f:e5:1a:90:f6:f2:b8:31:35:79:79:98: 8f:d8:ca:12:db:8c:9b:7e:11:c6:43:d0:14:09:16: 55:51:b4:6d:07:f5:7c:e0:c2:29:7a:6c:f9:1e:a4: f7:e1:9e:32:e3:2a:ef:ed:1a:85:8b:80:dc:5e:9c: cd:e6:b0:0f:34:c4:cf:e3:f7:d0:28:89:d4:da:e3: db:28:d9:6b:d6:5b:22:eb:fd:b8:75:cd:d0:3c:d0: fd:b1:44:94:8b:cf:57:87:ef:0d:25:47:a3:f8:54: a8:1d:91:5c:9b:e0:25:19:ac:39:90:8f:0d:f2:ff: 16:25:da:64:d0:3a:52:7b:c0:fb:b7:75:df:ef:ed: 73:a7:ec:7f:c3:28:ba:d0:f8:0e:95:e4:58:fa:1e: c5:3f:2f:85:d1:39:76:09:3c:2b:3f:db:c1:b9:54: 18:01:f2:26:00:7a:ed:82:bc:78:7a:c2:b7:6a:8e: 08:e7:5c:73:2e:51:ce:57:a9:31:07:b4:3c:58:95: 64:59:08:69:93:4f:15:5f:81:31:56:7a:45:0e:61: 39:21:a4:d6:23:33:8e:9a:54:26:83:a4:df:91:2f: 82:c9:b3:fd:72:ba:29:c2:b5:e8:f4:9d:04:72:fd: 62:d1:73:70:1c:c5:03:f7:99:41:c1:09:3a:f3:70: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3E:82:97:B2:1A:E0:E4:7C:25:66:2A:64:8C:84:2E:25:8D:8D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/3008c6be-8f83-4728-81bb-6e10f0181cf3.crl X509v3 Authority Key Identifier: keyid:DC:1B:D4:9D:8C:91:9B:A4:43:15:B7:82:0D:B1:7B:EF:89:99:18:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3.cer sbgp-ipAddrBlock: critical IPv4: 23.159.88.0/23 IPv6: 2602:815:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:aa:82:1c:0d:98:49:2d:e9:28:41:31:14:73:fb:6f:b7:a5: 94:08:68:65:66:8c:9e:5d:d0:52:2d:ba:28:14:18:2c:8e:e6: 12:6a:4a:9c:ed:89:a4:a9:c6:29:9d:f0:41:d9:77:17:c5:46: c1:15:e6:e6:c3:46:70:b3:93:f6:1f:e7:70:16:2c:68:2c:40: b2:c7:35:a0:5f:6f:71:77:b1:5a:46:3e:16:62:42:b3:d2:68: 52:b0:34:9c:f0:6c:58:a9:26:c2:2f:da:1c:79:e6:b4:fe:f5: 29:b6:dd:9e:6e:26:ed:d8:10:ec:a4:27:b1:af:4b:de:62:9b: 58:66:cd:55:10:4e:e4:9c:94:a0:83:35:4b:ff:23:a4:1d:c6: 9c:9c:38:f1:68:4e:3f:1f:ff:ac:a8:88:04:8e:c7:5a:fe:90: 29:16:56:68:46:a5:9f:be:c6:fa:35:8b:c9:e3:3f:4a:6c:20: e4:6e:e7:6d:bd:e9:3d:17:60:dc:26:d6:c1:a7:a6:b4:dc:ed: ae:c3:4e:29:a6:ad:66:6e:52:e3:ba:23:e6:ce:f2:8f:86:0e: 51:20:84:a3:36:4b:b1:70:34:96:c2:1b:a5:29:b0:cf:57:8a: 09:49:62:1d:09:42:e8:01:ee:43:d4:c8:71:1b:d0:82:2b:20: d0:ae:ec:0c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWElOLrKWofqAR0eWJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAwOGM2YmUtOGY4My00NzI4LTgxYmItNmUxMGYwMTgx Y2YzMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NTYzYWQzZjUtZGM2OS00MGFjLWFkMmQtMzFkZGQwMjI2ZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHpf5RqQ9vK4MTV5eZiP2MoS24ybfhHGQ9AU CRZVUbRtB/V84MIpemz5HqT34Z4y4yrv7RqFi4DcXpzN5rAPNMTP4/fQKInU2uPb KNlr1lsi6/24dc3QPND9sUSUi89Xh+8NJUej+FSoHZFcm+AlGaw5kI8N8v8WJdpk 0DpSe8D7t3Xf7+1zp+x/wyi60PgOleRY+h7FPy+F0Tl2CTwrP9vBuVQYAfImAHrt grx4esK3ao4I51xzLlHOV6kxB7Q8WJVkWQhpk08VX4ExVnpFDmE5IaTWIzOOmlQm g6TfkS+CybP9cropwrXo9J0Ecv1i0XNwHMUD95lBwQk683DF3wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBQ+gpeyGuDkfCVmKmSMhC4ljY2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zMDA4 YzZiZS04ZjgzLTQ3MjgtODFiYi02ZTEwZjAxODFjZjMvZTBiNGM5NWEtYWIyNi0z Y2UxLWJjMTUtOWE3MTNmN2QzMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzAwOGM2YmUtOGY4My00NzI4LTgx YmItNmUxMGYwMTgxY2YzLzMwMDhjNmJlLThmODMtNDcyOC04MWJiLTZlMTBmMDE4 MWNmMy5jcmwwHwYDVR0jBBgwFoAU3BvUnYyRm6RDFbeCDbF774mZGGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zMDA4YzZiZS04ZjgzLTQ3MjgtODFiYi02ZTEw ZjAxODFjZjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF59YMA8E AgACMAkDBwQmAggVUAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhKqCHA2YSS3pKEExFHP7b7ellAhoZWaM nl3QUi26KBQYLI7mEmpKnO2JpKnGKZ3wQdl3F8VGwRXm5sNGcLOT9h/ncBYsaCxA ssc1oF9vcXexWkY+FmJCs9JoUrA0nPBsWKkmwi/aHHnmtP71Kbbdnm4m7dgQ7KQn sa9L3mKbWGbNVRBO5JyUoIM1S/8jpB3GnJw48WhOPx//rKiIBI7HWv6QKRZWaEal n77G+jWLyeM/Smwg5G7nbb3pPRdg3CbWwaemtNztrsNOKaatZm5S47oj5s7yj4YO USCEozZLsXA0lsIbpSmwz1eKCUliHQlC6AHuQ9TIcRvQgisg0K7sDA== -----END CERTIFICATE-----Generated at Thu Apr 17 22:43:15 2025 by rpki-client