$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa File: 287a2a23-ee50-3199-aa52-e050b1ad449e.roa (raw, json) Hash identifier: ui3Cd6h9pAwjQpdjFSge0pj+NCpiE+Vl2kVLUJhFsrU= Subject key identifier: 62:E3:FC:73:03:5D:CC:8C:3E:CF:E8:1E:70:B0:BC:DE:CB:B3:04:F8 Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F432858490881612F7008EA6E0A1D1C80 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 31775 IP address blocks: 23.175.80.0/24 maxlen: 24 23.226.80.0/20 maxlen: 24 204.80.232.0/24 maxlen: 24 209.94.32.0/20 maxlen: 24 2606:29c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:61:2f:70:08:ea:6e:0a:1d:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=504886c8-0dc6-4a21-a30b-5b1d9d5c39e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:30:af:65:6f:be:6a:9d:eb:b7:92:60:42:46: b3:7c:1f:d7:b5:1a:01:27:d3:0d:69:af:4f:c2:52: df:79:c0:f2:97:a6:ab:81:5e:8e:2c:00:88:2d:76: d8:5d:64:5e:f1:a4:ec:13:13:fb:7a:fb:a8:56:a8: 35:cf:e7:5a:75:83:7c:e8:72:f5:e1:be:8d:1c:6b: a3:5b:38:ee:30:5e:ff:d8:fb:35:64:b6:1e:5f:c5: d6:7a:36:7e:5f:71:ad:ff:25:69:8b:af:46:22:f9: 68:20:23:1b:19:9f:08:1e:49:e5:50:45:36:e2:cf: 6a:45:f0:44:7e:84:4e:1e:24:9c:a7:fb:94:ce:ad: 45:55:ba:5b:18:74:32:b8:16:bd:3e:df:df:b9:c7: b5:2f:1a:a3:39:b8:37:33:06:1b:63:a0:4f:94:90: d6:be:f1:0f:e9:64:ee:1c:06:c8:d0:ce:c0:0f:b3: 5c:9f:be:7b:70:f8:cd:0d:b7:63:b6:98:4d:e3:e7: 86:49:97:37:93:50:fd:a9:e6:90:82:de:3d:20:ea: 27:e3:fe:c4:1d:18:9f:ab:0c:e7:06:73:42:9e:4f: e7:98:49:ce:44:ca:92:c5:c8:9e:2e:08:67:09:60: 0c:13:69:8a:92:12:81:9b:20:17:a6:14:29:93:b5: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:FC:73:03:5D:CC:8C:3E:CF:E8:1E:70:B0:BC:DE:CB:B3:04:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 23.175.80.0/24 23.226.80.0/20 204.80.232.0/24 209.94.32.0/20 IPv6: 2606:29c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b5:7f:b2:c4:5c:02:eb:a1:3f:69:38:f6:8c:8e:cc:20:2b: ef:dd:9f:92:42:fc:20:1c:25:02:aa:63:aa:b6:49:50:9a:da: 9a:7b:21:e1:98:42:ed:52:24:f2:7e:8b:37:e5:25:4c:14:31: 63:76:f3:b4:ae:42:8a:60:5b:0b:61:1d:20:ad:6e:79:c8:f5: 1d:b5:00:b8:ee:e7:1b:c6:f3:4a:c3:a0:9c:24:3c:c1:44:11: bb:d2:50:52:dd:ed:0f:d4:08:07:bd:65:17:7a:04:6f:7f:60: d0:18:2b:1a:24:94:b8:87:e4:ac:cd:5f:97:77:2d:3e:10:b4: 17:04:74:4b:3a:aa:5f:b1:21:ac:45:df:92:f8:a2:de:72:dc: de:bb:b5:7c:f1:6a:62:d7:5a:7a:0b:39:63:4d:15:00:7e:af: fa:2e:c4:44:2c:4f:1d:b6:93:44:c1:e9:02:53:e7:43:15:0c: 88:aa:08:d6:76:b9:81:ac:1a:62:a1:b4:2b:75:45:75:90:60: e4:98:4b:3e:9f:87:4a:97:62:fc:0c:41:f5:b9:2d:da:9c:b7: 54:78:14:24:71:97:b2:9b:71:bb:68:0e:42:10:ee:e1:6e:00: 09:94:f2:39:0d:12:41:4f:55:5a:4e:bd:f5:a7:5d:b7:33:cc: fe:66:42:1f -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEkIgWEvcAjqbgodHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NTA0ODg2YzgtMGRjNi00YTIxLWEzMGItNWIxZDlkNWMzOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DCvZW++ap3rt5JgQkazfB/XtRoBJ9MNaa9P wlLfecDyl6argV6OLACILXbYXWRe8aTsExP7evuoVqg1z+dadYN86HL14b6NHGuj WzjuMF7/2Ps1ZLYeX8XWejZ+X3Gt/yVpi69GIvloICMbGZ8IHknlUEU24s9qRfBE foROHiScp/uUzq1FVbpbGHQyuBa9Pt/fuce1LxqjObg3MwYbY6BPlJDWvvEP6WTu HAbI0M7AD7Ncn757cPjNDbdjtphN4+eGSZc3k1D9qeaQgt49IOon4/7EHRifqwzn BnNCnk/nmEnORMqSxcieLghnCWAME2mKkhKBmyAXphQpk7VKrQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFGLj/HMDXcyMPs/oHnCwvN7LswT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMjg3YTJhMjMtZWU1MC0z MTk5LWFhNTItZTA1MGIxYWQ0NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF69QAwQE F+JQAwQAzFDoAwQE0V4gMA0EAgACMAcDBQAmBinAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALG1f7LEXALr oT9pOPaMjswgK+/dn5JC/CAcJQKqY6q2SVCa2pp7IeGYQu1SJPJ+izflJUwUMWN2 87SuQopgWwthHSCtbnnI9R21ALju5xvG80rDoJwkPMFEEbvSUFLd7Q/UCAe9ZRd6 BG9/YNAYKxoklLiH5KzNX5d3LT4QtBcEdEs6ql+xIaxF35L4ot5y3N67tXzxamLX WnoLOWNNFQB+r/ouxEQsTx22k0TB6QJT50MVDIiqCNZ2uYGsGmKhtCt1RXWQYOSY Sz6fh0qXYvwMQfW5Ldqct1R4FCRxl7KbcbtoDkIQ7uFuAAmU8jkNEkFPVVpOvfWn XbczzP5mQh8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:50:05 2025 by rpki-client