$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/909b7a09-f70e-3683-ae0d-19de9c09a624.roa File: 909b7a09-f70e-3683-ae0d-19de9c09a624.roa (raw, json) Hash identifier: t/jst5MWrsaW6YeVpv2YZXSLBzMEgY0asGWI9+uxXCw= Subject key identifier: 04:3C:09:08:16:79:27:FD:6E:06:7B:C4:02:C5:BE:EB:0C:17:57:9F Certificate issuer: /CN=981ab9bf-5f34-4622-99ac-a75fc5fb7bca Certificate serial: 010D0C9F43285848CB8A8715C3B5C5F6694FADE0 Authority key identifier: 57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/909b7a09-f70e-3683-ae0d-19de9c09a624.roa Signing time: Thu 06 Feb 2025 17:55:06 +0000 ROA not before: Thu 06 Feb 2025 17:55:06 +0000 ROA not after: Wed 07 May 2025 16:55:06 +0000 asID: 396354 IP address blocks: 23.131.132.0/24 maxlen: 24 2607:7ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:8a:87:15:c3:b5:c5:f6:69:4f:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981ab9bf-5f34-4622-99ac-a75fc5fb7bca Validity Not Before: Feb 6 17:55:06 2025 GMT Not After : May 7 16:55:06 2025 GMT Subject: CN=796847ec-fc47-4241-81d3-ed5fffd83615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:19:33:6f:fd:26:b0:97:47:2a:c4:0e:84: aa:a9:84:7e:73:a8:e9:02:a8:f5:90:63:9c:c7:c6: 81:c1:9f:60:67:81:e9:d7:30:44:42:6c:db:df:03: 04:bd:d4:30:7d:71:96:90:25:c6:cf:3e:ac:13:ad: 84:7a:d5:4a:13:c0:99:b0:61:e1:8a:c5:a3:8d:28: bb:69:0c:95:86:66:5d:89:1e:36:2c:54:61:9c:19: 97:6c:86:97:32:e9:60:c1:72:17:d6:71:27:e7:86: b4:f4:e9:92:1d:b0:86:5d:00:16:e7:22:03:10:91: 52:0d:3e:6e:e6:20:ef:30:ee:ec:65:d2:99:7d:07: e3:eb:f0:5b:a5:f1:7a:1b:79:6d:2c:56:cd:2a:a5: 75:03:6f:59:54:74:fe:b4:53:72:90:24:06:aa:0f: 1d:e4:2a:42:a2:3e:48:68:1a:7c:f3:71:d1:b0:0d: cb:53:e3:7a:a0:e8:2f:6e:2a:ff:6c:fe:54:b5:58: 51:18:aa:2f:95:11:6b:db:83:8d:53:b0:5f:a5:da: ea:c4:96:1b:b3:69:7c:58:7d:10:c5:aa:14:b7:83: 68:92:7c:33:2c:e3:ed:31:84:75:f7:27:9e:ba:5c: 2d:37:da:83:a6:e5:7b:83:d8:94:45:9a:3c:55:43: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3C:09:08:16:79:27:FD:6E:06:7B:C4:02:C5:BE:EB:0C:17:57:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/909b7a09-f70e-3683-ae0d-19de9c09a624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.crl X509v3 Authority Key Identifier: keyid:57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer sbgp-ipAddrBlock: critical IPv4: 23.131.132.0/24 IPv6: 2607:7ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:20:0b:7f:2e:f9:2a:2d:1d:71:63:2b:39:d5:01:6c:5c:5d: 6f:a9:c3:30:fb:c3:ac:a4:a4:ad:ac:70:a8:12:f0:85:e9:87: 30:72:00:db:11:de:c6:9b:8e:49:54:88:12:f7:ca:2f:70:02: 4d:36:7a:b0:d0:e7:bb:8c:a6:62:59:7c:a6:ff:d4:c7:07:99: 96:d9:76:d3:15:c3:2b:5d:8f:2b:b9:70:78:5c:a1:9d:87:16: b8:7e:f6:d4:dc:3c:72:35:77:49:fc:52:9e:48:7c:41:b5:d5: b8:55:47:fe:89:f6:21:46:a8:41:5e:ff:39:95:3f:96:7d:df: 7c:e5:d6:32:db:c9:08:74:bd:67:8c:fb:19:1e:1d:9b:0c:20: 26:77:30:3b:ef:b2:70:1b:c4:58:2f:8f:e8:2e:35:09:06:9c: 41:64:fa:20:d6:a3:d6:10:0f:cc:93:0a:07:7a:0a:fa:ab:f9: 67:51:83:4e:b2:fb:21:d4:f6:7b:38:08:3d:46:e5:01:5b:f7: cf:8e:ce:eb:2e:50:a7:3e:df:3d:90:00:79:6f:76:51:ea:17: 75:64:63:4f:5f:3d:b3:92:5d:fc:30:64:8f:38:26:cd:78:8c: 08:35:78:75:b3:65:05:0a:98:ec:c8:53:82:93:58:71:e9:78: 34:d7:e4:6f -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEjLiocVw7XF9mlPreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxYWI5YmYtNWYzNC00NjIyLTk5YWMtYTc1ZmM1ZmI3 YmNhMB4XDTI1MDIwNjE3NTUwNloXDTI1MDUwNzE2NTUwNlowLzEtMCsGA1UEAxMk Nzk2ODQ3ZWMtZmM0Ny00MjQxLTgxZDMtZWQ1ZmZmZDgzNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIoZM2/9JrCXRyrEDoSqqYR+c6jpAqj1kGOc x8aBwZ9gZ4Hp1zBEQmzb3wMEvdQwfXGWkCXGzz6sE62EetVKE8CZsGHhisWjjSi7 aQyVhmZdiR42LFRhnBmXbIaXMulgwXIX1nEn54a09OmSHbCGXQAW5yIDEJFSDT5u 5iDvMO7sZdKZfQfj6/BbpfF6G3ltLFbNKqV1A29ZVHT+tFNykCQGqg8d5CpCoj5I aBp883HRsA3LU+N6oOgvbir/bP5UtVhRGKovlRFr24ONU7BfpdrqxJYbs2l8WH0Q xaoUt4NoknwzLOPtMYR19yeeulwtN9qDpuV7g9iURZo8VUN21QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAQ8CQgWeSf9bgZ7xALFvusMF1efMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ODFh YjliZi01ZjM0LTQ2MjItOTlhYy1hNzVmYzVmYjdiY2EvOTA5YjdhMDktZjcwZS0z NjgzLWFlMGQtMTlkZTljMDlhNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTgxYWI5YmYtNWYzNC00NjIyLTk5 YWMtYTc1ZmM1ZmI3YmNhLzk4MWFiOWJmLTVmMzQtNDYyMi05OWFjLWE3NWZjNWZi N2JjYS5jcmwwHwYDVR0jBBgwFoAUV8yw0KZoHhbiJ4jx8xKcHqnjiw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ODFhYjliZi01ZjM0LTQ2MjItOTlhYy1hNzVm YzVmYjdiY2EuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OEMA0E AgACMAcDBQAmB3rAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAB4gC38u+SotHXFjKznVAWxcXW+pwzD7w6yk pK2scKgS8IXphzByANsR3sabjklUiBL3yi9wAk02erDQ57uMpmJZfKb/1McHmZbZ dtMVwytdjyu5cHhcoZ2HFrh+9tTcPHI1d0n8Up5IfEG11bhVR/6J9iFGqEFe/zmV P5Z933zl1jLbyQh0vWeM+xkeHZsMICZ3MDvvsnAbxFgvj+guNQkGnEFk+iDWo9YQ D8yTCgd6Cvqr+WdRg06y+yHU9ns4CD1G5QFb98+OzusuUKc+3z2QAHlvdlHqF3Vk Y09fPbOSXfwwZI84Js14jAg1eHWzZQUKmOzIU4KTWHHpeDTX5G8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:55 2025 by rpki-client