$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa File: 7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa (raw, json) Hash identifier: j2kAzBBkUGpMou8KoaGjtuj8bAk8ldqWdBljc/ApEJ4= Subject key identifier: 38:AB:23:EF:34:68:C6:82:AD:84:43:9A:E7:43:3B:1C:A0:C9:76:D9 Certificate issuer: /CN=1aea854c-b5a0-4772-a924-0abe91b36c2c Certificate serial: 010D0C9F43285848C6E63BFE005E732B9BE1CD80 Authority key identifier: DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 17387 IP address blocks: 23.167.72.0/24 maxlen: 24 2602:fa46::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:3b:fe:00:5e:73:2b:9b:e1:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aea854c-b5a0-4772-a924-0abe91b36c2c Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=86761266-0e6b-4b4f-a255-f42092ccc245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:19:4c:1b:01:36:bd:9e:20:50:28:ac:18:fa: d8:c8:3e:60:6b:e8:4f:ca:15:9b:a6:86:6c:61:ce: 4e:67:47:12:d7:f7:ad:b1:f8:cf:81:02:dc:c5:4f: 8e:0d:9f:98:78:00:8b:b2:9f:60:ef:5c:0c:c7:de: 34:82:a2:12:55:8e:84:d7:fa:a0:a4:25:f0:9d:46: 8e:f5:c9:ee:8e:f2:d8:9c:24:42:02:47:90:64:6d: bc:b3:6f:86:d7:c2:1a:34:57:c0:25:9f:1d:f6:62: aa:7f:f7:4b:8b:58:25:7f:4e:27:8c:f3:0b:d0:41: 3a:2b:6f:4a:31:53:c3:5e:dd:02:d5:06:b8:30:dd: a3:1a:c8:3e:78:ee:d9:6c:26:47:c2:c8:a3:5a:fd: 65:f2:e7:5c:54:f3:c3:b4:c8:2d:1f:2a:ba:62:78: c2:d4:90:8a:13:10:1b:57:f8:cc:e7:21:81:90:48: 77:6d:9d:a2:5f:2d:1f:95:dc:40:48:67:fe:77:3b: ef:ec:cd:fd:c3:0f:0f:df:3e:b8:cc:9a:98:e8:fa: 55:2a:52:25:b6:90:8f:2a:c9:b0:fa:d7:f7:7a:d7: 87:a8:35:ee:b2:8a:ee:f3:95:f8:62:db:82:66:b4: d9:55:27:f8:ae:c7:50:d1:82:3e:b4:e2:86:5c:87: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AB:23:EF:34:68:C6:82:AD:84:43:9A:E7:43:3B:1C:A0:C9:76:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl X509v3 Authority Key Identifier: keyid:DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer sbgp-ipAddrBlock: critical IPv4: 23.167.72.0/24 IPv6: 2602:fa46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:78:79:d1:7f:8d:66:53:c4:be:d3:4e:02:ef:f6:e9:dd:73: 1c:dc:ca:de:52:4d:d3:8b:24:d0:f0:53:e6:76:72:66:11:50: e2:f2:7d:09:72:b8:6e:b3:c2:01:7b:67:f1:a1:e2:98:b3:5e: dd:c1:4e:82:b9:52:ea:c4:e1:11:d7:95:55:c6:98:22:6c:76: c6:88:59:37:af:42:5d:42:0d:00:46:07:92:a8:ba:10:9f:05: d2:06:59:34:3f:c4:6b:3c:47:25:04:f1:5f:33:f4:61:0d:4c: 16:d3:5c:97:a2:51:ac:ec:37:63:09:50:45:4c:50:7f:dc:61: 43:09:ea:e3:0c:13:86:7e:52:22:58:41:26:cb:fd:04:31:d5: 02:8b:d2:9f:9f:18:60:ae:10:d9:3b:82:9b:c0:2b:50:32:05: 94:3e:56:11:f9:75:ab:ef:e3:3c:f3:96:b6:6a:60:9e:f6:fd: fb:9d:26:ba:9f:ff:99:83:77:c9:f9:26:63:e3:84:44:b1:aa: 82:80:8b:51:1f:74:64:e7:e5:97:b6:88:1e:02:26:1a:66:f1: c8:bc:3e:45:5b:0d:4f:84:1b:8b:a3:8c:41:a4:0e:58:cc:03: e6:42:21:f2:ff:12:57:5e:82:4a:38:6b:1b:7e:31:b4:d5:ed: 0b:c3:75:69 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjG5jv+AF5zK5vhzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlYTg1NGMtYjVhMC00NzcyLWE5MjQtMGFiZTkxYjM2 YzJjMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODY3NjEyNjYtMGU2Yi00YjRmLWEyNTUtZjQyMDkyY2NjMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRlMGwE2vZ4gUCisGPrYyD5ga+hPyhWbpoZs Yc5OZ0cS1/etsfjPgQLcxU+ODZ+YeACLsp9g71wMx940gqISVY6E1/qgpCXwnUaO 9cnujvLYnCRCAkeQZG28s2+G18IaNFfAJZ8d9mKqf/dLi1glf04njPML0EE6K29K MVPDXt0C1Qa4MN2jGsg+eO7ZbCZHwsijWv1l8udcVPPDtMgtHyq6YnjC1JCKExAb V/jM5yGBkEh3bZ2iXy0fldxASGf+dzvv7M39ww8P3z64zJqY6PpVKlIltpCPKsmw +tf3eteHqDXusoru85X4YtuCZrTZVSf4rsdQ0YI+tOKGXIfBiwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDirI+80aMaCrYRDmudDOxygyXbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYWVh ODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJlOTFiMzZjMmMvN2YwY2RjZGItN2ZjZC0z M2Y1LWJiM2MtNzQ1NGU2ZDE2ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWFlYTg1NGMtYjVhMC00NzcyLWE5 MjQtMGFiZTkxYjM2YzJjLzFhZWE4NTRjLWI1YTAtNDc3Mi1hOTI0LTBhYmU5MWIz NmMyYy5jcmwwHwYDVR0jBBgwFoAU3q6IeMiz1yM4ebLHvTCo8zBdXPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xYWVhODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJl OTFiMzZjMmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6dIMA4E AgACMAgDBgQmAvpGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXeHnRf41mU8S+004C7/bp3XMc3MreUk3T iyTQ8FPmdnJmEVDi8n0Jcrhus8IBe2fxoeKYs17dwU6CuVLqxOER15VVxpgibHbG iFk3r0JdQg0ARgeSqLoQnwXSBlk0P8RrPEclBPFfM/RhDUwW01yXolGs7DdjCVBF TFB/3GFDCerjDBOGflIiWEEmy/0EMdUCi9KfnxhgrhDZO4KbwCtQMgWUPlYR+XWr 7+M885a2amCe9v37nSa6n/+Zg3fJ+SZj44REsaqCgItRH3Rk5+WXtogeAiYaZvHI vD5FWw1PhBuLo4xBpA5YzAPmQiHy/xJXXoJKOGsbfjG01e0Lw3Vp -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:26 2025 by rpki-client