$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa File: d893a598-2191-39e4-ab6f-df13d27172ac.roa (raw, json) Hash identifier: hrM+NAwXLFAYPzzhf3pfLt72gR/ItP870J59ujjMxlI= Subject key identifier: F4:C8:C7:D5:99:7C:A7:81:B1:10:D7:BD:4D:94:BF:2E:1F:7F:A5:A3 Certificate issuer: /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Certificate serial: 010D0C9F43285848A136144D421B39B6684CCEC0 Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 399029 IP address blocks: 23.144.216.0/24 maxlen: 24 2607:dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:14:4d:42:1b:39:b6:68:4c:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=ce448fe4-2bc7-4f0d-84c6-8713e3b2a70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:08:b4:6a:98:af:85:bc:95:6b:91:fd:1a: d3:f4:15:fa:05:6a:05:e1:ac:91:9f:59:df:63:fb: 3c:b5:da:9a:c8:09:34:5b:1f:03:14:cb:d7:01:f9: 28:ba:cf:89:4a:ef:7d:6f:c3:42:7a:1d:fe:28:83: 4b:5f:28:a6:20:9e:7e:3b:a6:64:2f:3e:d4:e2:8c: 62:62:12:9a:a9:61:48:4d:c2:a4:a1:99:0e:6e:f5: ef:48:86:a8:54:98:e5:84:04:a8:35:55:0f:fc:bb: ba:30:ac:a9:7a:68:5d:c3:ea:2c:4c:fe:fd:12:2a: 8a:3c:61:14:a8:7e:dd:d1:9f:d6:ee:9e:3f:b1:b6: 2b:bb:c5:e4:7d:a1:2e:ea:23:28:9d:68:d0:cf:65: b5:f2:24:a6:b5:27:33:7c:1c:57:51:9b:44:ce:f7: c6:aa:95:d4:c8:bc:26:e7:3e:64:4c:c9:d9:d1:8a: 5a:03:a7:81:dd:bd:3f:c3:63:d8:ae:c1:c9:0e:b3: 85:c2:15:7c:b9:df:0d:6a:d4:35:c0:5b:77:81:ed: 8c:9b:3d:c1:15:12:b3:6b:8e:6f:8d:19:02:30:d6: 30:00:3a:d1:ba:8b:60:e8:fe:3a:bb:95:13:99:6d: 26:00:29:3d:7a:a8:da:87:b1:89:22:57:00:4c:8f: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C8:C7:D5:99:7C:A7:81:B1:10:D7:BD:4D:94:BF:2E:1F:7F:A5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl X509v3 Authority Key Identifier: keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer sbgp-ipAddrBlock: critical IPv4: 23.144.216.0/24 IPv6: 2607:dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3e:7c:f1:80:58:8e:4f:6f:7f:10:c8:69:4a:91:8e:40:97: 6b:f8:78:16:b6:cc:5c:61:5d:cd:5f:b3:37:82:cf:66:08:39: ce:d6:e4:68:84:90:d6:d0:76:34:0b:04:82:4f:da:6a:b7:b2: fc:a7:67:37:6f:c4:5b:12:d4:41:db:c6:b2:79:0e:1a:0e:68: 4e:ef:e0:18:3c:d9:0f:e0:a3:b0:00:73:33:db:e3:9e:5c:55: fe:6c:eb:73:1c:2e:b1:14:e9:08:85:5e:fb:91:34:56:15:65: 8f:f8:df:06:12:75:47:b3:34:3e:0f:44:88:f8:a2:36:30:4c: 13:15:c3:d2:35:1e:11:e9:f4:92:e0:7c:82:38:d6:af:17:d8: bd:ed:92:30:87:dc:ac:bc:8a:7f:84:bc:c8:28:5b:d0:bc:22: c9:cf:84:1d:98:13:05:6a:54:45:85:0f:38:10:b5:48:55:b0: 03:cf:a7:20:3f:4f:0f:a3:a4:89:b8:98:e4:b7:35:e9:74:b6: 2a:23:2f:4b:90:1a:f9:06:67:91:4e:1d:ff:c9:93:70:09:61: cc:3a:54:44:3f:e0:49:7f:66:8c:2f:9f:08:65:63:ac:a5:c3: fd:73:ac:e0:db:d0:3c:f9:f5:1e:98:86:1e:97:20:94:78:ba: e9:ff:1f:c9 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEihNhRNQhs5tmhMzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJkOWFiODYtOTVkNC00ZjI2LWFkZTYtNTJiY2FhMjlk NjZjMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk Y2U0NDhmZTQtMmJjNy00ZjBkLTg0YzYtODcxM2UzYjJhNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LQItGqYr4W8lWuR/RrT9BX6BWoF4ayRn1nf Y/s8tdqayAk0Wx8DFMvXAfkous+JSu99b8NCeh3+KINLXyimIJ5+O6ZkLz7U4oxi YhKaqWFITcKkoZkObvXvSIaoVJjlhASoNVUP/Lu6MKypemhdw+osTP79EiqKPGEU qH7d0Z/W7p4/sbYru8XkfaEu6iMonWjQz2W18iSmtSczfBxXUZtEzvfGqpXUyLwm 5z5kTMnZ0YpaA6eB3b0/w2PYrsHJDrOFwhV8ud8NatQ1wFt3ge2Mmz3BFRKza45v jRkCMNYwADrRuotg6P46u5UTmW0mACk9eqjah7GJIlcATI+RRwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPTIx9WZfKeBsRDXvU2Uvy4ff6WjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5 YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJjYWEyOWQ2NmMvZDg5M2E1OTgtMjE5MS0z OWU0LWFiNmYtZGYxM2QyNzE3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDJkOWFiODYtOTVkNC00ZjI2LWFk ZTYtNTJiY2FhMjlkNjZjL2QyZDlhYjg2LTk1ZDQtNGYyNi1hZGU2LTUyYmNhYTI5 ZDY2Yy5jcmwwHwYDVR0jBBgwFoAUIUu7LAystD6Zr4hOwvd0d8UuOm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJj YWEyOWQ2NmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5DYMA0E AgACMAcDBQAmBw3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACU+fPGAWI5Pb38QyGlKkY5Al2v4eBa2zFxh Xc1fszeCz2YIOc7W5GiEkNbQdjQLBIJP2mq3svynZzdvxFsS1EHbxrJ5DhoOaE7v 4Bg82Q/go7AAczPb455cVf5s63McLrEU6QiFXvuRNFYVZY/43wYSdUezND4PRIj4 ojYwTBMVw9I1HhHp9JLgfII41q8X2L3tkjCH3Ky8in+EvMgoW9C8IsnPhB2YEwVq VEWFDzgQtUhVsAPPpyA/Tw+jpIm4mOS3Nel0tiojL0uQGvkGZ5FOHf/Jk3AJYcw6 VEQ/4El/ZowvnwhlY6ylw/1zrODb0Dz59R6Yhh6XIJR4uun/H8k= -----END CERTIFICATE-----Generated at Tue Apr 8 23:36:28 2025 by rpki-client