$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa File: 72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa (raw, json) Hash identifier: 3RXX0qzY1oxZUVhvBV8Obct993RT08YGQGF02bTDuCo= Subject key identifier: 96:83:42:5C:9B:81:D5:B3:EB:D8:1F:79:01:67:BF:4E:73:86:88:99 Certificate issuer: /CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf Certificate serial: 010D0C9F43285848E43671C0CEF1FEA2DE18F110 Authority key identifier: B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa Signing time: Sat 15 Feb 2025 14:00:51 +0000 ROA not before: Sat 15 Feb 2025 14:00:51 +0000 ROA not after: Fri 16 May 2025 13:00:51 +0000 asID: 53850 IP address blocks: 23.147.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e4:36:71:c0:ce:f1:fe:a2:de:18:f1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf Validity Not Before: Feb 15 14:00:51 2025 GMT Not After : May 16 13:00:51 2025 GMT Subject: CN=e2057c15-cf48-4798-a3f0-d50a661a7796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:5a:c6:fc:74:cb:79:3a:8b:9e:58:ba:b4: a6:02:b1:36:6b:6e:78:2d:f9:dd:6a:a8:a5:d0:cb: 9d:1a:db:05:c5:91:4f:bf:f5:8e:ee:17:44:59:95: b4:af:79:c2:fa:0c:5b:9f:1d:0e:ff:1d:9b:22:d4: 5b:7f:50:06:a3:09:50:70:e6:47:9f:fb:cc:62:fb: 01:78:0b:54:7a:36:59:aa:01:a8:9e:3f:04:bd:bf: c0:e9:15:cd:eb:26:83:45:a0:9a:24:c7:3b:25:a9: 6d:fd:03:e7:3d:2e:d0:63:2f:e8:b4:0b:f5:e4:f4: ca:86:0f:cc:78:e9:53:6a:9b:91:1f:a9:b3:0b:64: 56:c0:22:d5:ff:15:58:7e:29:07:b4:36:cf:66:22: b8:29:e2:76:ed:f6:04:49:56:ad:c2:31:d1:b9:f4: 1c:3f:e7:cd:04:d9:47:2b:46:f7:f2:32:c7:c4:01: 62:f2:0d:5e:2f:00:dd:90:b2:4a:31:c9:bf:07:87: b0:e7:6a:6b:b8:cb:7c:c5:f2:9b:ad:8f:57:b5:a2: a5:cf:36:5b:6d:d5:ec:60:cb:b3:f4:7f:7c:69:3b: b7:87:db:dc:e8:18:ec:60:4d:97:5c:07:b5:2e:24: 75:8f:c3:01:7e:64:7d:77:8b:20:d5:4c:ff:09:31: e7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:83:42:5C:9B:81:D5:B3:EB:D8:1F:79:01:67:BF:4E:73:86:88:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.crl X509v3 Authority Key Identifier: keyid:B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer sbgp-ipAddrBlock: critical IPv4: 23.147.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:07:9a:54:43:df:12:43:91:96:dd:6b:24:9a:e9:91:9e:2c: 61:43:86:74:7a:ac:0f:38:e0:cb:d5:3b:b4:c8:30:b3:23:64: 89:0e:42:b4:2d:17:1e:39:3e:2d:3c:29:d6:4b:98:f6:72:f8: 34:f0:60:35:a7:1a:3b:c0:3f:19:3c:38:da:23:34:2d:fe:58: 0f:10:b7:fb:98:85:5a:6b:7b:95:d1:24:50:45:23:53:a4:2e: 2f:e3:a9:0f:ac:96:bb:3a:e8:ce:4f:4d:95:34:dc:2e:98:c3: 59:ab:ab:2e:cc:83:b6:07:b6:b2:e1:1f:9f:00:31:ce:c2:f3: 65:2a:79:06:35:71:c9:3b:38:0f:1d:21:7a:6a:84:da:e1:d6: 64:6a:5b:08:13:aa:68:d0:b0:bf:52:f4:c5:e0:5f:e8:41:75: 72:60:a0:4e:2a:e7:e3:56:f1:a0:94:64:c8:54:02:be:53:91: 92:af:81:22:fe:c3:a3:8c:46:af:82:57:63:16:03:f3:9a:91: 74:d0:d8:64:6d:62:a3:4e:3a:fc:ac:f9:4c:9b:9d:51:37:a8: 8f:94:89:b5:12:91:b3:e3:d2:ba:2b:22:27:f1:88:87:13:a7: e1:d3:90:d6:a0:4b:f1:2f:83:df:db:dd:8b:63:93:51:6f:ab: c3:96:b2:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjkNnHAzvH+ot4Y8RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZkOTQwYjYtNmMzZC00ZTk2LTk5MWMtYTdlNjRiOGIw OWNmMB4XDTI1MDIxNTE0MDA1MVoXDTI1MDUxNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTIwNTdjMTUtY2Y0OC00Nzk4LWEzZjAtZDUwYTY2MWE3Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqVaxvx0y3k6i55YurSmArE2a254Lfndaqil 0MudGtsFxZFPv/WO7hdEWZW0r3nC+gxbnx0O/x2bItRbf1AGowlQcOZHn/vMYvsB eAtUejZZqgGonj8Evb/A6RXN6yaDRaCaJMc7Jalt/QPnPS7QYy/otAv15PTKhg/M eOlTapuRH6mzC2RWwCLV/xVYfikHtDbPZiK4KeJ27fYESVatwjHRufQcP+fNBNlH K0b38jLHxAFi8g1eLwDdkLJKMcm/B4ew52pruMt8xfKbrY9XtaKlzzZbbdXsYMuz 9H98aTu3h9vc6BjsYE2XXAe1LiR1j8MBfmR9d4sg1Uz/CTHnfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaDQlybgdWz69gfeQFnv05zhoiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNmQ5 NDBiNi02YzNkLTRlOTYtOTkxYy1hN2U2NGI4YjA5Y2YvNzJjNmI0YzYtZjU4Yi0z ZmQ5LWExYjItNGVlOWM5MTY2MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDZkOTQwYjYtNmMzZC00ZTk2LTk5 MWMtYTdlNjRiOGIwOWNmLzA2ZDk0MGI2LTZjM2QtNGU5Ni05OTFjLWE3ZTY0Yjhi MDljZi5jcmwwHwYDVR0jBBgwFoAUt8UnUjmg0CR89tzQTIsmLszmJLkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNmQ5NDBiNi02YzNkLTRlOTYtOTkxYy1hN2U2 NGI4YjA5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5M4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYHmlRD3xJDkZbdaySa6ZGeLGFDhnR6rA844MvVO7TIMLMjZIkOQrQt Fx45Pi08KdZLmPZy+DTwYDWnGjvAPxk8ONojNC3+WA8Qt/uYhVpre5XRJFBFI1Ok Li/jqQ+slrs66M5PTZU03C6Yw1mrqy7Mg7YHtrLhH58AMc7C82UqeQY1cck7OA8d IXpqhNrh1mRqWwgTqmjQsL9S9MXgX+hBdXJgoE4q5+NW8aCUZMhUAr5TkZKvgSL+ w6OMRq+CV2MWA/OakXTQ2GRtYqNOOvys+UybnVE3qI+UibUSkbPj0rorIifxiIcT p+HTkNagS/Evg9/b3Ytjk1Fvq8OWsvs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:30 2025 by rpki-client