$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa File: 4775f2f1-0661-3006-a1eb-a486c369f840.roa (raw, json) Hash identifier: 5FkYg2PwyNWr1vKLLddKrz1O/FTQ8xoyGPf86rZMz2g= Subject key identifier: 71:14:D1:3E:D9:C2:1C:55:8D:08:EF:2D:77:D5:66:34:2A:6F:B4:02 Certificate issuer: /CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Certificate serial: 010D0C9F432858494ED062015AFABDED93D027E0 Authority key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa Signing time: Tue 25 Mar 2025 18:26:44 +0000 ROA not before: Tue 25 Mar 2025 18:26:44 +0000 ROA not after: Mon 23 Jun 2025 18:26:44 +0000 asID: 203939 IP address blocks: 23.136.116.0/24 maxlen: 24 2602:f6a7::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:d0:62:01:5a:fa:bd:ed:93:d0:27:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Validity Not Before: Mar 25 18:26:44 2025 GMT Not After : Jun 23 18:26:44 2025 GMT Subject: CN=ff6258eb-b89a-4d9a-a80c-c9bbe0f35895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:92:09:5d:da:9f:85:e4:75:f9:70:9b:d2: 91:51:9f:c8:0a:ab:35:a1:7b:0e:51:f3:ea:0f:de: cc:06:39:4b:39:d5:1f:7a:19:53:6f:c8:ea:76:9b: d7:84:f3:55:38:6f:92:ef:75:87:cd:c7:50:64:f7: be:4e:b7:c1:30:27:dd:a1:2f:88:36:4f:6c:32:81: 1e:92:c2:6b:93:0f:28:9e:b1:d8:4e:30:85:6e:f9: 48:37:c0:43:be:36:c8:a8:59:64:4c:e5:5a:0e:c1: 4c:bf:66:48:ea:66:f6:48:0a:79:03:00:eb:8a:cb: 7a:44:ad:2f:97:2d:6b:8d:ef:84:ac:d2:36:6b:1a: 72:e6:d8:0e:df:fb:35:e6:37:38:bf:e8:06:5c:6c: 15:51:6c:4d:5d:f7:40:d4:77:60:0d:37:90:d9:64: 8b:6e:60:ad:1b:fa:a3:17:7f:5d:bf:10:f7:25:34: e7:95:d1:44:7e:f2:a7:76:34:b6:09:a7:39:e4:00: cd:1b:7c:fb:1a:48:65:90:ca:c2:9a:d1:ea:1d:6a: a2:54:f0:e9:fd:9e:44:c4:77:f7:98:bc:1b:90:1c: 63:c7:d3:7a:d2:bb:13:6b:b8:45:39:11:39:63:7d: 43:06:83:76:be:ea:b0:fe:a5:88:8c:f0:d0:d1:8c: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:14:D1:3E:D9:C2:1C:55:8D:08:EF:2D:77:D5:66:34:2A:6F:B4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl X509v3 Authority Key Identifier: keyid:45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer sbgp-ipAddrBlock: critical IPv4: 23.136.116.0/24 IPv6: 2602:f6a7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:52:4f:03:c0:0b:1a:22:b0:da:b7:7b:72:c8:28:3a:cb:fe: 36:fb:86:c6:33:11:ab:d7:f0:d5:f7:12:b2:f2:53:a0:c9:70: db:1f:3f:d9:0f:08:88:da:f3:57:71:64:cc:87:d6:f5:2f:6e: fa:58:d7:b4:b3:69:a1:af:53:68:8a:e7:74:d9:c3:77:b0:e2: 3e:61:40:60:66:f7:15:ab:ff:50:f5:04:83:91:ef:a3:7a:54: d6:dc:44:df:07:5e:42:89:71:88:e3:84:77:95:16:f4:0f:2a: 0f:2b:84:06:2d:1a:d3:ba:5c:2b:22:a2:f1:0a:89:9b:0b:02: 47:08:c0:4d:bc:15:e4:86:db:a2:82:6b:59:db:3c:cd:b3:d9: 28:be:c0:91:de:16:3d:07:46:43:6d:cd:c4:89:d1:24:10:65: 2f:09:c2:dc:6f:db:31:d7:2a:36:2f:2b:e8:00:50:bd:78:a5: f6:42:25:0d:65:2e:34:14:79:5c:e6:a8:6b:20:68:f7:0b:fd: 0f:35:a4:f9:48:e1:dc:fd:3b:7e:3a:c8:26:76:00:73:6f:e6: e5:20:50:8e:47:74:f5:a7:81:09:a8:1a:4e:88:65:36:72:c2: bb:5a:ab:cb:d5:72:12:bc:87:e6:b4:78:b2:6c:c0:e5:61:aa: 42:a9:71:27 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElO0GIBWvq97ZPQJ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRh YTdhMB4XDTI1MDMyNTE4MjY0NFoXDTI1MDYyMzE4MjY0NFowLzEtMCsGA1UEAxMk ZmY2MjU4ZWItYjg5YS00ZDlhLWE4MGMtYzliYmUwZjM1ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9SSCV3an4Xkdflwm9KRUZ/ICqs1oXsOUfPq D97MBjlLOdUfehlTb8jqdpvXhPNVOG+S73WHzcdQZPe+TrfBMCfdoS+INk9sMoEe ksJrkw8onrHYTjCFbvlIN8BDvjbIqFlkTOVaDsFMv2ZI6mb2SAp5AwDrist6RK0v ly1rje+ErNI2axpy5tgO3/s15jc4v+gGXGwVUWxNXfdA1HdgDTeQ2WSLbmCtG/qj F39dvxD3JTTnldFEfvKndjS2Cac55ADNG3z7GkhlkMrCmtHqHWqiVPDp/Z5ExHf3 mLwbkBxjx9N60rsTa7hFORE5Y31DBoN2vuqw/qWIjPDQ0Yx1mwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHEU0T7ZwhxVjQjvLXfVZjQqb7QCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1 OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvNDc3NWYyZjEtMDY2MS0z MDA2LWExZWItYTQ4NmMzNjlmODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3 YTgtZDhlODFhMDRhYTdhLzcwNDU5NWMzLTZkOTItNGZjMS1iN2E4LWQ4ZTgxYTA0 YWE3YS5jcmwwHwYDVR0jBBgwFoAURVYIqU8+LjAtaqVcoujlUP1bBBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4 MWEwNGFhN2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4h0MA4E AgACMAgDBgQmAvanADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9Uk8DwAsaIrDat3tyyCg6y/42+4bGMxGr 1/DV9xKy8lOgyXDbHz/ZDwiI2vNXcWTMh9b1L276WNe0s2mhr1Noiud02cN3sOI+ YUBgZvcVq/9Q9QSDke+jelTW3ETfB15CiXGI44R3lRb0DyoPK4QGLRrTulwrIqLx CombCwJHCMBNvBXkhtuigmtZ2zzNs9kovsCR3hY9B0ZDbc3EidEkEGUvCcLcb9sx 1yo2LyvoAFC9eKX2QiUNZS40FHlc5qhrIGj3C/0PNaT5SOHc/Tt+OsgmdgBzb+bl IFCOR3T1p4EJqBpOiGU2csK7WqvL1XISvIfmtHiybMDlYapCqXEn -----END CERTIFICATE-----Generated at Fri Apr 11 23:06:32 2025 by rpki-client