$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa File: cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa (raw, json) Hash identifier: ZDECWEjl9vdAFyuxidJau3EFjVbKwnRwamN6yOAXVJY= Subject key identifier: BC:43:A8:58:E9:6F:48:D7:64:9B:5C:1E:ED:B7:41:A3:4D:76:AB:ED Certificate issuer: /CN=42804204-aefa-4fac-9d39-1599fa403e46 Certificate serial: 010D0C9F4328584904513456BD6300550CD885C0 Authority key identifier: 05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa Signing time: Thu 27 Feb 2025 02:00:39 +0000 ROA not before: Thu 27 Feb 2025 02:00:39 +0000 ROA not after: Wed 28 May 2025 01:00:39 +0000 asID: 401414 IP address blocks: 23.128.76.0/24 maxlen: 24 2602:f7c6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:04:51:34:56:bd:63:00:55:0c:d8:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42804204-aefa-4fac-9d39-1599fa403e46 Validity Not Before: Feb 27 02:00:39 2025 GMT Not After : May 28 01:00:39 2025 GMT Subject: CN=a2f89c1e-1fe2-4d6e-9f6d-ea3708c27da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:0e:7f:5a:6f:2a:45:b5:58:e3:16:4c:93: 2d:91:db:bc:b1:aa:0b:2f:b6:a2:c5:74:0f:7b:6d: 44:46:eb:70:16:fc:f9:2f:f8:31:68:a5:bd:c6:7b: 7d:6d:dd:42:4c:41:ce:30:35:07:f0:59:6f:67:53: 8a:e8:10:42:6d:57:e7:31:16:61:60:31:bd:a8:97: f0:69:0c:07:2a:77:18:7a:97:e5:f7:a2:28:53:df: 38:86:6d:20:bf:c6:58:7f:b9:87:f3:16:b3:55:46: b8:0b:c9:74:f3:d3:51:05:e3:7e:bb:e6:cf:b7:62: df:e4:87:ea:3e:d4:0c:45:5c:89:57:56:f4:b0:e8: 21:d8:5a:37:61:98:91:af:e3:a1:50:f9:ab:80:1f: 6f:c9:37:77:8c:24:c4:95:c1:58:95:75:0a:6e:27: 15:4a:49:37:3a:c7:35:6e:2f:9e:05:85:0e:46:74: 12:b3:76:e2:3b:64:e7:52:38:49:a4:79:e3:c9:8e: af:19:5f:4c:9e:38:e9:34:8b:a6:8d:59:0d:b4:87: 4d:f5:c2:99:87:1e:35:91:29:39:a7:9e:f6:7f:01: 03:4e:2d:d8:15:13:02:66:0b:fd:72:9b:24:a3:50: 01:78:b1:db:76:e7:c9:3a:a6:11:a6:46:a6:65:ef: 8f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:43:A8:58:E9:6F:48:D7:64:9B:5C:1E:ED:B7:41:A3:4D:76:AB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl X509v3 Authority Key Identifier: keyid:05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer sbgp-ipAddrBlock: critical IPv4: 23.128.76.0/24 IPv6: 2602:f7c6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:32:64:98:a8:97:2f:10:54:81:85:0a:87:82:52:c5:82:9b: 34:2a:ea:49:5d:c0:d1:1f:1b:2f:89:57:de:30:86:96:63:54: 45:c7:f7:60:df:2c:c2:cd:b8:85:27:6e:30:df:1a:70:a7:f3: 48:6b:79:45:c7:02:2c:c6:41:2a:c7:e7:6b:49:bd:90:57:2a: 96:3c:65:4a:cc:62:62:56:1e:c3:d3:38:a9:08:13:8e:6d:c4: 35:34:69:d4:1b:26:6e:e0:ba:d5:13:b7:f7:4b:aa:d1:dd:60: 6f:35:40:fb:5e:83:70:3c:bc:a9:c9:c6:6d:a0:dc:52:b4:9c: 6a:82:d8:73:1b:01:c5:96:91:14:bc:09:4d:d7:c2:4e:32:ba: 68:62:12:47:64:fb:b1:53:6b:a4:a4:b3:76:e1:05:37:14:49: 1e:0a:ff:d9:b2:1f:f5:02:c5:34:85:a8:03:e4:9f:c5:00:04: a2:26:4c:8e:b2:b0:4f:18:65:fb:91:3d:ea:07:d6:cd:fe:06: e5:c7:cd:34:cf:ed:71:4c:08:7b:15:f1:95:1a:b6:a8:9e:6d: 31:99:28:f4:ad:64:24:f8:ff:41:9f:10:6d:2c:3d:0d:1a:07: dd:1a:b7:57:c3:a0:e8:b0:48:66:ff:1c:b8:df:34:f2:67:c5: 90:41:9e:4c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkEUTRWvWMAVQzYhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MDQyMDQtYWVmYS00ZmFjLTlkMzktMTU5OWZhNDAz ZTQ2MB4XDTI1MDIyNzAyMDAzOVoXDTI1MDUyODAxMDAzOVowLzEtMCsGA1UEAxMk YTJmODljMWUtMWZlMi00ZDZlLTlmNmQtZWEzNzA4YzI3ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWkOf1pvKkW1WOMWTJMtkdu8saoLL7aixXQP e21ERutwFvz5L/gxaKW9xnt9bd1CTEHOMDUH8FlvZ1OK6BBCbVfnMRZhYDG9qJfw aQwHKncYepfl96IoU984hm0gv8ZYf7mH8xazVUa4C8l089NRBeN+u+bPt2Lf5Ifq PtQMRVyJV1b0sOgh2Fo3YZiRr+OhUPmrgB9vyTd3jCTElcFYlXUKbicVSkk3Osc1 bi+eBYUORnQSs3biO2TnUjhJpHnjyY6vGV9MnjjpNIumjVkNtIdN9cKZhx41kSk5 p572fwEDTi3YFRMCZgv9cpsko1ABeLHbdufJOqYRpkamZe+PmwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLxDqFjpb0jXZJtcHu23QaNNdqvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80Mjgw NDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5ZmE0MDNlNDYvY2JlNzUwYjUtYTQ4ZC0z ZWQ3LTgxZjYtYjkzZWIxYTM2NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDI4MDQyMDQtYWVmYS00ZmFjLTlk MzktMTU5OWZhNDAzZTQ2LzQyODA0MjA0LWFlZmEtNGZhYy05ZDM5LTE1OTlmYTQw M2U0Ni5jcmwwHwYDVR0jBBgwFoAUBXzILUv4qGmvJ6oIhxcWElC11HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MjgwNDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5 ZmE0MDNlNDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BMMA4E AgACMAgDBgAmAvfGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEMmSYqJcvEFSBhQqHglLFgps0KupJXcDR HxsviVfeMIaWY1RFx/dg3yzCzbiFJ24w3xpwp/NIa3lFxwIsxkEqx+drSb2QVyqW PGVKzGJiVh7D0zipCBOObcQ1NGnUGyZu4LrVE7f3S6rR3WBvNUD7XoNwPLypycZt oNxStJxqgthzGwHFlpEUvAlN18JOMrpoYhJHZPuxU2ukpLN24QU3FEkeCv/Zsh/1 AsU0hagD5J/FAASiJkyOsrBPGGX7kT3qB9bN/gblx800z+1xTAh7FfGVGraonm0x mSj0rWQk+P9BnxBtLD0NGgfdGrdXw6DosEhm/xy43zTyZ8WQQZ5M -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:43 2025 by rpki-client