$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa File: 0dd95984-d9ac-3818-b720-6721242d6420.roa (raw, json) Hash identifier: 2P2uoFVmBaXvoDysdzRXhZ69l1k7PeKXSsGQZHC0a2U= Subject key identifier: DC:41:6B:19:F3:73:FB:65:25:90:A0:68:2E:03:56:D6:B1:4A:39:8F Certificate issuer: /CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Certificate serial: 010D0C9F43285849D594CFD483C49896B7673900 Authority key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 213993 IP address blocks: 23.134.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:cf:d4:83:c4:98:96:b7:67:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=5d69bdf6-1754-4ee8-a984-dc84023a7a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c1:1e:00:50:56:cb:14:35:da:9d:50:66:c5: 28:18:44:4c:cf:4f:04:68:e1:92:7c:16:1c:b7:ad: 1d:be:29:07:ae:c1:b9:bd:7e:5d:9d:14:53:32:7c: 85:2a:08:1d:db:95:b6:32:6d:56:86:74:7e:64:a2: dc:b9:27:af:24:f1:01:b0:98:ca:ee:9a:c3:05:97: bf:bd:0d:8a:f8:51:4f:d0:22:5f:d8:b3:dc:b8:f9: 06:32:ea:c8:b3:8c:fc:1f:9c:89:a8:4f:a7:27:d2: ba:19:d6:a9:d5:a6:63:5d:a0:b1:af:78:61:32:c0: 64:08:3d:a8:82:d2:93:34:11:fd:01:2d:c4:39:75: 8e:f1:b6:1e:7c:f5:87:03:03:92:d9:99:a5:a1:2e: 1b:7f:13:ea:40:84:9f:2b:08:e9:17:87:75:59:1e: 4d:78:71:bd:05:2a:df:16:fc:07:86:30:64:ea:2c: bd:a7:6a:e2:5a:b6:8d:5a:50:d0:f8:8d:53:29:02: 85:28:8c:96:bb:d6:65:ac:b4:dd:92:75:37:d0:64: 38:ae:88:7d:91:40:3f:42:f0:f2:47:cc:6e:89:bf: 17:08:bc:0c:42:f6:ba:d8:f3:90:c7:a7:97:bf:75: ec:b9:dd:87:6f:bb:b1:20:0c:49:35:51:f6:8d:b2: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:41:6B:19:F3:73:FB:65:25:90:A0:68:2E:03:56:D6:B1:4A:39:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl X509v3 Authority Key Identifier: keyid:4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer sbgp-ipAddrBlock: critical IPv4: 23.134.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5a:b9:ae:8d:6b:52:c8:e1:b5:43:d7:e0:8c:0e:eb:aa:1e: 0b:72:56:fe:30:78:01:ac:8d:09:32:f4:ff:fb:ce:d2:a6:f5: 5f:98:0c:e0:a8:e9:6d:fd:53:d7:e4:6a:61:e3:8d:cf:7c:91: 18:8d:f5:dd:14:4e:14:e7:b2:59:c5:18:b7:0f:2a:f5:42:f3: 27:bd:3e:5c:4e:f8:f5:08:15:8c:e6:0a:f2:91:3c:da:e3:9f: 0d:53:35:e4:51:65:ae:6b:fd:ef:3a:09:c5:31:84:7b:f8:56: b0:03:a3:41:1e:37:de:08:8a:97:8d:4f:72:23:1a:a7:31:16: 6f:2a:3a:95:19:08:95:9b:40:35:b2:7e:6b:f5:0b:8c:32:38: 33:9e:f5:a0:31:9f:bf:63:71:5b:34:16:59:f1:0d:dc:15:18: e3:58:09:13:ea:7f:be:ed:b3:fd:a4:f9:5d:44:21:0a:61:d6: e5:9e:c3:51:ac:3d:ea:92:51:e4:ed:e2:1f:e7:88:de:67:1e: 27:e5:7a:02:4a:3b:78:e3:9e:2c:13:3a:18:5c:20:40:08:d2: 9f:6c:a2:01:84:b7:4c:87:a4:73:9e:ff:c8:4d:81:43:83:29: 25:f0:cf:cb:6f:3f:d7:79:63:f3:c1:fa:bd:6b:88:0c:8a:f1: c9:68:7a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlM/Ug8SYlrdnOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4 M2U3MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NWQ2OWJkZjYtMTc1NC00ZWU4LWE5ODQtZGM4NDAyM2E3YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisEeAFBWyxQ12p1QZsUoGERMz08EaOGSfBYc t60dvikHrsG5vX5dnRRTMnyFKggd25W2Mm1WhnR+ZKLcuSevJPEBsJjK7prDBZe/ vQ2K+FFP0CJf2LPcuPkGMurIs4z8H5yJqE+nJ9K6Gdap1aZjXaCxr3hhMsBkCD2o gtKTNBH9AS3EOXWO8bYefPWHAwOS2ZmloS4bfxPqQISfKwjpF4d1WR5NeHG9BSrf FvwHhjBk6iy9p2riWraNWlDQ+I1TKQKFKIyWu9ZlrLTdknU30GQ4roh9kUA/QvDy R8xuib8XCLwMQva62POQx6eXv3Xsud2Hb7uxIAxJNVH2jbLbUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxBaxnzc/tlJZCgaC4DVtaxSjmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iY2Iz YjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvMGRkOTU5ODQtZDlhYy0z ODE4LWI3MjAtNjcyMTI0MmQ2NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmNiM2I1OTgtOGQ4My00ODY0LTgx OGItZjU4MzNiNzU4M2U3L2JjYjNiNTk4LThkODMtNDg2NC04MThiLWY1ODMzYjc1 ODNlNy5jcmwwHwYDVR0jBBgwFoAUTwH1eiacjpGp9CgLU9cqPEl4Q6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgz M2I3NTgzZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4a0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9aua6Na1LI4bVD1+CMDuuqHgtyVv4weAGsjQky9P/7ztKm9V+YDOCo 6W39U9fkamHjjc98kRiN9d0UThTnslnFGLcPKvVC8ye9PlxO+PUIFYzmCvKRPNrj nw1TNeRRZa5r/e86CcUxhHv4VrADo0EeN94IipeNT3IjGqcxFm8qOpUZCJWbQDWy fmv1C4wyODOe9aAxn79jcVs0FlnxDdwVGONYCRPqf77ts/2k+V1EIQph1uWew1Gs PeqSUeTt4h/niN5nHiflegJKO3jjniwTOhhcIEAI0p9sogGEt0yHpHOe/8hNgUOD KSXwz8tvP9d5Y/PB+r1riAyK8cloesk= -----END CERTIFICATE-----Generated at Tue Jun 10 11:36:04 2025 by rpki-client