$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa File: fb1bf863-b3b2-359d-831e-d305657e8de3.roa (raw, json) Hash identifier: xUonFwUJiKvUDGu+RIk1sqHGZqmbUPJSFQlcPDTvor8= Subject key identifier: 08:80:88:76:8F:B2:58:0F:46:28:50:33:E2:15:76:1D:6D:48:35:AC Certificate issuer: /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Certificate serial: 010D0C9F43285849271913692C7B14BA05549000 Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa Signing time: Tue 11 Mar 2025 13:00:51 +0000 ROA not before: Tue 11 Mar 2025 13:00:51 +0000 ROA not after: Mon 09 Jun 2025 13:00:51 +0000 asID: 26006 IP address blocks: 23.168.136.0/24 maxlen: 24 2602:f9bd::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:19:13:69:2c:7b:14:ba:05:54:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Validity Not Before: Mar 11 13:00:51 2025 GMT Not After : Jun 9 13:00:51 2025 GMT Subject: CN=e088aa47-c005-4551-b8ef-8608171ec59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:61:cd:2f:dd:0d:de:f8:29:85:98:07:63: 2f:d3:d8:c5:d2:62:c9:cd:66:3b:1a:9b:68:81:e6: 7c:22:6f:07:40:58:49:2d:da:1b:45:e3:5c:85:c6: 15:bf:90:70:56:74:84:3b:12:ae:8c:4d:e2:d7:46: 90:9c:0b:fb:81:54:51:21:3b:3a:a1:c1:d8:03:7a: eb:8b:46:29:0b:2d:1c:9c:a3:4f:b6:25:0a:b8:0c: c2:ff:75:96:d3:df:17:e1:d5:8a:ae:2e:63:15:e9: d1:af:f8:04:26:08:4b:e6:4b:0b:f8:42:5b:23:10: 94:59:1f:8a:0b:a5:1c:71:26:cf:ef:94:44:e3:9a: 0e:68:60:c3:97:23:74:d9:bb:aa:5d:89:ae:94:15: ed:06:ed:ad:24:95:1a:da:f9:d3:77:32:cb:00:2f: 32:03:38:9b:97:b0:fc:60:68:d5:a1:05:f8:1e:c1: f7:a8:47:35:bd:d8:65:2a:46:04:b2:23:1f:57:7d: fe:1c:d8:3c:31:35:fa:e6:0b:0e:b9:d4:20:27:e5: b5:27:e7:20:82:17:5e:2c:95:45:0e:9f:1f:84:1a: 1c:3d:07:0e:40:1b:b0:ca:6c:12:73:5c:f7:63:94: 9d:1d:16:2a:ec:6e:e8:c3:ce:bb:4e:d3:49:99:3a: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:80:88:76:8F:B2:58:0F:46:28:50:33:E2:15:76:1D:6D:48:35:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl X509v3 Authority Key Identifier: keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer sbgp-ipAddrBlock: critical IPv4: 23.168.136.0/24 IPv6: 2602:f9bd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:50:12:73:af:5c:f3:e9:cf:68:12:a0:c1:6c:f1:54:d4:f3: 80:4d:f2:71:da:4d:92:81:df:75:2e:c3:7f:8e:9d:8c:b0:e5: 43:11:71:c0:0f:e2:ac:67:b8:ce:d6:9c:3f:dd:01:89:d6:d8: f8:ff:3e:bd:5b:32:b7:e3:af:03:69:25:66:50:01:5e:97:e8: 86:20:14:8f:c6:68:43:b7:89:6c:52:92:3a:aa:7f:f3:b9:a2: 92:e0:a7:97:82:78:18:0f:5f:fe:6e:63:c3:e0:d1:ea:9c:fa: 80:79:29:97:f3:e8:1e:2c:1c:5f:c5:36:69:d8:d8:4a:9d:d1: e8:1a:b9:f7:3c:96:8c:ed:14:d1:30:47:86:b4:23:64:9f:4d: b7:b4:74:10:e1:64:54:d4:41:d3:b1:55:3e:a1:d0:e8:d4:01: b1:27:35:b1:0c:14:b1:af:e1:04:45:a6:32:86:da:ef:c5:78: d7:48:1c:22:ac:ce:aa:8f:37:24:dd:48:17:7e:fe:81:57:7e: 37:ea:2a:63:bd:b4:d2:94:a1:fc:4a:41:be:ea:d3:db:ec:a6: da:a4:fb:bd:59:1f:a9:2e:e1:a0:1e:82:ea:a3:14:3e:30:c5: 90:52:31:40:44:14:e8:ba:2c:6a:92:4d:8d:7b:78:05:20:6f: 92:98:5f:7a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEknGRNpLHsUugVUkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0 M2FlMB4XDTI1MDMxMTEzMDA1MVoXDTI1MDYwOTEzMDA1MVowLzEtMCsGA1UEAxMk ZTA4OGFhNDctYzAwNS00NTUxLWI4ZWYtODYwODE3MWVjNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluZhzS/dDd74KYWYB2Mv09jF0mLJzWY7Gpto geZ8Im8HQFhJLdobReNchcYVv5BwVnSEOxKujE3i10aQnAv7gVRRITs6ocHYA3rr i0YpCy0cnKNPtiUKuAzC/3WW098X4dWKri5jFenRr/gEJghL5ksL+EJbIxCUWR+K C6UccSbP75RE45oOaGDDlyN02buqXYmulBXtBu2tJJUa2vnTdzLLAC8yAzibl7D8 YGjVoQX4HsH3qEc1vdhlKkYEsiMfV33+HNg8MTX65gsOudQgJ+W1J+cgghdeLJVF Dp8fhBocPQcOQBuwymwSc1z3Y5SdHRYq7G7ow867TtNJmTohYwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAiAiHaPslgPRihQM+IVdh1tSDWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2 ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvZmIxYmY4NjMtYjNiMi0z NTlkLTgzMWUtZDMwNTY1N2U4ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3 YmY1YTQzYWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6iIMA4E AgACMAgDBgAmAvm9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhUBJzr1zz6c9oEqDBbPFU1POATfJx2k2S gd91LsN/jp2MsOVDEXHAD+KsZ7jO1pw/3QGJ1tj4/z69WzK3468DaSVmUAFel+iG IBSPxmhDt4lsUpI6qn/zuaKS4KeXgngYD1/+bmPD4NHqnPqAeSmX8+geLBxfxTZp 2NhKndHoGrn3PJaM7RTRMEeGtCNkn023tHQQ4WRU1EHTsVU+odDo1AGxJzWxDBSx r+EERaYyhtrvxXjXSBwirM6qjzck3UgXfv6BV3436ipjvbTSlKH8SkG+6tPb7Kba pPu9WR+pLuGgHoLqoxQ+MMWQUjFARBTouixqkk2Ne3gFIG+SmF96 -----END CERTIFICATE-----Generated at Fri Apr 4 16:25:53 2025 by rpki-client