$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa File: d73dd892-ee55-3262-86e9-4939ca3508af.roa (raw, json) Hash identifier: N3UMlq+w9G4jZlWtzVzI505Lbnz1EWc0Ae8vFBUN5zo= Subject key identifier: 45:72:3A:EF:C7:2F:81:9D:A2:E2:69:5B:40:A7:8B:B5:50:F6:A9:CF Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F432858493AA3DBD4DFD91D56A5FD3010 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 401368 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:db:d4:df:d9:1d:56:a5:fd:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=107b3672-8b17-4b6e-a1f6-14c3cac286e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:e8:dc:dd:af:a0:a3:1f:75:a0:f7:a8:f4: 19:a1:5d:97:68:54:05:f0:63:69:c3:5f:ec:87:d0: 0f:d9:1b:62:57:17:55:1e:29:af:c3:bc:9d:e8:12: e6:4d:ab:f0:18:85:ec:72:1b:2f:5a:51:f7:5c:d3: 5f:3b:4a:51:14:85:55:6d:7d:39:d6:b0:e6:cc:48: c3:50:d5:be:a5:a0:e5:d7:3b:a4:8e:05:4f:b9:97: bc:5e:5b:ff:0d:e1:71:57:98:40:ba:48:99:26:85: 2f:37:3f:e1:ea:ba:ed:52:5f:56:33:77:2f:63:f9: 9a:8a:f5:6b:96:c7:9d:b1:7e:74:30:04:50:eb:26: 11:ab:c4:0a:b9:6b:40:ef:e2:63:87:75:9a:48:01: 9f:2a:b2:12:19:37:81:f0:5b:bb:ff:61:a4:5b:ae: ba:61:68:7e:bd:1a:a9:11:78:f5:01:ff:40:5a:25: a0:e5:7f:96:a5:b0:b6:8f:f1:f0:ea:54:33:3a:b0: 91:51:95:80:b8:2f:59:3c:3a:a7:fe:a5:d0:ce:ec: 39:4d:4f:35:3b:d8:e8:ae:54:8f:3d:ab:01:b9:ce: 7c:94:44:e7:61:cf:2b:13:b0:8e:e4:5f:4a:63:40: d3:e3:09:df:fc:d6:f1:28:95:3c:c9:06:7b:f5:36: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:3A:EF:C7:2F:81:9D:A2:E2:69:5B:40:A7:8B:B5:50:F6:A9:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:61:b9:ca:87:10:59:79:d5:01:bd:66:70:04:98:2a:18:5f: 57:cf:b4:96:ae:28:f8:e9:9b:eb:c1:50:da:03:24:6c:c5:95: 57:34:32:99:e0:fd:d7:d5:cb:2a:2b:ae:1d:95:65:2c:ea:46: 58:04:25:12:c1:71:6f:fa:a6:8b:fe:f6:48:a0:15:7e:a3:29: 92:b2:4d:40:d9:4f:dc:7b:ac:4e:7d:30:aa:d7:62:1b:5e:a7: ce:84:f2:1b:c4:c8:f9:3a:f8:80:75:d0:b4:78:da:57:e7:9b: 59:a2:5f:a0:8c:e0:f7:a8:3d:a6:a7:f7:5d:ce:1e:0d:1f:59: 8e:df:45:60:ab:66:4f:de:2e:74:5d:35:90:9f:6a:5d:03:ed: ef:12:6b:5d:3e:6d:07:ff:eb:3a:a8:99:d8:80:e9:90:14:f9: 2e:11:83:e8:b1:54:69:34:b2:00:cc:b4:0b:5b:42:42:b3:4b: cb:00:8e:b2:e7:d1:a0:06:06:40:77:b9:92:11:6f:c4:bf:0e: ac:0f:35:87:e5:bc:ed:3f:14:17:91:ed:f7:4b:fe:8d:07:35: 94:be:cc:cb:0f:18:7b:07:46:88:29:8e:7c:b7:19:55:81:fa: 3a:ae:31:16:3a:ec:e0:be:36:91:58:46:a6:60:41:c9:f4:6f: 9c:ad:4d:6c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEk6o9vU39kdVqX9MBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk MTA3YjM2NzItOGIxNy00YjZlLWExZjYtMTRjM2NhYzI4NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJvo3N2voKMfdaD3qPQZoV2XaFQF8GNpw1/s h9AP2RtiVxdVHimvw7yd6BLmTavwGIXschsvWlH3XNNfO0pRFIVVbX051rDmzEjD UNW+paDl1zukjgVPuZe8Xlv/DeFxV5hAukiZJoUvNz/h6rrtUl9WM3cvY/maivVr lsedsX50MARQ6yYRq8QKuWtA7+Jjh3WaSAGfKrISGTeB8Fu7/2GkW666YWh+vRqp EXj1Af9AWiWg5X+WpbC2j/Hw6lQzOrCRUZWAuC9ZPDqn/qXQzuw5TU81O9jorlSP PasBuc58lETnYc8rE7CO5F9KY0DT4wnf/NbxKJU8yQZ79TaoEwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEVyOu/HL4GdouJpW0Cni7VQ9qnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDczZGQ4OTItZWU1NS0z MjYyLTg2ZTktNDkzOWNhMzUwOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5YbnKhxBZedUBvWZwBJgqGF9Xz7SWrij4 6ZvrwVDaAyRsxZVXNDKZ4P3X1csqK64dlWUs6kZYBCUSwXFv+qaL/vZIoBV+oymS sk1A2U/ce6xOfTCq12IbXqfOhPIbxMj5OviAddC0eNpX55tZol+gjOD3qD2mp/dd zh4NH1mO30Vgq2ZP3i50XTWQn2pdA+3vEmtdPm0H/+s6qJnYgOmQFPkuEYPosVRp NLIAzLQLW0JCs0vLAI6y59GgBgZAd7mSEW/Evw6sDzWH5bztPxQXke33S/6NBzWU vszLDxh7B0aIKY58txlVgfo6rjEWOuzgvjaRWEamYEHJ9G+crU1s -----END CERTIFICATE-----Generated at Sat Apr 19 08:14:46 2025 by rpki-client