$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa File: a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa (raw, json) Hash identifier: M5MQPmUu5asUGtI38ND+tiNNT6GTN/pfzSQuLJ6UX5w= Subject key identifier: 15:30:58:2D:7E:F2:52:7A:CE:49:56:2D:4E:E2:CA:8B:30:50:B6:22 Certificate issuer: /CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3 Certificate serial: 010D0C9F432858493E942EF3A2CBE155662C7820 Authority key identifier: 91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa Signing time: Wed 19 Mar 2025 22:52:31 +0000 ROA not before: Wed 19 Mar 2025 22:52:31 +0000 ROA not after: Tue 17 Jun 2025 22:52:31 +0000 asID: 6304 IP address blocks: 23.136.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:94:2e:f3:a2:cb:e1:55:66:2c:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3 Validity Not Before: Mar 19 22:52:31 2025 GMT Not After : Jun 17 22:52:31 2025 GMT Subject: CN=87e596d4-6d95-4a2c-ae66-48314fa00fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:ac:99:8c:be:75:c1:82:23:17:c6:56:d0: 15:87:b9:19:2c:59:c1:6d:63:6b:c5:8c:ac:ef:6c: bb:35:0d:1e:8b:02:18:5b:bc:91:26:56:a4:93:50: 2d:16:4c:3d:06:99:33:ba:72:3f:7f:32:60:0c:17: 7c:27:1e:f1:89:cc:43:eb:88:d9:70:4e:3d:ee:53: 41:9a:c4:fe:55:3c:e5:c7:88:a2:cd:72:61:5c:d8: 50:74:42:ad:a8:d4:3e:b6:27:a9:02:55:69:93:70: 99:11:96:7a:5b:a8:81:31:be:1d:c4:00:ee:cb:2d: 3a:a2:d2:5d:be:5b:3a:86:cb:19:ba:92:24:c4:22: 31:50:d4:17:ce:7d:c5:3c:9a:e9:bc:fc:dc:9c:a1: d2:b4:2e:6c:b6:13:cd:33:cf:80:cc:8f:4d:2d:44: d5:f7:1e:1e:65:b1:f2:e6:ba:27:25:ed:bb:14:00: d7:32:9b:c1:8b:51:da:7f:f0:4f:74:ef:f2:aa:46: 83:8b:54:43:9f:ac:e0:a9:4d:9d:c8:79:8d:51:23: 47:11:c9:8c:b8:fd:02:1d:a5:bc:1b:3c:d0:3b:d0: b0:ec:2d:f6:b5:50:d2:73:10:9d:3e:2f:5d:9f:52: 45:49:b4:03:5b:e0:53:cb:4f:1a:db:cd:45:6b:34: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:30:58:2D:7E:F2:52:7A:CE:49:56:2D:4E:E2:CA:8B:30:50:B6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl X509v3 Authority Key Identifier: keyid:91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:76:c4:44:0d:21:98:ae:04:08:b2:81:4e:57:4c:bf:52:e4: 1e:b2:bf:62:3e:32:4f:d4:a3:51:e5:9a:be:7a:c8:15:d8:36: b9:3e:c9:f2:6c:f7:e9:bb:4e:25:89:38:6c:f3:4c:6d:9e:1e: 0d:68:52:24:b9:54:9a:47:86:cd:bc:9d:0c:71:3b:3e:bd:2c: af:99:ab:aa:c7:3d:32:03:6a:73:48:6e:5f:59:1a:53:71:f5: 6a:c8:84:c2:88:e0:0a:a5:86:dc:b5:cb:75:2d:68:55:bf:55: 4c:d3:cf:07:5b:34:c1:5a:3d:bd:a6:6b:f1:b3:45:36:30:b4: 65:6b:42:86:e0:47:fd:f2:3e:75:e4:a2:c4:6d:29:55:c6:c1: 2a:38:a2:fe:64:4a:73:83:a0:a2:79:ec:8b:7c:c6:27:12:d0: 69:aa:6f:58:16:55:92:4f:17:27:29:d6:a7:61:69:28:9c:52: 91:e7:3a:b0:a1:90:38:29:69:28:ce:50:e2:d9:21:17:d1:ed: 25:d1:9d:cb:e9:43:13:df:7a:9f:e6:81:63:a0:62:b2:4e:fa: 5c:59:20:64:86:5c:d3:31:2b:8b:fe:e4:e5:fc:ba:fb:d0:cf: 65:f7:95:4d:c1:29:2e:91:33:99:b5:2e:e6:ee:2d:13:e1:e7: 61:75:0a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+lC7zosvhVWYseCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNGQ0ZTAtMjRiZS00ZDNiLTkwMjgtYzE0ODQ2ZjZi MGYzMB4XDTI1MDMxOTIyNTIzMVoXDTI1MDYxNzIyNTIzMVowLzEtMCsGA1UEAxMk ODdlNTk2ZDQtNmQ5NS00YTJjLWFlNjYtNDgzMTRmYTAwZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0OsmYy+dcGCIxfGVtAVh7kZLFnBbWNrxYys 72y7NQ0eiwIYW7yRJlakk1AtFkw9BpkzunI/fzJgDBd8Jx7xicxD64jZcE497lNB msT+VTzlx4iizXJhXNhQdEKtqNQ+tiepAlVpk3CZEZZ6W6iBMb4dxADuyy06otJd vls6hssZupIkxCIxUNQXzn3FPJrpvPzcnKHStC5sthPNM8+AzI9NLUTV9x4eZbHy 5ronJe27FADXMpvBi1Haf/BPdO/yqkaDi1RDn6zgqU2dyHmNUSNHEcmMuP0CHaW8 GzzQO9Cw7C32tVDScxCdPi9dn1JFSbQDW+BTy08a281FazSEwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUwWC1+8lJ6zklWLU7iyoswULYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0 ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4NDZmNmIwZjMvYTZiMDQ5ZmEtODI1OS0z ZDc2LWI0ZTUtNDVhMWJlODhiZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWNmNGQ0ZTAtMjRiZS00ZDNiLTkw MjgtYzE0ODQ2ZjZiMGYzLzFjZjRkNGUwLTI0YmUtNGQzYi05MDI4LWMxNDg0NmY2 YjBmMy5jcmwwHwYDVR0jBBgwFoAUkY+KVxILPKPC4AbhQVcQMWfvJbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4 NDZmNmIwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4g0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt2xEQNIZiuBAiygU5XTL9S5B6yv2I+Mk/Uo1Hlmr56yBXYNrk+yfJs 9+m7TiWJOGzzTG2eHg1oUiS5VJpHhs28nQxxOz69LK+Zq6rHPTIDanNIbl9ZGlNx 9WrIhMKI4Aqlhty1y3UtaFW/VUzTzwdbNMFaPb2ma/GzRTYwtGVrQobgR/3yPnXk osRtKVXGwSo4ov5kSnODoKJ57It8xicS0Gmqb1gWVZJPFycp1qdhaSicUpHnOrCh kDgpaSjOUOLZIRfR7SXRncvpQxPfep/mgWOgYrJO+lxZIGSGXNMxK4v+5OX8uvvQ z2X3lU3BKS6RM5m1LubuLRPh52F1CuU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:36:05 2025 by rpki-client