$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa File: ebb0be46-5340-3989-b64b-7de27da0d802.roa (raw, json) Hash identifier: DlhNIxPS6D8ZrNGATknNby6Eb6zHOa69dcOgeiT8t7o= Subject key identifier: F4:70:B8:F5:99:CC:CD:6A:8A:97:7F:08:82:D3:99:18:87:05:31:12 Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F432858494BC7835F569FDE502C697100 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa Signing time: Mon 24 Mar 2025 16:21:27 +0000 ROA not before: Mon 24 Mar 2025 16:21:27 +0000 ROA not after: Sun 22 Jun 2025 16:21:27 +0000 asID: 29803 IP address blocks: 23.136.100.0/24 maxlen: 24 2602:f6ab::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:c7:83:5f:56:9f:de:50:2c:69:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Mar 24 16:21:27 2025 GMT Not After : Jun 22 16:21:27 2025 GMT Subject: CN=509f88ec-1b6e-438e-83a8-3ffe599b0964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:06:89:39:21:cd:d7:43:66:46:ab:1c:5b: 36:8d:87:84:c5:ed:61:36:65:f4:e1:8f:f4:13:fb: 24:9a:88:60:b8:e2:24:91:0a:cb:aa:c9:17:cc:aa: e8:8b:80:02:37:f0:ea:58:a6:b7:46:c0:42:4b:7e: 06:36:a0:9c:55:8b:de:b6:79:c8:a9:86:36:2c:31: ab:3a:00:05:41:1d:6c:e4:5f:0f:85:1b:15:90:b4: b8:69:3e:c9:25:91:7c:9e:a9:b8:75:82:72:8d:2a: b1:be:1d:37:17:63:1a:22:69:bd:92:23:86:72:d5: c7:97:2e:c1:b5:d5:20:02:59:54:d3:93:8f:31:01: 9b:f1:c0:db:1f:f4:41:cb:0d:c0:25:20:d3:b8:e0: 91:c6:72:f1:e7:ed:6b:1c:0e:15:b0:e4:d5:47:89: 1f:98:56:7e:08:ed:fd:a5:c4:6a:f8:a5:67:a7:eb: 36:ab:68:1a:e1:c8:15:dd:6f:a7:a9:be:42:bf:46: 1d:30:ae:80:a0:08:54:c1:06:0e:01:b9:9d:40:b8: 07:08:b7:29:30:b6:a2:f4:8e:e3:a4:13:98:e7:30: 86:b4:0f:53:5c:62:04:38:18:e9:aa:8b:8a:68:a6: f5:97:0a:d6:b7:ee:dc:11:00:1a:cd:c8:ad:d6:e5: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:70:B8:F5:99:CC:CD:6A:8A:97:7F:08:82:D3:99:18:87:05:31:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.100.0/24 IPv6: 2602:f6ab::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a1:04:82:2e:7c:ea:43:38:23:5d:f9:50:3d:df:6a:93:f2: 75:6e:bf:28:f6:66:ef:c9:e6:d0:ff:85:86:fb:6a:68:97:b2: 7c:4d:07:44:80:a8:b5:58:98:e1:2f:79:0f:1a:de:04:6c:ec: 29:91:b9:8a:81:43:bc:e1:27:e4:fe:31:e2:67:6c:ad:33:f0: 77:cc:a3:93:e7:6b:6f:f0:06:1c:43:be:2e:ea:1b:d0:f8:9a: e3:27:23:ac:d3:df:ee:2e:3f:f6:14:fd:3a:35:d1:d7:74:03: ae:9f:94:6b:14:95:96:9e:8d:0d:05:37:2a:f0:0d:23:ec:66: 2c:49:c6:f2:34:93:9f:f2:a2:07:4b:de:e7:31:c5:5e:44:f2: dc:7a:81:48:b8:d1:34:a1:ad:3a:c6:f4:69:a4:73:27:a5:37: 7a:7d:a4:8e:cd:6e:03:32:7c:49:8a:57:02:97:2c:fd:a8:d3: 1c:ab:cb:ea:33:b7:f9:24:25:60:e5:ae:0d:84:4e:be:f0:89: 89:56:1d:8c:52:42:17:f7:f4:a1:33:60:69:7a:1b:d9:8d:ca: ea:75:5a:54:64:3c:d2:fb:5e:e8:1d:10:7f:00:2c:da:45:b4: 44:5b:e2:a5:ab:01:ca:53:08:80:78:00:77:8f:aa:59:eb:d6: e2:5d:0f:00 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElLx4NfVp/eUCxpcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MDMyNDE2MjEyN1oXDTI1MDYyMjE2MjEyN1owLzEtMCsGA1UEAxMk NTA5Zjg4ZWMtMWI2ZS00MzhlLTgzYTgtM2ZmZTU5OWIwOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2MGiTkhzddDZkarHFs2jYeExe1hNmX04Y/0 E/skmohguOIkkQrLqskXzKroi4ACN/DqWKa3RsBCS34GNqCcVYvetnnIqYY2LDGr OgAFQR1s5F8PhRsVkLS4aT7JJZF8nqm4dYJyjSqxvh03F2MaImm9kiOGctXHly7B tdUgAllU05OPMQGb8cDbH/RByw3AJSDTuOCRxnLx5+1rHA4VsOTVR4kfmFZ+CO39 pcRq+KVnp+s2q2ga4cgV3W+nqb5Cv0YdMK6AoAhUwQYOAbmdQLgHCLcpMLai9I7j pBOY5zCGtA9TXGIEOBjpqouKaKb1lwrWt+7cEQAazcit1uUMOQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPRwuPWZzM1qipd/CILTmRiHBTESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvZWJiMGJlNDYtNTM0MC0z OTg5LWI2NGItN2RlMjdkYTBkODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4hkMA4E AgACMAgDBgAmAvarADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwoQSCLnzqQzgjXflQPd9qk/J1br8o9mbv yebQ/4WG+2pol7J8TQdEgKi1WJjhL3kPGt4EbOwpkbmKgUO84Sfk/jHiZ2ytM/B3 zKOT52tv8AYcQ74u6hvQ+JrjJyOs09/uLj/2FP06NdHXdAOun5RrFJWWno0NBTcq 8A0j7GYsScbyNJOf8qIHS97nMcVeRPLceoFIuNE0oa06xvRppHMnpTd6faSOzW4D MnxJilcClyz9qNMcq8vqM7f5JCVg5a4NhE6+8ImJVh2MUkIX9/ShM2BpehvZjcrq dVpUZDzS+17oHRB/ACzaRbREW+KlqwHKUwiAeAB3j6pZ69biXQ8A -----END CERTIFICATE-----Generated at Sat Apr 5 05:32:26 2025 by rpki-client