$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa File: ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa (raw, json) Hash identifier: 0noI3tnVY27i8I+CWaNgXNZpLeSnpNhH0kUSVKeXc3I= Subject key identifier: 96:20:12:58:D9:88:DC:DC:E8:D4:8C:0F:2F:7D:93:98:65:A9:1C:87 Certificate issuer: /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Certificate serial: 010D0C9F43285848A9962B7295DC8693BADD7F80 Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 30114 IP address blocks: 23.146.88.0/24 maxlen: 24 2602:fab0:20::/44 maxlen: 48 2602:fab0:30::/44 maxlen: 48 2602:fab0:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:2b:72:95:dc:86:93:ba:dd:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=5f98c4db-f5c9-4c38-bdc3-fb1632684c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:49:d2:1e:77:d6:62:75:94:c8:e5:66:39: a6:a7:53:07:e8:f8:23:3e:36:82:d1:00:13:52:43: 58:8e:85:f0:b6:5e:fd:b3:80:1f:59:a0:cc:8d:d2: d0:20:27:50:6d:1f:be:0a:c1:57:02:ab:e1:74:7a: 16:33:9a:35:d4:5e:9d:52:7d:fc:c8:c2:c3:2b:6e: ab:ad:25:48:5e:95:ed:b2:61:a8:3a:fe:80:5e:79: ea:8e:b3:ab:0a:29:b1:20:93:92:52:d2:e0:fb:81: 8a:a9:1c:15:f3:e2:21:af:0f:c8:24:3a:31:dc:cf: 1e:fb:1a:f0:1e:49:a6:f8:d4:77:04:e3:e6:43:27: e1:1b:39:04:02:3c:1d:6e:d0:be:90:d4:43:5f:b6: 53:d1:53:e7:70:26:d0:e2:0b:e3:f9:a6:cf:cc:99: 70:94:43:b9:90:40:9c:05:45:e4:b2:8d:c9:1c:16: 87:01:b9:f7:f7:58:b2:9f:b5:10:57:88:fd:5b:61: 78:e7:e5:f5:25:95:67:40:62:da:57:b8:83:4b:d2: 02:82:46:6e:ae:59:1a:e9:bb:84:d7:dd:a7:63:65: d1:fa:90:75:fa:9a:e5:50:41:78:74:c5:cd:14:9d: 61:56:e1:48:32:e6:cc:56:f7:69:f7:b1:c3:35:e7: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:20:12:58:D9:88:DC:DC:E8:D4:8C:0F:2F:7D:93:98:65:A9:1C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl X509v3 Authority Key Identifier: keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer sbgp-ipAddrBlock: critical IPv4: 23.146.88.0/24 IPv6: 2602:fab0:20::-2602:fab0:4f:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:12:ce:dd:ed:06:34:ef:61:4c:87:a1:a2:98:a6:b2:b8:1b: e0:89:c9:c8:d8:dd:ec:e0:50:88:fa:4d:84:f9:c3:7d:17:c9: a4:59:6c:16:c5:b2:0c:a9:9f:da:c5:f7:d9:d3:29:ad:3e:72: 5e:85:be:85:6f:1d:9d:51:62:3e:95:a9:fc:e5:1d:40:16:d0: 32:5c:25:58:c4:b9:d1:73:d3:2d:c6:d1:3f:8f:23:33:c9:6b: 08:e4:cf:75:2a:f0:61:fd:b1:86:e7:98:7b:b0:7a:98:5f:c2: 5f:e9:a0:b1:78:55:d5:f9:f5:34:ea:91:e0:81:c1:0e:82:b2: 2c:b2:d0:65:c3:1b:38:38:61:78:cc:9c:47:c5:0f:94:8b:a4: 16:0c:a5:ce:66:93:0c:f4:83:90:34:8d:a0:41:51:67:4b:46: aa:09:32:a2:35:13:69:b0:e6:98:b6:0a:6e:09:fe:21:a5:66: 16:39:f3:ee:db:c1:2e:4e:8f:2e:14:47:cb:fc:9f:01:1d:e9: 0e:53:a2:3b:ca:7a:b3:78:e6:32:34:53:67:9b:ae:43:58:d1: e4:47:7c:8f:88:5e:96:90:15:9c:04:46:58:4a:50:4e:c4:98: e2:fd:b0:c5:06:b5:d1:8c:39:c3:cb:9a:4b:ae:e7:b6:9e:36: 68:90:07:52 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEiplityldyGk7rdf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh MjdlMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWY5OGM0ZGItZjVjOS00YzM4LWJkYzMtZmIxNjMyNjg0YzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE9J0h531mJ1lMjlZjmmp1MH6PgjPjaC0QAT UkNYjoXwtl79s4AfWaDMjdLQICdQbR++CsFXAqvhdHoWM5o11F6dUn38yMLDK26r rSVIXpXtsmGoOv6AXnnqjrOrCimxIJOSUtLg+4GKqRwV8+Ihrw/IJDox3M8e+xrw Hkmm+NR3BOPmQyfhGzkEAjwdbtC+kNRDX7ZT0VPncCbQ4gvj+abPzJlwlEO5kECc BUXkso3JHBaHAbn391iyn7UQV4j9W2F45+X1JZVnQGLaV7iDS9ICgkZurlka6buE 192nY2XR+pB1+prlUEF4dMXNFJ1hVuFIMubMVvdp97HDNecQ3QIDAQABo4IDcTCC A20wHQYDVR0OBBYEFJYgEljZiNzc6NSMDy99k5hlqRyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvY2E2MmYxYTUtNWVjYi0z MDQwLTg1ZjMtMWY4YjZjY2FkNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1 ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1 OWUxZmEyN2UuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAF5JYMBoE AgACMBQwEgMHBSYC+rAAIAMHBCYC+rAAQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiEs7d7QY072FMh6Gi mKayuBvgicnI2N3s4FCI+k2E+cN9F8mkWWwWxbIMqZ/axffZ0ymtPnJehb6Fbx2d UWI+lan85R1AFtAyXCVYxLnRc9MtxtE/jyMzyWsI5M91KvBh/bGG55h7sHqYX8Jf 6aCxeFXV+fU06pHggcEOgrIsstBlwxs4OGF4zJxHxQ+Ui6QWDKXOZpMM9IOQNI2g QVFnS0aqCTKiNRNpsOaYtgpuCf4hpWYWOfPu28EuTo8uFEfL/J8BHekOU6I7ynqz eOYyNFNnm65DWNHkR3yPiF6WkBWcBEZYSlBOxJji/bDFBrXRjDnDy5pLrue2njZo kAdS -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:11 2025 by rpki-client