$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa File: 4f62ed94-cb56-3676-93b3-049015d9490b.roa (raw, json) Hash identifier: ZVFV1UaW+W5jq4MnFPXNEDEJPvsEDd4wiviulIRIHYA= Subject key identifier: BC:B3:45:3D:D8:BA:7D:1D:59:86:9E:EC:C1:2E:D0:08:75:A0:E7:B4 Certificate issuer: /CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971 Certificate serial: 010D0C9F43285848C2B64AD12FDD7CC352E68A00 Authority key identifier: E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 6939 IP address blocks: 23.171.48.0/24 maxlen: 24 172.111.40.0/22 maxlen: 22 2602:fcd7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4a:d1:2f:dd:7c:c3:52:e6:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=7db8068b-6703-4ad6-9515-3763d69ef87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:d3:31:15:db:49:3c:58:ba:2e:ca:33:14: fd:d9:6a:5b:b8:70:89:5f:75:4a:a0:40:cf:08:66: 9f:66:47:16:ec:7e:bc:8e:51:dd:01:70:a8:04:7a: b1:1c:52:8d:7d:ac:44:23:4f:43:6b:54:a3:59:0a: fd:dc:25:b8:a0:77:6a:a9:86:82:8e:79:7a:88:e3: 52:23:0d:e0:54:5e:e2:6f:9c:e6:b9:11:92:e8:04: 99:ba:19:32:56:b1:83:24:2b:17:ee:3c:35:93:cf: 77:0d:2c:6b:07:fc:e2:e1:4d:17:d7:15:1f:4e:c8: ad:df:f8:60:45:ee:d6:7c:7d:63:7f:4a:dd:48:c6: 84:5e:0e:26:03:ec:45:90:63:17:a9:ce:d7:85:b1: 50:22:85:1c:95:6c:d6:10:25:4f:7c:4d:0b:7c:4f: b5:44:46:ab:78:8a:24:35:f7:2a:cb:37:04:9f:16: aa:74:5c:e4:27:c0:c8:84:d6:a0:37:1a:75:6c:87: 98:5a:71:71:16:61:a1:f3:53:9b:ed:11:dd:e6:31: e3:2b:2e:53:d6:af:b9:3e:89:4b:d6:dc:18:c4:c7: dc:0d:09:2b:f5:eb:13:e2:54:54:af:e7:4c:70:82: 41:41:0a:c7:ff:3e:fe:36:01:f3:2e:bd:66:5a:16: 5c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:45:3D:D8:BA:7D:1D:59:86:9E:EC:C1:2E:D0:08:75:A0:E7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl X509v3 Authority Key Identifier: keyid:E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer sbgp-ipAddrBlock: critical IPv4: 23.171.48.0/24 172.111.40.0/22 IPv6: 2602:fcd7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9b:4b:29:6b:28:fa:6b:aa:1f:46:a1:88:c5:6c:2c:25:3d: 8a:f4:eb:d2:ae:68:8f:9e:46:33:c2:96:40:7c:a1:49:e4:4a: 5d:d4:bc:76:31:4b:c9:ad:a0:3e:95:b8:63:bc:7d:a9:41:38: 1f:d5:56:89:bd:be:15:80:65:8c:2f:10:c9:20:46:d5:d1:28: 97:84:4e:07:e7:d7:4d:cc:77:85:94:38:ac:e6:c1:ef:b1:a6: c1:fd:0d:d7:d2:79:91:15:5b:2f:c6:a4:1c:ab:15:09:95:e2: cc:33:d2:fe:4b:f1:49:f4:1b:89:d8:cc:55:e0:7c:24:b2:c7: 97:23:3d:82:c2:a1:23:dc:cc:ec:96:44:56:c4:76:60:f2:aa: 4d:f1:40:13:b9:b1:19:d5:dc:2d:f3:b0:0e:32:4f:ef:aa:4c: 7a:2e:06:44:10:d9:3b:d9:60:51:82:c6:ae:13:7b:7f:ec:ff: fd:31:24:74:ee:60:6f:8d:3e:9e:61:af:1c:11:93:92:5a:88: 5f:ba:68:20:c0:0f:ae:0e:df:13:7a:b1:61:32:68:50:ab:33: 14:1d:88:6c:6c:38:83:f1:d8:5d:5f:cc:dc:38:a1:17:8c:1a: a9:8e:0a:4d:a9:06:07:9c:3b:ae:fb:3c:41:b4:ab:92:a0:90: f4:c8:61:13 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEjCtkrRL918w1LmigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIzNWQxZTQtODYzZi00ZTVkLThiMWUtY2RhODFjNDE2 OTcxMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk N2RiODA2OGItNjcwMy00YWQ2LTk1MTUtMzc2M2Q2OWVmODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmADTMRXbSTxYui7KMxT92WpbuHCJX3VKoEDP CGafZkcW7H68jlHdAXCoBHqxHFKNfaxEI09Da1SjWQr93CW4oHdqqYaCjnl6iONS Iw3gVF7ib5zmuRGS6ASZuhkyVrGDJCsX7jw1k893DSxrB/zi4U0X1xUfTsit3/hg Re7WfH1jf0rdSMaEXg4mA+xFkGMXqc7XhbFQIoUclWzWECVPfE0LfE+1REareIok NfcqyzcEnxaqdFzkJ8DIhNagNxp1bIeYWnFxFmGh81Ob7RHd5jHjKy5T1q+5PolL 1twYxMfcDQkr9esT4lRUr+dMcIJBQQrH/z7+NgHzLr1mWhZcwwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFLyzRT3Yun0dWYae7MEu0Ah1oOe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjM1 ZDFlNC04NjNmLTRlNWQtOGIxZS1jZGE4MWM0MTY5NzEvNGY2MmVkOTQtY2I1Ni0z Njc2LTkzYjMtMDQ5MDE1ZDk0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGIzNWQxZTQtODYzZi00ZTVkLThi MWUtY2RhODFjNDE2OTcxLzBiMzVkMWU0LTg2M2YtNGU1ZC04YjFlLWNkYTgxYzQx Njk3MS5jcmwwHwYDVR0jBBgwFoAU4DGfMWgiKDSFoPOehadvqufZKMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjM1ZDFlNC04NjNmLTRlNWQtOGIxZS1jZGE4 MWM0MTY5NzEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6swAwQC rG8oMA4EAgACMAgDBgQmAvzXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRm0spayj6a6ofRqGIxWwsJT2K 9OvSrmiPnkYzwpZAfKFJ5Epd1Lx2MUvJraA+lbhjvH2pQTgf1VaJvb4VgGWMLxDJ IEbV0SiXhE4H59dNzHeFlDis5sHvsabB/Q3X0nmRFVsvxqQcqxUJleLMM9L+S/FJ 9BuJ2MxV4HwksseXIz2CwqEj3MzslkRWxHZg8qpN8UATubEZ1dwt87AOMk/vqkx6 LgZEENk72WBRgsauE3t/7P/9MSR07mBvjT6eYa8cEZOSWohfumggwA+uDt8TerFh MmhQqzMUHYhsbDiD8dhdX8zcOKEXjBqpjgpNqQYHnDuu+zxBtKuSoJD0yGET -----END CERTIFICATE-----Generated at Tue Apr 8 18:19:39 2025 by rpki-client