$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e6b06085-bc2c-35d9-98f5-e00a375a95d2.roa File: e6b06085-bc2c-35d9-98f5-e00a375a95d2.roa (raw, json) Hash identifier: XRCbxuptQVoLohXea9sdijVXOOK8Ltsx364UVsJ/hkA= Subject key identifier: 02:E2:DE:3E:97:D6:13:DF:8F:F9:43:5D:29:6E:9B:A7:53:C1:91:58 Certificate issuer: /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Certificate serial: 010D0C9F4328584967B885E4924FAA6A74E7FCE0 Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e6b06085-bc2c-35d9-98f5-e00a375a95d2.roa Signing time: Thu 03 Apr 2025 16:33:53 +0000 ROA not before: Thu 03 Apr 2025 16:33:53 +0000 ROA not after: Wed 02 Jul 2025 16:33:53 +0000 asID: 400789 IP address blocks: 23.140.152.0/24 maxlen: 24 130.51.124.0/23 maxlen: 24 2606:e5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:b8:85:e4:92:4f:aa:6a:74:e7:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Validity Not Before: Apr 3 16:33:53 2025 GMT Not After : Jul 2 16:33:53 2025 GMT Subject: CN=0e8a8938-d3a9-4d4e-b8a2-9ad6584d8f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:c3:8f:7e:05:01:c8:57:9a:c0:f8:4b:f9: b0:69:1f:08:f5:22:b1:ed:50:81:0a:67:f7:5b:5b: 09:8c:8b:d5:52:1f:66:77:85:96:d9:38:28:ed:93: 22:59:95:89:f5:77:28:d9:ca:06:ea:57:5d:9e:23: 9c:4f:e6:11:01:17:93:e4:ce:e5:78:f6:9a:8f:b7: 83:44:61:97:35:c2:e6:c2:5d:23:cb:5e:54:de:dc: 52:f9:f2:6d:c9:98:a5:77:ca:b6:51:36:ac:af:2c: 10:9e:b7:69:ea:54:e2:0f:74:a6:a2:0d:58:09:ba: 11:c0:29:36:20:11:8f:73:a7:7a:8f:46:a1:e1:24: d0:f5:f3:c2:0f:e7:0e:05:e7:d0:5b:7d:20:53:3d: fc:38:57:52:4a:82:7e:57:d8:b9:e3:ab:71:ac:a0: 7b:8f:42:d4:7f:91:04:e5:e3:24:cd:ce:90:f6:01: 97:0e:00:c1:ab:fe:c0:4b:b2:60:2b:7c:5b:ca:22: 4d:58:35:d0:6a:5c:93:4f:66:e6:3c:64:82:20:3c: 56:84:d5:e2:20:08:60:49:5a:0c:e9:e7:90:0c:68: f4:46:16:7c:fe:40:99:96:11:38:08:03:c7:a1:27: 3f:52:fd:a1:76:6c:5b:e8:f8:ff:b4:fc:8f:1a:57: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E2:DE:3E:97:D6:13:DF:8F:F9:43:5D:29:6E:9B:A7:53:C1:91:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e6b06085-bc2c-35d9-98f5-e00a375a95d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl X509v3 Authority Key Identifier: keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer sbgp-ipAddrBlock: critical IPv4: 23.140.152.0/24 130.51.124.0/23 IPv6: 2606:e5c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:64:11:c6:82:87:80:c7:54:ba:71:7c:84:16:41:13:e9:5e: e5:74:23:b1:7e:29:18:6b:73:9e:67:d0:c5:2a:a8:ee:8d:58: 7f:f6:65:a4:3c:24:40:c9:16:46:e1:ab:a1:5e:37:c0:b2:c5: ab:17:7c:29:94:cf:c4:17:9c:1a:e7:02:93:77:b2:9e:43:48: 30:d0:3e:fc:2e:27:99:90:23:a8:bf:00:e9:5f:45:fa:e5:e6: 65:fd:de:76:c8:ed:61:15:38:82:0b:9a:fc:99:6f:c9:2b:47: 1d:47:95:c8:c0:8c:68:43:f7:82:73:92:ef:54:c8:d3:15:21: 2d:db:06:06:4c:81:9b:cc:a7:2e:0f:08:ec:f9:68:d4:30:09: 6a:d9:16:6d:6c:60:c0:e5:16:69:2a:94:80:19:82:3e:83:5e: 1f:e1:a4:5b:89:dd:7a:a5:8f:ab:13:0c:7e:26:88:98:dc:d3: 42:3a:f7:f9:75:2c:59:9e:f3:78:a7:7c:c9:1c:7b:de:c4:1b: b6:e9:f2:c3:16:23:c9:82:31:84:d7:49:98:6b:41:05:42:de: af:f2:81:59:38:0d:e5:25:2a:83:f8:8b:c9:2c:8e:4f:c2:2f: 3b:71:3a:3f:ef:9b:72:79:3b:73:52:4a:3b:32:f2:97:00:f9: 20:a6:8d:58 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWElnuIXkkk+qanTn/OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll Yzk3MB4XDTI1MDQwMzE2MzM1M1oXDTI1MDcwMjE2MzM1M1owLzEtMCsGA1UEAxMk MGU4YTg5MzgtZDNhOS00ZDRlLWI4YTItOWFkNjU4NGQ4ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8TDj34FAchXmsD4S/mwaR8I9SKx7VCBCmf3 W1sJjIvVUh9md4WW2Tgo7ZMiWZWJ9Xco2coG6lddniOcT+YRAReT5M7lePaaj7eD RGGXNcLmwl0jy15U3txS+fJtyZild8q2UTasrywQnrdp6lTiD3Smog1YCboRwCk2 IBGPc6d6j0ah4STQ9fPCD+cOBefQW30gUz38OFdSSoJ+V9i546txrKB7j0LUf5EE 5eMkzc6Q9gGXDgDBq/7AS7JgK3xbyiJNWDXQalyTT2bmPGSCIDxWhNXiIAhgSVoM 6eeQDGj0RhZ8/kCZlhE4CAPHoSc/Uv2hdmxb6Pj/tPyPGldfIwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFALi3j6X1hPfj/lDXSlum6dTwZFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvZTZiMDYwODUtYmMyYy0z NWQ5LTk4ZjUtZTAwYTM3NWE5NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3 NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5 ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi NTFkOWVjOTcuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4yYAwQB gjN8MA0EAgACMAcDBQAmBuXAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACRkEcaCh4DHVLpxfIQWQRPpXuV0 I7F+KRhrc55n0MUqqO6NWH/2ZaQ8JEDJFkbhq6FeN8CyxasXfCmUz8QXnBrnApN3 sp5DSDDQPvwuJ5mQI6i/AOlfRfrl5mX93nbI7WEVOIILmvyZb8krRx1HlcjAjGhD 94Jzku9UyNMVIS3bBgZMgZvMpy4PCOz5aNQwCWrZFm1sYMDlFmkqlIAZgj6DXh/h pFuJ3Xqlj6sTDH4miJjc00I69/l1LFme83infMkce97EG7bp8sMWI8mCMYTXSZhr QQVC3q/ygVk4DeUlKoP4i8ksjk/CLztxOj/vm3J5O3NSSjsy8pcA+SCmjVg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:31 2025 by rpki-client