$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa File: a9736c2d-b353-3032-be0f-62272540e0ac.roa (raw, json) Hash identifier: MxYNpA8pwmkL1EOYCuIBg0LTPkS5Xr2KxeLVvMOzgxE= Subject key identifier: 27:87:35:B7:B1:91:05:A7:D5:F3:BC:A8:0C:54:FB:57:74:3C:84:09 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F43285849659A9A8B65DB33470D66C280 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa Signing time: Wed 02 Apr 2025 22:21:59 +0000 ROA not before: Wed 02 Apr 2025 22:21:59 +0000 ROA not after: Tue 01 Jul 2025 22:21:59 +0000 asID: 393373 IP address blocks: 23.136.180.0/24 maxlen: 24 2602:f69c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:9a:9a:8b:65:db:33:47:0d:66:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Apr 2 22:21:59 2025 GMT Not After : Jul 1 22:21:59 2025 GMT Subject: CN=b6e42657-ceb4-491c-9623-4b0102137746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:0c:33:e0:84:87:8d:f3:a1:26:56:f0:fa: e2:88:18:26:cf:6e:84:12:d2:83:09:12:d5:c3:ce: ca:83:ea:1e:b2:f9:3c:a6:1c:ba:96:1e:9e:8e:b6: 2e:06:e2:ad:f5:f8:fd:2e:f0:5d:61:86:0a:f5:65: 8c:c6:fc:a6:24:f9:09:8f:1e:47:4d:8c:68:f3:d8: 74:fb:38:97:cc:2b:62:f8:8c:66:51:9e:76:0a:e3: 21:31:c8:81:ca:bd:4c:e3:3a:11:e0:d4:65:f4:32: a1:56:22:19:ba:9f:9d:c1:ea:98:c4:0e:c0:77:59: 6a:d5:aa:bf:f7:91:ee:cb:70:e9:37:ab:35:b8:4c: a8:60:8d:27:8c:e5:58:18:34:7c:3f:6e:51:b0:94: 3f:70:01:80:69:b1:eb:f1:0f:8e:02:bc:92:23:8f: 15:42:c4:1b:ee:68:0c:8a:7c:2f:bd:ec:68:59:d0: a2:7e:42:b0:ed:9f:b5:cc:31:b9:bd:d0:69:f6:79: 12:33:fc:95:fd:b4:15:3f:54:59:18:2f:b8:aa:b6: c4:e4:ce:d1:dd:0c:fa:96:ac:ab:be:dd:30:21:24: 4a:cd:b4:27:f3:ee:ee:e1:3c:49:c8:14:c2:bf:90: df:a2:f4:22:e5:3d:cb:56:32:6e:a0:2e:fd:56:d2: b0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:87:35:B7:B1:91:05:A7:D5:F3:BC:A8:0C:54:FB:57:74:3C:84:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: 23.136.180.0/24 IPv6: 2602:f69c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5b:b3:e8:15:e0:cc:64:3d:0f:62:dd:29:05:bf:3e:83:75: cf:fb:35:93:f4:93:c5:9e:c7:03:61:46:b0:7e:0c:65:04:53: 43:86:1b:43:43:c3:74:42:20:f7:fd:37:28:56:2c:cc:98:d3: 79:e7:ae:c0:1c:3f:09:b6:79:c3:c0:30:b2:5b:1c:54:02:5f: 21:63:f9:cf:c4:57:9b:49:33:1e:f1:f8:c6:80:f3:36:58:88: ab:2e:53:e9:74:49:7c:8d:86:17:00:b7:b1:13:7b:87:c8:69: ae:86:08:8d:a0:97:50:18:3f:68:22:4d:f3:68:8c:b7:28:4d: ac:9c:02:51:3c:cb:3c:37:0e:9e:18:c4:88:70:4f:d4:79:d9: f2:4a:e6:5a:ef:e7:7f:9d:da:d1:f6:da:5c:75:d8:5b:2e:ce: 06:a5:ad:d6:c6:f0:c5:85:75:34:0c:43:f9:85:64:bc:0a:ca: 7b:ea:23:ae:a5:99:73:36:00:21:98:cb:40:0c:b2:58:05:12: d3:0e:7b:a2:51:4b:af:b8:62:91:92:a0:7d:1a:53:cc:ec:69: c0:13:03:62:29:6e:82:f1:d4:b5:67:cf:ca:f7:a3:e0:61:42: 91:77:71:dc:01:73:23:ba:77:ac:df:28:dc:15:2b:61:a8:79: c3:cd:ee:f3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEllmpqLZdszRw1mwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI1MDQwMjIyMjE1OVoXDTI1MDcwMTIyMjE1OVowLzEtMCsGA1UEAxMk YjZlNDI2NTctY2ViNC00OTFjLTk2MjMtNGIwMTAyMTM3NzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli8MM+CEh43zoSZW8PriiBgmz26EEtKDCRLV w87Kg+oesvk8phy6lh6ejrYuBuKt9fj9LvBdYYYK9WWMxvymJPkJjx5HTYxo89h0 +ziXzCti+IxmUZ52CuMhMciByr1M4zoR4NRl9DKhViIZup+dweqYxA7Ad1lq1aq/ 95Huy3DpN6s1uEyoYI0njOVYGDR8P25RsJQ/cAGAabHr8Q+OArySI48VQsQb7mgM inwvvexoWdCifkKw7Z+1zDG5vdBp9nkSM/yV/bQVP1RZGC+4qrbE5M7R3Qz6lqyr vt0wISRKzbQn8+7u4TxJyBTCv5DfovQi5T3LVjJuoC79VtKwuQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCeHNbexkQWn1fO8qAxU+1d0PIQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk3MzZjMmQtYjM1My0z MDMyLWJlMGYtNjIyNzI1NDBlMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4i0MA4E AgACMAgDBgAmAvacADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxW7PoFeDMZD0PYt0pBb8+g3XP+zWT9JPF nscDYUawfgxlBFNDhhtDQ8N0QiD3/TcoVizMmNN5567AHD8JtnnDwDCyWxxUAl8h Y/nPxFebSTMe8fjGgPM2WIirLlPpdEl8jYYXALexE3uHyGmuhgiNoJdQGD9oIk3z aIy3KE2snAJRPMs8Nw6eGMSIcE/UednySuZa7+d/ndrR9tpcddhbLs4Gpa3WxvDF hXU0DEP5hWS8Csp76iOupZlzNgAhmMtADLJYBRLTDnuiUUuvuGKRkqB9GlPM7GnA EwNiKW6C8dS1Z8/K96PgYUKRd3HcAXMjunes3yjcFSthqHnDze7z -----END CERTIFICATE-----Generated at Thu Apr 17 22:58:21 2025 by rpki-client