$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/31fe42e0-becb-3daa-8360-28fc1a227614.roa File: 31fe42e0-becb-3daa-8360-28fc1a227614.roa (raw, json) Hash identifier: pe9zLG2MgnoTqK0jPDGLeNY29+TYvEsq8YJr33qytAs= Subject key identifier: 3B:63:7F:3B:35:11:E5:F6:4B:E7:E8:C2:0E:B2:20:7D:FA:E0:6F:F3 Certificate issuer: /CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5 Certificate serial: 010D0C9F432858495ABEB1370940289BA983CC00 Authority key identifier: 81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/31fe42e0-becb-3daa-8360-28fc1a227614.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 401567 IP address blocks: 23.131.244.0/24 maxlen: 24 2602:f74a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b1:37:09:40:28:9b:a9:83:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=27a4898a-f99a-4308-ad9e-185e31e5e616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:49:c2:dc:aa:54:fd:f1:95:36:00:9f:56: ff:cc:56:08:cb:86:11:b4:78:ea:de:b5:38:d6:82: 65:0c:9a:7c:90:9d:69:55:05:27:fa:32:90:b8:00: 65:af:31:0b:16:8c:7c:68:59:47:be:9d:c4:6d:d5: bf:f9:3e:8c:cc:70:e5:f9:6f:04:90:04:4c:ba:b0: 0f:9f:28:91:c9:7a:02:fd:e3:55:60:c2:8a:a5:12: 22:d8:ee:37:f0:20:a4:e6:e5:95:3a:cb:0c:22:e0: 15:04:b4:72:b5:62:26:e6:9d:b3:35:76:3d:02:5c: f1:16:85:3e:8b:94:b0:ab:da:13:d5:4d:57:48:99: 85:17:a1:d5:34:86:4b:9e:2c:c0:ba:4b:39:4c:7c: ba:ab:72:3c:56:7b:8e:18:e3:89:e5:5c:1e:1c:2f: 1c:fe:ac:fb:f9:a2:ad:c7:bb:8a:b4:e1:3c:5d:17: b0:d1:98:5e:66:92:87:28:6a:17:4a:f4:4a:85:cf: ec:4a:e9:59:66:91:ee:62:54:fd:6f:51:73:3e:4d: 77:cb:ef:46:78:4f:37:61:57:52:f2:15:d3:02:97: 3f:4a:0d:21:f7:b4:b7:5e:42:fd:ad:f8:03:df:04: c1:b1:a7:a7:92:30:9f:a3:bf:9d:48:17:3d:71:20: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:63:7F:3B:35:11:E5:F6:4B:E7:E8:C2:0E:B2:20:7D:FA:E0:6F:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/31fe42e0-becb-3daa-8360-28fc1a227614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl X509v3 Authority Key Identifier: keyid:81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer sbgp-ipAddrBlock: critical IPv4: 23.131.244.0/24 IPv6: 2602:f74a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:21:42:14:71:00:30:50:60:7e:72:b4:46:48:60:97:17:0e: 63:61:f6:a0:51:63:6b:17:92:75:37:8b:b4:b5:7d:70:91:3a: ae:dc:e7:8c:c7:53:b5:d8:d3:6e:4e:09:71:83:32:65:03:ca: 58:c1:76:52:67:c6:85:9f:bf:11:8d:13:c6:97:43:0f:d2:6d: c5:80:37:6b:31:38:14:dd:6b:35:e4:87:ec:eb:3a:86:83:df: 39:b6:3c:e0:36:ae:f6:1a:9c:0f:e7:54:95:b3:3a:ce:52:b7: 4f:b3:77:c8:c1:32:b5:e9:36:77:bb:2e:f7:59:0a:d0:7d:34: 0f:f7:64:ee:de:89:0a:0a:f5:65:30:44:65:02:c7:42:86:d1: 76:07:e9:63:0a:c4:a5:a8:f3:2d:f9:6d:b5:8e:d6:bb:cd:2e: e9:f4:ea:60:99:e3:90:be:42:68:5b:c8:d1:b5:4a:33:d5:7a: a3:c3:ef:c4:33:60:8d:79:2f:6c:59:ab:e4:41:19:91:cf:7a: fe:bb:1f:63:2c:55:16:be:94:66:f7:93:b4:df:dc:01:7b:7e: a2:29:ce:4b:0e:3d:cd:0d:e7:7b:0a:cf:d5:a4:5d:f6:9a:04: 5c:48:04:7c:84:ed:9a:7a:7a:a2:be:bb:6f:99:3e:c8:0b:de: eb:da:ce:c3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElavrE3CUAom6mDzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFmZjRkZGQtYzM4ZC00MzA5LThmNGQtOTU0NDFkYzc2 NWY1MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MjdhNDg5OGEtZjk5YS00MzA4LWFkOWUtMTg1ZTMxZTVlNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLBJwtyqVP3xlTYAn1b/zFYIy4YRtHjq3rU4 1oJlDJp8kJ1pVQUn+jKQuABlrzELFox8aFlHvp3EbdW/+T6MzHDl+W8EkARMurAP nyiRyXoC/eNVYMKKpRIi2O438CCk5uWVOssMIuAVBLRytWIm5p2zNXY9AlzxFoU+ i5Swq9oT1U1XSJmFF6HVNIZLnizAuks5THy6q3I8VnuOGOOJ5VweHC8c/qz7+aKt x7uKtOE8XRew0ZheZpKHKGoXSvRKhc/sSulZZpHuYlT9b1FzPk13y+9GeE83YVdS 8hXTApc/Sg0h97S3XkL9rfgD3wTBsaenkjCfo7+dSBc9cSBl4QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDtjfzs1EeX2S+fowg6yIH364G/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MWZm NGRkZC1jMzhkLTQzMDktOGY0ZC05NTQ0MWRjNzY1ZjUvMzFmZTQyZTAtYmVjYi0z ZGFhLTgzNjAtMjhmYzFhMjI3NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTFmZjRkZGQtYzM4ZC00MzA5LThm NGQtOTU0NDFkYzc2NWY1LzUxZmY0ZGRkLWMzOGQtNDMwOS04ZjRkLTk1NDQxZGM3 NjVmNS5jcmwwHwYDVR0jBBgwFoAUgc7qDF0dx6RiENY5kzewxCmYLI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MWZmNGRkZC1jMzhkLTQzMDktOGY0ZC05NTQ0 MWRjNzY1ZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4P0MA4E AgACMAgDBgQmAvdKADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOIUIUcQAwUGB+crRGSGCXFw5jYfagUWNr F5J1N4u0tX1wkTqu3OeMx1O12NNuTglxgzJlA8pYwXZSZ8aFn78RjRPGl0MP0m3F gDdrMTgU3Ws15Ifs6zqGg985tjzgNq72GpwP51SVszrOUrdPs3fIwTK16TZ3uy73 WQrQfTQP92Tu3okKCvVlMERlAsdChtF2B+ljCsSlqPMt+W21jta7zS7p9OpgmeOQ vkJoW8jRtUoz1Xqjw+/EM2CNeS9sWavkQRmRz3r+ux9jLFUWvpRm95O039wBe36i Kc5LDj3NDed7Cs/VpF32mgRcSAR8hO2aenqivrtvmT7IC97r2s7D -----END CERTIFICATE-----Generated at Sat Apr 12 14:07:47 2025 by rpki-client