$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa File: ce64ca20-b012-3206-8040-dbfd9b9e2557.roa (raw, json) Hash identifier: wxG+7eRlL6v1ZwB14baeoraYrjp2112BXc8u2OUqRFU= Subject key identifier: 42:95:04:1D:DB:2E:3B:D2:55:76:AB:EF:F1:0A:74:41:61:D4:9B:19 Certificate issuer: /CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Certificate serial: 010D0C9F432858491AA6AF266A372B3CF8EAB400 Authority key identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 30463 IP address blocks: 23.130.228.0/24 maxlen: 24 2602:f76c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:af:26:6a:37:2b:3c:f8:ea:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=2a03629e-9608-49b1-b55c-e1917194b0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:e8:5e:cf:47:56:fe:cb:4c:f4:b2:af:46: 3b:53:cf:06:cb:83:ae:fa:38:22:5c:cc:2c:6d:55: 6a:a9:29:eb:78:05:4d:af:2f:23:14:aa:a8:8e:ef: 8e:fe:ae:86:95:0d:f2:de:5a:8b:5e:7f:ed:2c:1d: d7:3b:3c:0d:14:9a:9a:92:1f:64:d3:94:61:65:3d: fa:ae:2c:d8:f9:ab:9e:4c:31:8f:be:8e:70:d0:e9: 93:f0:c2:79:d1:e0:f5:1d:02:84:f1:5b:82:a2:fb: 36:87:4a:c0:c4:c6:68:75:18:2e:24:da:3a:12:d2: 3a:3d:0a:88:13:fa:f6:79:18:54:e9:a1:a2:71:7d: fc:df:91:b8:c3:d9:25:d3:e0:b2:b6:9d:1c:e2:ff: 6b:24:f8:85:3f:8b:b1:80:cd:29:bd:00:bb:d3:d2: c5:ee:13:4a:d8:84:1a:99:5a:06:f8:0c:c3:0d:0d: 12:d2:d4:35:49:7c:2a:6d:bd:61:fd:57:0d:6d:31: df:5f:e1:75:8e:69:82:93:5e:e9:b5:e6:3d:7c:83: ed:c0:43:9f:46:4d:62:77:ad:60:07:c6:c6:b6:10: c9:d6:9a:75:db:03:49:4d:97:eb:43:3e:02:44:78: 53:06:66:17:6c:2b:7b:ba:00:b6:c7:8c:d3:ec:58: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:95:04:1D:DB:2E:3B:D2:55:76:AB:EF:F1:0A:74:41:61:D4:9B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl X509v3 Authority Key Identifier: keyid:AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.228.0/24 IPv6: 2602:f76c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:2f:77:e5:6f:2e:df:61:27:f8:2a:f5:ed:12:98:d7:02:32: c2:1b:cd:18:f9:db:0e:e6:dd:d4:87:3e:10:75:b2:6c:90:03: 79:4b:6b:43:50:25:08:17:1a:56:c2:6d:06:1c:0c:58:5c:8f: ea:e2:b2:c2:af:88:3b:eb:05:59:66:51:6e:6a:60:0b:ae:91: 38:42:87:f4:99:a6:a4:07:1c:f8:b5:af:67:43:6f:0d:a1:70: be:5e:46:eb:3e:7e:71:cd:19:e0:1a:54:6b:5a:4a:17:d4:1f: ec:27:cb:00:bc:5a:a6:3c:bd:ae:84:63:a8:b0:aa:03:b2:49: 78:49:f4:87:63:26:5e:43:9d:26:6f:44:71:54:9f:77:ec:86: 4c:8a:b0:61:32:ba:a2:47:a3:7c:0d:fe:15:07:fb:a8:1b:40: b7:79:19:aa:38:16:42:da:48:cf:f3:e7:68:70:33:85:bf:c8: 88:d7:c4:26:47:f1:81:df:60:20:33:b8:0f:37:e6:42:39:1f: 87:09:4e:22:cc:a3:01:a8:28:f0:e8:f0:4a:2c:9b:28:7f:aa: e3:81:7f:e5:e9:7c:f5:cc:9e:5e:38:ac:f8:e4:90:6a:a9:16: f4:43:d5:aa:24:ab:4b:2d:e4:9e:74:cf:ef:34:ce:97:b1:f1: 5c:1b:27:e0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkapq8majcrPPjqtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjczNTk5ZWYtNWIwYi00Nzk4LTlmNDctODExZDRjMTIw Y2IwMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MmEwMzYyOWUtOTYwOC00OWIxLWI1NWMtZTE5MTcxOTRiMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo7oXs9HVv7LTPSyr0Y7U88Gy4Ou+jgiXMws bVVqqSnreAVNry8jFKqoju+O/q6GlQ3y3lqLXn/tLB3XOzwNFJqakh9k05RhZT36 rizY+aueTDGPvo5w0OmT8MJ50eD1HQKE8VuCovs2h0rAxMZodRguJNo6EtI6PQqI E/r2eRhU6aGicX3835G4w9kl0+Cytp0c4v9rJPiFP4uxgM0pvQC709LF7hNK2IQa mVoG+AzDDQ0S0tQ1SXwqbb1h/VcNbTHfX+F1jmmCk17pteY9fIPtwEOfRk1id61g B8bGthDJ1pp12wNJTZfrQz4CRHhTBmYXbCt7ugC2x4zT7FiA8QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEKVBB3bLjvSVXar7/EKdEFh1JsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1 OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFkNGMxMjBjYjAvY2U2NGNhMjAtYjAxMi0z MjA2LTgwNDAtZGJmZDliOWUyNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjczNTk5ZWYtNWIwYi00Nzk4LTlm NDctODExZDRjMTIwY2IwLzI3MzU5OWVmLTViMGItNDc5OC05ZjQ3LTgxMWQ0YzEy MGNiMC5jcmwwHwYDVR0jBBgwFoAUrNfVqNLwYnXQNaiSrEGS3xM0YYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFk NGMxMjBjYjAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LkMA4E AgACMAgDBgQmAvdsADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZL3flby7fYSf4KvXtEpjXAjLCG80Y+dsO 5t3Uhz4QdbJskAN5S2tDUCUIFxpWwm0GHAxYXI/q4rLCr4g76wVZZlFuamALrpE4 Qof0maakBxz4ta9nQ28NoXC+XkbrPn5xzRngGlRrWkoX1B/sJ8sAvFqmPL2uhGOo sKoDskl4SfSHYyZeQ50mb0RxVJ937IZMirBhMrqiR6N8Df4VB/uoG0C3eRmqOBZC 2kjP8+docDOFv8iI18QmR/GB32AgM7gPN+ZCOR+HCU4izKMBqCjw6PBKLJsof6rj gX/l6Xz1zJ5eOKz45JBqqRb0Q9WqJKtLLeSedM/vNM6XsfFcGyfg -----END CERTIFICATE-----Generated at Fri Apr 11 23:58:43 2025 by rpki-client