$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa File: 8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa (raw, json) Hash identifier: cCBUYiAVhl/sup99qv6tUAfn+2iF4xD6il7ONIzn2iA= Subject key identifier: AB:14:A8:2D:A6:74:91:3F:6F:C0:6A:77:49:9C:E3:D5:29:97:2F:9F Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Certificate serial: 010D0C9F43285848AFD7868562F60C16314F6E54 Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa Signing time: Mon 27 Jan 2025 19:47:36 +0000 ROA not before: Mon 27 Jan 2025 19:47:36 +0000 ROA not after: Sun 27 Apr 2025 18:47:36 +0000 asID: 401463 IP address blocks: 23.128.140.0/24 maxlen: 24 2602:f7b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:d7:86:85:62:f6:0c:16:31:4f:6e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Validity Not Before: Jan 27 19:47:36 2025 GMT Not After : Apr 27 18:47:36 2025 GMT Subject: CN=062fcbf0-7d1f-4190-a579-1f9611ba7b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:85:43:d3:0f:12:a0:38:8c:18:93:09:98: d5:5d:c4:ec:12:a2:b1:95:36:f5:75:61:ed:c0:9f: 46:d2:df:40:1c:bb:0c:93:63:f4:26:06:eb:77:f9: 71:e2:10:31:df:0e:ac:f3:a4:cd:55:5d:dd:78:cf: 6d:31:7a:c7:73:d5:06:29:88:6c:44:be:62:37:6c: 15:53:9e:ab:7c:ea:1a:96:8d:4f:f3:b1:ed:7b:fc: 82:a3:76:c2:f6:4d:e3:a0:db:7d:af:a1:37:72:02: 2e:ca:b8:e1:28:49:a4:da:9e:a7:27:7d:ad:c9:b5: 0a:75:c1:f5:80:af:ca:bd:40:94:a1:7f:c0:b3:e1: 33:67:67:19:44:81:bd:25:3d:f5:79:66:fa:d0:f9: af:e6:1b:27:64:d0:db:c2:30:13:b0:0c:a5:05:02: 73:5b:78:e2:92:65:dc:1a:82:d8:b8:63:87:11:a5: dd:e1:e4:1c:e1:3b:09:25:8a:ff:7d:63:2c:e7:b4: e2:fe:2d:4d:94:16:8a:56:b6:53:d5:20:c4:8d:19: e5:d3:51:6d:1a:68:bb:ce:ba:6e:c8:4e:19:cc:48: 4f:c2:55:09:2a:4a:3a:57:a8:c7:8a:28:80:66:c0: 0a:4b:fc:80:55:55:a2:3d:0a:a4:f2:c4:c4:88:4c: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:14:A8:2D:A6:74:91:3F:6F:C0:6A:77:49:9C:E3:D5:29:97:2F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl X509v3 Authority Key Identifier: keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.140.0/24 IPv6: 2602:f7b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:84:c2:8b:89:1e:46:05:80:02:72:19:8b:43:b3:cf:da:f1: 5d:39:c2:df:90:e4:81:48:f9:ad:3a:14:7e:dd:57:1f:ee:cb: 47:95:69:f2:eb:52:66:ef:73:fd:4f:2a:17:8f:2a:4f:84:77: 77:ca:29:89:76:10:77:ef:75:ca:d5:b0:90:69:96:4e:0e:f6: 57:14:51:4f:39:ce:1e:ef:8a:27:f8:53:e2:59:42:8b:ea:44: 28:d9:f1:7e:c0:54:82:e4:51:3d:ba:6e:47:8a:0f:d6:8d:dd: 90:e9:52:c0:01:71:15:f3:3e:c9:d6:e7:01:cc:f0:8c:a7:64: 25:cb:69:be:66:c6:aa:75:57:7d:75:d9:be:7a:02:86:ac:fd: 1d:c7:57:02:fd:2f:4d:be:95:58:cf:9d:47:b6:fe:33:ea:5a: c5:f2:dc:d7:2f:91:c5:69:ea:6d:99:c7:42:71:07:91:c0:b6: 26:54:78:00:71:4d:f8:13:7a:15:93:65:65:13:c0:0e:6f:b0: 17:b2:4e:ea:38:d2:f3:8a:ec:2a:66:0b:47:93:72:1e:1d:1a: d7:04:13:ae:4a:b2:35:83:62:17:71:49:e4:52:7a:53:b3:91: 91:f9:de:96:e1:a6:71:f9:10:7c:a6:65:57:0b:38:82:18:8b: 5c:8d:2f:01 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiv14aFYvYMFjFPblQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxMjZiZDMtMzM3YS00NmVhLThhYWItYzJjZDc1OTRl ZGY5MB4XDTI1MDEyNzE5NDczNloXDTI1MDQyNzE4NDczNlowLzEtMCsGA1UEAxMk MDYyZmNiZjAtN2QxZi00MTkwLWE1NzktMWY5NjExYmE3YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMeFQ9MPEqA4jBiTCZjVXcTsEqKxlTb1dWHt wJ9G0t9AHLsMk2P0Jgbrd/lx4hAx3w6s86TNVV3deM9tMXrHc9UGKYhsRL5iN2wV U56rfOoalo1P87Hte/yCo3bC9k3joNt9r6E3cgIuyrjhKEmk2p6nJ32tybUKdcH1 gK/KvUCUoX/As+EzZ2cZRIG9JT31eWb60Pmv5hsnZNDbwjATsAylBQJzW3jikmXc GoLYuGOHEaXd4eQc4TsJJYr/fWMs57Ti/i1NlBaKVrZT1SDEjRnl01FtGmi7zrpu yE4ZzEhPwlUJKko6V6jHiiiAZsAKS/yAVVWiPQqk8sTEiEyywQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKsUqC2mdJE/b8Bqd0mc49Uply+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYzEy NmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNkNzU5NGVkZjkvOGU0YzNjNTItZDdjYi0z YzBkLWE0MjEtMDYyZTUyZjNhYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2MxMjZiZDMtMzM3YS00NmVhLThh YWItYzJjZDc1OTRlZGY5LzNjMTI2YmQzLTMzN2EtNDZlYS04YWFiLWMyY2Q3NTk0 ZWRmOS5jcmwwHwYDVR0jBBgwFoAUHDl90qorw7uxOU2srEhzcFL5CnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYzEyNmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNk NzU5NGVkZjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CMMA4E AgACMAgDBgAmAvezADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXhMKLiR5GBYACchmLQ7PP2vFdOcLfkOSB SPmtOhR+3Vcf7stHlWny61Jm73P9TyoXjypPhHd3yimJdhB373XK1bCQaZZODvZX FFFPOc4e74on+FPiWUKL6kQo2fF+wFSC5FE9um5Hig/Wjd2Q6VLAAXEV8z7J1ucB zPCMp2Qly2m+ZsaqdVd9ddm+egKGrP0dx1cC/S9NvpVYz51Htv4z6lrF8tzXL5HF aeptmcdCcQeRwLYmVHgAcU34E3oVk2VlE8AOb7AXsk7qONLziuwqZgtHk3IeHRrX BBOuSrI1g2IXcUnkUnpTs5GR+d6W4aZx+RB8pmVXCziCGItcjS8B -----END CERTIFICATE-----Generated at Sat Apr 12 16:12:59 2025 by rpki-client