$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa File: 71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa (raw, json) Hash identifier: sVa0vY0rG4aZGjuE9u2VHsiYS5csxyFnoXjqryfvixk= Subject key identifier: 0B:DE:C0:19:0C:98:70:50:04:7F:FF:94:12:FA:5C:93:78:CF:DE:9C Certificate issuer: /CN=a28c0165-b200-4b04-831e-e344861ac9ad Certificate serial: 010D0C9F432858490B75AFDA80B7BC2F2F3B6640 Authority key identifier: C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa Signing time: Sat 01 Mar 2025 15:24:50 +0000 ROA not before: Sat 01 Mar 2025 15:24:50 +0000 ROA not after: Fri 30 May 2025 14:24:50 +0000 asID: 399870 IP address blocks: 23.134.212.0/24 maxlen: 24 2602:f6e0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:75:af:da:80:b7:bc:2f:2f:3b:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a28c0165-b200-4b04-831e-e344861ac9ad Validity Not Before: Mar 1 15:24:50 2025 GMT Not After : May 30 14:24:50 2025 GMT Subject: CN=72f73a85-c339-4a10-9ea8-b4dc6ace2e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:ae:29:d2:10:a4:ed:24:ea:ac:06:df:9f: 60:49:ae:4c:85:44:52:7b:4c:01:ad:97:58:86:41: 85:06:f3:96:32:0c:86:2e:46:49:21:d2:8c:e1:11: d9:86:5b:26:26:a6:30:da:98:41:26:ab:dd:2b:c7: eb:b4:13:a5:3d:23:b9:fd:e6:d4:6d:ad:ba:0b:f2: d9:01:11:b2:25:49:34:e2:0d:4a:a3:c6:42:8d:09: 55:d7:f1:34:bd:74:fe:2a:01:72:a2:d3:15:6d:87: 08:90:a2:27:39:f9:03:fe:39:bb:64:1d:21:d2:66: 65:35:1f:3a:21:e1:11:f2:ca:9a:32:4f:b4:31:19: d7:b2:77:df:8c:0f:95:0e:7b:7c:62:b3:6b:97:93: 0a:9b:e9:92:d9:6f:ca:e5:01:63:d5:f9:4d:c4:98: c6:e7:fb:0e:89:77:70:cc:31:22:cd:32:00:b5:cb: 4f:bd:a5:4d:d6:ef:b9:b1:15:69:8e:27:37:10:a3: 0f:93:95:ae:d3:8d:de:b8:9d:e0:f0:31:e7:41:a3: 4b:59:bb:4b:8b:cf:51:e5:82:16:b2:59:69:fb:34: 5a:6e:95:b7:47:70:9b:bd:66:f3:d5:3c:d3:c1:94: c7:cd:53:70:37:93:ae:2e:18:ee:38:27:20:0f:5f: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DE:C0:19:0C:98:70:50:04:7F:FF:94:12:FA:5C:93:78:CF:DE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl X509v3 Authority Key Identifier: keyid:C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer sbgp-ipAddrBlock: critical IPv4: 23.134.212.0/24 IPv6: 2602:f6e0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:38:34:fd:ef:20:5e:e4:73:04:89:da:60:04:64:29:3c:ed: cb:ac:b1:58:9b:52:b7:cb:b6:13:e1:de:c0:74:31:28:85:e3: a7:28:9a:29:a0:ac:7b:b8:99:03:a8:f0:b8:2f:4b:d0:04:89: e6:cc:a0:71:17:40:d3:ae:77:65:25:1a:d1:70:be:d3:66:8a: 0c:a1:36:e4:e7:0a:c5:dd:75:6d:3e:69:4e:02:11:b1:7e:83: fd:35:e3:c8:a9:35:92:2f:f8:4b:a6:a4:7f:0a:69:37:6a:42: c6:fd:b1:85:ad:66:d5:4b:ce:ab:42:44:b6:55:28:9a:ca:ac: 80:97:14:40:48:53:23:b8:a5:03:00:63:1c:ef:a2:e8:60:0e: 8c:45:ae:40:c6:7a:f1:36:c2:4f:41:82:e1:65:88:ab:fe:07: 4c:4e:43:17:ab:57:e7:21:3c:0d:f9:2a:61:cb:0f:84:cd:5a: bf:28:43:68:c1:8e:4d:82:ed:3d:ab:5b:63:b2:97:65:e2:9e: 85:96:b7:5a:89:d3:6f:e1:00:31:f9:c6:d1:d7:9f:13:09:a0: 5d:8c:f8:b6:d6:0e:0d:13:e4:f9:8d:e6:1d:2b:92:22:37:b7: 55:fd:35:5c:2d:50:73:54:30:1d:93:ea:6d:b7:a2:0c:c6:43: 71:9e:e9:b8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkLda/agLe8Ly87ZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4YzAxNjUtYjIwMC00YjA0LTgzMWUtZTM0NDg2MWFj OWFkMB4XDTI1MDMwMTE1MjQ1MFoXDTI1MDUzMDE0MjQ1MFowLzEtMCsGA1UEAxMk NzJmNzNhODUtYzMzOS00YTEwLTllYTgtYjRkYzZhY2UyZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnGuKdIQpO0k6qwG359gSa5MhURSe0wBrZdY hkGFBvOWMgyGLkZJIdKM4RHZhlsmJqYw2phBJqvdK8frtBOlPSO5/ebUba26C/LZ ARGyJUk04g1Ko8ZCjQlV1/E0vXT+KgFyotMVbYcIkKInOfkD/jm7ZB0h0mZlNR86 IeER8sqaMk+0MRnXsnffjA+VDnt8YrNrl5MKm+mS2W/K5QFj1flNxJjG5/sOiXdw zDEizTIAtctPvaVN1u+5sRVpjic3EKMPk5Wu043euJ3g8DHnQaNLWbtLi89R5YIW sllp+zRabpW3R3CbvWbz1TzTwZTHzVNwN5OuLhjuOCcgD19QCwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAvewBkMmHBQBH//lBL6XJN4z96cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMjhj MDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0ODYxYWM5YWQvNzFiZDZkNzItMTFiNS0z ZDkyLWJjZmYtMGYzYTc3ZDVjZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTI4YzAxNjUtYjIwMC00YjA0LTgz MWUtZTM0NDg2MWFjOWFkL2EyOGMwMTY1LWIyMDAtNGIwNC04MzFlLWUzNDQ4NjFh YzlhZC5jcmwwHwYDVR0jBBgwFoAUxXxQB2upKTX0kUoX2k8eJIPteUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMjhjMDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0 ODYxYWM5YWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4bUMA4E AgACMAgDBgAmAvbgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCODT97yBe5HMEidpgBGQpPO3LrLFYm1K3 y7YT4d7AdDEoheOnKJopoKx7uJkDqPC4L0vQBInmzKBxF0DTrndlJRrRcL7TZooM oTbk5wrF3XVtPmlOAhGxfoP9NePIqTWSL/hLpqR/Cmk3akLG/bGFrWbVS86rQkS2 VSiayqyAlxRASFMjuKUDAGMc76LoYA6MRa5AxnrxNsJPQYLhZYir/gdMTkMXq1fn ITwN+Sphyw+EzVq/KENowY5Ngu09q1tjspdl4p6FlrdaidNv4QAx+cbR158TCaBd jPi21g4NE+T5jeYdK5IiN7dV/TVcLVBzVDAdk+ptt6IMxkNxnum4 -----END CERTIFICATE-----Generated at Sun Apr 6 21:25:58 2025 by rpki-client