$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa File: f0970a1e-18d9-3ab2-9803-e503b2782f21.roa (raw, json) Hash identifier: bO+JCGu2Oy3vaSy1ZUyEp1V5ZSNNl6jmp5chRziieuE= Subject key identifier: 5A:5F:97:5E:40:7A:8D:DD:09:9D:58:D6:BF:BA:F6:7C:97:91:C4:90 Certificate issuer: /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2 Certificate serial: 010D0C9F432858494733E769E1F64B7FF9AB9880 Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 396893 IP address blocks: 23.132.232.0/24 maxlen: 24 2620:8d:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e7:69:e1:f6:4b:7f:f9:ab:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=183fa4f9-bc91-4a73-96b2-b8447bb98fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:73:0a:89:df:f7:c5:6a:33:29:e9:32:c7: 31:18:3a:38:7c:2e:22:bf:e6:ff:47:db:97:2b:51: f5:5c:14:f0:05:8e:ae:91:44:c7:66:04:32:1f:4d: 4b:24:c8:7d:1e:b1:5b:b1:6c:e8:0c:f7:b6:c2:2e: db:06:ef:c3:6f:92:d9:2c:11:df:a2:f7:04:f7:7c: 62:c6:82:d5:00:e6:00:04:0f:04:35:52:64:7d:c2: 25:0e:77:f6:6a:f7:95:7e:00:88:fa:27:f7:35:43: 64:a4:46:af:38:92:c5:4b:66:01:52:f9:ad:43:35: c9:8a:f3:cb:c3:3b:18:f2:e7:67:4d:b0:8c:34:1a: 92:cc:36:7e:bb:93:f3:6e:e3:d3:cc:db:b0:df:4f: bc:16:bf:a5:0b:26:dc:7c:52:de:c3:93:58:6f:99: ba:ea:e6:d0:e3:a5:be:9e:74:cd:93:e5:52:f9:88: f4:1f:40:27:3f:46:2f:dc:5b:0d:f4:3a:5e:72:6c: 5b:78:9b:2f:4e:dc:b3:5d:3c:29:5c:26:2c:31:25: 12:44:e3:22:ba:72:ad:7b:e8:86:da:46:dd:e6:15: 4b:a1:6a:8b:91:28:bd:13:4a:44:b1:71:40:07:b7: 09:dd:b8:4f:59:ad:7f:55:55:0d:87:81:23:7f:b0: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:97:5E:40:7A:8D:DD:09:9D:58:D6:BF:BA:F6:7C:97:91:C4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl X509v3 Authority Key Identifier: keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer sbgp-ipAddrBlock: critical IPv4: 23.132.232.0/24 IPv6: 2620:8d:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:37:e2:97:4d:9d:bb:47:a7:1c:1c:28:10:fc:f2:20:58:33: 14:8a:a0:2b:ad:7a:ad:29:95:80:52:01:b3:21:76:48:19:e6: 29:05:16:40:af:45:14:8e:d7:66:ba:c1:d8:8b:f6:96:c3:65: 2d:f1:ea:6e:02:07:be:14:fa:29:32:fa:94:13:a3:54:41:50: 0a:da:94:a7:f9:2e:45:33:b3:a4:1c:fa:d8:d8:1c:41:d9:a9: e3:04:be:14:33:16:cc:2b:cd:f1:4a:30:29:94:97:f0:40:02: bc:c9:6e:69:9b:2d:d1:20:ec:36:18:ac:c4:f5:2f:38:3d:28: ed:22:95:2b:c0:8a:18:1a:01:c2:21:72:b3:b0:09:c4:ba:96: 46:fe:ba:3e:05:b7:b4:3f:05:0e:76:dc:7a:31:3d:6f:d2:11: 18:10:a6:80:03:71:e7:20:00:c9:ba:32:5a:39:b4:33:da:e6: f0:e4:ca:ab:7a:11:17:23:1b:e7:7e:cf:9c:29:7f:c9:b8:65: 59:a9:0b:bf:97:15:e0:63:65:cc:ac:d4:26:f5:ca:b6:56:c2: f0:95:22:03:51:3f:0d:ca:6b:16:95:46:46:99:44:cc:3d:8c: 46:db:7a:20:a8:6b:cc:71:36:c6:ad:e8:66:4e:31:21:81:5d: b6:6e:15:ae -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWElHM+dp4fZLf/mrmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3YmQ2NWYtODNkMi00MDQ2LWFkNjQtNDBiYTQ1ODQx NWEyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MTgzZmE0ZjktYmM5MS00YTczLTk2YjItYjg0NDdiYjk4ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzBzConf98VqMynpMscxGDo4fC4iv+b/R9uX K1H1XBTwBY6ukUTHZgQyH01LJMh9HrFbsWzoDPe2wi7bBu/Db5LZLBHfovcE93xi xoLVAOYABA8ENVJkfcIlDnf2aveVfgCI+if3NUNkpEavOJLFS2YBUvmtQzXJivPL wzsY8udnTbCMNBqSzDZ+u5PzbuPTzNuw30+8Fr+lCybcfFLew5NYb5m66ubQ46W+ nnTNk+VS+Yj0H0AnP0Yv3FsN9DpecmxbeJsvTtyzXTwpXCYsMSUSROMiunKte+iG 2kbd5hVLoWqLkSi9E0pEsXFAB7cJ3bhPWa1/VVUNh4Ejf7A8iQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFpfl15Aeo3dCZ1Y1r+69nyXkcSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdi ZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJhNDU4NDE1YTIvZjA5NzBhMWUtMThkOS0z YWIyLTk4MDMtZTUwM2IyNzgyZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ3YmQ2NWYtODNkMi00MDQ2LWFk NjQtNDBiYTQ1ODQxNWEyL2ZkN2JkNjVmLTgzZDItNDA0Ni1hZDY0LTQwYmE0NTg0 MTVhMi5jcmwwHwYDVR0jBBgwFoAUcz2oFnyQe5iHVNEbg2WD3ys1MBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdiZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJh NDU4NDE1YTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4ToMA8E AgACMAkDBwAmIACNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXTfil02du0enHBwoEPzyIFgzFIqgK616 rSmVgFIBsyF2SBnmKQUWQK9FFI7XZrrB2Iv2lsNlLfHqbgIHvhT6KTL6lBOjVEFQ CtqUp/kuRTOzpBz62NgcQdmp4wS+FDMWzCvN8UowKZSX8EACvMluaZst0SDsNhis xPUvOD0o7SKVK8CKGBoBwiFys7AJxLqWRv66PgW3tD8FDnbcejE9b9IRGBCmgANx 5yAAyboyWjm0M9rm8OTKq3oRFyMb537PnCl/ybhlWakLv5cV4GNlzKzUJvXKtlbC 8JUiA1E/DcprFpVGRplEzD2MRtt6IKhrzHE2xq3oZk4xIYFdtm4Vrg== -----END CERTIFICATE-----Generated at Fri Apr 11 21:38:13 2025 by rpki-client