$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/d8561bcc-e811-34b6-a195-8391a60c2ac9.roa File: d8561bcc-e811-34b6-a195-8391a60c2ac9.roa (raw, json) Hash identifier: 4IbuKvPW88Q4sk4elNc13q4Ub5DSWqHdJf9f+q4eauA= Subject key identifier: 1B:A3:D2:6C:E2:F6:9C:C3:65:E4:BA:43:E1:7B:AF:B1:64:6D:20:08 Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9 Certificate serial: 010D0C9F432858494CC938EDBC6EB7FD8F4FA480 Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/d8561bcc-e811-34b6-a195-8391a60c2ac9.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 63232 IP address blocks: 23.131.60.0/24 maxlen: 24 2602:f763::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:38:ed:bc:6e:b7:fd:8f:4f:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=46914724-e284-418b-bf1b-7be6c2a9303a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:f1:76:9c:7a:0f:f5:80:21:55:db:fa:ab: 75:53:ac:c7:12:ff:b1:59:d8:62:fe:b5:9f:21:db: dc:69:08:82:c4:ee:e5:70:19:7f:47:b3:7b:fb:e3: 5a:c5:71:4a:85:b8:8c:60:77:5a:36:4d:51:72:09: 19:d4:e8:e1:61:b3:08:2b:f4:33:e2:82:33:4b:f2: 10:7a:ed:9f:25:ef:82:92:7f:42:93:44:b4:de:55: d6:28:f5:27:4e:e7:55:c7:7f:54:12:ce:b7:1f:69: 74:f3:a3:2e:5c:ae:ed:06:28:19:d2:39:e5:31:54: 93:b7:bc:b8:c6:ac:85:9f:76:01:90:e5:13:e1:77: 33:b7:fb:7d:a5:94:77:38:60:b0:1e:ad:8e:ad:8b: 16:53:1d:24:76:71:24:cd:13:3f:c7:4a:20:f0:d7: 80:b4:8c:27:68:79:61:2b:21:e5:22:fd:d8:2a:21: 0d:c9:f0:36:c4:c7:ba:25:62:ee:46:7b:3c:76:52: 2d:82:ff:30:79:3b:5e:38:fc:49:48:d5:25:6d:28: e7:3d:c2:00:2b:a3:12:37:b8:bd:4c:75:06:ad:4f: df:c9:0b:a8:07:24:d2:fb:d6:99:5d:94:ab:aa:c6: 0a:35:cf:ee:3d:42:d4:2c:db:94:03:85:97:9d:71: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A3:D2:6C:E2:F6:9C:C3:65:E4:BA:43:E1:7B:AF:B1:64:6D:20:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/d8561bcc-e811-34b6-a195-8391a60c2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl X509v3 Authority Key Identifier: keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer sbgp-ipAddrBlock: critical IPv4: 23.131.60.0/24 IPv6: 2602:f763::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:53:23:ce:c1:c2:ab:cb:04:9e:a7:15:55:4a:dd:65:d2:eb: 85:c7:44:c2:05:ce:17:74:f3:c1:74:54:85:c7:be:ba:68:d3: ad:90:e0:71:49:be:8d:b9:bd:5b:64:59:e2:e5:90:c3:2b:27: f1:36:f7:92:4d:40:51:4b:bd:f3:04:23:f8:79:a6:ea:e4:80: ee:83:e8:e6:8b:df:51:bf:78:24:ee:be:1d:e5:39:b5:24:cf: 34:41:21:0f:32:e4:98:7d:0f:74:55:7f:62:c6:49:f4:a1:33: 69:d5:2b:4b:9a:ab:22:34:66:25:81:35:13:40:7c:f0:65:e7: bc:e7:20:bc:1a:7d:e2:57:b4:63:25:4e:ad:9f:95:c5:fe:5e: 21:95:fc:9d:78:a7:aa:c2:60:6e:d5:9f:ab:21:60:84:06:49: be:25:c4:eb:71:d4:5b:c8:d6:9c:f3:27:60:80:69:92:23:e7: 40:51:0f:ce:2f:7a:17:b1:ab:0f:e7:b2:ca:09:3c:9c:c4:5a: 9a:8b:70:e4:61:31:3b:66:ea:9a:cf:7d:9f:df:c5:d8:17:7d: 06:76:e3:4b:d5:2b:d7:97:fd:0d:09:f9:e9:6c:6b:80:24:3f: df:5d:b5:a2:4d:d5:bc:d1:03:c0:3b:f4:fa:a9:5e:6e:20:2a: b9:27:e3:b0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElMyTjtvG63/Y9PpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3 OWM5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDY5MTQ3MjQtZTI4NC00MThiLWJmMWItN2JlNmMyYTkzMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioHxdpx6D/WAIVXb+qt1U6zHEv+xWdhi/rWf IdvcaQiCxO7lcBl/R7N7++NaxXFKhbiMYHdaNk1RcgkZ1OjhYbMIK/Qz4oIzS/IQ eu2fJe+Ckn9Ck0S03lXWKPUnTudVx39UEs63H2l086MuXK7tBigZ0jnlMVSTt7y4 xqyFn3YBkOUT4Xczt/t9pZR3OGCwHq2OrYsWUx0kdnEkzRM/x0og8NeAtIwnaHlh KyHlIv3YKiENyfA2xMe6JWLuRns8dlItgv8weTteOPxJSNUlbSjnPcIAK6MSN7i9 THUGrU/fyQuoByTS+9aZXZSrqsYKNc/uPULULNuUA4WXnXHorQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBuj0mzi9pzDZeS6Q+F7r7FkbSAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3 ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvZDg1NjFiY2MtZTgxMS0z NGI2LWExOTUtODM5MWE2MGMyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5 MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh M2YwMjc5YzkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4M8MA4E AgACMAgDBgAmAvdjADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMUyPOwcKrywSepxVVSt1l0uuFx0TCBc4X dPPBdFSFx766aNOtkOBxSb6Nub1bZFni5ZDDKyfxNveSTUBRS73zBCP4eabq5IDu g+jmi99Rv3gk7r4d5Tm1JM80QSEPMuSYfQ90VX9ixkn0oTNp1StLmqsiNGYlgTUT QHzwZee85yC8Gn3iV7RjJU6tn5XF/l4hlfydeKeqwmBu1Z+rIWCEBkm+JcTrcdRb yNac8ydggGmSI+dAUQ/OL3oXsasP57LKCTycxFqai3DkYTE7Zuqaz32f38XYF30G duNL1SvXl/0NCfnpbGuAJD/fXbWiTdW80QPAO/T6qV5uICq5J+Ow -----END CERTIFICATE-----Generated at Sat Apr 12 13:45:13 2025 by rpki-client